last executing test programs: 4m38.681048348s ago: executing program 32 (id=315): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x3501) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x204800b}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2m15.149490105s ago: executing program 33 (id=1827): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m2.47811672s ago: executing program 5 (id=2068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 2m2.408156765s ago: executing program 5 (id=2072): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = dup(r1) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) flock(r2, 0x2) write$P9_RLERRORu(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg(r3, &(0x7f00000017c0)={&(0x7f0000001180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)="4c959ddfe4e67506e0bf590b080b18cd596cf5715a9ee638592c6468264e3849a36693e3c2b1fabc051d1026f68b566b59a1030e30dcad98ebd03caaa93642a77126ae772c2e18df21dfa6eb9b502dd98de811479bebc6a417c2cbb9308f4ed451bd347b3d93d958d5148ce4c04fee7706e2646300220057b1a8364738c9d7e5b75d1b433242b08ada579982a522c2b7d5a647e582ec3f775b27178212f5691d272c709c943548270f9b28612a4027c93d73a8930b598ab7568b0ecc72ade62c3ba108b6d5d1fdf83e74bd5591ddcf", 0xcf}, {&(0x7f0000001300)="25944ac9f6ce3a7e787c7340efb7379818625623b9011563d4e436bff22d53181c3830e4e5ddbcd212c06074e10637e2f8eb3836e5b7f5f98725d0194c", 0x3d}, {&(0x7f0000001340)="049787ff75423a9f70b5feb057210262bd114f72c860a2d5873f74dd5cbf97ed76572603f62cf391cd41b6ca400e6dc91ac155423ec22d2744384a85e63d03a26700c9bfede9ed1d07a040fb985afe6826a466dd7019013b7e0e22f1b3667622a17958316d46d2328db4d6d7c8777a58889420ce3a2cd3c1807f33d986f60eb0a8fa23310e82d34f4b43309c0eb676acd241d0f78a30c69cfa399ab0fe228b64487ce62ba50224b640c246e8e3854d4b1206c84720d6d84489", 0xb9}], 0x3, &(0x7f0000001480)=[{0xc0, 0x10a, 0x3, "a605ac3c313dcb9bb153072eb460637b81b421b6ea34ec24bbd8dcb803dbff4fcf02865203c653b84a96090a678adcaa4f8bf42673423345dba73ddad33ea7f70d01aa00ece10e2f07514b853a8a4ca158e43b76c42678ba66cba2ff1bdceb00b640ce565833257ecd017f4253c540d78882bc1eda564000cae68a722f72bbe57a6dbbf168425433d3a0824be73ec6cea9472810ab58c8f2c6f3da81434c15ca4665a3a55d5a3b56cc0905"}, {0xb0, 0x97, 0x8, "9f87f46d2d969ba2f291562bc9e8844fdfbfdf860fc0837b17b19a00123560ea68b1ae1229c99fd27e0e8bc1d9f2d386cb5bef47b39da1420d4087525ff3f5a041f8398a1af4d8bfa3993734ab535214512c7470ee4b020feaf763b0932a90912cf3291464f14132365d5767d4596f6fe6e45e13acd036e66cca573cddbcb5ae6c2ce6964f3059861fd061aeb7b4ddb0537e2df822d5dd01638b24"}, {0xb8, 0x6, 0x8001, "fdaa9b431d93bb5d78e2c2d2c3a81429b0de01928c0bb55714ecd737094a5d81006d19fc26c10379ca55840529f30badb89fcea51782b91ad34343602c67217fe00331240e4e7f3bb1ec333fbbfaaf90954d4148b6af9db3849984bdf2951625fe4d691a7be22db87404c62b5a4a9eb09cdd71a0781c7c4efa72803937b77c0756ada46571d8dbacdb42f046cfe163f57293fe8ebf9b5fe8e23773551278c21f749259"}, {0xb8, 0x116, 0x2, "249f5c9dd3d1e4a975de7899a85b9b934e27c62abaaa9976b0dddc3ef9f25c85c71977bf6d7254a3c6af1bfa554b2a1486dceb1907887aa8576601745b9bf6b3abdb3b41864be3a4d899882f3731d42224ad04eade28cc6903ab0fa0f5a03a03e3f2889ec1b660c7003920209ca501500c37b289017f6e1ae45e65375d719497fed9e5a890c14c39bee096f8842006df0b63f86e25fd4ba738e7d4c386b4f2a7f90862c050"}, {0x40, 0x116, 0x4, "b5950a020832b0f903d086241bd0a4315be5ce457679c6d3aa1f7f67de476ea76068f7018116fed358d31b0477"}], 0x320}, 0x1) 2m2.361757769s ago: executing program 5 (id=2074): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x8, 0x7, 0x2, 0xe, 0x0, 0xf, 0x184, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x4, @perf_config_ext={0x100, 0x4}, 0x110014, 0x1, 0x7ff, 0x5, 0x6, 0x7, 0xc00, 0x0, 0x80}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x0, 0x0, 0x1001f0) copy_file_range(r2, 0x0, r2, 0x0, 0x101, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r5, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) r6 = syz_usbip_server_init(0x5) write$usbip_server(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="000000030000000300000000000000000000082a0000c9e20000003d00000000000000d300003f1600000000000000003098eeb2ef9628611915fc0e7d966100715d447c674f72dedcae5ebe34efc4fd8f71d8af3f3db5cfb6b90c9036409ce66e1ba17073e9d5e2126a2d1f97fffffff8000000090000000500000001000010000000000900010001000000010000000800000003000000020000000200000000000001ff000000000000006f0000000400000009000000060000000100000200000000000000000200000100000000088000000000000001fffffe00000003ff0000000ffffffff40000a187000001010000000a00000007c00000000000000900000003000000d90000000800000003000000090000000900000005000000040000000300000005000000040000010100000005000000040000000600000002fffffc01000000020000000500000008000095050000000700000005000000ff00000005000000400000b3010000000500000005000000090000000700000000000000090000000300000002000000070000008000000001ffffffff000000090000000a0000000700000007000000d20000f48900000008000000070000100000000005000000040000e3d0000010000000000b0000000500000007000000030000000300000007fffffffb00001000000000080000ed460000000400000002000000070000000e800000000000002500006e1a0000000a00000006000001ff0000010000000007000002bb00000006000003ff00000007000000050000000100000028000000020000000000000007fffffe01000000030000000900000007000030860000000100000002fffffff700000800000001d3000026060000000700000b347fffffff000000080000003000000009000000090000000500000007000002250000000700000007000000060000074afffffffe0000030e00000000000000ac00000008000001ff0000000fffff33a90000000400000004fffffffe00000003000000057fffffff0000800000000007000000000000000300000004000009fd000000067fffffff000000030000000100000004000007ff00000000000000030000000200000001fffffffffffffc6c00000005000000010000000400000008000001ff000009030000000000000000fffffffc00000000000000050000000600000005000000072000000000000003ffffff0100010000000000080000080000000b780000030700000009000000060000000600008001000000040000000300000003000000040000000a0000000000000005000080010000000500000200000001ff8000000000000e680000000100000400fffffe810000000000000005000000000000000100000009000000010000010080000000000000000000000000005d3d00000200000080800000000c0000069c000000060000000400007fff000000070000000700000005000000090000000900000002000000030000000000000d710000000500000fff00000400000000040000000800000006ffffffff00000008000000080000000800000c3f2c721b4100000b9a000028f9800000000000000100000003000000080000000700000000000000090000000600000009000000070000000000000005000003ff0000000100000047000000000000000c0000000700000001000000e200000007000004000000000300008321000000000000228d000000000000000200000002000001000000000900000001000006aeffffff81000008c8000000000000000700000004fffffffa00000006000000070000010100000003000006d60000915c00000003000000810000aa37000000c500001000000000810000000680000000000004f30000000e00000005000007d800000983000000070000000600000000000000070000000600000000fffffff90000040100000005000000040000000d000000080000000400000cca000000000000000600000000000000007fffffff000000000000005b0000000d000000070000000500007fff0000100000000009000000010000e5070000004000000006000000ff000006d80000000200000009000000ff00000004000000b30000800036aea1ac0000000d0000000a00007c7200000007fffffffe000000050001000000000000000000c000000180000007ff00000006000007ff0000000700000023000000020000002e00000002000000020000000900000001000000000000000a0000000000000003000004000000000700000002717bb6e9000000087fffffff000000090000c673000001ff000000d0000000040000000000000002000007b0000005030000000100000007000000060000000500000005000000040000f8b8000000060000000700000005000000080000f64c0000004e000000000000000100000000000100010000895dffffffff00000009000000030000000580000000fffffffd000000070000000400000000000000000000000b000000100000000800000003000000010000000600008001000000000000000400000f0d0000000300000009ffffffff00000002000000060000000500000006000001ff00000080000000040060000024000000000000090000223f0000000600000101000074900000000e0000000800000007000000090000037d0000001000000002000000ff0000000700000004000000000000000300000fd9000000060000000000000003000000327fffffff00000003fffffffb000000030000000300000009000000010000000200000000000000050000000400000009000000b80000000800000fff000001ff800000013dd71e55000000070000000100000007000000020000000800000009fffffe010000ffff0000000600000003000100010000000700000f3300007ffffffffff800000007000008b900006e460000d8077014523c00000200000000ff000000e800000004000000020000008000000002000000000000000500000005000000080000100000000004000000080000135a000058f7000000050000000100000008fffffffe000000090000000500000081000000010000000100000800000003ff00000b650000000f000003ff000001ff000000010000000100000002000000060000000700000008000000050000c04f0000ffff000001012b88347d000010000000c4520000073900000008000000e40000000200000400fffffff7000000050000000200000009000000010000000600000fff0000e485fffffff800000004000000020000000200000004000000037fffffff00000005000000090000000b000000070000000200000003000008000000000200008a440000000600000008000000050000000900000008ffffffff0000800000000008000000060000800000000000000000070000000a0000005400000f380000050000000003000000037fffffff0000000400000001000000070000000000000007000000050000000300010000000000050000000700000fff000004010000000000000006000000e6000000010000000c0000c06800000006000000080000000600000004000007ff000007ff00000200000005cd00000297000000000000000700000c5e00009c730000000100000001000000ff0000000e79eb2f790000000400000009000000020000007f800000007fffffff0000000000000004000000000000000300000006000000060000000b000000db000000070000000900000008fffffffa0000e3700000000d0000000600000001000005550000000d0000000b00000005000000100000003000000004000000090000c39c00000002000000048000000100000db57fffffff000000060000000000000003000000010000008100000003000000060000000000000007fffffff80000000100000d2d000000090000000000000001000000000000007f000000040000000a0000000200000009000000030000000800000001000007ff0000000800009267000000120000000700000101000008000000000f0000000200000080000000800000000100000009000000060000000a0000000300000006fffffff3000000010000000000000090000008000000000000000008000000010000e063000000170000000a000000080000000c00007fff800000000000000100000009000100015e977e6200000009000000020000000000000080000000090000000200000006000000020000000600000000ffff78620000080000000004ffffff81000008d1000000060000000200000051000067af00000009000000080000000000000002000000000000008100000c280000000200000b9000000005000080000000000000000002000000090000000100000004000000070000000300000db9000070008000000000007fff0000005f00000004000000040000000800000005200000000000000400006e480000000d0000ffff000000bc00000006000003ff00000d00000000040000000300000005000000010000c49d0000000400000000000a0f00000006000000d5000000080000000b000000000000800100000004000000060000001f0000009c000007f200000059fffffff900000007000000070000000f000000020000000400000101fffffffd00000009000000020000a00600000000000000070000000900000088000000040000000300000002000079a500007fff000001510000000900000e10000001c10000000100000000000001ff0000001100000004000007ff00000002000000050000000900"/3485], 0xd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2m1.59559378s ago: executing program 3 (id=2086): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7", @ANYRES8, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="63727566742c6d61703d6e6f726d616c2c73657373010000003078303030303030303030303030303031362c636865636b3d72656c617865642c756e686964652c00"], 0x1, 0x534, &(0x7f0000000580)="$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") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000002c0)=0x14) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x8000, 0x6c, &(0x7f0000000140)="c58b7d635b0718b39c95b7fe68b88f5e4559949ffa79535c29649d0717749e9840de6ff033b84bf0ebb728fe66e746d6ae5fa0298c508a6a6791134273f2f4d72d0e0fce7429ab3014e9958f249c6d54fa1d318ecd5a9e8d70168d9ce8ca250f299b933f9485dc29d97bad5e", 0x8, 0x7, 0xb, 0x8, 0x6, 0x2, 0x2, 'syz1\x00'}) 2m1.553072744s ago: executing program 3 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000000}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x18, 0x20ec, 0x0, 0x100000, 0x0}) 2m1.518572327s ago: executing program 3 (id=2089): r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/raw6\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='f2fs_writepages\x00', r1, 0x0, 0xffffffffffffef52}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r1, 0x0, r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x0, 0x10000, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x65, 0x0, 0x2, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x0, 0x12, "b1866f0f3a71a081d34b25f79465abf4"}, {0x1, 0x11, "ed56cb80fcd2a42c0872307293f9a7"}, {0x0, 0xd, "583ee63bcfa6e8b47f8d73"}, {0x5, 0xf, "0bda70f9dcd35f88b63e109e99"}, {0x0, 0xa, "5cb76597429d0738"}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r1}], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x9d, &(0x7f00000001c0)=""/157, 0x40f00, 0xd, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) fremovexattr(r3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) bind$nfc_llcp(r3, 0x0, 0x0) listen(r3, 0x7fff) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_PUBL_GET(r1, 0x0, 0x440d5) syz_genetlink_get_family_id$ethtool(0x0, r1) r4 = accept4$vsock_stream(r3, &(0x7f0000001b00)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) shutdown(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r3, {0x0, 0xee01}}, './file0\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, r6, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, 0x0, 0x400c001) fsetxattr$trusted_overlay_redirect(r3, 0x0, &(0x7f0000001d00)='./file0\x00', 0x8, 0x0) 2m1.428212974s ago: executing program 3 (id=2090): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") open$dir(&(0x7f0000000400)='./file1\x00', 0x0, 0x20) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4e35, 0x20601}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}, 0x1, 0xba01}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x108000) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc0000000}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xef82f42c9c0cedf8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r6, 0x0, 0x36) lsetxattr$trusted_overlay_redirect(0x0, &(0x7f0000000380), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2m1.270027236s ago: executing program 5 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x200000000000}, 0x18) r2 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x18, 0x20ec, 0x0, 0x100000, 0x0}) 2m0.996316358s ago: executing program 5 (id=2094): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 2m0.708976511s ago: executing program 5 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x1) syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x204441, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1}) 2m0.619210339s ago: executing program 3 (id=2098): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x3f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r6}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r1) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_subtree(r8, 0x0, 0x2, 0x0) flock(r3, 0x2) write$P9_RLERRORu(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r7]) sendmsg(r4, &(0x7f00000017c0)={&(0x7f0000001180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)="4c959ddfe4e67506e0bf590b080b18cd596cf5715a9ee638592c6468264e3849a36693e3c2b1fabc051d1026f68b566b59a1030e30dcad98ebd03caaa93642a77126ae772c2e18df21dfa6eb9b502dd98de811479bebc6a417c2cbb9308f4ed451bd347b3d93d958d5148ce4c04fee7706e2646300220057b1a8364738c9d7e5b75d1b433242b08ada579982a522c2b7d5a647e582ec3f775b27178212f5691d272c709c943548270f9b28612a4027c93d73a8930b598ab7568b0ecc72ade62c3ba108b6d5d1fdf83e74bd5591ddcf", 0xcf}, {&(0x7f0000001300)="25944ac9f6ce3a7e787c7340efb7379818625623b9011563d4e436bff22d53181c3830e4e5ddbcd212c06074e10637e2f8eb3836e5b7f5f98725d0194c", 0x3d}, {&(0x7f0000001340)="049787ff75423a9f70b5feb057210262bd114f72c860a2d5873f74dd5cbf97ed76572603f62cf391cd41b6ca400e6dc91ac155423ec22d2744384a85e63d03a26700c9bfede9ed1d07a040fb985afe6826a466dd7019013b7e0e22f1b3667622a17958316d46d2328db4d6d7c8777a58889420ce3a2cd3c1807f33d986f60eb0a8fa23310e82d34f4b43309c0eb676acd241d0f78a30c69cfa399ab0fe228b64487ce62ba50224b640c246e8e3854d4b1206c84720d6d84489", 0xb9}], 0x3, &(0x7f0000001480)=[{0xc8, 0x10a, 0x3, "a605ac3c313dcb9bb153072eb460637b81b421b6ea34ec24bbd8dcb803dbff4fcf02865203c653b84a96090a678adcaa4f8bf42673423345dba73ddad33ea7f70d01aa00ece10e2f07514b853a8a4ca158e43b76c42678ba66cba2ff1bdceb00b640ce565833257ecd017f4253c540d78882bc1eda564000cae68a722f72bbe57a6dbbf168425433d3a0824be73ec6cea9472810ab58c8f2c6f3da81434c15ca4665a3a55d5a3b56cc0905632b53ed7263e358843f2c"}, {0xb0, 0x97, 0x8, "9f87f46d2d969ba2f291562bc9e8844fdfbfdf860fc0837b17b19a00123560ea68b1ae1229c99fd27e0e8bc1d9f2d386cb5bef47b39da1420d4087525ff3f5a041f8398a1af4d8bfa3993734ab535214512c7470ee4b020feaf763b0932a90912cf3291464f14132365d5767d4596f6fe6e45e13acd036e66cca573cddbcb5ae6c2ce6964f3059861fd061aeb7b4ddb0537e2df822d5dd01638b24"}, {0xb8, 0x6, 0x8001, "fdaa9b431d93bb5d78e2c2d2c3a81429b0de01928c0bb55714ecd737094a5d81006d19fc26c10379ca55840529f30badb89fcea51782b91ad34343602c67217fe00331240e4e7f3bb1ec333fbbfaaf90954d4148b6af9db3849984bdf2951625fe4d691a7be22db87404c62b5a4a9eb09cdd71a0781c7c4efa72803937b77c0756ada46571d8dbacdb42f046cfe163f57293fe8ebf9b5fe8e23773551278c21f749259"}, {0xb8, 0x116, 0x2, "249f5c9dd3d1e4a975de7899a85b9b934e27c62abaaa9976b0dddc3ef9f25c85c71977bf6d7254a3c6af1bfa554b2a1486dceb1907887aa8576601745b9bf6b3abdb3b41864be3a4d899882f3731d42224ad04eade28cc6903ab0fa0f5a03a03e3f2889ec1b660c7003920209ca501500c37b289017f6e1ae45e65375d719497fed9e5a890c14c39bee096f8842006df0b63f86e25fd4ba738e7d4c386b4f2a7f90862c050"}, {0x40, 0x116, 0x4, "b5950a020832b0f903d086241bd0a4315be5ce457679c6d3aa1f7f67de476ea76068f7018116fed358d31b0477"}], 0x328}, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 1m59.701294692s ago: executing program 3 (id=2102): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m45.395135838s ago: executing program 34 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x1) syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x204441, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1}) 1m44.429937536s ago: executing program 35 (id=2102): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m24.127710201s ago: executing program 8 (id=2415): perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x8, 0x7, 0x2, 0xe, 0x0, 0xf, 0x184, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x4, @perf_config_ext={0x100, 0x4}, 0x110014, 0x1, 0x7ff, 0x5, 0x6, 0x7, 0xc00, 0x0, 