last executing test programs: 7m8.73730678s ago: executing program 32 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x189a02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) pwritev2(r4, &(0x7f0000000240), 0x0, 0x50000, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x80440) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m6.0398122s ago: executing program 33 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b070000080000000c000000ffffffff76122fd89bdb8df5cd01000000086b1dacd077e27c4d8fc4cdb043b9858a67a8b0ddc8887f80bbedbd7604baeeb577ee729a9cb489b001debc759c316236c8f59ed261cf0b5d60368618d97192d665", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m59.722106616s ago: executing program 34 (id=86): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb0800044000"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) uname(&(0x7f0000000000)=""/214) dup(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r7, 0x0, 0x800000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) getrusage(0xffffffffffffffff, &(0x7f0000000f00)) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="9c92cf4904ac19f00000005d0000000091f030c206bffe0f6700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r4, @ANYRES32=r8], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m39.317502789s ago: executing program 35 (id=152): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12, 0x0, 0xffcd}}) r5 = socket(0x10, 0x3, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000001c0)={0x3, 0x3, 0x1}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d80000002600", @ANYRES64], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 5m54.504437703s ago: executing program 36 (id=261): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0x8, 0x6}, {0x9, 0xfffffffa}], 0xee00}, 0x18, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x58, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121680, 0x20) 5m39.514845146s ago: executing program 37 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m56.360789089s ago: executing program 38 (id=444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x1000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001200130626bd7000fddbdf2506ff01fc4e244e2404000000faffffff060000000900000007004000080000005e00000007000000", @ANYRES32=0x0, @ANYBLOB="010000000400000001000000058000000800010002"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x80, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf254, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x800004, 0x0, 0x800001ff, 0x8000, 0x3ff, 0x4, 0xd, 0x3, 0xba55, 0xffc, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x43, 0x0, 0x5, 0x75, 0x1, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x2, 0x981, 0x4, 0x100, 0x3ff, 0x3, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x0, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x100, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x400, 0x3, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x8, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0x6, 0x6, 0x8, 0x956, 0xffffffff, 0x6, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0x0, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x83ab0f28, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x7, 0x80, 0x2, 0x5, 0x8800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x6, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000000740)=[{&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/21, 0x15}], 0x7) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) socket$nl_route(0x10, 0x3, 0x0) 3m57.005896897s ago: executing program 39 (id=674): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000006800000000000000090000000000000000ad7ec5eab7420dba52a88ba165678d6ffee521cd65cd9767cd8c8fd84d86885c5d20d0680ea297f5a616791c7e1b67c65457fe530a9a9341399d1c1c5e7e2591c62a7fd3d37971289368aaea473b8d4e6e911961a88a7e2d86aa16d1733a7dcbbb8e5665", @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r1], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmc_request_start\x00', r4, 0x0, 0x100000000}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) mknodat$loop(0xffffffffffffffff, &(0x7f0000000300)='./file7\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x800, 0x6) setsockopt$inet_opts(r7, 0x0, 0x6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb47, 0x0, 0x0, 0x34f}, &(0x7f00000002c0), &(0x7f0000000080)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 3m50.505046447s ago: executing program 40 (id=691): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) dup(r5) io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m3.900720968s ago: executing program 41 (id=823): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) read$ptp(r1, &(0x7f0000000040)=""/31, 0x1f) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000b1c0)={0x2020}, 0x2020) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x33) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000000380)={0x6, 'dummy0\x00', {0x2}, 0x7}) 2m33.713623224s ago: executing program 42 (id=1008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000001c0)="61df712bc884fe68a02780b605a7", 0x0, 0x77ff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m33.709897104s ago: executing program 43 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) io_uring_setup(0x2624, &(0x7f0000000800)={0x0, 0xfffffffc, 0x800}) r2 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000340)={0x8000, 0x0, 0x2}, 0x18) mkdirat(r2, &(0x7f0000000380)='./bus\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock '], 0xc) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x2) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 2m26.900711083s ago: executing program 44 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x41a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) dup3(r7, r6, 0x0) 2m26.319560566s ago: executing program 1 (id=1044): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0xfffffffffffffffb, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="590b06d9d417b6", @TCF_META_TYPE_VAR="06e66d1c27e741", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 2m26.226481325s ago: executing program 45 (id=1044): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0xfffffffffffffffb, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x0, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="590b06d9d417b6", @TCF_META_TYPE_VAR="06e66d1c27e741", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) 1m16.553127026s ago: executing program 6 (id=1382): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2) read(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1m16.463132454s ago: executing program 6 (id=1384): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 1m16.323712747s ago: executing program 6 (id=1388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/310], 0x90) 1m16.259311002s ago: executing program 6 (id=1389): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x25e, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x8) timer_create(0xfeffffff, 0x0, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) write$cgroup_pressure(r3, &(0x7f00000000c0)={'some', 0x20, 0xf, 0x20, 0x8}, 0x2f) sendmmsg$unix(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x14, '\x00', @a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES8=r5, @ANYRESDEC=r0, @ANYRES8=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) memfd_create(&(0x7f0000000180)='{\x00', 0x5) 1m15.41700151s ago: executing program 6 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x6, 0x41298, r4, 0x5, '\x00', 0x0, r8, 0x5, 0x4, 0x5, 0xf}, 0x50) (async) mkdir(0x0, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 