0x80}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000000030000000300000000000000000000082a0000c9e20000003d00000000000000d300003f1600000000000000003098eeb2ef9628611915fc0e7d966100715d447c674f72dedcae5ebe34efc4fd8f71d8af3f3db5cfb6b90c9036409ce66e1ba17073e9d5e2126a2d1f97fffffff8000000090000000500000001000010000000000900010001000000010000000800000003000000020000000200000000000001ff000000000000006f0000000400000009000000060000000100000200000000000000000200000100000000088000000000000001fffffe00000003ff0000000ffffffff40000a187000001010000000a00000007c00000000000000900000003000000d90000000800000003000000090000000900000005000000040000000300000005000000040000010100000005000000040000000600000002fffffc01000000020000000500000008000095050000000700000005000000ff00000005000000400000b3010000000500000005000000090000000700000000000000090000000300000002000000070000008000000001ffffffff000000090000000a0000000700000007000000d20000f48900000008000000070000100000000005000000040000e3d0000010000000000b0000000500000007000000030000000300000007fffffffb00001000000000080000ed460000000400000002000000070000000e800000000000002500006e1a0000000a00000006000001ff0000010000000007000002bb00000006000003ff00000007000000050000000100000028000000020000000000000007fffffe01000000030000000900000007000030860000000100000002fffffff700000800000001d3000026060000000700000b347fffffff000000080000003000000009000000090000000500000007000002250000000700000007000000060000074afffffffe0000030e00000000000000ac00000008000001ff0000000fffff33a90000000400000004fffffffe00000003000000057fffffff0000800000000007000000000000000300000004000009fd000000067fffffff000000030000000100000004000007ff00000000000000030000000200000001fffffffffffffc6c00000005000000010000000400000008000001ff000009030000000000000000fffffffc00000000000000050000000600000005000000072000000000000003ffffff0100010000000000080000080000000b780000030700000009000000060000000600008001000000040000000300000003000000040000000a0000000000000005000080010000000500000200000001ff8000000000000e680000000100000400fffffe810000000000000005000000000000000100000009000000010000010080000000000000000000000000005d3d00000200000080800000000c0000069c000000060000000400007fff000000070000000700000005000000090000000900000002000000030000000000000d710000000500000fff00000400000000040000000800000006ffffffff00000008000000080000000800000c3f2c721b4100000b9a000028f9800000000000000100000003000000080000000700000000000000090000000600000009000000070000000000000005000003ff0000000100000047000000000000000c0000000700000001000000e200000007000004000000000300008321000000000000228d000000000000000200000002000001000000000900000001000006aeffffff81000008c8000000000000000700000004fffffffa00000006000000070000010100000003000006d60000915c00000003000000810000aa37000000c500001000000000810000000680000000000004f30000000e00000005000007d800000983000000070000000600000000000000070000000600000000fffffff90000040100000005000000040000000d000000080000000400000cca000000000000000600000000000000007fffffff000000000000005b0000000d000000070000000500007fff0000100000000009000000010000e5070000004000000006000000ff000006d80000000200000009000000ff00000004000000b30000800036aea1ac0000000d0000000a00007c7200000007fffffffe000000050001000000000000000000c000000180000007ff00000006000007ff0000000700000023000000020000002e00000002000000020000000900000001000000000000000a0000000000000003000004000000000700000002717bb6e9000000087fffffff000000090000c673000001ff000000d0000000040000000000000002000007b0000005030000000100000007000000060000000500000005000000040000f8b8000000060000000700000005000000080000f64c0000004e000000000000000100000000000100010000895dffffffff00000009000000030000000580000000fffffffd000000070000000400000000000000000000000b000000100000000800000003000000010000000600008001000000000000000400000f0d0000000300000009ffffffff00000002000000060000000500000006000001ff00000080000000040060000024000000000000090000223f0000000600000101000074900000000e0000000800000007000000090000037d0000001000000002000000ff0000000700000004000000000000000300000fd9000000060000000000000003000000327fffffff00000003fffffffb000000030000000300000009000000010000000200000000000000050000000400000009000000b80000000800000fff000001ff800000013dd71e55000000070000000100000007000000020000000800000009fffffe010000ffff0000000600000003000100010000000700000f3300007ffffffffff800000007000008b900006e460000d8077014523c00000200000000ff000000e800000004000000020000008000000002000000000000000500000005000000080000100000000004000000080000135a000058f7000000050000000100000008fffffffe000000090000000500000081000000010000000100000800000003ff00000b650000000f000003ff000001ff000000010000000100000002000000060000000700000008000000050000c04f0000ffff000001012b88347d000010000000c4520000073900000008000000e40000000200000400fffffff7000000050000000200000009000000010000000600000fff0000e485fffffff800000004000000020000000200000004000000037fffffff00000005000000090000000b000000070000000200000003000008000000000200008a440000000600000008000000050000000900000008ffffffff0000800000000008000000060000800000000000000000070000000a0000005400000f380000050000000003000000037fffffff0000000400000001000000070000000000000007000000050000000300010000000000050000000700000fff000004010000000000000006000000e6000000010000000c0000c06800000006000000080000000600000004000007ff000007ff00000200000005cd00000297000000000000000700000c5e00009c730000000100000001000000ff0000000e79eb2f790000000400000009000000020000007f800000007fffffff0000000000000004000000000000000300000006000000060000000b000000db000000070000000900000008fffffffa0000e3700000000d0000000600000001000005550000000d0000000b00000005000000100000003000000004000000090000c39c00000002000000048000000100000db57fffffff000000060000000000000003000000010000008100000003000000060000000000000007fffffff80000000100000d2d000000090000000000000001000000000000007f000000040000000a0000000200000009000000030000000800000001000007ff0000000800009267000000120000000700000101000008000000000f0000000200000080000000800000000100000009000000060000000a0000000300000006fffffff3000000010000000000000090000008000000000000000008000000010000e063000000170000000a000000080000000c00007fff800000000000000100000009000100015e977e6200000009000000020000000000000080000000090000000200000006000000020000000600000000ffff78620000080000000004ffffff81000008d1000000060000000200000051000067af00000009000000080000000000000002000000000000008100000c280000000200000b9000000005000080000000000000000002000000090000000100000004000000070000000300000db9000070008000000000007fff0000005f00000004000000040000000800000005200000000000000400006e480000000d0000ffff000000bc00000006000003ff00000d00000000040000000300000005000000010000c49d0000000400000000000a0f00000006000000d5000000080000000b000000000000800100000004000000060000001f0000009c000007f200000059fffffff900000007000000070000000f000000020000000400000101fffffffd00000009000000020000a00600000000000000070000000900000088000000040000000300000002000079a500007fff000001510000000900000e10000001c10000000100000000000001ff0000001100000004000007ff00000002000000050000000900"/3485], 0xd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 1m23.529034159s ago: executing program 8 (id=2425): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x300) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 1m23.437345237s ago: executing program 8 (id=2426): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r0, 0x0, 0x40000000, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) connect$phonet_pipe(r1, &(0x7f00000003c0)={0x23, 0xb, 0xf, 0xa3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044880}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r7) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fcdbdf252400000008000300", @ANYRES32, @ANYBLOB="14002d80"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x480c5}, 0x4000000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c845}, 0x40801) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r11, 0x4, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x0, 0x0, 0x1, 0x1}}) 1m23.231602373s ago: executing program 8 (id=2428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) (fail_nth: 7) 1m23.191429646s ago: executing program 8 (id=2429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) 1m22.317035637s ago: executing program 8 (id=2444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffab) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff94, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60c40, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000001700)=0x4) semop(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa90}) migrate_pages(r9, 0x0, &(0x7f0000000180)=0x823a, &(0x7f00000002c0)=0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 1m8.310967788s ago: executing program 2 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x800, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0x1, 0x9}, {0x1003c, 0x8}}}, 0x24}, 0x1, 0xfffc, 0x0, 0x810}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m8.248379313s ago: executing program 2 (id=2612): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) 1m7.438874429s ago: executing program 2 (id=2618): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x24) 1m7.181575279s ago: executing program 36 (id=2444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffab) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff94, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60c40, 0x0) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000001700)=0x4) semop(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa90}) migrate_pages(r9, 0x0, &(0x7f0000000180)=0x823a, &(0x7f00000002c0)=0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 1m6.586743297s ago: executing program 2 (id=2622): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001140), 0x0, 0x46b, &(0x7f0000000580)="$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") r0 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m6.29635923s ago: executing program 2 (id=2624): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x300) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 1m4.192871288s ago: executing program 2 (id=2637): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x6, 0xfffc, 0x2, 0xfffb, 0x10, "5e2b85dcdebd694b"}) write$UHID_INPUT(r1, 0x0, 0x0) 1m4.192800528s ago: executing program 37 (id=2637): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x6, 0xfffc, 0x2, 0xfffb, 0x10, "5e2b85dcdebd694b"}) write$UHID_INPUT(r1, 0x0, 0x0) 43.57559808s ago: executing program 9 (id=3010): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x23}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000900)="$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") r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r3, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 43.537122443s ago: executing program 9 (id=3012): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)={0xbd}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) write(r0, &(0x7f0000000140)="8265", 0x2) 43.515646705s ago: executing program 9 (id=3013): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe000) 43.471401928s ago: executing program 9 (id=3015): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000400)) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") mmap$xdp(&(0x7f0000620000/0x3000)=nil, 0x3000, 0x1000008, 0x40010, 0xffffffffffffffff, 0x80000000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)}, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000060688a7100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x10) rmdir(0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000240)={&(0x7f0000000200)="c945b9caf300000000f1f413b2f3e6817c0f2e18", 0x14}) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000200)='./file0\x00', 0x400008bf) 42.117720467s ago: executing program 9 (id=3023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x80000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000010000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042dbd7000fddbdf251000000100003200070000002500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x24002000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r9, @ANYBLOB="070000000000000000000500f500180001801400020073797a5f74756e000000000000000000cc00038004000380c400038018"], 0xf8}}, 0x0) 41.592312069s ago: executing program 9 (id=3035): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'ipvlan0\x00'}}, 0x1e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) 41.591537969s ago: executing program 38 (id=3035): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'veth1_to_team\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'ipvlan0\x00'}}, 0x1e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) 2.260093409s ago: executing program 1 (id=3957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0, 0x0, 0x400007}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) flock(r3, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000280)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@errors_remount}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45b, &(0x7f0000000400)="$eJzs3M1vVFUbAPDn3umUlxewFfGDD7WKxsaPlgIqCxdqNHGBiYkudNm0hSADNbQmQoiCMbgyxsS9cem/4Eo3xrgycat7Q0IMG8DVmDtzL50ZZoZ2OmWg8/slF86591zOeebcM3PuPTMEMLQmsj+SiO0R8WdEjNWzzQUm6n9dv3p+7sbV83NJVKvv/pPUyl27en6uKFqcty3PTKYR6RdJ7G1T79LZcydnK5WFM3l+evnUR9NLZ8+9cOLU7PGF4wunDx45cvjQzMsvHXyxL3Fmbbq259PFfbvf+uCbt49+1RR/Sxx9MtHt4NPVap+rG6wdDelkZIANYU1KEZF1V7k2/seiFCudNxZvfj7QxgEbqlqtVrd1PnyhCmxiSTTnDXkYFsUHfXb/W2ytk4BXN276MXBXXqvfAGVxX8+3+pGRSPMy5Zb7236aiIj3L/z7XbbFxjyHAABo8lM2/3m+3fwvjYcayt2Xrw2NR8T9EbEzIh6IiF0R8WBErezDEfHIGutvXSS5df6TXu4psFXK5n+v5GtbzfO/YvYX46U8t6MWfzk5dqKycCB/TSajvCXLz3Sp4+c3/vi607HG+V+2ZfUXc8G8HZdHtjSfMz+7PLuemBtduRixZ6Rd/MnNlYAkInZHxJ4e6zjx7A/7Oh27ffxd9GGdqfp9xDP1/r8QLfEXku7rk9P/i8rCgeniqrjVb79feqdT/euKvw+y/v9/2+v/ZvzjSeN67dLa67j015cd72l6vf5Hk/dq6dF83yezy8tnZiJGk6P1RjfuP7hybpEvymfxT+5vP/53xsorsTcisov40Yh4LCIez9v+REQ8GRH7u8T/6+tPfdh7/Bsri39+Tf2/khiN1j3tE6WTv/zYVOn4LfHf6N7/h2upyXzPat7/VtOu3q5mAAAAuPekEbE9knTqZjpNp6bq35ffFZFWFpeWnzu2+PHp+fpvBMajnBZPusYanofO5Lf19fzFiKh/taA4fih/bvxtaWstPzW3WJkfdPAw5LZ1GP+Zv0uDbh2w4fxeC4aX8Q/Dy/iH4WX8w/BqM/63DqIdwJ3X7vP/swG0A7jzWsa/ZT8YIu7/YXh1HP+b+X/+AWp8/sNQWtoat/+RfNdE8S/1ePpmSxQPT05G+a5oz/oT1aRt50Y66IbdE4nS3dGMtScG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQT/8FAAD//wDH3GY=") timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r9, &(0x7f0000000100)=""/83, 0x53) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.711675373s ago: executing program 0 (id=3965): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)="126873159fca3fa38fb198", 0xb}], 0x2}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000000), 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r7 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) fcntl$notify(r8, 0x402, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18) 1.449606404s ago: executing program 0 (id=3966): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000080000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000fcff000000"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0100112abd7000fdf7df250ff400001501000000000000000000", @ANYRES16=r2, @ANYRESHEX=r0], 0x24}, 0x1, 0x1000000, 0x0, 0xc85748a54c533}, 0x6004e040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844) r4 = socket(0x10, 0x800, 0x20001) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000003c0)={0x0, 0x2}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a000000000000000007000700"], 0x26}}, 0x20040010) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, 0x0, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.331880054s ago: executing program 0 (id=3969): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) syz_read_part_table(0x4086, &(0x7f00000040c0)="$eJzszz9K9EAcBuB3/2QTlo9PxNJCtLIS7WxsPIDdXmA7Owv7VY8jHkC8keAJbCKZBGVRO0WR5yl+8zLzJsOEH/f40eZ1klnz6Tf3y7vNTJNZksOkK04v/pejtrfa6Y6OUs2bcf4luXz/l8XtFz4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4zdrX9PS22fRLVeZkrT9JRslVkuV2Wyc5HifdmpvJ8/lQ2j3IVgkbZe6VWU/LffOhs3j4phcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/UOCenQxxlP3Ufm/XSWTfaVZ3qhd05pAIABIIoeOdQRMDQgyiUoQ0peVQAO6PW7c+7eqzRMkvErA+X+zMZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA47MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYKwAA//+vbhs5") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYBLOB="5de8517a699b72ed98b3b4839964bf004c783b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000500)='net_dev_xmit_timeout\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x8, 0x2, 0x0, @mcast1, @mcast2, 0x8, 0x7, 0x9, 0x2}}) statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) timerfd_create(0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000000000000040a0000ff000000f9ff00000000c349b348a08bd96616af0860e3378780e25609f43d065626223736d54d83f1b8c779eccd43bb1e62706a6b044c6efdc32239d0d66096d1541cbaf61ecdaff5b65d0d1aafa45cd1", @ANYRES32=0x1, @ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="e0069206353e4234372518d2192604cc248785ff7b71211f4839aa6cfdd73e1816bc608e890f17d0f9802ae2c62ac78c0758a24e8f2e0ca929b164e83a3e069dbd0db0df9a803a9815e8ce37135c9123f8ad854fbf", @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000010000000000000000007b8af8ff0000cbe8d30000bfa200000000000007020000f8ffffffb7030000087405e0aa7cff45ca8b5feb28ddf6f9dffeb3c4edf575c5cfb3c788cc5d7c7ba641d21ce49f64471daad0edf5dc742bad9ec97a14b2223278c998955354acedf101c45e57622604a1327c3b206ef0590b1981de23db6d475aa8976ce2cd9e89ead1bbbcd647c33fb1ee68c04090ac713caad267e54d74cc7eeb992e3db39fc700aa306bfe3d"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/mcfilter6\x00') pread64(r8, 0x0, 0x0, 0x4000000000000f3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1.199674894s ago: executing program 6 (id=3971): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x69e5, 0x10000, 0x0, 0x295}, &(0x7f00000003c0), &(0x7f0000001040)) 1.154357818s ago: executing program 6 (id=3973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.133766349s ago: executing program 6 (id=3974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 1.087384573s ago: executing program 6 (id=3975): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/141}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 998.147461ms ago: executing program 6 (id=3977): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x3f, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r6}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r1) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='2', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_subtree(r8, 0x0, 0x2, 0x0) flock(r3, 0x2) write$P9_RLERRORu(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg(r4, &(0x7f00000017c0)={&(0x7f0000001180)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)="4c959ddfe4e67506e0bf590b080b18cd596cf5715a9ee638592c6468264e3849a36693e3c2b1fabc051d1026f68b566b59a1030e30dcad98ebd03caaa93642a77126ae772c2e18df21dfa6eb9b502dd98de811479bebc6a417c2cbb9308f4ed451bd347b3d93d958d5148ce4c04fee7706e2646300220057b1a8364738c9d7e5b75d1b433242b08ada579982a522c2b7d5a647e582ec3f775b27178212f5691d272c709c943548270f9b28612a4027c93d73a8930b598ab7568b0ecc72ade62c3ba108b6d5d1fdf83e74bd5591ddcf", 0xcf}, {&(0x7f0000001300)="25944ac9f6ce3a7e787c7340efb7379818625623b9011563d4e436bff22d53181c3830e4e5ddbcd212c06074e10637e2f8eb3836e5b7", 0x36}, {&(0x7f0000001340)="049787ff75423a9f70b5feb057210262bd114f72c860a2d5873f74dd5cbf97ed76572603f62cf391cd41b6ca400e6dc91ac155423ec22d2744384a85e63d03a26700c9bfede9ed1d07a040fb985afe6826a466dd7019013b7e0e22f1b3667622a17958316d46d2328db4d6d7c8777a58889420ce3a2cd3c1807f33d986f60eb0a8fa23310e82d34f4b43309c0eb676acd241d0f78a30c69cfa399ab0fe228b64487ce62ba50224b640c246e8e3854d4b1206c84720d6d84489", 0xb9}], 0x3, &(0x7f0000001480)=[{0xc8, 0x10a, 0x3, "a605ac3c313dcb9bb153072eb460637b81b421b6ea34ec24bbd8dcb803dbff4fcf02865203c653b84a96090a678adcaa4f8bf42673423345dba73ddad33ea7f70d01aa00ece10e2f07514b853a8a4ca158e43b76c42678ba66cba2ff1bdceb00b640ce565833257ecd017f4253c540d78882bc1eda564000cae68a722f72bbe57a6dbbf168425433d3a0824be73ec6cea9472810ab58c8f2c6f3da81434c15ca4665a3a55d5a3b56cc0905632b53ed7263e358843f2c"}, {0xb0, 0x97, 0x8, "9f87f46d2d969ba2f291562bc9e8844fdfbfdf860fc0837b17b19a00123560ea68b1ae1229c99fd27e0e8bc1d9f2d386cb5bef47b39da1420d4087525ff3f5a041f8398a1af4d8bfa3993734ab535214512c7470ee4b020feaf763b0932a90912cf3291464f14132365d5767d4596f6fe6e45e13acd036e66cca573cddbcb5ae6c2ce6964f3059861fd061aeb7b4ddb0537e2df822d5dd01638b24"}, {0xb8, 0x6, 0x8001, "fdaa9b431d93bb5d78e2c2d2c3a81429b0de01928c0bb55714ecd737094a5d81006d19fc26c10379ca55840529f30badb89fcea51782b91ad34343602c67217fe00331240e4e7f3bb1ec333fbbfaaf90954d4148b6af9db3849984bdf2951625fe4d691a7be22db87404c62b5a4a9eb09cdd71a0781c7c4efa72803937b77c0756ada46571d8dbacdb42f046cfe163f57293fe8ebf9b5fe8e23773551278c21f749259"}, {0xb8, 0x116, 0x2, "249f5c9dd3d1e4a975de7899a85b9b934e27c62abaaa9976b0dddc3ef9f25c85c71977bf6d7254a3c6af1bfa554b2a1486dceb1907887aa8576601745b9bf6b3abdb3b41864be3a4d899882f3731d42224ad04eade28cc6903ab0fa0f5a03a03e3f2889ec1b660c7003920209ca501500c37b289017f6e1ae45e65375d719497fed9e5a890c14c39bee096f8842006df0b63f86e25fd4ba738e7d4c386b4f2a7f90862c050"}, {0x40, 0x116, 0x4, "b5950a020832b0f903d086241bd0a4315be5ce457679c6d3aa1f7f67de476ea76068f7018116fed358d31b0477"}], 0x328}, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 638.325899ms ago: executing program 4 (id=3982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="94", 0x1}], 0x1}}], 0x1, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 626.33008ms ago: executing program 1 (id=3983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) rt_sigpending(&(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071650f84afdb3e012ec651c511350000000000851000000200000085000000050000009500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) nanosleep(0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 598.649372ms ago: executing program 4 (id=3984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 570.810245ms ago: executing program 4 (id=3986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'veth1_virt_wifi\x00', &(0x7f0000000340)=@ethtool_channels={0x4a, 0x7, 0xffffffff, 0x7, 0x8001, 0xfffffff8, 0x7ff, 0x0, 0x3}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}}, 0x0) 504.18214ms ago: executing program 4 (id=3988): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/141}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 503.45965ms ago: executing program 0 (id=3989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000f40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) syz_io_uring_setup(0x1b6f, &(0x7f0000000040)={0x0, 0x5c18, 0x2000, 0x0, 0x202}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r8 = syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r9) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r10) syz_io_uring_submit(0x0, r7, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x15, 0x2004, @fd_index=0x2, 0x0, &(0x7f0000000140)="0c06bfd65bd88367", 0x8, 0x8, 0x1, {0x0, r10}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f0080040e0ffff00febabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 488.360701ms ago: executing program 1 (id=3990): timer_getoverrun(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) (fail_nth: 1) 480.210472ms ago: executing program 7 (id=3991): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 427.811286ms ago: executing program 1 (id=3992): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 420.798537ms ago: executing program 1 (id=3993): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 381.29391ms ago: executing program 7 (id=3994): bpf$PROG_LOAD(0x5, 0x0, 0x8) (async) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006aaab0879a997c61a"], 0x3c}}, 0x0) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x4, 0x0}, 0x8) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0x2c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x232, 0x0, 0x0, 0x41000, 0x4a, '\x00', r4, @fallback=0x3, r5, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x0, 0x101, 0x8}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[r7], &(0x7f0000000740)=[{0x3, 0x2, 0xf, 0xa}], 0x10, 0x6}, 0x94) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) r13 = socket$unix(0x1, 0x1, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r15, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 375.54743ms ago: executing program 4 (id=3995): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="94", 0x1}], 0x1}}], 0x1, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 339.446123ms ago: executing program 4 (id=3996): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000200)="c7", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) accept4(r5, 0x0, 0x0, 0x0) 193.120535ms ago: executing program 7 (id=3997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 191.866735ms ago: executing program 1 (id=3998): syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000880)=""/156, 0xfffffffffffffe00}], 0x2, 0x8, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010800000000000000000a0000071800048014000180050002000800000005170300000000004c0019800800010002000000080001000c000000080002000c0000000800020024000000080001002000000008000200600a000008000100440000000800010080020000080001000000000008000c40000000000600124000000000"], 0x88}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 'geneve0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'wg1\x00'}}, 0x1e) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r12, &(0x7f0000000000)={0x1d, r13}, 0x10) bind$can_raw(r12, &(0x7f0000000080), 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000380)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r3, 0x0) 175.998656ms ago: executing program 7 (id=3999): timer_getoverrun(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 158.146697ms ago: executing program 0 (id=4000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) rt_sigpending(&(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071650f84afdb3e012ec651c511350000000000851000000200000085000000050000009500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$xdp(0x2c, 0x3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) nanosleep(0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 123.45978ms ago: executing program 7 (id=4001): timer_getoverrun(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4008870) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_delete(0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xd8241, 0x0) sendto$inet_nvme_icreq_pdu(r4, &(0x7f0000000140)={{0x0, 0x0, 0x80, 0x6}, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c00038008000100020000003400038008000100"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000425bd7000ffdbdf251500000008002a000300000004184cf2d73d72453bd4cd74ead6a9b2dc532c618414cffa0c0cdc8e63e820293d0dd611ba79f413db48199b5556b6abf2c5c90e640ab579244279580e30a20fc9c6e6fe5b365a8c9bd0efa2d62aff9aa06845c04c1fb3f9f2cfcb25a0a584bf6e02c1fd621869ba33696856a29fd4c1bbd7a9b9efc42ddef0624b5b6116285d1b3db284c5ea0984dd5b639f3903b292812b80a1e75dc184027e5abc8ca69f20e8736383a97be36b0fd342220653ec028a7b793e45c6d746be6e"], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0xd) socket(0x18, 0x1, 0x7fffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='snd_soc_dapm_path\x00', r1, 0x0, 0x1004}, 0xfffffffffffffe2d) r10 = syz_open_pts(0xffffffffffffffff, 0x80001) syz_open_pts(r10, 0x40) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 122.95359ms ago: executing program 6 (id=4002): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)="126873159fca3fa38fb198", 0xb}], 0x2}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000000), 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r7 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) fcntl$notify(r8, 0x402, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 86.967353ms ago: executing program 7 (id=4003): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)="126873159fca3fa38fb198", 0xb}], 0x2}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000000), 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r7 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x1000, 0x2, 0x0, 0x8002}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) fcntl$notify(r8, 0x402, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x1d, 0x2, 0x6) 0s ago: executing program 0 (id=4004): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x28) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r6, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) write$binfmt_elf64(r3, &(0x7f0000001080)={{0x7f, 0x45, 0x4c, 0x46, 0xa9, 0x10, 0x9, 0x7, 0x7ff, 0x2, 0x3e, 0x8571, 0x370, 0x40, 0x372, 0x0, 0xd, 0x38, 0x2, 0x5, 0x6, 0x2}, [{0x2, 0x4, 0x400000000000000, 0x3, 0x48cf, 0xa, 0x401, 0x400}, {0x6, 0x81, 0x8, 0x1, 0x2, 0x9, 0x5, 0x101}], "3a1accc95eb7f5ec4c4816b9f14b4c98e295660d9bb2d47000fcd818c3c642a11036b46d69e06f9910d723e150c9996fc09ed9b682dcc70b01c5693d2da0e786c1f83fec4791020390bbf476caaa1b2ab1b31b037fdffdd638c4", ['\x00', '\x00', '\x00', '\x00']}, 0x50a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100003050000003efcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xa) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) r13 = accept$unix(r8, &(0x7f0000000140)=@abs, &(0x7f0000000340)=0x6e) fcntl$F_GET_FILE_RW_HINT(r13, 0x40d, &(0x7f0000000380)) kernel console output (not intermixed with test programs): 340587][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.340615][T13411] R13: 00007f329b416038 R14: 00007f329b415fa0 R15: 00007fff5374fed8 [ 293.340645][T13411] [ 293.611690][T13421] siw: device registration error -23 [ 293.619715][T13421] loop6: detected capacity change from 0 to 256 [ 293.637475][T13421] FAT-fs (loop6): codepage cp1251 not found [ 293.659760][T13421] lo speed is unknown, defaulting to 1000 [ 293.736800][T13456] loop6: detected capacity change from 0 to 256 [ 293.800822][T13391] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.846254][T13464] syzkaller0: entered promiscuous mode [ 293.851935][T13464] syzkaller0: entered allmulticast mode [ 293.881394][T13464] loop4: detected capacity change from 0 to 512 [ 293.899379][T13464] msdos: Unknown parameter 'euid<ÿ' [ 294.056974][T13485] lo speed is unknown, defaulting to 1000 [ 294.078221][T13505] loop4: detected capacity change from 0 to 512 [ 294.086088][T13505] EXT4-fs: Ignoring removed oldalloc option [ 294.110316][T13505] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.3040: Parent and EA inode have the same ino 15 [ 294.160917][T13535] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 294.175326][T13505] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.3040: Parent and EA inode have the same ino 15 [ 294.192736][T13505] EXT4-fs (loop4): 1 orphan inode deleted [ 294.199269][T13505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.233611][T13485] chnl_net:caif_netlink_parms(): no params data found [ 294.411364][T13667] FAULT_INJECTION: forcing a failure. [ 294.411364][T13667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.411472][T11889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.425210][T13667] CPU: 0 UID: 0 PID: 13667 Comm: syz.0.3048 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 294.425277][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.425293][T13667] Call Trace: [ 294.425303][T13667] [ 294.425315][T13667] __dump_stack+0x1d/0x30 [ 294.425346][T13667] dump_stack_lvl+0xe8/0x140 [ 294.425398][T13667] dump_stack+0x15/0x1b [ 294.425420][T13667] should_fail_ex+0x265/0x280 [ 294.425452][T13667] should_fail+0xb/0x20 [ 294.425475][T13667] should_fail_usercopy+0x1a/0x20 [ 294.425551][T13667] _copy_from_user+0x1c/0xb0 [ 294.425590][T13667] memdup_user+0x5e/0xd0 [ 294.425702][T13667] strndup_user+0x68/0xb0 [ 294.425738][T13667] __se_sys_mount+0x4d/0x2e0 [ 294.425768][T13667] ? fput+0x8f/0xc0 [ 294.425808][T13667] ? ksys_write+0x192/0x1a0 [ 294.425915][T13667] __x64_sys_mount+0x67/0x80 [ 294.425945][T13667] x64_sys_call+0x2b4d/0x2ff0 [ 294.425973][T13667] do_syscall_64+0xd2/0x200 [ 294.426010][T13667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 294.426082][T13667] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 294.426117][T13667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.426252][T13667] RIP: 0033:0x7f972a8cebe9 [ 294.426274][T13667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.426298][T13667] RSP: 002b:00007f9729337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.426325][T13667] RAX: ffffffffffffffda RBX: 00007f972aaf5fa0 RCX: 00007f972a8cebe9 [ 294.426343][T13667] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 294.426364][T13667] RBP: 00007f9729337090 R08: 0000200000000400 R09: 0000000000000000 [ 294.426379][T13667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.426396][T13667] R13: 00007f972aaf6038 R14: 00007f972aaf5fa0 R15: 00007fff68fda068 [ 294.426423][T13667] [ 294.459939][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3049'. [ 294.639886][T13672] netlink: 212 bytes leftover after parsing attributes in process `syz.6.3049'. [ 294.650839][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.658162][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.665665][T13485] bridge_slave_0: entered allmulticast mode [ 294.672493][T13485] bridge_slave_0: entered promiscuous mode [ 294.679663][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.687045][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.695114][T13485] bridge_slave_1: entered allmulticast mode [ 294.722412][T13485] bridge_slave_1: entered promiscuous mode [ 294.787105][T13485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.798847][T13485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.852869][T13485] team0: Port device team_slave_0 added [ 294.864435][T13739] loop6: detected capacity change from 0 to 512 [ 294.873862][T13485] team0: Port device team_slave_1 added [ 294.906232][T13739] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3053: Failed to acquire dquot type 1 [ 294.918587][T13485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.925896][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.952142][T13485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.964392][T13485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.971539][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.997122][T13739] EXT4-fs (loop6): 1 truncate cleaned up [ 294.999217][T13485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.025287][T13739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.039189][T13739] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.071587][ T9551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.136797][T13785] loop7: detected capacity change from 0 to 256 [ 295.192322][T13485] hsr_slave_0: entered promiscuous mode [ 295.225602][T13485] hsr_slave_1: entered promiscuous mode [ 295.249670][T13815] program syz.4.3057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.267205][T13485] debugfs: 'hsr0' already exists in 'hsr' [ 295.273571][T13485] Cannot create hsr debugfs directory [ 295.335360][T13821] FAULT_INJECTION: forcing a failure. [ 295.335360][T13821] name failslab, interval 1, probability 0, space 0, times 0 [ 295.348785][T13821] CPU: 1 UID: 0 PID: 13821 Comm: syz.6.3059 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 295.348814][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.348842][T13821] Call Trace: [ 295.348849][T13821] [ 295.348857][T13821] __dump_stack+0x1d/0x30 [ 295.348882][T13821] dump_stack_lvl+0xe8/0x140 [ 295.348904][T13821] dump_stack+0x15/0x1b [ 295.348923][T13821] should_fail_ex+0x265/0x280 [ 295.348947][T13821] should_failslab+0x8c/0xb0 [ 295.349052][T13821] __kmalloc_noprof+0xa5/0x3e0 [ 295.349142][T13821] ? alloc_pipe_info+0x1c9/0x350 [ 295.349172][T13821] alloc_pipe_info+0x1c9/0x350 [ 295.349199][T13821] splice_direct_to_actor+0x592/0x680 [ 295.349223][T13821] ? __pfx_direct_splice_actor+0x10/0x10 [ 295.349247][T13821] ? selinux_file_permission+0x1c3/0x320 [ 295.349289][T13821] ? avc_policy_seqno+0x15/0x30 [ 295.349315][T13821] ? selinux_file_permission+0x1e4/0x320 [ 295.349336][T13821] do_splice_direct+0xda/0x150 [ 295.349353][T13821] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 295.349382][T13821] do_sendfile+0x380/0x650 [ 295.349470][T13821] __x64_sys_sendfile64+0x105/0x150 [ 295.349498][T13821] x64_sys_call+0x2bb0/0x2ff0 [ 295.349518][T13821] do_syscall_64+0xd2/0x200 [ 295.349595][T13821] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 295.349625][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.349684][T13821] RIP: 0033:0x7f15ddadebe9 [ 295.349700][T13821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.349838][T13821] RSP: 002b:00007f15dc547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.349869][T13821] RAX: ffffffffffffffda RBX: 00007f15ddd05fa0 RCX: 00007f15ddadebe9 [ 295.349885][T13821] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 295.349899][T13821] RBP: 00007f15dc547090 R08: 0000000000000000 R09: 0000000000000000 [ 295.349914][T13821] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 295.349930][T13821] R13: 00007f15ddd06038 R14: 00007f15ddd05fa0 R15: 00007ffd7c2ab2f8 [ 295.349999][T13821] [ 295.573819][T13834] loop7: detected capacity change from 0 to 512 [ 295.582207][T13834] EXT4-fs: Ignoring removed oldalloc option [ 295.607090][T13834] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.3060: Parent and EA inode have the same ino 15 [ 295.624464][T13834] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.3060: Parent and EA inode have the same ino 15 [ 295.637916][T13834] EXT4-fs (loop7): 1 orphan inode deleted [ 295.644352][T13834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.699556][T13485] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.753902][T13485] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.865737][T13485] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.915513][T13485] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.964749][T10297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.009156][T13485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.026679][ T3595] kernel write not supported for file /513/attr/exec (pid: 3595 comm: kworker/0:5) [ 296.041695][T13485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.062934][T13485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.085971][T13485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.204462][T13937] FAULT_INJECTION: forcing a failure. [ 