1m15.179317542s ago: executing program 6 (id=1396): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4000080) socket$inet6(0xa, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1m15.107555278s ago: executing program 46 (id=1396): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4000080) socket$inet6(0xa, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1m5.691399228s ago: executing program 3 (id=1445): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") open(0x0, 0x109042, 0x1) openat(0xffffffffffffff9c, 0x0, 0xa04c2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='btrfs\x00', 0x208388a, &(0x7f0000000140)='ext4\x00') connect$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) 1m5.259321958s ago: executing program 3 (id=1448): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000000800000000800000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m2.580019375s ago: executing program 3 (id=1455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000008000000020000000100000080010000", @ANYRES32, @ANYBLOB="010000000000000000000000000000000000000071f1070a547b7204be83241b99f3049c99841d933082acdd3c940408807ef7ba927b75653218bf56c8ea6b71a40d96edb5f98ac1dd6be5b672f362bcc9928dbc1e2754790b3ecefd1e022c3100198c2c78b6145f4552d8025abb48836970db5ca2194a1c94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000170000009500000000000000ac08e725f5e2a78838307ddfd9cf0d9ad1237073d741d418b6f54512297cb2a359eafca5571d12f4357e5e9dd4dc16fe820d3db15a093532453a60879826be96c95d5f18dd1ee5d99167ff4bfd8f09a23b7fff810390cfa79565b1a7adef4f93470b1ae45a0dbf60022756235b65bb508ba344cafa62a8f42408d9e9f7e830dc9711507b7d566505f5dbd3124f859ef7aec15a28d29d99"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000940)="f20f12f00f01c20fc77d0a360f01c02e6465650fc7710fbaf80c66b81470788366efbafc0c66b80c00000066ef0f20d86635200000000f22d80fc77b0d0fc75d0066b9800000c00f326635000100000f30", 0x51}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x1000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x5}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x60, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x40, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 59.344347934s ago: executing program 3 (id=1462): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x25e, &(0x7f0000000300)="$eJzs3E1oHGUcB+D/zO4akywS9SIIKoiIBkK8CV7iRSEgIYgIKkREvCiJEBO8JZ68eNCzSk49NJTemvacS+ilpdBTP3JIL4U29NDQQ3vYspmk5GO3SdjNTNl5Hhh2vt6PYff3zs5h3gBKaygixiKiEhHDEVGLiGTvCe9ky9DO5lL/2lREo/Hlg2T7vGw7s1tuMCIWI+LjiFhNk/i5GjG/8u3Goxufv//XXO29Myvf9Od6kTs2N9a/2Pp/4s8L4x/NX71+byKJsajvu67uS1rsqyYRr51GYy+IpFp0DziOyd/P32zm/vWIeHc7/7VII/vy/p59abUWH/7Xruw/96+9mWdfge5rNGrNe+BiAyidNCLqkaQjEZGtp+nISPYf/lZlIP1lZva34Z9m5qZ/LHqkArqlHrH+2aW+i4MH8n+3kuUf6F3N/H81uXy7ub5VKbo3QJ6a+R/+fuGDkH8oHfmH8tqf/7NFdwfIkfs/9Ly+dgfkH8pL/qG85B96xsvPP3z4MUD+ofe0feA/QP6hvI7Mf5p/n4B87M0/AFAujb6i30AGilL0+AMAAAAAAAAAAAAAAAAAABy21L82tbvk1eblfyM2P42Iaqv2KztTkGVTmw48TJqnPZNkxTry3dsdVtChc6f49vVxpnR85c7ptX8cV97qZm31E5dYmI5Y/CMiRqvVw7+/pOMp8F494njthw4b6NAnXxfb/pPl/Nqqtdg33kiyldFW408ab2x/th5/6m3qPIlfH3dYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALl5GgAA//9Hl20q") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x8) timer_create(0xfeffffff, 0x0, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) write$cgroup_pressure(r3, &(0x7f00000000c0)={'some', 0x20, 0xf, 0x20, 0x8}, 0x2f) sendmmsg$unix(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x14, '\x00', @a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES8=r5, @ANYRESDEC=r0, @ANYRES8=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) memfd_create(&(0x7f0000000180)='{\x00', 0x5) 58.060184382s ago: executing program 3 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="160000006800e97800000000ffdbdf01010000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000fc0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000540)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x40044}}], 0x1, 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@gid={'gid', 0x3d, r9}}]}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x490000, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r11, &(0x7f000000a340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="602f2dab98ae59ed61925055034541d58bbdcc92e35a7e181f593764c7d860fb96775824d19152bf78825a38d2fa23", 0x2f}, {&(0x7f0000000400)="ae05ee7ef26ef762a9292a608330997eacc2ceafc9127309289b72f49636f3fba04a8cce070746950c8c5ede09ae4a24bdfc34e3f498c8380d625e93f7d0a720888363defcd59b373dae898adb503af378213526c8a3fefac3aba7a03245edbc03c2287f5264f169bddf9274aa10acdf8cda8e6a61f67e21f6a7ec089ed4bc2c09911426a444", 0x86}, {&(0x7f0000000340)="8b369a3ee79c9237a0b81c70d60cefdc57821524a4a0a433", 0x18}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1cff200080000000000e000000000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x40}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)=[@rights={{0x28, 0x1, 0x1, [r10, r0, r6, 0xffffffffffffffff, r6, r5]}}], 0x28, 0x4000090}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b00)="7d7b026f428ea3a8b38b15705650c313b076c381958294af6f49ff07fe8d74869560038bd452e2ae0307cd13f22852675c353671f97aee1ab516b972cabaaf35215df34daff09c641f5dd0ea3009b63c81bac06728f2dc37d9e94566a5eca39a4f1eff4d3cb93a0c7e01d2eee037e5cf3e8a608413b050fcf2c6958af5be7ab3504364cceb7559cabf4743cbabe46910add9a9565a54b5dda573199ef3b1a2d33fc36db52f2589d1c073aa41a958bb37fcfed37c46079364c4f80e69b5728c71a48824c512658f8b390059882e8e3d5cd8ca00"/223, 0xdf}, {&(0x7f0000000c00)="e4bf00211f50b801a0d7910b66e3c3235287c155622a8d6d8ba0aac25e7bf5d78ac0269cad0a5635d4adf9895b094165b177ac601777af43240467c1dd62a33b345c611a09714506b973f995eef790f8ac28e1b185bb1692f16bd05e4f00cd8a77f98752e2e0ba3fd17928ee76398d3a8ee1a2af460d66da204d78dd5c3c4f5cd1017a9a22a395b15a2f98bc2cbc494050296ce730b6676011ad3c194971de0b537124f06df7343535a1d638027d5262924caaf73e2f7e8a1a5cb0db7237cd2a3eafbb04197466e2687665f8f0b45cb40d1ae1", 0xd3}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r7, r12, r9}}}, @cred={{0x1c, 0x1, 0x2, {r1, r8}}}, @rights={{0x24, 0x1, 0x1, [r10, r0, r3, r5, r6]}}], 0x68, 0x10}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="57fed03246597fdafb3cb9a08ab9b62a8620ca75f8b4e5e686651e9696a7919924b69355878c43cc72a1f8e8cfc6260b49d38d54da08ea03389da07da640f8e4b90055d4f5088e8293a4112c2abd3581f2bed3e629ff88c539bab1d2cd5563818bc57c2ec00199d2d973ab7c34d8184e24471eb456cd00cea08428b924eb5160877a74ccdddd7baa5ac90c479c439e733d9140470b8a2a0dd44329e322549237d01ea44726addad47475e212d64056fa0b7720b885d09ae0d28b5e24d51e99088d6f508ee74f5b60e665ece6823a5d246898c291f2364b6b1bfcc1d249f066", 0xdf}], 0x1, 0x0, 0x0, 0x2000c091}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000940)="c4a6da7521f9c33fa2740b41c8e8ab5a8634718afdf00653365c2e96f35356a177ab8028", 0x24}, {&(0x7f0000000980)="fc617afa03377dd5ac7f7a9a6edaec211f2615eebfa2b382e1a7321744a5465db59ab21282870c4c9a20d995afa6d342796eee77aa4cb46a73fae4b30f2556015819c157ec20e42777f86823d0867b9a4021d5b5a3986c155e213ff1a5cecdbe43b1036c7a97b0edebda2e04dff764211b7c0f932c55", 0x76}, {&(0x7f0000001780)="b7c6465fe8a77409e54ffc0c5aa2837866b3369da7ac0ce56dd7a6a05e547b76ee8ed2a37fbc995d0a377292e1e9b1324c073b30e64ee3d51f7a4ae88c77087b4b7c9660b7f5c2d896d702e2cd29ddfa31101d1d113376a4885e5e06376087fa98a3ad2a34d01d4b6c84d323bddd076de526a7e4633b6d88d9f03be29db2bae0ab7096fb4f2885b06cd2d9e01c52f4662c82e8c0abb141662146032a0ec76358851bbbab7deade975f02e96b3e6dc86238a5024a8afec537b0d66bb30d40c2772140a40aa85ab929ffd30d0e41f3460397b0780997b199", 0xd7}, {&(0x7f00000010c0)="ba3fbbe70a33c0ccf678aa8f669e78be75324ad865f9172295c69bd75b40d6551499a455e66fdd9902ea09f7ece75437c065faab55ac637d427420e94046e358fa784032bad29dadd2ebf474adda86f10060c44aa5dcfe69029f815d3843b8d443b92f25882470dd47823c7179f0a962a42e0ae1093f4c6920de8765cf974d0bba15b80d80d805a930d5a3e2ce577614bc82db55f9908707f43c11832b7e31d170baa5f73a2bd57de938d79987d9a4d6b20e2b8e1869b7d3ca6910", 0xbb}, {&(0x7f0000000dc0)="6a2eba3da62590ab2bcf31fc7af78f258b5e24ee53652463251905c5c45581515a09ec7f4b3a928c08121b23444e3e67acbc17349bb89b49ab92cba2faafaef0852e", 0x42}, {&(0x7f0000001180)="9895beaf18d90b4a0daefb48c5bef2bd919389ad5b3bd064cbaf8cb3677e17e6cdba0c2b2e663b0cf88cf6f3e9d89ba5f1f006497349a8be4b705bd6cce20d1a641e4f90178c67cb21425a083b441b5d68aab33ac17e58668eb5ceaf3b9598ccdaa8", 0x62}, {&(0x7f0000001200)="0fd06c3fa0e946254edb691c10625374bc3ee65d8cf5ff3c8ffa1f35b8c10693c80985fb6fb4e6491715b73c85e68c3b47d882b0c73b2f1db51bd657cce81e5aab73f9abe135b5a46452a3572a863210aecf87ba6fa653eebf3e85340a64e64e33825ed23afd1a6d108766831fc2bb49ed4230f09b1883e9645b4fdb5fbd06d3443a95e1a1edd52e2caa5c52a877b3aff77e5fb1d71858e89eb5e7569846b9428e1bcb805f1ac25f0e865356ffc14098d884bd8c74d0414cefcdba20ea18a56907b8ba42630e8e9dd2bd85ae2ff3b12e78f139d12f3dcc5f9ce5dc68681146ed7df10277756f2ee4db23016068b60008", 0xf0}, {&(0x7f0000001300)="64f00d15c27b0002679b6a7f303929e8cd2c2d8d256edf7132", 0x19}], 0x8, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r1, r8, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r12, r9}}}, @rights={{0x30, 0x1, 0x1, [r11, r6, r3, r5, 0xffffffffffffffff, r0, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r14, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @rights={{0x20, 0x1, 0x1, [r3, r6, r11, 0xffffffffffffffff]}}], 0xc8, 0x8044}}], 0x5, 0x20000010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r15 = syz_io_uring_setup(0xcc9, &(0x7f0000000180)={0x0, 0x4062, 0x200, 0x1, 0x14d}, &(0x7f0000000200), &(0x7f0000000240)) r16 = syz_io_uring_setup(0x47a7, &(0x7f00000002c0)={0x0, 0x10006f52, 0x3080, 0x80003, 0x400204, 0x0, r15}, &(0x7f0000003400), &(0x7f0000000f80)) r17 = eventfd2(0xff, 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r16, 0x7, &(0x7f00000003c0)=r17, 0x1) syz_io_uring_setup(0x7673, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0xbb, 0x0, r16}, 0x0, 0x0) syz_io_uring_setup(0xe3, &(0x7f0000000000)={0x0, 0x7974, 0x1, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r16, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 57.32503312s ago: executing program 3 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c000280"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r4, 0x4, 0x3, 0x4, 0x5, 0x40, @loopback, @loopback, 0x7800, 0x1, 0x10, 0x100}}) 56.872161812s ago: executing program 47 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000102f50000000000000000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000030c000280"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r4, 0x4, 0x3, 0x4, 0x5, 0x40, @loopback, @loopback, 0x7800, 0x1, 0x10, 0x100}}) 55.870284244s ago: executing program 9 (id=1477): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @private, @broadcast}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000180001000000e300000000000a00000000030002000000"], 0x38}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 54.502742411s ago: executing program 9 (id=1481): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xa) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 53.551228428s ago: executing program 9 (id=1486): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0xa}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001c00)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x401, 0x10, 0x10, 0x14, 0x10, 0x10, 0x10, 0xa0, 0x10, 0x82, 0x7, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 50.426955717s ago: executing program 9 (id=1498): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x25e, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x8) timer_create(0xfeffffff, 0x0, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) write$cgroup_pressure(r3, &(0x7f00000000c0)={'some', 0x20, 0xf, 0x20, 0x8}, 0x2f) sendmmsg$unix(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x14, '\x00', @a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES8=r5, @ANYRESDEC=r0, @ANYRES8=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) memfd_create(&(0x7f0000000180)='{\x00', 0x5) 49.487251614s ago: executing program 9 (id=1501): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x40400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x21) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x4001, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x10, 0x1, r3}) 49.168810263s ago: executing program 9 (id=1503): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x40400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x21) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x4001, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x10, 0x1, r3}) 48.363172047s ago: executing program 48 (id=1503): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x40400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x21) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x4001, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x10, 0x1, r3}) 15.962207157s ago: executing program 5 (id=1641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_newneigh={0x28, 0x1d, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x40, 0x0, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) timer_create(0x3, &(0x7f0000000300)={0x0, 0x4, 0x4, @tid=r4}, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x2, 0x6}, 0xfffffffffffffdd9) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r9, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, 0x0) 14.951255481s ago: executing program 5 (id=1645): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xc0000000, 0x0, 0x300}}, @TCA_SKBEDIT_PRIORITY={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$KVM_HAS_DEVICE_ATTR_vm(r5, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x9, 0x6}}) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) (async) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000380)={[{@debug}, {@discard}, {@usrquota}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}]}, 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") 14.948003031s ago: executing program 5 (id=1648): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x2f0, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c0, 0x2, [@TCA_BASIC_EMATCHES={0x2bc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x86}, {0x6, 0xfffffffd, 0xf65, 0x7}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x4}, "9aec9a3074d6fbbd3f7f4c8c55dc79d71950169064909637f77e76eb020762adf2e1ab18ffd05464dbc062ce975560632143b1b4efffa901c44f1767e81b5a4119bf5057d248be625d466c70c55c0d2de4a0ae46bb670426828eb7aeea27dc6acf372ce435621dd87d82cac21bf9cbfe8d3a7b1928d41fe9f5e26624d0663e60f2c7fe9bfab869ac495f5c1181d9c11719f64e96a58ed1e3b170e62bbb5c153080d88128227efe38917ff45750b6b4965fd10c1731b6ad433ee16a7cc910a9fa23dd6539fa3bf6a90d3c163c38817a"}}]}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x2}, "ec9a27aba5b7b7927b1f0c21885177022d4ffff94fe694b392ee5386f0c92ea316e78a3d546e8941e5d972a762fa6362847f686503b30f2653f00a0eb80c2468c7e2dfebfa4d4bd37953078e55e5df660f942b9e668600af9be178f73664cbcdfaa9dff4f300b1a9c3513fc9e3a7c82cf3ba657e831fc49d3199616961710fc49a27ce186b4162d950f99d5c8fb0505d317f0f66b33adc5619e04a9f1ce060d6ef437bf2fb1baffb98a9598ee28300df8a0570423fab8b568974210092bbb5afc7efeb3dea8cd099d644a2f4078593ac75f8923107dfe644"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1000}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ec8555", @TCF_META_TYPE_VAR="296080b7d1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xb, 