296.204462][T13937] name failslab, interval 1, probability 0, space 0, times 0 [ 296.217299][T13937] CPU: 0 UID: 0 PID: 13937 Comm: syz.7.3068 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 296.217331][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.217344][T13937] Call Trace: [ 296.217349][T13937] [ 296.217356][T13937] __dump_stack+0x1d/0x30 [ 296.217416][T13937] dump_stack_lvl+0xe8/0x140 [ 296.217435][T13937] dump_stack+0x15/0x1b [ 296.217451][T13937] should_fail_ex+0x265/0x280 [ 296.217474][T13937] should_failslab+0x8c/0xb0 [ 296.217518][T13937] kmem_cache_alloc_node_noprof+0x57/0x320 [ 296.217550][T13937] ? __alloc_skb+0x101/0x320 [ 296.217592][T13937] __alloc_skb+0x101/0x320 [ 296.217645][T13937] netlink_alloc_large_skb+0xba/0xf0 [ 296.217728][T13937] netlink_sendmsg+0x3cf/0x6b0 [ 296.217755][T13937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.217777][T13937] __sock_sendmsg+0x142/0x180 [ 296.217803][T13937] ____sys_sendmsg+0x31e/0x4e0 [ 296.217902][T13937] ___sys_sendmsg+0x17b/0x1d0 [ 296.217947][T13937] __x64_sys_sendmsg+0xd4/0x160 [ 296.217981][T13937] x64_sys_call+0x191e/0x2ff0 [ 296.218018][T13937] do_syscall_64+0xd2/0x200 [ 296.218044][T13937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 296.218108][T13937] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 296.218139][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.218237][T13937] RIP: 0033:0x7f329b1eebe9 [ 296.218256][T13937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.218279][T13937] RSP: 002b:00007f3299c4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.218318][T13937] RAX: ffffffffffffffda RBX: 00007f329b415fa0 RCX: 00007f329b1eebe9 [ 296.218331][T13937] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 000000000000000a [ 296.218347][T13937] RBP: 00007f3299c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 296.218361][T13937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.218372][T13937] R13: 00007f329b416038 R14: 00007f329b415fa0 R15: 00007fff5374fed8 [ 296.218393][T13937] [ 296.237503][T13485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.445152][T13485] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.457375][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.464745][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.508319][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.515470][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.533467][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 296.533485][ T29] audit: type=1326 audit(1755549177.546:25140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.555836][T13485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.563705][ T29] audit: type=1326 audit(1755549177.546:25141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.574193][T13485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.641723][T13949] loop6: detected capacity change from 0 to 512 [ 296.662872][T13949] EXT4-fs: Ignoring removed oldalloc option [ 296.671515][ T29] audit: type=1326 audit(1755549177.626:25142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15ddadd550 code=0x7ffc0000 [ 296.695729][ T29] audit: type=1326 audit(1755549177.626:25143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.720042][ T29] audit: type=1326 audit(1755549177.626:25144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.743833][ T29] audit: type=1326 audit(1755549177.626:25145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.768041][ T29] audit: type=1326 audit(1755549177.626:25146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.792161][ T29] audit: type=1326 audit(1755549177.626:25147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.816150][ T29] audit: type=1326 audit(1755549177.626:25148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.827923][T13962] FAULT_INJECTION: forcing a failure. [ 296.827923][T13962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.840179][ T29] audit: type=1326 audit(1755549177.646:25149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13948 comm="syz.6.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 296.877355][T13962] CPU: 0 UID: 0 PID: 13962 Comm: syz.7.3072 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 296.877389][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.877406][T13962] Call Trace: [ 296.877415][T13962] [ 296.877463][T13962] __dump_stack+0x1d/0x30 [ 296.877496][T13962] dump_stack_lvl+0xe8/0x140 [ 296.877521][T13962] dump_stack+0x15/0x1b [ 296.877538][T13962] should_fail_ex+0x265/0x280 [ 296.877592][T13962] should_fail+0xb/0x20 [ 296.877696][T13962] should_fail_usercopy+0x1a/0x20 [ 296.877723][T13962] _copy_from_iter+0xcf/0xe40 [ 296.877759][T13962] ? __build_skb_around+0x1a0/0x200 [ 296.877833][T13962] ? __alloc_skb+0x223/0x320 [ 296.877881][T13962] netlink_sendmsg+0x471/0x6b0 [ 296.877931][T13962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.877959][T13962] __sock_sendmsg+0x142/0x180 [ 296.877995][T13962] sock_write_iter+0x165/0x1b0 [ 296.878032][T13962] ? __pfx_sock_write_iter+0x10/0x10 [ 296.878192][T13962] vfs_write+0x52a/0x960 [ 296.878219][T13962] ksys_write+0xda/0x1a0 [ 296.878304][T13962] __x64_sys_write+0x40/0x50 [ 296.878332][T13962] x64_sys_call+0x27fe/0x2ff0 [ 296.878427][T13962] do_syscall_64+0xd2/0x200 [ 296.878461][T13962] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 296.878488][T13962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 296.878512][T13962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.878604][T13962] RIP: 0033:0x7f329b1eebe9 [ 296.878625][T13962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.878648][T13962] RSP: 002b:00007f3299c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.878705][T13962] RAX: ffffffffffffffda RBX: 00007f329b416180 RCX: 00007f329b1eebe9 [ 296.878721][T13962] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 000000000000000c [ 296.878767][T13962] RBP: 00007f3299c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 296.878783][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.878797][T13962] R13: 00007f329b416218 R14: 00007f329b416180 R15: 00007fff5374fed8 [ 296.878816][T13962] [ 297.118871][T13949] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3073: Parent and EA inode have the same ino 15 [ 297.134206][T13949] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3073: Parent and EA inode have the same ino 15 [ 297.156150][T13485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.163909][T13949] EXT4-fs (loop6): 1 orphan inode deleted [ 297.174938][T13949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.341220][T13982] 9pnet_fd: Insufficient options for proto=fd [ 297.382688][T13485] veth0_vlan: entered promiscuous mode [ 297.416082][T13485] veth1_vlan: entered promiscuous mode [ 297.447489][T13485] veth0_macvtap: entered promiscuous mode [ 297.494094][T13485] veth1_macvtap: entered promiscuous mode [ 297.525267][T13485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.538659][T13485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.551619][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.569897][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.591499][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.612746][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.663494][T14005] loop4: detected capacity change from 0 to 512 [ 297.674238][ T9551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.679360][T14005] ext4: Unknown parameter 'smackfsfloor' [ 297.738412][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.740718][T14017] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 297.747243][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.772547][T14019] FAULT_INJECTION: forcing a failure. [ 297.772547][T14019] name failslab, interval 1, probability 0, space 0, times 0 [ 297.785348][T14019] CPU: 1 UID: 0 PID: 14019 Comm: syz.4.3085 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 297.785377][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.785449][T14019] Call Trace: [ 297.785456][T14019] [ 297.785464][T14019] __dump_stack+0x1d/0x30 [ 297.785485][T14019] dump_stack_lvl+0xe8/0x140 [ 297.785504][T14019] dump_stack+0x15/0x1b [ 297.785519][T14019] should_fail_ex+0x265/0x280 [ 297.785605][T14019] should_failslab+0x8c/0xb0 [ 297.785632][T14019] kmem_cache_alloc_noprof+0x50/0x310 [ 297.785661][T14019] ? getname_flags+0x80/0x3b0 [ 297.785689][T14019] getname_flags+0x80/0x3b0 [ 297.785790][T14019] user_path_at+0x28/0x130 [ 297.785821][T14019] __x64_sys_umount+0x85/0xe0 [ 297.785894][T14019] x64_sys_call+0xdd2/0x2ff0 [ 297.785932][T14019] do_syscall_64+0xd2/0x200 [ 297.786023][T14019] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 297.786096][T14019] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 297.786149][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.786172][T14019] RIP: 0033:0x7f4b6799ebe9 [ 297.786186][T14019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.786248][T14019] RSP: 002b:00007f4b663de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 297.786270][T14019] RAX: ffffffffffffffda RBX: 00007f4b67bc6090 RCX: 00007f4b6799ebe9 [ 297.786282][T14019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 297.786293][T14019] RBP: 00007f4b663de090 R08: 0000000000000000 R09: 0000000000000000 [ 297.786305][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.786317][T14019] R13: 00007f4b67bc6128 R14: 00007f4b67bc6090 R15: 00007ffdb13040e8 [ 297.786339][T14019] [ 297.939204][T14015] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3086'. [ 298.106709][T14026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.124564][T14026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.155958][T14026] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3088'. [ 298.261006][T14033] 9pnet_fd: Insufficient options for proto=fd [ 298.373768][T14038] loop7: detected capacity change from 0 to 512 [ 298.390864][T14038] ext4: Unknown parameter 'smackfsfloor' [ 298.878273][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.889377][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.903175][T14052] vhci_hcd: invalid port number 96 [ 298.908458][T14052] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 298.955460][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.966081][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.985884][T14052] loop7: detected capacity change from 0 to 8192 [ 299.034157][T14065] loop7: detected capacity change from 0 to 256 [ 299.043820][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.054330][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.105848][T14072] FAULT_INJECTION: forcing a failure. [ 299.105848][T14072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.119646][T14072] CPU: 0 UID: 0 PID: 14072 Comm: syz.4.3100 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 299.119734][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.119751][T14072] Call Trace: [ 299.119759][T14072] [ 299.119769][T14072] __dump_stack+0x1d/0x30 [ 299.119796][T14072] dump_stack_lvl+0xe8/0x140 [ 299.119821][T14072] dump_stack+0x15/0x1b [ 299.119891][T14072] should_fail_ex+0x265/0x280 [ 299.119997][T14072] should_fail+0xb/0x20 [ 299.120095][T14072] should_fail_usercopy+0x1a/0x20 [ 299.120123][T14072] _copy_from_user+0x1c/0xb0 [ 299.120159][T14072] ___sys_sendmsg+0xc1/0x1d0 [ 299.120251][T14072] __x64_sys_sendmsg+0xd4/0x160 [ 299.120287][T14072] x64_sys_call+0x191e/0x2ff0 [ 299.120354][T14072] do_syscall_64+0xd2/0x200 [ 299.120387][T14072] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.120436][T14072] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 299.120490][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.120517][T14072] RIP: 0033:0x7f4b6799ebe9 [ 299.120536][T14072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.120559][T14072] RSP: 002b:00007f4b663ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.120583][T14072] RAX: ffffffffffffffda RBX: 00007f4b67bc5fa0 RCX: 00007f4b6799ebe9 [ 299.120599][T14072] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000007 [ 299.120635][T14072] RBP: 00007f4b663ff090 R08: 0000000000000000 R09: 0000000000000000 [ 299.120651][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.120666][T14072] R13: 00007f4b67bc6038 R14: 00007f4b67bc5fa0 R15: 00007ffdb13040e8 [ 299.120693][T14072] [ 299.305324][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.316059][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.460200][ T57] bridge_slave_1: left allmulticast mode [ 299.466155][ T57] bridge_slave_1: left promiscuous mode [ 299.472406][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.481753][ T57] bridge_slave_0: left allmulticast mode [ 299.487611][ T57] bridge_slave_0: left promiscuous mode [ 299.493516][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.594595][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.605848][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.616004][ T57] bond0 (unregistering): Released all slaves [ 299.650625][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 299.670177][ T57] hsr_slave_0: left promiscuous mode [ 299.676152][ T57] hsr_slave_1: left promiscuous mode [ 299.685666][ T57] veth1_macvtap: left promiscuous mode [ 299.691366][ T57] veth0_macvtap: left promiscuous mode [ 299.696978][ T57] veth1_vlan: left promiscuous mode [ 299.702465][ T57] veth0_vlan: left promiscuous mode [ 299.789593][ T57] team0 (unregistering): Port device team_slave_1 removed [ 299.800141][ T57] team0 (unregistering): Port device team_slave_0 removed [ 300.061994][T14123] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3108'. [ 300.072980][T14123] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3108'. [ 300.248595][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3111'. [ 300.433098][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3116'. [ 300.509768][T14171] FAULT_INJECTION: forcing a failure. [ 300.509768][T14171] name failslab, interval 1, probability 0, space 0, times 0 [ 300.522931][T14171] CPU: 1 UID: 0 PID: 14171 Comm: syz.7.3118 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 300.522970][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.522986][T14171] Call Trace: [ 300.523010][T14171] [ 300.523020][T14171] __dump_stack+0x1d/0x30 [ 300.523046][T14171] dump_stack_lvl+0xe8/0x140 [ 300.523072][T14171] dump_stack+0x15/0x1b [ 300.523094][T14171] should_fail_ex+0x265/0x280 [ 300.523183][T14171] ? audit_log_d_path+0x8d/0x150 [ 300.523214][T14171] should_failslab+0x8c/0xb0 [ 300.523282][T14171] __kmalloc_cache_noprof+0x4c/0x320 [ 300.523331][T14171] audit_log_d_path+0x8d/0x150 [ 300.523371][T14171] audit_log_d_path_exe+0x42/0x70 [ 300.523481][T14171] audit_log_task+0x1e9/0x250 [ 300.523521][T14171] audit_seccomp+0x61/0x100 [ 300.523620][T14171] ? __seccomp_filter+0x68c/0x10d0 [ 300.523699][T14171] __seccomp_filter+0x69d/0x10d0 [ 300.523726][T14171] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 300.523803][T14171] ? vfs_write+0x7e8/0x960 [ 300.523837][T14171] __secure_computing+0x82/0x150 [ 300.523891][T14171] syscall_trace_enter+0xcf/0x1e0 [ 300.524001][T14171] do_syscall_64+0xac/0x200 [ 300.524037][T14171] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.524068][T14171] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 300.524101][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.524130][T14171] RIP: 0033:0x7f329b1eebe9 [ 300.524207][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.524306][T14171] RSP: 002b:00007f3299c4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 300.524328][T14171] RAX: ffffffffffffffda RBX: 00007f329b415fa0 RCX: 00007f329b1eebe9 [ 300.524409][T14171] RDX: 00000000000000bb RSI: 0000200000000bc0 RDI: 0000000000000008 [ 300.524427][T14171] RBP: 00007f3299c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.524444][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.524460][T14171] R13: 00007f329b416038 R14: 00007f329b415fa0 R15: 00007fff5374fed8 [ 300.524482][T14171] [ 300.551908][T14162] lo speed is unknown, defaulting to 1000 [ 300.625086][T14179] 9pnet_fd: Insufficient options for proto=fd [ 300.755669][T14162] chnl_net:caif_netlink_parms(): no params data found [ 300.817379][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3122'. [ 300.842100][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.850204][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.857719][T14162] bridge_slave_0: entered allmulticast mode [ 300.864499][T14162] bridge_slave_0: entered promiscuous mode [ 300.874070][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.881234][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.889564][T14162] bridge_slave_1: entered allmulticast mode [ 300.896306][T14162] bridge_slave_1: entered promiscuous mode [ 300.923757][T14342] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 300.924294][T14162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.948229][T14162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.976398][T14162] team0: Port device team_slave_0 added [ 300.988879][T14162] team0: Port device team_slave_1 added [ 301.031769][T14162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.039047][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.065468][T14162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.077248][T14162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.084690][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.112572][T14162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.157602][T14162] hsr_slave_0: entered promiscuous mode [ 301.164227][T14162] hsr_slave_1: entered promiscuous mode [ 301.170959][T14162] debugfs: 'hsr0' already exists in 'hsr' [ 301.176797][T14162] Cannot create hsr debugfs directory [ 301.184047][T14476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.189907][T14479] 9pnet_fd: Insufficient options for proto=fd [ 301.195515][T14476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.235225][T14424] loop6: detected capacity change from 0 to 128 [ 301.245907][T14476] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3130'. [ 301.258873][T14424] FAULT_INJECTION: forcing a failure. [ 301.258873][T14424] name failslab, interval 1, probability 0, space 0, times 0 [ 301.271740][T14424] CPU: 0 UID: 0 PID: 14424 Comm: syz.6.3126 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 301.271778][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.271795][T14424] Call Trace: [ 301.271804][T14424] [ 301.271812][T14424] __dump_stack+0x1d/0x30 [ 301.271844][T14424] dump_stack_lvl+0xe8/0x140 [ 301.271863][T14424] dump_stack+0x15/0x1b [ 301.271884][T14424] should_fail_ex+0x265/0x280 [ 301.271911][T14424] should_failslab+0x8c/0xb0 [ 301.271943][T14424] __kvmalloc_node_noprof+0x123/0x4e0 [ 301.271972][T14424] ? io_register_clone_buffers+0x3a5/0x780 [ 301.272075][T14424] ? fget+0x36/0x40 [ 301.272100][T14424] io_register_clone_buffers+0x3a5/0x780 [ 301.272141][T14424] ? __fget_files+0x184/0x1c0 [ 301.272195][T14424] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 