0x1}, {0xfc00, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x2, 0x2}, {0x200, 0x1, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x101}, {0x2, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x95e, 0x7, 0x8}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0xeda}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x2}, {0xf10, 0xe}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xc8a, 0x2, 0x101}, {0x1000, 0x2, 0x0, "8203"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xb74}, {0x1, 0x6, 0x7fff, 0x6}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x8}, {0xfe78, 0x3, 0x9, 0x3, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 13.99015024s ago: executing program 7 (id=1649): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8=0xffffffffffffffff, @ANYRESHEX, @ANYRESDEC, @ANYRES64=0xffffffffffffffff], 0x5, 0x25d, &(0x7f0000000f40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0x2, 0x14a}}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=r3, @ANYRES32=r4, @ANYRESHEX, @ANYRESOCT=r8, @ANYRES8=r9, @ANYBLOB="2976907ba8d9a78a982f1f454d347248d914b6b52a86d36e5f2ad516a0d59a378f", @ANYRES8=r9, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00(\x00'/19, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='rss_stat\x00', r11}, 0x18) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r13 = syz_clone(0x21100100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r13, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff362}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.929490717s ago: executing program 5 (id=1651): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8010, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async, rerun: 32) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$eJzslr1u01AUx//XtpwEBSExsjAQCRhwbAcQC4gsTAxIQCIGhoiYKGCIlGQgkVDgCViYkBgY2HkBJFj7EFXaqUu6deni6vpe27eRnaT56tDzk3r6t318fD6s44AgiAvL/t7ROEA+1EWUkJPnD/TER1P8d/OHn/8/fVL/9vr3Tm5sFdJiBsHizzcA/Kvq6Mf3nr67JP+/gBbrl9BwW+o6GCypeTI1qT0wvJL6naI73N+y3rZ9z3rT8Ztc2Nw43LjcVKbzm3xlaCr5MeV6bzB83/B9r7tBMa9/k6qGh0p+6rwsiGxtpX8ONDhSV8DwXOoHyEW9ES1R6r9mJPH1mfWbWGP9tWLKJZ7KGeJcvZw5KhPAcokBLA74EytVii/yld3kO5QhdIQimuh6In/Xt1QFf9Hn+MDYelfZas1cZhZ/H4t7ojPBSByHPlcyAgajBR9hYpluJPsp+MVwU9lPYpX8CD81fITl3mB4p/2h0fJa3kfXrdy379r2PbccLiJhZ+y/QrifLiXxU79JHJOZ+NTo97uOsPGxK2zaxtXC/afh1g1xzIdrTsXNK5rJPwNGPMg/qvOjzFIIgiC2ynWw40BiREJ+TaD81n12jjkSBEEQBEEQBEEQBLEaJwEAAP//63FC3Q==") (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async, rerun: 32) setns(r8, 0x24020000) (rerun: 32) 12.865145153s ago: executing program 7 (id=1652): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open(&(0x7f00000006c0)='./file1\x00', 0x64042, 0x79) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='ext4_discard_blocks\x00', r0}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) unshare(0x2000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0xf0a, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x18, 0x301, 0x1, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 3) 12.285583157s ago: executing program 7 (id=1655): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x8) wait4(r6, 0x0, 0x8, 0x0) sendfile(r5, r0, 0x0, 0x8010002b) 12.259012669s ago: executing program 5 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xefff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x8000) 12.131172511s ago: executing program 5 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e80)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000600)="3cc27d53dce3bb608b7325009317a827dc5bedd31c94172b00ba6ebe42b2270829cacd09ceb2b8c4936f97db2d41f5108af0ee7f4269124754350a34223c43627623039b5eb1fd0fd10e6fb428d6f98a0ea1467623de2debb7767d59231d0826bda0146293a7062de741534488451fa7724a7ad7c166342dc9bff399cd3de07423615f22469facec34806dd8acaf864b5a7b6070f195e688a0e17e21c1ef0df6fae9ce67e87ce57b27c3c3476c54e13b66d1dd7d498d6af40ce821d0b4d43de9c890c75a4856c894ba42815b71ca503a28a8358814ca0f3fb2dd3966f138caa3bf152e2ae1a041dd9af1494393831356a09d1c0ddc", 0xf5}, {&(0x7f0000000700)="b43808b62c422e2ebf3bf1debc3f96c3e5d63c156e843a10c6e20b0de11292dd9e2b852b266c21b694e205209442770fd90befb653b3250b57afdde55e956fa4b12647fc3a0d01f0b12ff28f502419f9cb54c7382cd4a02925bbbfdd1151dd88f5c36bd619effad377654ea3b68dd5e948e2a6fbc83e8e2ceb07a11a012edac0172e3d8697581415633dbc884b3cd0", 0x8f}, {&(0x7f00000007c0)="fc12d7eeed5df2c6c801086c5ae20f6d62120db63830bd4a5404f8f6df8c5a84f650bea9ef61efc7bc78d2e71263bb4f1746e7c1784d7c94ad42a5608a4b7d8bc45c4b4f9f6560b123d30d07eb3b2fb3018109a69bc40d3a43bb9308543432fb2ac0bc1b2b6921ebcf41e06df6e28dbe1990f1f47e27cd542a83584aaad26466b12b89475f44cddffebf19d2b5b7ecca4dd9406027cf76725894905c4a8356a6c24b0069663fd154ad5d18025a1ba3d57e64800da579ce8261bae926", 0xbc}, {&(0x7f0000000880)="04295cc8bbd52068ba211bf74543127df4283fdfb7cadceca20e9cc0cdb269fb1ac3feedc216d72f64396b37ceb9d6a3b7a0e9adef47b8f6b81170cdb9f26d30ae09ebc88c689e0652bcfff15d8425b7fef11e4e1b506481f56227b3057c2cf17e218be9074047d104c178e225e29603d7de196ec6d0ac0104294f20d814f9a50f93a08b0668ea98f76c6fa9da8d530a702592992bc4c2c6bfd46a73baf320bc9c8bae308ff2f5406eab35507990f516b01cecafca112652ef52b7bdc6e91da6500685e5d330e5f9aad17310c23fb6bb863665ffc63028d5953a4715e26670f96e26bea3919b5077", 0xe8}, {&(0x7f0000000980)="5e9f9bfd60900db384cb0d2655007f8efe59dff40ced1912e893634616ea903ef3eab6d587f0bb569ef7e9945b5999de5a8d0929e8b90a97c419c890bef7aff0ae52aa50948045ea6a0f78abb93484cdaeaedd92e1926df49dd2fb9e67d49e70063c5da49477aa44f8c97d1a", 0x6c}, {&(0x7f0000000a00)="0d240b574f797e371df2ef45751f40d27379908e71ef5c543b7ae3dbb7ad20a77805b70e2a79aad2a757fcf3bbb3a31e2b7dfa992b2763962bf89f1ccb27547fb8ac7a5c82100682fd808789b6898fc0dcd7cd9c028d1faf996468bfaf409472a32b3006ea790c01db959e2b01ed0f68259fcf2aa56cbd96ed465d20ac7aa7ed77d49b0dbc4280e281b59f2b90d9f968474e001e9623fbef2f653e55a88bbb678e74b3d4cef88b50c9ceaf352e11244160fcf43c6db3257e0a0666bb319a406de8899dbd1a3b391b449dfe3cb7745a19b2b00f45f6f436934bf8ece93e03178c40", 0xe1}], 0x6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002659f81900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x80}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) timerfd_create(0x0, 0x81000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xa, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008050) 11.976109015s ago: executing program 49 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xc, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e80)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000600)="3cc27d53dce3bb608b7325009317a827dc5bedd31c94172b00ba6ebe42b2270829cacd09ceb2b8c4936f97db2d41f5108af0ee7f4269124754350a34223c43627623039b5eb1fd0fd10e6fb428d6f98a0ea1467623de2debb7767d59231d0826bda0146293a7062de741534488451fa7724a7ad7c166342dc9bff399cd3de07423615f22469facec34806dd8acaf864b5a7b6070f195e688a0e17e21c1ef0df6fae9ce67e87ce57b27c3c3476c54e13b66d1dd7d498d6af40ce821d0b4d43de9c890c75a4856c894ba42815b71ca503a28a8358814ca0f3fb2dd3966f138caa3bf152e2ae1a041dd9af1494393831356a09d1c0ddc", 0xf5}, {&(0x7f0000000700)="b43808b62c422e2ebf3bf1debc3f96c3e5d63c156e843a10c6e20b0de11292dd9e2b852b266c21b694e205209442770fd90befb653b3250b57afdde55e956fa4b12647fc3a0d01f0b12ff28f502419f9cb54c7382cd4a02925bbbfdd1151dd88f5c36bd619effad377654ea3b68dd5e948e2a6fbc83e8e2ceb07a11a012edac0172e3d8697581415633dbc884b3cd0", 0x8f}, {&(0x7f00000007c0)="fc12d7eeed5df2c6c801086c5ae20f6d62120db63830bd4a5404f8f6df8c5a84f650bea9ef61efc7bc78d2e71263bb4f1746e7c1784d7c94ad42a5608a4b7d8bc45c4b4f9f6560b123d30d07eb3b2fb3018109a69bc40d3a43bb9308543432fb2ac0bc1b2b6921ebcf41e06df6e28dbe1990f1f47e27cd542a83584aaad26466b12b89475f44cddffebf19d2b5b7ecca4dd9406027cf76725894905c4a8356a6c24b0069663fd154ad5d18025a1ba3d57e64800da579ce8261bae926", 0xbc}, {&(0x7f0000000880)="04295cc8bbd52068ba211bf74543127df4283fdfb7cadceca20e9cc0cdb269fb1ac3feedc216d72f64396b37ceb9d6a3b7a0e9adef47b8f6b81170cdb9f26d30ae09ebc88c689e0652bcfff15d8425b7fef11e4e1b506481f56227b3057c2cf17e218be9074047d104c178e225e29603d7de196ec6d0ac0104294f20d814f9a50f93a08b0668ea98f76c6fa9da8d530a702592992bc4c2c6bfd46a73baf320bc9c8bae308ff2f5406eab35507990f516b01cecafca112652ef52b7bdc6e91da6500685e5d330e5f9aad17310c23fb6bb863665ffc63028d5953a4715e26670f96e26bea3919b5077", 0xe8}, {&(0x7f0000000980)="5e9f9bfd60900db384cb0d2655007f8efe59dff40ced1912e893634616ea903ef3eab6d587f0bb569ef7e9945b5999de5a8d0929e8b90a97c419c890bef7aff0ae52aa50948045ea6a0f78abb93484cdaeaedd92e1926df49dd2fb9e67d49e70063c5da49477aa44f8c97d1a", 0x6c}, {&(0x7f0000000a00)="0d240b574f797e371df2ef45751f40d27379908e71ef5c543b7ae3dbb7ad20a77805b70e2a79aad2a757fcf3bbb3a31e2b7dfa992b2763962bf89f1ccb27547fb8ac7a5c82100682fd808789b6898fc0dcd7cd9c028d1faf996468bfaf409472a32b3006ea790c01db959e2b01ed0f68259fcf2aa56cbd96ed465d20ac7aa7ed77d49b0dbc4280e281b59f2b90d9f968474e001e9623fbef2f653e55a88bbb678e74b3d4cef88b50c9ceaf352e11244160fcf43c6db3257e0a0666bb319a406de8899dbd1a3b391b449dfe3cb7745a19b2b00f45f6f436934bf8ece93e03178c40", 0xe1}], 0x6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002659f81900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x80}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) timerfd_create(0x0, 0x81000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xa, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x20008050) 11.091251337s ago: executing program 7 (id=1664): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xc838, 0xffffffff, 0x3ff, 0x6, 0x9, "2f28eb29ca391d0f4180a0b60f6af48681ea01", 0x5, 0x9}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@nomblk_io_submit}]}, 0x1, 0x44a, &(0x7f0000000400)="$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") r1 = creat(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x79) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x20052fa, 0xfffffff8, 0x100802, 0x0, 0x8}) read$FUSE(r1, &(0x7f0000006080)={0x2020}, 0x2020) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(0x3) syz_fuse_handle_req(r2, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b7ded29a890c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x215b040, 0x4, 0x9, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000900)='kfree\x00', r6}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) io_uring_setup(0x3eae, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x400000000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000020013"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000bd1ec9c67a4850b8000000000a00fffa0c"], 0x20}}, 0x24044000) dup(r7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") 10.630744739s ago: executing program 7 (id=1668): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 9.958454552s ago: executing program 7 (id=1673): r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) rmdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) r8 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r8, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000002240)=ANY=[@ANYBLOB="201603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="024d346f8a42ec447e36907531ff034a5605"], 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x45c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x42c, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x424, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff055, 0xffff, 0x8, 0x80000001, 0x4, 0x9, 0x7f, 0xba, 0x6, 0xffff, 0x9, 0x5, 0x3e, 0x5, 0x6, 0x10, 0x3, 0x7, 0x40, 0x8, 0x5, 0x9, 0x8, 0x7, 0x2, 0x0, 0x7, 0x3, 0x3e4c, 0xffff0000, 0x5e, 0x3, 0xfffffff7, 0x8001, 0x400, 0xc, 0x2, 0x7f, 0x8, 0x5, 0x4, 0x9, 0x6, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0x80000001, 0xc, 0x80000000, 0x3, 0xb, 0xa49b, 0x1, 0x4, 0x180000, 0x110, 0x5, 0xad05, 0xffff8000, 0xaf, 0x5, 0x6, 0x7ff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x1, 0x8, 0x80, 0xb3c, 0xffffff80, 0x34, 0x752c, 0x3, 0x3ff, 0xffffffaf, 0xc, 0x2, 0x81, 0x4, 0x1000000, 0x9, 0x6, 0x10001, 0x1000, 0x5, 0x2, 0x2, 0x763, 0x5, 0x4, 0x9, 0x589, 0x9, 0x1, 0xffff, 0x1, 0x1000, 0x4, 0x10001, 0x7, 0x8001, 0xc75e, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3f2d, 0x666d, 0x1, 0x3, 0x7, 0x0, 0x2be6, 0xf5, 0x2, 0x80000000, 0x10, 0x6, 0x7, 0x7fff, 0xfb45, 0x1, 0x1, 0x0, 0x24d, 0x6, 0x5, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x200, 0x68, 0x8, 0x26298000, 0xffff, 0x4, 0x9bb8, 0xfffffffe, 0x5, 0x9, 0x80, 0x58, 0x2, 0x0, 0x3, 0x4, 0x9, 0x4, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x94a6, 0x5, 0x6, 0x4, 0x1, 0x3, 0x32c, 0x81, 0x7, 0xf, 0x7, 0xf6c75d4, 0x4, 0x1149, 0x5, 0x3, 0x8, 0x7, 0x5, 0x1f7c, 0x6, 0x1ff, 0x7, 0xc, 0x7933eede, 0xd1e, 0x5, 0x10000, 0x7fffffff, 0x401, 0x10, 0x8001, 0xfff, 0x4, 0xff, 0x4, 0x2, 0x0, 0x3, 0x1, 0x5, 0x4, 0x6, 0xb1d1, 0xffff, 0xad0, 0x7, 0x2, 0x1a, 0xf9, 0xb, 0x9, 0x9, 0x10000, 0x180000, 0x1, 0xa, 0x400, 0xc1, 0x9, 0x3a6e, 0x7, 0xd, 0x4, 0x0, 0x32, 0x1ff, 0x7, 0x5, 0xffffffff, 0x400, 0x1, 0xffff05e5, 0x3, 0xd, 0x0, 0x7ff, 0x200, 0x2, 0x1a9d0449, 0x0, 0xa, 0x0, 0x1, 0x80000000, 0x300000, 0xff]}]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x48090}, 0x4c000) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r9, 0x100000000) 9.771663069s ago: executing program 50 (id=1673): r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000f80)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) rmdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) r8 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r8, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000002240)=ANY=[@ANYBLOB="201603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="024d346f8a42ec447e36907531ff034a5605"], 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x45c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x42c, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x424, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff055, 0xffff, 0x8, 0x80000001, 0x4, 0x9, 0x7f, 0xba, 0x6, 0xffff, 0x9, 0x5, 0x3e, 0x5, 0x6, 0x10, 0x3, 0x7, 0x40, 0x8, 0x5, 0x9, 0x8, 0x7, 0x2, 0x0, 0x7, 0x3, 0x3e4c, 0xffff0000, 0x5e, 0x3, 0xfffffff7, 0x8001, 0x400, 0xc, 0x2, 0x7f, 0x8, 0x5, 0x4, 0x9, 0x6, 0x6, 0x5, 0x80000000, 0x401, 0x6, 0x80000001, 0xc, 0x80000000, 0x3, 0xb, 0xa49b, 0x1, 0x4, 0x180000, 0x110, 0x5, 0xad05, 0xffff8000, 0xaf, 0x5, 0x6, 0x7ff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x1, 0x8, 0x80, 0xb3c, 0xffffff80, 0x34, 0x752c, 0x3, 0x3ff, 0xffffffaf, 0xc, 0x2, 0x81, 0x4, 0x1000000, 0x9, 0x6, 0x10001, 0x1000, 0x5, 0x2, 0x2, 0x763, 0x5, 0x4, 0x9, 0x589, 0x9, 0x1, 0xffff, 0x1, 0x1000, 0x4, 0x10001, 0x7, 0x8001, 0xc75e, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3f2d, 0x666d, 0x1, 0x3, 0x7, 0x0, 0x2be6, 0xf5, 0x2, 0x80000000, 0x10, 0x6, 0x7, 0x7fff, 0xfb45, 0x1, 0x1, 0x0, 0x24d, 0x6, 0x5, 0x0, 0x4, 0x5, 0x8000, 0x7, 0x200, 0x68, 0x8, 0x26298000, 0xffff, 0x4, 0x9bb8, 0xfffffffe, 0x5, 0x9, 0x80, 0x58, 0x2, 0x0, 0x3, 0x4, 0x9, 0x4, 0xffff, 0xffff, 0x5, 0x1, 0x7, 0x2, 0x94a6, 0x5, 0x6, 0x4, 0x1, 0x3, 0x32c, 0x81, 0x7, 0xf, 0x7, 0xf6c75d4, 0x4, 0x1149, 0x5, 0x3, 0x8, 0x7, 0x5, 0x1f7c, 0x6, 0x1ff, 0x7, 0xc, 0x7933eede, 0xd1e, 0x5, 0x10000, 0x7fffffff, 0x401, 0x10, 0x8001, 0xfff, 0x4, 0xff, 0x4, 0x2, 0x0, 0x3, 0x1, 0x5, 0x4, 0x6, 0xb1d1, 0xffff, 0xad0, 0x7, 0x2, 0x1a, 0xf9, 0xb, 0x9, 0x9, 0x10000, 0x180000, 0x1, 0xa, 0x400, 0xc1, 0x9, 0x3a6e, 0x7, 0xd, 0x4, 0x0, 0x32, 0x1ff, 0x7, 0x5, 0xffffffff, 0x400, 0x1, 0xffff05e5, 0x3, 0xd, 0x0, 0x7ff, 0x200, 0x2, 0x1a9d0449, 0x0, 0xa, 0x0, 0x1, 0x80000000, 0x300000, 0xff]}]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x48090}, 