301.272299][T14424] __se_sys_io_uring_register+0x733/0xeb0 [ 301.272330][T14424] ? fput+0x8f/0xc0 [ 301.272362][T14424] ? ksys_write+0x192/0x1a0 [ 301.272466][T14424] __x64_sys_io_uring_register+0x55/0x70 [ 301.272530][T14424] x64_sys_call+0x18a3/0x2ff0 [ 301.272557][T14424] do_syscall_64+0xd2/0x200 [ 301.272606][T14424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 301.272637][T14424] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 301.272708][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.272729][T14424] RIP: 0033:0x7f15ddadebe9 [ 301.272778][T14424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.272794][T14424] RSP: 002b:00007f15dc547038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 301.272892][T14424] RAX: ffffffffffffffda RBX: 00007f15ddd05fa0 RCX: 00007f15ddadebe9 [ 301.272904][T14424] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000007 [ 301.272919][T14424] RBP: 00007f15dc547090 R08: 0000000000000000 R09: 0000000000000000 [ 301.272935][T14424] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 301.272950][T14424] R13: 00007f15ddd06038 R14: 00007f15ddd05fa0 R15: 00007ffd7c2ab2f8 [ 301.272972][T14424] [ 301.528102][T14514] erspan0: entered promiscuous mode [ 301.586234][T14162] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.596334][T14162] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.654015][T14162] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.663993][T14162] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.704725][T14561] lo speed is unknown, defaulting to 1000 [ 301.746650][T14162] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.756626][T14162] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.803710][T14162] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.814005][T14162] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.880182][T14162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.905939][T14162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.915638][T14162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.925304][T14162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.970133][T14162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.983948][T14162] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.995034][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.002310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.014528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.021736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.053351][T14574] netlink: 'syz.1.3136': attribute type 13 has an invalid length. [ 302.070214][T14574] gretap0: refused to change device tx_queue_len [ 302.078635][T14574] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.101096][T14574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.111847][T14574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.163778][T14630] loop6: detected capacity change from 0 to 1024 [ 302.170739][T14162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.171208][T14630] EXT4-fs: Ignoring removed bh option [ 302.184159][T14630] ext4: Unknown parameter 'func' [ 302.195906][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 302.195937][ T29] audit: type=1400 audit(1755549183.205:25268): avc: denied { connect } for pid=14629 comm="syz.6.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 302.234154][ T29] audit: type=1400 audit(1755549183.235:25269): avc: denied { bind } for pid=14629 comm="syz.6.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 302.254799][ T29] audit: type=1326 audit(1755549183.245:25270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.278825][ T29] audit: type=1326 audit(1755549183.245:25271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.303793][ T29] audit: type=1326 audit(1755549183.245:25272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.328205][ T29] audit: type=1326 audit(1755549183.245:25273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.352629][ T29] audit: type=1326 audit(1755549183.245:25274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.377700][ T29] audit: type=1326 audit(1755549183.245:25275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.402027][ T29] audit: type=1326 audit(1755549183.245:25276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.415087][T14644] loop6: detected capacity change from 0 to 512 [ 302.425967][ T29] audit: type=1326 audit(1755549183.245:25277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14639 comm="syz.6.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 302.435992][T14644] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3142: error while reading EA inode 32 err=-116 [ 302.463939][T14162] veth0_vlan: entered promiscuous mode [ 302.475817][T14644] EXT4-fs (loop6): Remounting filesystem read-only [ 302.482414][T14644] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 302.493630][T14644] EXT4-fs (loop6): 1 orphan inode deleted [ 302.500102][T14644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.516313][T14644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.527939][T14162] veth1_vlan: entered promiscuous mode [ 302.556341][T14162] veth0_macvtap: entered promiscuous mode [ 302.566427][T14162] veth1_macvtap: entered promiscuous mode [ 302.581753][T14162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.595854][T14162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.609636][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.636830][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.662400][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.694479][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.774936][T14664] 9pnet_fd: Insufficient options for proto=fd [ 302.949166][T14671] FAULT_INJECTION: forcing a failure. [ 302.949166][T14671] name failslab, interval 1, probability 0, space 0, times 0 [ 302.962147][T14671] CPU: 1 UID: 0 PID: 14671 Comm: syz.1.3147 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 302.962235][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.962325][T14671] Call Trace: [ 302.962342][T14671] [ 302.962352][T14671] __dump_stack+0x1d/0x30 [ 302.962378][T14671] dump_stack_lvl+0xe8/0x140 [ 302.962397][T14671] dump_stack+0x15/0x1b [ 302.962412][T14671] should_fail_ex+0x265/0x280 [ 302.962461][T14671] should_failslab+0x8c/0xb0 [ 302.962491][T14671] kmem_cache_alloc_noprof+0x50/0x310 [ 302.962524][T14671] ? dst_alloc+0xbd/0x100 [ 302.962583][T14671] dst_alloc+0xbd/0x100 [ 302.962609][T14671] ip_route_input_rcu+0x177d/0x1d00 [ 302.962674][T14671] ip_route_input_noref+0x5f/0x90 [ 302.962761][T14671] ip_rcv_finish_core+0x315/0xb40 [ 302.962790][T14671] ip_rcv_finish+0x100/0x1c0 [ 302.962813][T14671] ip_rcv+0x62/0x140 [ 302.962835][T14671] ? __pfx_ip_rcv_finish+0x10/0x10 [ 302.962861][T14671] ? __pfx_ip_rcv+0x10/0x10 [ 302.962898][T14671] __netif_receive_skb+0xff/0x270 [ 302.962927][T14671] ? tun_rx_batched+0xc7/0x430 [ 302.962955][T14671] netif_receive_skb+0x4b/0x2e0 [ 302.963045][T14671] ? tun_rx_batched+0xc7/0x430 [ 302.963075][T14671] tun_rx_batched+0xfc/0x430 [ 302.963108][T14671] tun_get_user+0x1eb6/0x2680 [ 302.963161][T14671] ? ref_tracker_alloc+0x1f2/0x2f0 [ 302.963192][T14671] tun_chr_write_iter+0x15e/0x210 [ 302.963265][T14671] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 302.963367][T14671] vfs_write+0x52a/0x960 [ 302.963471][T14671] ksys_write+0xda/0x1a0 [ 302.963495][T14671] __x64_sys_write+0x40/0x50 [ 302.963519][T14671] x64_sys_call+0x27fe/0x2ff0 [ 302.963593][T14671] do_syscall_64+0xd2/0x200 [ 302.963620][T14671] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.963647][T14671] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.963753][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.963775][T14671] RIP: 0033:0x7fc946c2d69f [ 302.963790][T14671] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 302.963808][T14671] RSP: 002b:00007fc94568f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 302.963874][T14671] RAX: ffffffffffffffda RBX: 00007fc946e55fa0 RCX: 00007fc946c2d69f [ 302.963887][T14671] RDX: 0000000000000034 RSI: 0000200000000380 RDI: 00000000000000c8 [ 302.963900][T14671] RBP: 00007fc94568f090 R08: 0000000000000000 R09: 0000000000000000 [ 302.963957][T14671] R10: 0000000000000034 R11: 0000000000000293 R12: 0000000000000001 [ 302.963969][T14671] R13: 00007fc946e56038 R14: 00007fc946e55fa0 R15: 00007ffcaa5dd3f8 [ 302.963988][T14671] [ 303.326059][T14673] FAULT_INJECTION: forcing a failure. [ 303.326059][T14673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.339611][T14673] CPU: 0 UID: 0 PID: 14673 Comm: syz.1.3148 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 303.339716][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.339733][T14673] Call Trace: [ 303.339742][T14673] [ 303.339752][T14673] __dump_stack+0x1d/0x30 [ 303.339780][T14673] dump_stack_lvl+0xe8/0x140 [ 303.339860][T14673] dump_stack+0x15/0x1b [ 303.339880][T14673] should_fail_ex+0x265/0x280 [ 303.339902][T14673] should_fail+0xb/0x20 [ 303.339923][T14673] should_fail_usercopy+0x1a/0x20 [ 303.339945][T14673] _copy_from_iter+0xcf/0xe40 [ 303.339976][T14673] ? __build_skb_around+0x1a0/0x200 [ 303.340017][T14673] ? __alloc_skb+0x223/0x320 [ 303.340049][T14673] netlink_sendmsg+0x471/0x6b0 [ 303.340142][T14673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.340196][T14673] __sock_sendmsg+0x142/0x180 [ 303.340223][T14673] ____sys_sendmsg+0x31e/0x4e0 [ 303.340247][T14673] ___sys_sendmsg+0x17b/0x1d0 [ 303.340302][T14673] __x64_sys_sendmsg+0xd4/0x160 [ 303.340390][T14673] x64_sys_call+0x191e/0x2ff0 [ 303.340415][T14673] do_syscall_64+0xd2/0x200 [ 303.340441][T14673] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 303.340468][T14673] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 303.340541][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.340564][T14673] RIP: 0033:0x7fc946c2ebe9 [ 303.340579][T14673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.340673][T14673] RSP: 002b:00007fc94568f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.340693][T14673] RAX: ffffffffffffffda RBX: 00007fc946e55fa0 RCX: 00007fc946c2ebe9 [ 303.340705][T14673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 303.340717][T14673] RBP: 00007fc94568f090 R08: 0000000000000000 R09: 0000000000000000 [ 303.340729][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.340742][T14673] R13: 00007fc946e56038 R14: 00007fc946e55fa0 R15: 00007ffcaa5dd3f8 [ 303.340798][T14673] [ 303.565526][T14673] syz_tun: entered allmulticast mode [ 303.576515][T14673] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 303.712952][T14692] 9pnet_fd: Insufficient options for proto=fd [ 303.725615][T14694] loop6: detected capacity change from 0 to 2048 [ 303.732787][T14694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.775357][T14694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.794156][T14694] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #12: block 5: comm syz.6.3155: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0 [ 303.815185][T14694] EXT4-fs (loop6): Remounting filesystem read-only [ 303.891223][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 303.918399][T14685] bridge_slave_1: left allmulticast mode [ 303.924161][T14685] bridge_slave_1: left promiscuous mode [ 303.930027][T14685] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.944465][T14685] bridge_slave_0: left allmulticast mode [ 303.950189][T14685] bridge_slave_0: left promiscuous mode [ 303.956003][T14685] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.114060][T14694] netlink: 'syz.6.3155': attribute type 13 has an invalid length. [ 304.129510][T14694] erspan0: refused to change device tx_queue_len [ 304.137190][T14694] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 304.157685][T14694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.166777][T14694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.549168][T14748] loop7: detected capacity change from 0 to 256 [ 304.624872][T14757] loop7: detected capacity change from 0 to 512 [ 304.631823][T14757] EXT4-fs: Ignoring removed oldalloc option [ 304.644605][T14757] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.3169: Parent and EA inode have the same ino 15 [ 304.659885][T14757] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.3169: Parent and EA inode have the same ino 15 [ 304.675198][T14757] EXT4-fs (loop7): 1 orphan inode deleted [ 304.693938][T14757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.718996][ T9551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.816959][T14777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.830359][T14771] tipc: Enabled bearer , priority 0 [ 304.845966][T14777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.883100][T14777] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3174'. [ 304.984159][T10297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.052415][T14770] tipc: Resetting bearer [ 305.077926][T14770] tipc: Disabling bearer [ 305.137615][T14798] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 305.147643][T14798] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 305.223913][T14807] loop7: detected capacity change from 0 to 256 [ 305.289353][T14817] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 305.350882][T14827] loop6: detected capacity change from 0 to 1024 [ 305.374957][T14827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.393673][T14827] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.3187: Allocating blocks 497-513 which overlap fs metadata [ 305.408848][T14827] EXT4-fs (loop6): pa ffff888105bef700: logic 256, phys. 369, len 9 [ 305.417022][T14827] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 305.427512][T14827] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 305.455487][ T9551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.478693][T14838] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3190'. [ 305.666852][T14851] loop7: detected capacity change from 0 to 256 [ 305.683959][T14849] SELinux: failed to load policy [ 305.754467][T14865] 9pnet_fd: Insufficient options for proto=fd [ 305.788584][T14863] SELinux: failed to load policy [ 305.837369][T14871] FAULT_INJECTION: forcing a failure. [ 305.837369][T14871] name failslab, interval 1, probability 0, space 0, times 0 [ 305.838200][T14873] pim6reg: entered allmulticast mode [ 305.850708][T14871] CPU: 0 UID: 0 PID: 14871 Comm: syz.7.3200 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 305.850744][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.850760][T14871] Call Trace: [ 305.850768][T14871] [ 305.850779][T14871] __dump_stack+0x1d/0x30 [ 305.850880][T14871] dump_stack_lvl+0xe8/0x140 [ 305.850906][T14871] dump_stack+0x15/0x1b [ 305.850930][T14871] should_fail_ex+0x265/0x280 [ 305.850961][T14871] should_failslab+0x8c/0xb0 [ 305.850991][T14871] __kmalloc_cache_node_noprof+0x54/0x320 [ 305.851108][T14871] ? __get_vm_area_node+0x106/0x1d0 [ 305.851153][T14871] __get_vm_area_node+0x106/0x1d0 [ 305.851194][T14871] __vmalloc_node_range_noprof+0x273/0xe00 [ 305.851323][T14871] ? sel_write_load+0x158/0x380 [ 305.851362][T14871] ? __rcu_read_unlock+0x4f/0x70 [ 305.851415][T14871] ? sel_write_load+0x158/0x380 [ 305.851448][T14871] vmalloc_noprof+0x82/0xc0 [ 305.851487][T14871] ? sel_write_load+0x158/0x380 [ 305.851519][T14871] sel_write_load+0x158/0x380 [ 305.851626][T14871] ? __pfx_sel_write_load+0x10/0x10 [ 305.851703][T14871] vfs_write+0x269/0x960 [ 305.851801][T14871] ? __rcu_read_unlock+0x4f/0x70 [ 305.851829][T14871] ? __fget_files+0x184/0x1c0 [ 305.851866][T14871] ksys_write+0xda/0x1a0 [ 305.851899][T14871] __x64_sys_write+0x40/0x50 [ 305.851928][T14871] x64_sys_call+0x27fe/0x2ff0 [ 305.852002][T14871] do_syscall_64+0xd2/0x200 [ 305.852044][T14871] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 305.852078][T14871] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 305.852168][T14871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.852199][T14871] RIP: 0033:0x7f329b1eebe9 [ 305.852219][T14871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.852245][T14871] RSP: 002b:00007f3299c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.852317][T14871] RAX: ffffffffffffffda RBX: 00007f329b415fa0 RCX: 00007f329b1eebe9 [ 305.852369][T14871] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 305.852386][T14871] RBP: 00007f3299c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.852403][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.852420][T14871] R13: 00007f329b416038 R14: 00007f329b415fa0 R15: 00007fff5374fed8 [ 305.852446][T14871] [ 305.852456][T14871] syz.7.3200: vmalloc error: size 24576, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 305.859306][T14873] pim6reg: left allmulticast mode [ 305.867132][T14871] ,cpuset=/,mems_allowed=0 [ 305.867187][T14871] CPU: 0 UID: 0 PID: 14871 Comm: syz.7.3200 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 305.867220][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.867236][T14871] Call Trace: [ 305.867246][T14871] [ 305.867263][T14871] __dump_stack+0x1d/0x30 [ 305.867292][T14871] dump_stack_lvl+0xe8/0x140 [ 305.867321][T14871] dump_stack+0x15/0x1b [ 305.867374][T14871] warn_alloc+0x12b/0x1a0 [ 305.867424][T14871] __vmalloc_node_range_noprof+0x297/0xe00 [ 305.867495][T14871] ? __rcu_read_unlock+0x4f/0x70 [ 305.867602][T14871] ? sel_write_load+0x158/0x380 [ 305.867636][T14871] vmalloc_noprof+0x82/0xc0 [ 305.867710][T14871] ? sel_write_load+0x158/0x380 [ 305.867741][T14871] sel_write_load+0x158/0x380 [ 305.867829][T14871] ? __pfx_sel_write_load+0x10/0x10 [ 305.867861][T14871] vfs_write+0x269/0x960 [ 305.867891][T14871] ? __rcu_read_unlock+0x4f/0x70 [ 305.867919][T14871] ? __fget_files+0x184/0x1c0 [ 305.867956][T14871] ksys_write+0xda/0x1a0 [ 305.868062][T14871] __x64_sys_write+0x40/0x50 [ 305.868094][T14871] x64_sys_call+0x27fe/0x2ff0 [ 305.868122][T14871] do_syscall_64+0xd2/0x200 [ 305.868158][T14871] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 305.868190][T14871] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 305.868264][T14871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.868305][T14871] RIP: 0033:0x7f329b1eebe9 [ 305.868325][T14871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.868350][T14871] RSP: 002b:00007f3299c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.868375][T14871] RAX: ffffffffffffffda RBX: 00007f329b415fa0 RCX: 00007f329b1eebe9 [ 305.868393][T14871] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 305.868410][T14871] RBP: 00007f3299c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.868425][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.868442][T14871] R13: 00007f329b416038 R14: 00007f329b415fa0 R15: 00007fff5374fed8 [ 305.868520][T14871] [ 305.868528][T14871] Mem-Info: [ 306.327835][T14871] active_anon:4446 inactive_anon:4 isolated_anon:0 [ 306.327835][T14871] active_file:8101 inactive_file:20655 isolated_file:0 [ 306.327835][T14871] unevictable:0 dirty:608 writeback:0 [ 306.327835][T14871] slab_reclaimable:3865 