0x4c000) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r9, 0x100000000) 9.546770479s ago: executing program 0 (id=1677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x3, 0x4002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000400000000004000000d1a2d6e7"], &(0x7f0000000180)=0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x6, r4}, 0x38) socket(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffcfd, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) 7.59301129s ago: executing program 0 (id=1680): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x2f0, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c0, 0x2, [@TCA_BASIC_EMATCHES={0x2bc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x86}, {0x6, 0xfffffffd, 0xf65, 0x7}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x4}, "9aec9a3074d6fbbd3f7f4c8c55dc79d71950169064909637f77e76eb020762adf2e1ab18ffd05464dbc062ce975560632143b1b4efffa901c44f1767e81b5a4119bf5057d248be625d466c70c55c0d2de4a0ae46bb670426828eb7aeea27dc6acf372ce435621dd87d82cac21bf9cbfe8d3a7b1928d41fe9f5e26624d0663e60f2c7fe9bfab869ac495f5c1181d9c11719f64e96a58ed1e3b170e62bbb5c153080d88128227efe38917ff45750b6b4965fd10c1731b6ad433ee16a7cc910a9fa23dd6539fa3bf6a90d3c163c38817a"}}]}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x2}, "ec9a27aba5b7b7927b1f0c21885177022d4ffff94fe694b392ee5386f0c92ea316e78a3d546e8941e5d972a762fa6362847f686503b30f2653f00a0eb80c2468c7e2dfebfa4d4bd37953078e55e5df660f942b9e668600af9be178f73664cbcdfaa9dff4f300b1a9c3513fc9e3a7c82cf3ba657e831fc49d3199616961710fc49a27ce186b4162d950f99d5c8fb0505d317f0f66b33adc5619e04a9f1ce060d6ef437bf2fb1baffb98a9598ee28300df8a0570423fab8b568974210092bbb5afc7efeb3dea8cd099d644a2f4078593ac75f8923107dfe644"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1000}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ec8555", @TCF_META_TYPE_VAR="296080b7d1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xb, 0x1}, {0xfc00, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x2, 0x2}, {0x200, 0x1, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x101}, {0x2, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x95e, 0x7, 0x8}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0xeda}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x2}, {0xf10, 0xe}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xc8a, 0x2, 0x101}, {0x1000, 0x2, 0x0, "8203"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xb74}, {0x1, 0x6, 0x7fff, 0x6}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x8}, {0xfe78, 0x3, 0x9, 0x3, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 6.170106111s ago: executing program 4 (id=1683): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) kcmp(r4, r4, 0x5, r7, r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x4) fcntl$setpipe(r0, 0x407, 0xe6) socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x40300) read$FUSE(r10, &(0x7f00000035c0)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x2, 0x1000, 0x64, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x0, 0xfffffffc}}) 6.048403002s ago: executing program 0 (id=1684): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000440)={[{@nombcache}, {@data_err_ignore}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x44f, &(0x7f00000010c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000028c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(0xffffffffffffffff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.133864197s ago: executing program 2 (id=1686): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 5.132977377s ago: executing program 4 (id=1687): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f00000001c0)="61df712bc884fe68a02780b605a7", 0x0, 0x77ff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") open(&(0x7f0000000400)='./file2\x00', 0x145142, 0xa1) 4.950851714s ago: executing program 2 (id=1689): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) gettid() (async) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYBLOB="881c35f08924324d5bbc8de83a1cd04c63bb3e58131aed4ccd39dbdc0f6445640d03cb879bb2586d8d79c592010214bf8867ffd1fe5619df004feea7c14f36730adf2aa0496004a7136a44f2356d95309f19966755abf3fafdc937ba833f82f177f093f393d4c7b891ea99c633ea0ab525130173b498180861b9acbc78a08580994c4ea7609da2aaa9e3ef1aa205ac2e4871e6e9b2abbd0f81943b1aab994d77b9723c1ba46a50900d2e37287f05766037298189464d8390a081ef5074e8f3d4bc0e289f7c39f0d03c", @ANYBLOB="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", @ANYBLOB="cbc843f59848c2169e4d4f72a20fb977cd6c8cfddfa4b88f6dd4a183c782c653a190a9406553bc254bf303d4347c60370e10199aee53b9134b1f1530bce05d656a9c25cd6a8a36900f313a471a5c39d57f57f8ee56e7fad86debcdfff77661da99ec076258e5b08be376dd5562df2b8af0c16fb44ed10c3253bad664bb27566c0b69438e910f99762942b5d46898e5238dfd80bce6d88e29bb264c3195b0d8906682ce6323f54ed172cb2b127cf3bd9d1d7db8b9485d178b217468dc77ed5fe441e1"], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.950504214s ago: executing program 4 (id=1690): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x70, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb73d}]}, 0x70}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x600) ioctl$TIOCGICOUNT(r6, 0x5409, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$can_raw(0x1d, 0x3, 0x1) 4.566681639s ago: executing program 2 (id=1691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 4.375323047s ago: executing program 0 (id=1692): r0 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000007e0bf6b571863be0f6a07676acb3e0fc684a4a1d033934efbb4ba637c913c301424a744b44c96348cc75c7c6795f6f120300fbc190a748ca05652e1954a9f702ca4085146b0e55c88753c9bf7eda3d549548813db304b73ed16cbc2b485d35cb25c8141884690a99811bc975fbf9203d1f525acc07375af0c5b51860e27857bc0faa242e8f82097a70f6f48f3e11877b71bcc571e985aabc0570d57e2019bb25420334800a2d4b238f08db11bf4b930e4c8e09a60aa953eaff3de623f2ad77585e88f3bb3205e04c6eb3e48997ff7c02af089a6981ee36cc8f10bc57dc482b723810deafe20d2af1622297622514596e496df58da02fab1f42614bbc76"], 0x0, 0x1a}, 0x28) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r3 = socket(0x10, 0x80003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000000500080000000000007b2c031acb98091fee313a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008900000000000000000004b4ed9b3a5c1a21"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000004c0)="e7ed9b1f30836c317291d49e34b33328bf2e2d7318d8154af397949db294f8f443744e9b0106250db8874bbec4ccfdaa6878b5cdf47fca32e3a78bb3c55472eade86e602951695ebb9e3cc6e768a8abda8d72be66cc6e96e7bab57a9895c75bd4a8924636b7a34821a7eddec552518af1667b417a696fc93cce3d3cffb761ddd62641a9e8e6b9d47c6db2860d275343a6d7d5c664224038d74aa194331f36fbfe978cfc2bcae3a3b92d9a5834b5f5df3e893157010bc6569f8685019095fa8a989cb43b82f20a08786b25039996b3afd5f0ceb1359d067d1017b85", 0xdb}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="3f3d3c6465ea8ae09f91c60b143583a0c6f4a48f24624b19f661a7276cf43bf919948095c1542697b390d8f9c9857ee8212fd9215d1569bcc05f7695eef19b731d305536ae3bf95ba554897eec1926aff9e7af8d7223bd759faa7c84ab31a3156d41c504c7", 0x65}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="280000000004000001000000010000003d767c65f1695d0ea6662399371b4aa736086262dafad7dd9072d075ae4620ae4d93131a169ff9fda5d139834c0e9e8e964b985b36301ed468d5fc31dd7615a13b8b8419924cdfbce99eaba2f6ca2aac8b860bce67c203805f2d736c55d7879645e89c6d7d1527e9f52cfbb44fb6ced37b460b150f9af4f79f9470116395cf04113b6e65b702df22947929334c88214f07d5519c1045965023a7d578f0dbf80df658bd5169c016a1a625f4", @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4], 0x28, 0x814}, 0x4004000) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x1000000000000000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 