slab_unreclaimable:39095 [ 306.327835][T14871] mapped:35174 shmem:368 pagetables:1121 [ 306.327835][T14871] sec_pagetables:0 bounce:0 [ 306.327835][T14871] kernel_misc_reclaimable:0 [ 306.327835][T14871] free:1827609 free_pcp:16676 free_cma:0 [ 306.374735][T14871] Node 0 active_anon:17784kB inactive_anon:16kB active_file:32404kB inactive_file:82620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140696kB dirty:2432kB writeback:0kB shmem:1472kB kernel_stack:4480kB pagetables:4484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.402865][T14871] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.432025][T14871] lowmem_reserve[]: 0 2883 7862 7862 [ 306.437493][T14871] Node 0 DMA32 free:2949212kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952844kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 306.468271][T14871] lowmem_reserve[]: 0 0 4978 4978 [ 306.473374][T14871] Node 0 Normal free:4345864kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17784kB inactive_anon:16kB active_file:32404kB inactive_file:82620kB unevictable:0kB writepending:2432kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:63072kB local_pcp:34960kB free_cma:0kB [ 306.505943][T14871] lowmem_reserve[]: 0 0 0 0 [ 306.510621][T14871] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 306.523525][T14871] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949212kB [ 306.539806][T14871] Node 0 Normal: 138*4kB (UME) 400*8kB (UME) 566*16kB (UME) 118*32kB (UME) 198*64kB (UME) 274*128kB (UME) 325*256kB (UME) 280*512kB (UME) 192*1024kB (UME) 24*2048kB (UME) 930*4096kB (UM) = 4345928kB [ 306.559825][T14871] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 306.569752][T14871] 29028 total pagecache pages [ 306.574470][T14871] 14 pages in swap cache [ 306.578721][T14871] Free swap = 124940kB [ 306.582880][T14871] Total swap = 124996kB [ 306.587152][T14871] 2097051 pages RAM [ 306.591052][T14871] 0 pages HighMem/MovableOnly [ 306.595943][T14871] 80440 pages reserved [ 306.607497][T14878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.618209][T14878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.672504][T14878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.683134][T14878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.747510][T14878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.757952][T14878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.771057][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3204'. [ 306.784523][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3204'. [ 306.796014][T14892] nftables ruleset with unbound set [ 306.802280][T14892] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3204'. [ 306.817358][T14878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.827738][T14878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.861375][T14904] loop7: detected capacity change from 0 to 256 [ 306.870116][T14892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.884988][T14892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.901071][T14892] bond0 (unregistering): Released all slaves [ 306.948017][ T31] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.956335][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.978728][ T31] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.987078][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.996039][ T31] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.004297][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.018507][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.027094][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.203757][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 307.203772][ T29] audit: type=1326 audit(1755549188.215:25507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14967 comm="syz.4.3215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b6799ebe9 code=0x0 [ 307.256114][T14969] 9pnet: p9_errstr2errno: server reported unknown error [ 307.332291][T14961] netlink: 'syz.0.3213': attribute type 13 has an invalid length. [ 307.345541][T14961] gretap0: refused to change device tx_queue_len [ 307.352802][T14961] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.372302][T14961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.381155][T14961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.567199][ T29] audit: type=1326 audit(1755549188.575:25508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.591314][ T29] audit: type=1326 audit(1755549188.575:25509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.615443][ T29] audit: type=1326 audit(1755549188.585:25510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.639944][ T29] audit: type=1326 audit(1755549188.585:25511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.664123][ T29] audit: type=1326 audit(1755549188.585:25512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.688091][ T29] audit: type=1326 audit(1755549188.585:25513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.712330][ T29] audit: type=1326 audit(1755549188.675:25514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.736567][ T29] audit: type=1326 audit(1755549188.675:25515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 307.760801][ T29] audit: type=1326 audit(1755549188.695:25516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14977 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 308.075376][T15008] 9pnet_fd: Insufficient options for proto=fd [ 308.277010][T15039] FAULT_INJECTION: forcing a failure. [ 308.277010][T15039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.290258][T15039] CPU: 0 UID: 0 PID: 15039 Comm: syz.1.3240 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 308.290289][T15039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.290302][T15039] Call Trace: [ 308.290335][T15039] [ 308.290405][T15039] __dump_stack+0x1d/0x30 [ 308.290427][T15039] dump_stack_lvl+0xe8/0x140 [ 308.290501][T15039] dump_stack+0x15/0x1b [ 308.290576][T15039] should_fail_ex+0x265/0x280 [ 308.290598][T15039] should_fail+0xb/0x20 [ 308.290616][T15039] should_fail_usercopy+0x1a/0x20 [ 308.290638][T15039] strncpy_from_user+0x25/0x230 [ 308.290720][T15039] strncpy_from_user_nofault+0x68/0xf0 [ 308.290745][T15039] bpf_probe_read_compat_str+0xb4/0x130 [ 308.290780][T15039] bpf_prog_d73d3bb03d5a037f+0x3e/0x44 [ 308.290798][T15039] bpf_trace_run2+0x107/0x1c0 [ 308.290950][T15039] ? list_lru_destroy+0x16e/0x350 [ 308.290972][T15039] ? list_lru_destroy+0x16e/0x350 [ 308.291020][T15039] __traceiter_kfree+0x2e/0x50 [ 308.291042][T15039] ? list_lru_destroy+0x16e/0x350 [ 308.291061][T15039] kfree+0x27b/0x320 [ 308.291123][T15039] list_lru_destroy+0x16e/0x350 [ 308.291219][T15039] deactivate_locked_super+0x181/0x1c0 [ 308.291269][T15039] deactivate_super+0x97/0xa0 [ 308.291301][T15039] cleanup_mnt+0x269/0x2e0 [ 308.291330][T15039] __cleanup_mnt+0x19/0x20 [ 308.291408][T15039] task_work_run+0x12e/0x1a0 [ 308.291434][T15039] exit_to_user_mode_loop+0xe4/0x100 [ 308.291456][T15039] do_syscall_64+0x1d6/0x200 [ 308.291483][T15039] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.291566][T15039] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 308.291593][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.291614][T15039] RIP: 0033:0x7fc946c2ebe9 [ 308.291629][T15039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.291647][T15039] RSP: 002b:00007fc94568f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 308.291667][T15039] RAX: 0000000000000000 RBX: 00007fc946e55fa0 RCX: 00007fc946c2ebe9 [ 308.291729][T15039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 308.291741][T15039] RBP: 00007fc94568f090 R08: 0000000000000000 R09: 0000000000000000 [ 308.291754][T15039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.291766][T15039] R13: 00007fc946e56038 R14: 00007fc946e55fa0 R15: 00007ffcaa5dd3f8 [ 308.291792][T15039] [ 308.651800][T15053] loop6: detected capacity change from 0 to 256 [ 308.721094][T15068] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3248'. [ 308.759712][T15070] sch_fq: defrate 4294967295 ignored. [ 308.775211][T15073] loop6: detected capacity change from 0 to 1024 [ 308.782229][T15073] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 308.799200][T15073] loop6: detected capacity change from 0 to 1024 [ 308.806182][T15073] EXT4-fs: Ignoring removed orlov option [ 308.815453][T15073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.939798][T15092] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3250'. [ 309.249047][ T9551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.380045][T15120] loop6: detected capacity change from 0 to 256 [ 309.558842][T15152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3266'. [ 309.570495][T15152] netem: change failed [ 309.597655][T15155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.612440][T15155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.624788][T15159] FAULT_INJECTION: forcing a failure. [ 309.624788][T15159] name failslab, interval 1, probability 0, space 0, times 0 [ 309.638110][T15159] CPU: 1 UID: 0 PID: 15159 Comm: syz.0.3268 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 309.638219][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.638235][T15159] Call Trace: [ 309.638241][T15159] [ 309.638247][T15159] __dump_stack+0x1d/0x30 [ 309.638269][T15159] dump_stack_lvl+0xe8/0x140 [ 309.638308][T15159] dump_stack+0x15/0x1b [ 309.638328][T15159] should_fail_ex+0x265/0x280 [ 309.638352][T15159] should_failslab+0x8c/0xb0 [ 309.638376][T15159] kmem_cache_alloc_node_noprof+0x57/0x320 [ 309.638426][T15159] ? __alloc_skb+0x101/0x320 [ 309.638467][T15159] __alloc_skb+0x101/0x320 [ 309.638499][T15159] netlink_ack+0xfd/0x500 [ 309.638521][T15159] netlink_rcv_skb+0x192/0x220 [ 309.638556][T15159] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 309.638601][T15159] nfnetlink_rcv+0x16b/0x1690 [ 309.638651][T15159] ? nlmon_xmit+0x4f/0x60 [ 309.638683][T15159] ? consume_skb+0x49/0x150 [ 309.638762][T15159] ? nlmon_xmit+0x4f/0x60 [ 309.638800][T15159] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 309.638827][T15159] ? __dev_queue_xmit+0x1200/0x2000 [ 309.638847][T15159] ? __dev_queue_xmit+0x182/0x2000 [ 309.638896][T15159] ? ref_tracker_free+0x37d/0x3e0 [ 309.638929][T15159] ? __netlink_deliver_tap+0x4dc/0x500 [ 309.638956][T15159] netlink_unicast+0x5bd/0x690 [ 309.638989][T15159] netlink_sendmsg+0x58b/0x6b0 [ 309.639066][T15159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.639086][T15159] __sock_sendmsg+0x142/0x180 [ 309.639116][T15159] ____sys_sendmsg+0x31e/0x4e0 [ 309.639151][T15159] ___sys_sendmsg+0x17b/0x1d0 [ 309.639196][T15159] __x64_sys_sendmsg+0xd4/0x160 [ 309.639226][T15159] x64_sys_call+0x191e/0x2ff0 [ 309.639348][T15159] do_syscall_64+0xd2/0x200 [ 309.639439][T15159] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.639469][T15159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 309.639500][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.639586][T15159] RIP: 0033:0x7f9784eaebe9 [ 309.639602][T15159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.639668][T15159] RSP: 002b:00007f978390f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.639692][T15159] RAX: ffffffffffffffda RBX: 00007f97850d5fa0 RCX: 00007f9784eaebe9 [ 309.639708][T15159] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 309.639720][T15159] RBP: 00007f978390f090 R08: 0000000000000000 R09: 0000000000000000 [ 309.639817][T15159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.639903][T15159] R13: 00007f97850d6038 R14: 00007f97850d5fa0 R15: 00007ffe6a3657b8 [ 309.639925][T15159] [ 309.976681][T15166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15166 comm=syz.4.3271 [ 310.221099][T15190] FAULT_INJECTION: forcing a failure. [ 310.221099][T15190] name failslab, interval 1, probability 0, space 0, times 0 [ 310.234546][T15190] CPU: 0 UID: 0 PID: 15190 Comm: syz.1.3277 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 310.234618][T15190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.234634][T15190] Call Trace: [ 310.234641][T15190] [ 310.234649][T15190] __dump_stack+0x1d/0x30 [ 310.234674][T15190] dump_stack_lvl+0xe8/0x140 [ 310.234697][T15190] dump_stack+0x15/0x1b [ 310.234718][T15190] should_fail_ex+0x265/0x280 [ 310.234820][T15190] should_failslab+0x8c/0xb0 [ 310.234851][T15190] kmem_cache_alloc_node_noprof+0x57/0x320 [ 310.234888][T15190] ? __alloc_skb+0x101/0x320 [ 310.234929][T15190] __alloc_skb+0x101/0x320 [ 310.235009][T15190] ? audit_log_start+0x365/0x6c0 [ 310.235049][T15190] audit_log_start+0x380/0x6c0 [ 310.235086][T15190] ? htab_map_hash+0x15f/0x1d0 [ 310.235200][T15190] ? __account_obj_stock+0x211/0x350 [ 310.235232][T15190] audit_seccomp+0x48/0x100 [ 310.235263][T15190] ? __seccomp_filter+0x68c/0x10d0 [ 310.235328][T15190] __seccomp_filter+0x69d/0x10d0 [ 310.235357][T15190] ? __fput+0x555/0x650 [ 310.235394][T15190] ? kmem_cache_free+0x202/0x300 [ 310.235428][T15190] ? percpu_counter_add_batch+0xb6/0x130 [ 310.235465][T15190] __secure_computing+0x82/0x150 [ 310.235542][T15190] syscall_trace_enter+0xcf/0x1e0 [ 310.235574][T15190] do_syscall_64+0xac/0x200 [ 310.235659][T15190] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 310.235723][T15190] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 310.235844][T15190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.235865][T15190] RIP: 0033:0x7fc946c2d5fc [ 310.235880][T15190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.235897][T15190] RSP: 002b:00007fc94568f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.235917][T15190] RAX: ffffffffffffffda RBX: 00007fc946e55fa0 RCX: 00007fc946c2d5fc [ 310.235933][T15190] RDX: 000000000000000f RSI: 00007fc94568f0a0 RDI: 0000000000000008 [ 310.236063][T15190] RBP: 00007fc94568f090 R08: 0000000000000000 R09: 0000000000000000 [ 310.236075][T15190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.236087][T15190] R13: 00007fc946e56038 R14: 00007fc946e55fa0 R15: 00007ffcaa5dd3f8 [ 310.236106][T15190] [ 310.555526][T15199] 9pnet: p9_errstr2errno: server reported unknown error [ 310.589761][T15202] netlink: 'syz.6.3281': attribute type 1 has an invalid length. [ 310.618407][T15202] bond0: entered promiscuous mode [ 310.624250][T15202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.647490][T15202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.655322][T15202] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 310.665923][T15202] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 310.678681][T15202] bond0: (slave wireguard0): making interface the new active one [ 310.686619][T15202] wireguard0: entered promiscuous mode [ 310.694837][T15202] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 310.724526][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'. [ 310.751459][T15250] bridge0: port 3(batadv0) entered blocking state [ 310.758411][T15250] bridge0: port 3(batadv0) entered disabled state [ 310.765286][T15250] batadv0: entered allmulticast mode [ 310.771325][T15250] batadv0: entered promiscuous mode [ 310.806117][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3284'. [ 310.819276][T15250] batadv0 (unregistering): left allmulticast mode [ 310.825896][T15250] batadv0 (unregistering): left promiscuous mode [ 310.832468][T15250] bridge0: port 3(batadv0) entered disabled state [ 310.921629][T15264] FAULT_INJECTION: forcing a failure. [ 310.921629][T15264] name failslab, interval 1, probability 0, space 0, times 0 [ 310.934419][T15264] CPU: 0 UID: 0 PID: 15264 Comm: syz.0.3288 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 310.934455][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.934471][T15264] Call Trace: [ 310.934479][T15264] [ 310.934488][T15264] __dump_stack+0x1d/0x30 [ 310.934513][T15264] dump_stack_lvl+0xe8/0x140 [ 310.934598][T15264] dump_stack+0x15/0x1b [ 310.934619][T15264] should_fail_ex+0x265/0x280 [ 310.934645][T15264] should_failslab+0x8c/0xb0 [ 310.934766][T15264] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 310.934802][T15264] ? debugfs_alloc_inode+0x34/0x40 [ 310.934836][T15264] ? lookup_noperm+0xc9/0x180 [ 310.934874][T15264] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 310.934944][T15264] debugfs_alloc_inode+0x34/0x40 [ 310.935025][T15264] alloc_inode+0x3d/0x170 [ 310.935052][T15264] new_inode+0x1d/0xe0 [ 310.935074][T15264] __debugfs_create_file+0x109/0x330 [ 310.935103][T15264] debugfs_create_file_full+0x3f/0x60 [ 310.935134][T15264] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 310.935262][T15264] ref_tracker_dir_debugfs+0x100/0x1e0 [ 310.935359][T15264] alloc_netdev_mqs+0x1a2/0xa30 [ 310.935388][T15264] rtnl_create_link+0x239/0x710 [ 310.935418][T15264] rtnl_newlink_create+0x14c/0x620 [ 310.935456][T15264] ? security_capable+0x83/0x90 [ 310.935489][T15264] ? netlink_ns_capable+0x86/0xa0 [ 310.935530][T15264] rtnl_newlink+0xf29/0x12d0 [ 310.935658][T15264] ? strncpy_from_user+0x17d/0x230 [ 310.935695][T15264] ? fixup_exception+0x741/0xd50 [ 310.935720][T15264] ? __memcg_slab_free_hook+0x135/0x230 [ 310.935808][T15264] ? __rcu_read_unlock+0x4f/0x70 [ 310.935829][T15264] ? avc_has_perm_noaudit+0x1b1/0x200 [ 310.935859][T15264] ? cred_has_capability+0x210/0x280 [ 310.935957][T15264] ? selinux_capable+0x31/0x40 [ 310.935993][T15264] ? security_capable+0x83/0x90 [ 310.936019][T15264] ? ns_capable+0x7d/0xb0 [ 310.936047][T15264] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.936074][T15264] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 310.936111][T15264] netlink_rcv_skb+0x123/0x220 [ 310.936135][T15264] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.936222][T15264] rtnetlink_rcv+0x1c/0x30 [ 310.936250][T15264] netlink_unicast+0x5bd/0x690 [ 310.936299][T15264] netlink_sendmsg+0x58b/0x6b0 [ 310.936373][T15264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.936394][T15264] __sock_sendmsg+0x142/0x180 [ 310.936430][T15264] ____sys_sendmsg+0x31e/0x4e0 [ 310.936476][T15264] ___sys_sendmsg+0x17b/0x1d0 [ 310.936512][T15264] __x64_sys_sendmsg+0xd4/0x160 [ 310.936577][T15264] x64_sys_call+0x191e/0x2ff0 [ 310.936600][T15264] do_syscall_64+0xd2/0x200 [ 310.936703][T15264] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 310.936729][T15264] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 310.936754][T15264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.936781][T15264] RIP: 0033:0x7f9784eaebe9 [ 310.936800][T15264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.936897][T15264] RSP: 002b:00007f978390f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.936916][T15264] RAX: ffffffffffffffda RBX: 00007f97850d5fa0 RCX: 00007f9784eaebe9 [ 310.936943][T15264] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 310.937008][T15264] RBP: 00007f978390f090 R08: 0000000000000000 R09: 0000000000000000 [ 310.937020][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.937032][T15264] R13: 00007f97850d6038 R14: 00007f97850d5fa0 R15: 00007ffe6a3657b8 [ 310.937054][T15264] [ 310.937063][T15264] debugfs: out of free dentries, can not create file 'netdev@ffff88814484e550' [ 311.341876][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3290'. [ 311.487570][T15293] loop6: detected capacity change from 0 to 256 [ 311.516773][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'. [ 311.574902][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3311'. [ 311.627917][T15315] 9pnet: p9_errstr2errno: server reported unknown error [ 311.644585][T15319] 9pnet: p9_errstr2errno: server reported unknown error [ 312.123356][T15363] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 312.220600][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 312.220614][ T29] audit: type=1326 audit(1755549193.224:25974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.265841][ T29] audit: type=1326 audit(1755549193.264:25975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.290172][ T29] audit: type=1326 audit(1755549193.264:25976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.314096][ T29] audit: type=1326 audit(1755549193.264:25977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.338697][ T29] audit: type=1326 audit(1755549193.264:25978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.363436][ T29] audit: type=1326 audit(1755549193.264:25979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.387382][ T29] audit: type=1326 audit(1755549193.264:25980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.411367][ T29] audit: type=1326 audit(1755549193.264:25981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.435377][ T29] audit: type=1326 audit(1755549193.264:25982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.459592][ T29] audit: type=1326 audit(1755549193.264:25983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.6.3325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 312.518195][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3316'. [ 312.639235][T15382] lo speed is unknown, defaulting to 1000 [ 312.850217][T15427] netlink: 'syz.7.3329': attribute type 1 has an invalid length. [ 312.869307][T15427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.884497][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3329'. [ 312.896692][T15427] bond1 (unregistering): Released all slaves [ 312.978619][T15500] loop7: detected capacity change from 0 to 512 [ 312.992363][T15500] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 313.005588][T15500] EXT4-fs (loop7): 1 orphan inode deleted [ 313.011474][T15500] EXT4-fs (loop7): 1 truncate cleaned up [ 313.022538][T15502] 9pnet: p9_errstr2errno: server reported unknown error [ 313.030666][T15500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.049523][T15500] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 313.065734][T15500] EXT4-fs (loop7): Remounting filesystem read-only [ 313.072665][T15500] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 313.105640][T10297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.122959][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3333'. [ 313.325572][T15523] 9pnet: Could not find request transport: fd0x0000000000000003 [ 313.451074][T15537] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 313.458158][T15537] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 313.466005][T15537] vhci_hcd vhci_hcd.0: Device attached [ 313.473807][T15538] vhci_hcd: connection closed [ 313.474430][ T60] vhci_hcd: stop threads [ 313.483763][ T60] vhci_hcd: release socket [ 313.488517][ T60] vhci_hcd: disconnect device [ 313.594006][T15544] loop7: detected capacity change from 0 to 512 [ 313.601470][T15544] EXT4-fs: Ignoring removed oldalloc option [ 313.613843][T15544] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.3343: Parent and EA inode have the same ino 15 [ 313.628564][T15544] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.3343: Parent and EA inode have the same ino 15 [ 313.643401][T15544] EXT4-fs (loop7): 1 orphan inode deleted [ 313.651020][T15544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.831753][T10297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.864733][T15579] 9pnet: Could not find request transport: fd0x0000000000000003 [ 313.878367][T15583] 9pnet: p9_errstr2errno: server reported unknown error [ 313.938873][T15592] 9pnet: Could not find request transport: fd0x0000000000000003 [ 313.960232][T15598] 9pnet: p9_errstr2errno: server reported unknown error [ 314.031717][T15594] siw: device registration error -23 [ 314.213593][T15620] 9pnet: p9_errstr2errno: server reported unknown error [ 314.358071][T15637] __nla_validate_parse: 2 callbacks suppressed [ 314.358093][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3362'. [ 314.364206][T15641] 9pnet_fd: Insufficient options for proto=fd [ 314.621110][T15652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.629889][T15652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.642336][T15652] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3368'. [ 314.688543][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 314.858609][T15676] 9pnet_fd: Insufficient options for proto=fd [ 315.017731][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3382'. [ 315.026870][T15701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.035887][T15701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.047240][T15701] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3381'. [ 315.081108][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 315.090476][T15706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.098075][T15706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.105847][T15706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.113374][T15706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.438963][T15746] 9pnet: p9_errstr2errno: server reported unknown error [ 316.142129][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3395'. [ 316.295973][T15769] 9pnet: p9_errstr2errno: server reported unknown error [ 316.543800][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3407'. [ 316.660982][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'. [ 317.367431][T15849] netlink: 'syz.4.3426': attribute type 1 has an invalid length. [ 317.391495][T15849] bond1: entered promiscuous mode [ 317.397988][T15849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.422518][T15849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.429861][T15849] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 317.440604][T15849] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 317.454076][T15849] bond1: (slave wireguard0): making interface the new active one [ 317.462040][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 317.462057][ T29] audit: type=1326 audit(1755549198.463:26404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9784eaebe9 code=0x0 [ 317.468601][T15849] wireguard0: entered promiscuous mode [ 317.499751][T15849] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 317.516528][T15893] 9pnet: p9_errstr2errno: server reported unknown error [ 317.550948][T15896] block device autoloading is deprecated and will be removed. [ 317.594516][T15908] 9pnet_fd: Insufficient options for proto=fd [ 317.762012][ T29] audit: type=1326 audit(1755549198.773:26405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15934 comm="syz.4.3446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b6799ebe9 code=0x0 [ 317.800831][ T29] audit: type=1326 audit(1755549198.803:26406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 317.824707][ T29] audit: type=1326 audit(1755549198.803:26407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 317.849029][ T29] audit: type=1326 audit(1755549198.803:26408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 317.872897][ T29] audit: type=1326 audit(1755549198.803:26409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 317.897040][ T29] audit: type=1326 audit(1755549198.803:26410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 317.920948][ T29] audit: type=1326 audit(1755549198.803:26411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 317.946174][ T29] audit: type=1326 audit(1755549198.803:26412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 317.970273][ T29] audit: type=1326 audit(1755549198.803:26413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15ddadebe9 code=0x7ffc0000 [ 318.126239][T15966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'. [ 318.176207][T15980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15980 comm=syz.7.3460 [ 318.582472][T16025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.590261][T16025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.626818][T16025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.634706][T16025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.259184][T16124] loop6: detected capacity change from 0 to 4096 [ 319.280239][T16124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.382553][ T9551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.514686][T16161] __nla_validate_parse: 8 callbacks suppressed [ 319.514703][T16161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3520'. [ 319.608494][T16171] FAULT_INJECTION: forcing a failure. [ 319.608494][T16171] name failslab, interval 1, probability 0, space 0, times 0 [ 319.621594][T16171] CPU: 1 UID: 0 PID: 16171 Comm: syz.4.3524 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 319.621627][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.621714][T16171] Call Trace: [ 319.621722][T16171] [ 319.621747][T16171] __dump_stack+0x1d/0x30 [ 319.621772][T16171] dump_stack_lvl+0xe8/0x140 [ 319.621839][T16171] dump_stack+0x15/0x1b [ 319.621857][T16171] should_fail_ex+0x265/0x280 [ 319.621911][T16171] should_failslab+0x8c/0xb0 [ 319.621941][T16171] kmem_cache_alloc_noprof+0x50/0x310 [ 319.621967][T16171] ? audit_log_start+0x365/0x6c0 [ 319.622028][T16171] audit_log_start+0x365/0x6c0 [ 319.622119][T16171] audit_seccomp+0x48/0x100 [ 319.622149][T16171] ? __seccomp_filter+0x68c/0x10d0 [ 319.622175][T16171] __seccomp_filter+0x69d/0x10d0 [ 319.622203][T16171] ? __list_add_valid_or_report+0x38/0xe0 [ 319.622290][T16171] ? _raw_spin_unlock+0x26/0x50 [ 319.622332][T16171] __secure_computing+0x82/0x150 [ 319.622354][T16171] syscall_trace_enter+0xcf/0x1e0 [ 319.622460][T16171] do_syscall_64+0xac/0x200 [ 319.622487][T16171] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 319.622511][T16171] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.622536][T16171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.622606][T16171] RIP: 0033:0x7f4b6799d5fc [ 319.622623][T16171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.622649][T16171] RSP: 002b:00007f4b663ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.622669][T16171] RAX: ffffffffffffffda RBX: 00007f4b67bc5fa0 RCX: 00007f4b6799d5fc [ 319.622682][T16171] RDX: 000000000000000f RSI: 00007f4b663ff0a0 RDI: 0000000000000008 [ 319.622694][T16171] RBP: 00007f4b663ff090 R08: 0000000000000000 R09: 0000000000000000 [ 319.622783][T16171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.622796][T16171] R13: 00007f4b67bc6038 R14: 00007f4b67bc5fa0 R15: 00007ffdb13040e8 [ 319.622842][T16171] [ 320.015004][T16209] netlink: 'syz.6.3536': attribute type 7 has an invalid length. [ 320.022816][T16209] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3536'. [ 320.040726][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.052992][T16209] serio: Serial port ptm0 [ 320.058737][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.071473][T16213] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3538'. [ 320.211147][T16248] netlink: 'syz.6.3549': attribute type 3 has an invalid length. [ 321.065879][T16304] FAULT_INJECTION: forcing a failure. [ 321.065879][T16304] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.079283][T16304] CPU: 1 UID: 0 PID: 16304 Comm: syz.0.3566 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 321.079324][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.079343][T16304] Call Trace: [ 321.079415][T16304] [ 321.079427][T16304] __dump_stack+0x1d/0x30 [ 321.079524][T16304] dump_stack_lvl+0xe8/0x140 [ 321.079552][T16304] dump_stack+0x15/0x1b [ 321.079576][T16304] should_fail_ex+0x265/0x280 [ 321.079606][T16304] should_fail_alloc_page+0xf2/0x100 [ 321.079704][T16304] __alloc_frozen_pages_noprof+0xff/0x360 [ 321.079756][T16304] alloc_pages_mpol+0xb3/0x250 [ 321.079803][T16304] vma_alloc_folio_noprof+0x1aa/0x300 [ 321.079874][T16304] handle_mm_fault+0xec2/0x2c20 [ 321.079983][T16304] do_user_addr_fault+0x636/0x1090 [ 321.080068][T16304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.080107][T16304] exc_page_fault+0x62/0xa0 [ 321.080136][T16304] asm_exc_page_fault+0x26/0x30 [ 321.080164][T16304] RIP: 0033:0x7f9784e5c20b [ 321.080242][T16304] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 321.080269][T16304] RSP: 002b:00007f978390ce10 EFLAGS: 00010246 [ 321.080291][T16304] RAX: 00007f978390ef30 RBX: 00007f97850a7640 RCX: 0000000000000000 [ 321.080372][T16304] RDX: 00007f978390ef78 RSI: 00007f9784f0eca8 RDI: 00007f978390ce30 [ 321.080390][T16304] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 321.080408][T16304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.080426][T16304] R13: 00007f97850d6038 R14: 00007f97850d5fa0 R15: 00007ffe6a3657b8 [ 321.080454][T16304] [ 321.080468][T16304] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 321.793293][T16346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.822418][T16346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.844077][T16346] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3585'. [ 322.526468][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 322.526483][ T29] audit: type=1326 audit(1755549203.543:26726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.569747][ T29] audit: type=1326 audit(1755549203.543:26727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.594517][ T29] audit: type=1326 audit(1755549203.543:26728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.619459][ T29] audit: type=1326 audit(1755549203.543:26729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.643587][ T29] audit: type=1326 audit(1755549203.543:26730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.668015][ T29] audit: type=1326 audit(1755549203.573:26731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.692039][ T29] audit: type=1326 audit(1755549203.573:26732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.715741][ T29] audit: type=1326 audit(1755549203.573:26733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.739555][ T29] audit: type=1326 audit(1755549203.573:26734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 322.763256][ T29] audit: type=1326 audit(1755549203.573:26735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.0.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9784eaebe9 code=0x7ffc0000 [ 323.365831][T16490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.374726][T16490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.399365][T16490] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3630'. [ 323.641098][T16507] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3634'. [ 323.915804][T16532] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 323.942595][T16534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3646'. [ 324.371275][T16568] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3657'. [ 324.973361][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3667'. [ 325.123536][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.145574][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.170184][T16627] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3679'. [ 325.235150][T16635] 9pnet: p9_errstr2errno: server reported unknown error [ 325.371463][T16643] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3683'. [ 326.299604][T16754] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3724'. [ 326.391562][T16773] 9pnet_fd: Insufficient options for proto=fd [ 326.398804][T16773] 9pnet_fd: Insufficient options for proto=fd [ 326.469195][T16788] FAULT_INJECTION: forcing a failure. [ 326.469195][T16788] name failslab, interval 1, probability 0, space 0, times 0 [ 326.482342][T16788] CPU: 1 UID: 0 PID: 16788 Comm: syz.0.3737 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 326.482418][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.482432][T16788] Call Trace: [ 326.482440][T16788] [ 326.482449][T16788] __dump_stack+0x1d/0x30 [ 326.482473][T16788] dump_stack_lvl+0xe8/0x140 [ 326.482496][T16788] dump_stack+0x15/0x1b [ 326.482513][T16788] should_fail_ex+0x265/0x280 [ 326.482548][T16788] should_failslab+0x8c/0xb0 [ 326.482575][T16788] kmem_cache_alloc_node_noprof+0x57/0x320 [ 326.482620][T16788] ? __alloc_skb+0x101/0x320 [ 326.482661][T16788] ? avc_has_perm+0xf7/0x180 [ 326.482687][T16788] __alloc_skb+0x101/0x320 [ 326.482722][T16788] sock_wmalloc+0x7e/0xc0 [ 326.482752][T16788] pppol2tp_sendmsg+0xfb/0x440 [ 326.482846][T16788] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 326.482872][T16788] __sock_sendmsg+0x142/0x180 [ 326.482901][T16788] sock_write_iter+0x165/0x1b0 [ 326.482938][T16788] do_iter_readv_writev+0x49c/0x540 [ 326.483003][T16788] vfs_writev+0x2df/0x8b0 [ 326.483121][T16788] do_writev+0xe7/0x210 [ 326.483149][T16788] __x64_sys_writev+0x45/0x50 [ 326.483173][T16788] x64_sys_call+0x1e9a/0x2ff0 [ 326.483193][T16788] do_syscall_64+0xd2/0x200 [ 326.483265][T16788] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.483294][T16788] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.483369][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.483422][T16788] RIP: 0033:0x7f9784eaebe9 [ 326.483441][T16788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.483502][T16788] RSP: 002b:00007f978390f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 326.483522][T16788] RAX: ffffffffffffffda RBX: 00007f97850d5fa0 RCX: 00007f9784eaebe9 [ 326.483534][T16788] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 326.483545][T16788] RBP: 00007f978390f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.483558][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.483642][T16788] R13: 00007f97850d6038 R14: 00007f97850d5fa0 R15: 00007ffe6a3657b8 [ 326.483687][T16788] [ 326.750906][T16794] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3739'. [ 327.661604][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 327.661619][ T29] audit: type=1326 audit(1755549208.672:26956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.692098][ T29] audit: type=1326 audit(1755549208.672:26957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.716285][ T29] audit: type=1326 audit(1755549208.672:26958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.740467][ T29] audit: type=1326 audit(1755549208.672:26959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.764805][ T29] audit: type=1326 audit(1755549208.672:26960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.788655][ T29] audit: type=1326 audit(1755549208.672:26961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.813058][ T29] audit: type=1326 audit(1755549208.672:26962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.830232][T16881] loop7: detected capacity change from 0 to 1024 [ 327.837321][ T29] audit: type=1326 audit(1755549208.672:26963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.867781][ T29] audit: type=1326 audit(1755549208.672:26964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.891758][ T29] audit: type=1326 audit(1755549208.672:26965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.7.