4.292600044s ago: executing program 2 (id=1693): setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = open(0x0, 0x143142, 0x80) ftruncate(r1, 0x2007ffb) getrlimit(0x8, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x44080) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x28, r8, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x28}, 0x1, 0x0, 0x0, 0x40841}, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) 4.089903113s ago: executing program 8 (id=1694): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x2f0, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c0, 0x2, [@TCA_BASIC_EMATCHES={0x2bc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x86}, {0x6, 0xfffffffd, 0xf65, 0x7}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x4}, "9aec9a3074d6fbbd3f7f4c8c55dc79d71950169064909637f77e76eb020762adf2e1ab18ffd05464dbc062ce975560632143b1b4efffa901c44f1767e81b5a4119bf5057d248be625d466c70c55c0d2de4a0ae46bb670426828eb7aeea27dc6acf372ce435621dd87d82cac21bf9cbfe8d3a7b1928d41fe9f5e26624d0663e60f2c7fe9bfab869ac495f5c1181d9c11719f64e96a58ed1e3b170e62bbb5c153080d88128227efe38917ff45750b6b4965fd10c1731b6ad433ee16a7cc910a9fa23dd6539fa3bf6a90d3c163c38817a"}}]}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x2}, "ec9a27aba5b7b7927b1f0c21885177022d4ffff94fe694b392ee5386f0c92ea316e78a3d546e8941e5d972a762fa6362847f686503b30f2653f00a0eb80c2468c7e2dfebfa4d4bd37953078e55e5df660f942b9e668600af9be178f73664cbcdfaa9dff4f300b1a9c3513fc9e3a7c82cf3ba657e831fc49d3199616961710fc49a27ce186b4162d950f99d5c8fb0505d317f0f66b33adc5619e04a9f1ce060d6ef437bf2fb1baffb98a9598ee28300df8a0570423fab8b568974210092bbb5afc7efeb3dea8cd099d644a2f4078593ac75f8923107dfe644"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1000}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ec8555", @TCF_META_TYPE_VAR="296080b7d1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xb, 0x1}, {0xfc00, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x2, 0x2}, {0x200, 0x1, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x101}, {0x2, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x95e, 0x7, 0x8}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0xeda}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x2}, {0xf10, 0xe}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xc8a, 0x2, 0x101}, {0x1000, 0x2, 0x0, "8203"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xb74}, {0x1, 0x6, 0x7fff, 0x6}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x8}, {0xfe78, 0x3, 0x9, 0x3, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.061779806s ago: executing program 0 (id=1695): r0 = openat(0xffffffffffffff9c, 0x0, 0x61901, 0x4) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x7, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x8031, r4, 0x4daf2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0xffffff80, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) syz_io_uring_setup(0x339e, 0x0, &(0x7f0000002480), &(0x7f00000024c0)) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x2, 0x0, r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0, r0}]) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x41c}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00006a4000/0x3000)=nil, 0x400000, 0x3, 0x2}) 3.700519439s ago: executing program 1 (id=1674): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xe, [@struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x5, [{0xa, 0x3, 0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x30, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f, 0x30, 0x25a049f4d060172d]}}, 0x0, 0x3e}, 0x28) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f00000010c0)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7", 0x52, 0x2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/149, 0x95}], 0x1, 0x5, 0x1, 0x0) 3.238086912s ago: executing program 4 (id=1696): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3.224611113s ago: executing program 2 (id=1697): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f00000001c0), &(0x7f0000000340)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000040)="ec", &(0x7f00000001c0)=@udp=r5}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.046218139s ago: executing program 4 (id=1698): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 3.04371676s ago: executing program 8 (id=1699): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000004c0)=@nullb, 0x0, &(0x7f00000005c0)='./file1/file0\x00') setreuid(0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900060000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 869.93764ms ago: executing program 1 (id=1700): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 869.60642ms ago: executing program 8 (id=1701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 869.05911ms ago: executing program 0 (id=1702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) umount2(0x0, 0xa) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pipe2$9p(&(0x7f0000001900), 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) clock_getres(0x0, &(0x7f0000000240)) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000002380)=""/4096, &(0x7f0000000300)=0x1000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x200}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@data_journal}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 791.768638ms ago: executing program 1 (id=1703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000300)=0x2) read(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 787.524778ms ago: executing program 2 (id=1704): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r1}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (fail_nth: 1) 726.517774ms ago: executing program 8 (id=1705): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 684.839688ms ago: executing program 4 (id=1706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x80, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb73d}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x80}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0000000, 0x0) ioctl$TIOCGICOUNT(r7, 0x5409, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$can_raw(0x1d, 0x3, 0x1) 646.668281ms ago: executing program 1 (id=1707): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000eb13fac9000058ecd4778cff02141a0000950000000000dbece0e2f65303d70000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x410002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0x9) lseek(r7, 0x5, 0x3) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x10000, 0xfffffffd}) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f0000000240), 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) setns(r2, 0x66020000) 510.054963ms ago: executing program 8 (id=1708): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000940)=0x707987cd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 351.04µs ago: executing program 1 (id=1709): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x2f0, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c0, 0x2, [@TCA_BASIC_EMATCHES={0x2bc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x86}, {0x6, 0xfffffffd, 0xf65, 