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329b1eebe9 code=0x7ffc0000 [ 327.924043][T16881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.951050][T16887] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3770'. [ 327.978680][T10297] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.053269][T16906] loop7: detected capacity change from 0 to 256 [ 328.107792][T16912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3774'. [ 328.645531][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'. [ 328.867206][T17020] loop6: detected capacity change from 0 to 256 [ 328.897393][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3813'. [ 328.920615][T17021] IPVS: Error joining to the multicast group [ 329.265874][T17044] tun0: tun_chr_ioctl cmd 1074025677 [ 329.285093][T17044] tun0: linktype set to 774 [ 329.399212][T17076] FAULT_INJECTION: forcing a failure. [ 329.399212][T17076] name failslab, interval 1, probability 0, space 0, times 0 [ 329.412491][T17076] CPU: 0 UID: 0 PID: 17076 Comm: syz.1.3832 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 329.412519][T17076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.412531][T17076] Call Trace: [ 329.412538][T17076] [ 329.412547][T17076] __dump_stack+0x1d/0x30 [ 329.412641][T17076] dump_stack_lvl+0xe8/0x140 [ 329.412665][T17076] dump_stack+0x15/0x1b [ 329.412685][T17076] should_fail_ex+0x265/0x280 [ 329.412710][T17076] ? alloc_pipe_info+0xae/0x350 [ 329.412803][T17076] should_failslab+0x8c/0xb0 [ 329.412897][T17076] __kmalloc_cache_noprof+0x4c/0x320 [ 329.412936][T17076] alloc_pipe_info+0xae/0x350 [ 329.412966][T17076] splice_direct_to_actor+0x592/0x680 [ 329.413060][T17076] ? kstrtouint_from_user+0x9f/0xf0 [ 329.413188][T17076] ? __pfx_direct_splice_actor+0x10/0x10 [ 329.413213][T17076] ? __rcu_read_unlock+0x4f/0x70 [ 329.413240][T17076] ? get_pid_task+0x96/0xd0 [ 329.413335][T17076] ? avc_policy_seqno+0x15/0x30 [ 329.413364][T17076] ? selinux_file_permission+0x1e4/0x320 [ 329.413391][T17076] do_splice_direct+0xda/0x150 [ 329.413469][T17076] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 329.413501][T17076] do_sendfile+0x380/0x650 [ 329.413561][T17076] __x64_sys_sendfile64+0x105/0x150 [ 329.413598][T17076] x64_sys_call+0x2bb0/0x2ff0 [ 329.413624][T17076] do_syscall_64+0xd2/0x200 [ 329.413656][T17076] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.413735][T17076] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 329.413829][T17076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.413852][T17076] RIP: 0033:0x7fc946c2ebe9 [ 329.413868][T17076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.413947][T17076] RSP: 002b:00007fc94568f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 329.413994][T17076] RAX: ffffffffffffffda RBX: 00007fc946e55fa0 RCX: 00007fc946c2ebe9 [ 329.414006][T17076] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 329.414019][T17076] RBP: 00007fc94568f090 R08: 0000000000000000 R09: 0000000000000000 [ 329.414032][T17076] R10: 00000000e0000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.414044][T17076] R13: 00007fc946e56038 R14: 00007fc946e55fa0 R15: 00007ffcaa5dd3f8 [ 329.414064][T17076] [ 329.682286][T17084] 9pnet_fd: Insufficient options for proto=fd [ 329.689782][T17084] 9pnet_fd: Insufficient options for proto=fd [ 329.756768][T17095] 9pnet_fd: Insufficient options for proto=fd [ 329.840477][T17091] lo speed is unknown, defaulting to 1000 [ 329.857286][T17091] lo speed is unknown, defaulting to 1000 [ 329.875174][T17091] lo speed is unknown, defaulting to 1000 [ 329.906938][T17114] 9pnet: p9_errstr2errno: server reported unknown error [ 329.992946][T17091] infiniband syz: set active [ 329.998003][T17091] infiniband syz: added lo [ 330.002665][ T3381] lo speed is unknown, defaulting to 1000 [ 330.066329][T17091] RDS/IB: syz: added [ 330.071274][T17091] smc: adding ib device syz with port count 1 [ 330.084695][T17091] smc: ib device syz port 1 has pnetid [ 330.092334][ T3381] lo speed is unknown, defaulting to 1000 [ 330.102345][T17091] lo speed is unknown, defaulting to 1000 [ 330.143564][T17091] lo speed is unknown, defaulting to 1000 [ 330.151558][T17130] 9pnet_fd: Insufficient options for proto=fd [ 330.161095][T17132] 9pnet: p9_errstr2errno: server reported unknown error [ 330.170765][T17130] 9pnet_fd: Insufficient options for proto=fd [ 330.188515][T17091] lo speed is unknown, defaulting to 1000 [ 330.235758][T17091] lo speed is unknown, defaulting to 1000 [ 330.273075][T17153] FAULT_INJECTION: forcing a failure. [ 330.273075][T17153] name failslab, interval 1, probability 0, space 0, times 0 [ 330.286181][T17153] CPU: 0 UID: 0 PID: 17153 Comm: syz.1.3855 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 330.286241][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.286258][T17153] Call Trace: [ 330.286267][T17153] [ 330.286278][T17153] __dump_stack+0x1d/0x30 [ 330.286376][T17153] dump_stack_lvl+0xe8/0x140 [ 330.286395][T17153] dump_stack+0x15/0x1b [ 330.286485][T17153] should_fail_ex+0x265/0x280 [ 330.286506][T17153] should_failslab+0x8c/0xb0 [ 330.286535][T17153] kmem_cache_alloc_node_noprof+0x57/0x320 [ 330.286593][T17153] ? __alloc_skb+0x101/0x320 [ 330.286696][T17153] ? avc_has_perm+0xf7/0x180 [ 330.286723][T17153] __alloc_skb+0x101/0x320 [ 330.286764][T17153] sock_wmalloc+0x7e/0xc0 [ 330.286792][T17153] pppol2tp_sendmsg+0xfb/0x440 [ 330.286885][T17153] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 330.286982][T17153] __sock_sendmsg+0x142/0x180 [ 330.287018][T17153] sock_write_iter+0x165/0x1b0 [ 330.287080][T17153] do_iter_readv_writev+0x49c/0x540 [ 330.287200][T17153] vfs_writev+0x2df/0x8b0 [ 330.287243][T17153] do_writev+0xe7/0x210 [ 330.287315][T17153] __x64_sys_writev+0x45/0x50 [ 330.287346][T17153] x64_sys_call+0x1e9a/0x2ff0 [ 330.287378][T17153] do_syscall_64+0xd2/0x200 [ 330.287409][T17153] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.287432][T17153] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 330.287526][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.287602][T17153] RIP: 0033:0x7fc946c2ebe9 [ 330.287618][T17153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.287636][T17153] RSP: 002b:00007fc94568f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 330.287657][T17153] RAX: ffffffffffffffda RBX: 00007fc946e55fa0 RCX: 00007fc946c2ebe9 [ 330.287673][T17153] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000006 [ 330.287686][T17153] RBP: 00007fc94568f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.287712][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.287724][T17153] R13: 00007fc946e56038 R14: 00007fc946e55fa0 R15: 00007ffcaa5dd3f8 [ 330.287744][T17153] [ 330.307264][T17091] lo speed is unknown, defaulting to 1000 [ 330.551700][T17091] lo speed is unknown, defaulting to 1000 [ 330.586092][T17091] lo speed is unknown, defaulting to 1000 [ 330.621820][T17091] lo speed is unknown, defaulting to 1000 [ 330.657477][T17091] lo speed is unknown, defaulting to 1000 [ 330.709285][T17091] lo speed is unknown, defaulting to 1000 [ 330.889886][T17225] 9pnet: p9_errstr2errno: server reported unknown error [ 331.070082][T17251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=17251 comm=syz.4.3886 [ 331.141259][T17258] loop6: detected capacity change from 0 to 512 [ 331.157876][T17258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.171156][T17258] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.203473][T17263] 9pnet: p9_errstr2errno: server reported unknown error [ 331.468124][ T9551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.545949][ T3381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3381 comm=kworker/1:3 [ 331.695904][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 331.829857][T17329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.839528][T17329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.850884][T17329] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3910'. [ 332.044055][T17355] 9pnet: p9_errstr2errno: server reported unknown error [ 332.406831][T17411] FAULT_INJECTION: forcing a failure. [ 332.406831][T17411] name failslab, interval 1, probability 0, space 0, times 0 [ 332.419838][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.4.3935 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 332.419960][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.419973][T17411] Call Trace: [ 332.419979][T17411] [ 332.419986][T17411] __dump_stack+0x1d/0x30 [ 332.420006][T17411] dump_stack_lvl+0xe8/0x140 [ 332.420025][T17411] dump_stack+0x15/0x1b [ 332.420043][T17411] should_fail_ex+0x265/0x280 [ 332.420111][T17411] should_failslab+0x8c/0xb0 [ 332.420196][T17411] kmem_cache_alloc_noprof+0x50/0x310 [ 332.420221][T17411] ? audit_log_start+0x365/0x6c0 [ 332.420316][T17411] ? search_extable+0x53/0x80 [ 332.420345][T17411] audit_log_start+0x365/0x6c0 [ 332.420430][T17411] ? lock_mm_and_find_vma+0x112/0x400 [ 332.420517][T17411] audit_seccomp+0x48/0x100 [ 332.420574][T17411] ? __seccomp_filter+0x68c/0x10d0 [ 332.420594][T17411] __seccomp_filter+0x69d/0x10d0 [ 332.420614][T17411] ? __rcu_read_unlock+0x4f/0x70 [ 332.420654][T17411] ? bpf_trace_run3+0x12c/0x1d0 [ 332.420675][T17411] ? getname_flags+0x2be/0x3b0 [ 332.420705][T17411] __secure_computing+0x82/0x150 [ 332.420725][T17411] syscall_trace_enter+0xcf/0x1e0 [ 332.420747][T17411] do_syscall_64+0xac/0x200 [ 332.420843][T17411] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.420873][T17411] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.420933][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.420952][T17411] RIP: 0033:0x7f4b6799d5fc [ 332.420967][T17411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.420983][T17411] RSP: 002b:00007f4b663ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.421077][T17411] RAX: ffffffffffffffda RBX: 00007f4b67bc5fa0 RCX: 00007f4b6799d5fc [ 332.421088][T17411] RDX: 000000000000000f RSI: 00007f4b663ff0a0 RDI: 0000000000000006 [ 332.421099][T17411] RBP: 00007f4b663ff090 R08: 0000000000000000 R09: 0000000000000000 [ 332.421110][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.421121][T17411] R13: 00007f4b67bc6038 R14: 00007f4b67bc5fa0 R15: 00007ffdb13040e8 [ 332.421197][T17411] [ 332.877497][T17448] FAULT_INJECTION: forcing a failure. [ 332.877497][T17448] name failslab, interval 1, probability 0, space 0, times 0 [ 332.890430][T17448] CPU: 1 UID: 0 PID: 17448 Comm: syz.6.3949 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 332.890459][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.890509][T17448] Call Trace: [ 332.890516][T17448] [ 332.890525][T17448] __dump_stack+0x1d/0x30 [ 332.890561][T17448] dump_stack_lvl+0xe8/0x140 [ 332.890588][T17448] dump_stack+0x15/0x1b [ 332.890610][T17448] should_fail_ex+0x265/0x280 [ 332.890638][T17448] should_failslab+0x8c/0xb0 [ 332.890684][T17448] __kmalloc_noprof+0xa5/0x3e0 [ 332.890761][T17448] ? sock_kmalloc+0x85/0xc0 [ 332.890783][T17448] ? iovec_from_user+0x5e/0x210 [ 332.890825][T17448] sock_kmalloc+0x85/0xc0 [ 332.890853][T17448] ____sys_sendmsg+0xf8/0x4e0 [ 332.890887][T17448] ___sys_sendmsg+0x17b/0x1d0 [ 332.890976][T17448] __x64_sys_sendmsg+0xd4/0x160 [ 332.891013][T17448] x64_sys_call+0x191e/0x2ff0 [ 332.891063][T17448] do_syscall_64+0xd2/0x200 [ 332.891099][T17448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.891133][T17448] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.891203][T17448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.891231][T17448] RIP: 0033:0x7f15ddadebe9 [ 332.891247][T17448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.891265][T17448] RSP: 002b:00007f15dc547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.891302][T17448] RAX: ffffffffffffffda RBX: 00007f15ddd05fa0 RCX: 00007f15ddadebe9 [ 332.891316][T17448] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 332.891349][T17448] RBP: 00007f15dc547090 R08: 0000000000000000 R09: 0000000000000000 [ 332.891397][T17448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.891414][T17448] R13: 00007f15ddd06038 R14: 00007f15ddd05fa0 R15: 00007ffd7c2ab2f8 [ 332.891440][T17448] [ 333.114998][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3952'. [ 333.125147][T17455] sd 0:0:1:0: device reset [ 333.199349][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 333.199368][ T29] audit: type=1326 audit(1755549214.212:27270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.6.3956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15ddadebe9 code=0x0 [ 333.281282][T17474] 9pnet: p9_errstr2errno: server reported unknown error [ 333.384832][ T29] audit: type=1326 audit(1755549214.391:27271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 333.424260][ T29] audit: type=1326 audit(1755549214.391:27272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 333.448224][ T29] audit: type=1326 audit(1755549214.391:27273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 333.472447][ T29] audit: type=1326 audit(1755549214.391:27274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 333.496285][ T29] audit: type=1326 audit(1755549214.391:27275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 333.520071][ T29] audit: type=1326 audit(1755549214.391:27276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 333.543840][ T29] audit: type=1326 audit(1755549214.391:27277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 333.568257][ T29] audit: type=1326 audit(1755549214.391:27278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17484 comm="syz.4.3960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 334.138141][ T29] audit: type=1326 audit(1755549215.141:27279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17491 comm="syz.4.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6799ebe9 code=0x7ffc0000 [ 334.187862][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3968'. [ 334.207888][T17516] sd 0:0:1:0: device reset [ 334.542774][T17546] 9pnet: p9_errstr2errno: server reported unknown error [ 334.742786][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3981'. [ 334.782846][T17555] sd 0:0:1:0: device reset [ 334.954170][T17578] tipc: Started in network mode [ 334.959177][T17578] tipc: Node identity a2c6e9ec4705, cluster identity 4711 [ 334.966774][T17578] tipc: Enabled bearer , priority 0 [ 334.977413][T17583] FAULT_INJECTION: forcing a failure. [ 334.977413][T17583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.990904][T17583] CPU: 1 UID: 0 PID: 17583 Comm: syz.1.3990 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 334.990941][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.990958][T17583] Call Trace: [ 334.991013][T17583] [ 334.991022][T17583] __dump_stack+0x1d/0x30 [ 334.991118][T17583] dump_stack_lvl+0xe8/0x140 [ 334.991138][T17583] dump_stack+0x15/0x1b [ 334.991153][T17583] should_fail_ex+0x265/0x280 [ 334.991177][T17583] should_fail+0xb/0x20 [ 334.991286][T17583] should_fail_usercopy+0x1a/0x20 [ 334.991312][T17583] _copy_from_user+0x1c/0xb0 [ 334.991380][T17583] ___sys_sendmsg+0xc1/0x1d0 [ 334.991452][T17583] __x64_sys_sendmsg+0xd4/0x160 [ 334.991485][T17583] x64_sys_call+0x191e/0x2ff0 [ 334.991512][T17583] do_syscall_64+0xd2/0x200 [ 334.991547][T17583] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.991609][T17583] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.991665][T17583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.991692][T17583] RIP: 0033:0x7fc946c2ebe9 [ 334.991711][T17583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.991729][T17583] RSP: 002b:00007fc94568f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.991749][T17583] RAX: ffffffffffffffda RBX: 00007fc946e55fa0 RCX: 00007fc946c2ebe9 [ 334.991842][T17583] RDX: 0000000000000840 RSI: 0000200000000280 RDI: 0000000000000003 [ 334.991854][T17583] RBP: 00007fc94568f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.991866][T17583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.991877][T17583] R13: 00007fc946e56038 R14: 00007fc946e55fa0 R15: 00007ffcaa5dd3f8 [ 334.991896][T17583] [ 334.992169][T17577] tipc: Resetting bearer [ 335.106424][T17597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.120262][T17592] netlink: 'syz.7.3994': attribute type 1 has an invalid length. [ 335.124448][T17597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.207152][T17597] netlink: 268 bytes leftover after parsing attributes in process `syz.4.3996'. [ 335.238891][T17577] tipc: Disabling bearer [ 335.248461][T17592] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 335.306012][T17616] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4001'. [ 335.414028][T17629] 9pnet_fd: Insufficient options for proto=fd [ 335.428318][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4004'. [ 335.458212][T17629] bond1 (unregistering): Released all slaves [ 335.465430][ T60] ================================================================== [ 335.473988][ T60] BUG: KCSAN: data-race in copy_process / free_pid [ 335.480605][ T60] [ 335.483030][ T60] read-write to 0xffffffff8685fc48 of 4 bytes by task 17671 on cpu 1: [ 335.491470][ T60] free_pid+0x77/0x180 [ 335.495817][ T60] free_pids+0x7a/0xb0 [ 335.499901][ T60] release_task+0x9a9/0xb60 [ 335.504510][ T60] do_exit+0xd81/0x15c0 [ 335.508689][ T60] call_usermodehelper_exec_async+0x247/0x250 [ 335.514889][ T60] ret_from_fork+0xda/0x150 [ 335.519433][ T60] ret_from_fork_asm+0x1a/0x30 [ 335.524483][ T60] [ 335.526809][ T60] read to 0xffffffff8685fc48 of 4 bytes by task 60 on cpu 0: [ 335.534313][ T60] copy_process+0x14a6/0x2000 [ 335.539002][ T60] kernel_clone+0x16c/0x5c0 [ 335.543519][ T60] user_mode_thread+0x7d/0xb0 [ 335.548215][ T60] call_usermodehelper_exec_work+0x41/0x160 [ 335.554148][ T60] process_scheduled_works+0x4cb/0x9d0 [ 335.559802][ T60] worker_thread+0x582/0x770 [ 335.564447][ T60] kthread+0x489/0x510 [ 335.568525][ T60] ret_from_fork+0xda/0x150 [ 335.573049][ T60] ret_from_fork_asm+0x1a/0x30 [ 335.577857][ T60] [ 335.580192][ T60] value changed: 0x80000122 -> 0x80000121 [ 335.586029][ T60] [ 335.588451][ T60] Reported by Kernel Concurrency Sanitizer on: [ 335.595040][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u8:5 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 335.606014][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.616613][ T60] Workqueue: events_unbound call_usermodehelper_exec_work [ 335.623750][ T60] ================================================================== [ 335.641668][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4004'.