0x7}}}, @TCF_EM_CONTAINER={0xdc, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x4}, "9aec9a3074d6fbbd3f7f4c8c55dc79d71950169064909637f77e76eb020762adf2e1ab18ffd05464dbc062ce975560632143b1b4efffa901c44f1767e81b5a4119bf5057d248be625d466c70c55c0d2de4a0ae46bb670426828eb7aeea27dc6acf372ce435621dd87d82cac21bf9cbfe8d3a7b1928d41fe9f5e26624d0663e60f2c7fe9bfab869ac495f5c1181d9c11719f64e96a58ed1e3b170e62bbb5c153080d88128227efe38917ff45750b6b4965fd10c1731b6ad433ee16a7cc910a9fa23dd6539fa3bf6a90d3c163c38817a"}}]}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x2}, "ec9a27aba5b7b7927b1f0c21885177022d4ffff94fe694b392ee5386f0c92ea316e78a3d546e8941e5d972a762fa6362847f686503b30f2653f00a0eb80c2468c7e2dfebfa4d4bd37953078e55e5df660f942b9e668600af9be178f73664cbcdfaa9dff4f300b1a9c3513fc9e3a7c82cf3ba657e831fc49d3199616961710fc49a27ce186b4162d950f99d5c8fb0505d317f0f66b33adc5619e04a9f1ce060d6ef437bf2fb1baffb98a9598ee28300df8a0570423fab8b568974210092bbb5afc7efeb3dea8cd099d644a2f4078593ac75f8923107dfe644"}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1000}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ec8555", @TCF_META_TYPE_VAR="296080b7d1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xb, 0x1}, {0xfc00, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x2, 0x2}, {0x200, 0x1, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x101}, {0x2, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x95e, 0x7, 0x8}, {{0x2, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xc1, 0x4, 0xeda}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4, 0x2}, {0xf10, 0xe}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xc8a, 0x2, 0x101}, {0x1000, 0x2, 0x0, "8203"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0xb74}, {0x1, 0x6, 0x7fff, 0x6}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x8}, {0xfe78, 0x3, 0x9, 0x3, 0x5, 0x1, 0x1}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 0s ago: executing program 8 (id=1710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000001780), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001840)={0x1, 0x17, 0x1, 0x3, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000540)=']&#,@\x00', &(0x7f0000000580)='\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x371d, &(0x7f0000000740)={0x0, 0x4, 0x40, 0x2, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): t=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.468607][ T28] audit: type=1400 audit(2000000167.020:532): avc: denied { relabelto } for pid=4807 comm="syz.4.1168" name="file0" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 360.535618][ T28] audit: type=1400 audit(2000000167.020:533): avc: denied { associate } for pid=4807 comm="syz.4.1168" name="file0" dev="tmpfs" ino=1429 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_unit_file_t:s0" [ 360.610486][ T4825] FAULT_INJECTION: forcing a failure. [ 360.610486][ T4825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.626098][ T4825] CPU: 0 PID: 4825 Comm: syz.4.1173 Not tainted syzkaller #0 [ 360.635176][ T4825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.648087][ T4825] Call Trace: [ 360.652004][ T4825] [ 360.655931][ T4825] __dump_stack+0x21/0x24 [ 360.660838][ T4825] dump_stack_lvl+0xee/0x150 [ 360.666443][ T4825] ? __cfi_dump_stack_lvl+0x8/0x8 [ 360.674706][ T4825] ? format_decode+0x1bb/0x1520 [ 360.681671][ T4825] dump_stack+0x15/0x24 [ 360.688074][ T4825] should_fail_ex+0x3d4/0x520 [ 360.695551][ T4825] should_fail+0xb/0x10 [ 360.696987][ T4828] xt_hashlimit: size too large, truncated to 1048576 [ 360.699978][ T4825] should_fail_usercopy+0x1a/0x20 [ 360.716126][ T4825] _copy_from_user+0x1e/0xc0 [ 360.723403][ T4825] kstrtouint_from_user+0xbe/0x150 [ 360.726555][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1169'. [ 360.731193][ T4825] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 360.731236][ T4825] ? __kasan_check_read+0x11/0x20 [ 360.731256][ T4825] ? _copy_to_user+0x72/0x90 [ 360.731279][ T4825] ? simple_read_from_buffer+0x10f/0x160 [ 360.744302][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1169'. [ 360.752239][ T4825] proc_fail_nth_write+0x85/0x1f0 [ 360.752276][ T4825] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 360.752297][ T4825] ? security_file_permission+0x8a/0xb0 [ 360.807148][ T4825] ? security_file_permission+0x94/0xb0 [ 360.814716][ T4825] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 360.822465][ T4825] vfs_write+0x40c/0xca0 [ 360.828712][ T4825] ? __kasan_check_read+0x11/0x20 [ 360.834844][ T4825] ? __cfi_vfs_write+0x10/0x10 [ 360.840704][ T4825] ? __kasan_check_write+0x14/0x20 [ 360.847399][ T4825] ? mutex_lock+0x8d/0x1a0 [ 360.853618][ T4825] ? __cfi_mutex_lock+0x10/0x10 [ 360.860046][ T4825] ? __fdget_pos+0x2cd/0x380 [ 360.866458][ T4825] ? ksys_write+0x71/0x240 [ 360.871460][ T4825] ksys_write+0x140/0x240 [ 360.877175][ T4825] ? __cfi_ksys_write+0x10/0x10 [ 360.883704][ T4825] ? debug_smp_processor_id+0x17/0x20 [ 360.891325][ T4825] __x64_sys_write+0x7b/0x90 [ 360.896927][ T4825] x64_sys_call+0x27b/0x9a0 [ 360.903662][ T4825] do_syscall_64+0x4c/0xa0 [ 360.908663][ T4825] ? clear_bhb_loop+0x30/0x80 [ 360.915853][ T4825] ? clear_bhb_loop+0x30/0x80 [ 360.920946][ T4825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.928723][ T4825] RIP: 0033:0x7fa7a738e1ff [ 360.933273][ T4825] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 360.958671][ T4825] RSP: 002b:00007fa7a81ed030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 360.970292][ T4825] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa7a738e1ff [ 360.980050][ T4825] RDX: 0000000000000001 RSI: 00007fa7a81ed0a0 RDI: 0000000000000004 [ 360.988977][ T4825] RBP: 00007fa7a81ed090 R08: 0000000000000000 R09: 0000000000000000 [ 360.998872][ T4825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 361.009694][ T4825] R13: 00007fa7a75e6038 R14: 00007fa7a75e5fa0 R15: 00007ffe70fed248 [ 361.019826][ T4825] [ 361.923168][ T4861] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1182'. [ 362.020093][ T4872] syz.4.1186[4872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.020200][ T4872] syz.4.1186[4872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.206690][ T4874] kvm: pic: non byte write [ 362.227889][ T28] audit: type=1400 audit(2000000169.020:534): avc: denied { create } for pid=4870 comm="syz.4.1186" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 362.253958][ T4877] FAULT_INJECTION: forcing a failure. [ 362.253958][ T4877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.269856][ T4877] CPU: 1 PID: 4877 Comm: syz.4.1186 Not tainted syzkaller #0 [ 362.279140][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.292031][ T4877] Call Trace: [ 362.296174][ T4877] [ 362.300636][ T4877] __dump_stack+0x21/0x24 [ 362.305789][ T4877] dump_stack_lvl+0xee/0x150 [ 362.310872][ T4877] ? __cfi_dump_stack_lvl+0x8/0x8 [ 362.317883][ T4877] ? unwind_get_return_address+0x4d/0x90 [ 362.324176][ T4877] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 362.333483][ T4877] dump_stack+0x15/0x24 [ 362.339994][ T4877] should_fail_ex+0x3d4/0x520 [ 362.346470][ T4877] should_fail+0xb/0x10 [ 362.351111][ T4877] should_fail_usercopy+0x1a/0x20 [ 362.357838][ T4877] _copy_from_user+0x1e/0xc0 [ 362.363536][ T4877] userfaultfd_ioctl+0x653/0x46c0 [ 362.369679][ T4877] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 362.375977][ T4877] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 362.383837][ T4877] ? do_vfs_ioctl+0xc36/0x1c80 [ 362.390068][ T4877] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 362.397662][ T4877] ? kstrtouint+0x74/0xe0 [ 362.402206][ T4877] ? ioctl_has_perm+0x391/0x4c0 [ 362.408859][ T4877] ? has_cap_mac_admin+0x330/0x330 [ 362.416890][ T4877] ? security_file_permission+0x94/0xb0 [ 362.424372][ T4877] ? vfs_write+0x9d6/0xca0 [ 362.430821][ T4877] ? slab_free_freelist_hook+0xc2/0x190 [ 362.438726][ T4877] ? selinux_file_ioctl+0x377/0x480 [ 362.444741][ T4877] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 362.452697][ T4877] ? mutex_unlock+0x89/0x220 [ 362.458846][ T4877] ? __cfi_mutex_unlock+0x10/0x10 [ 362.465433][ T4877] ? __fget_files+0x2d5/0x330 [ 362.470263][ T4877] ? security_file_ioctl+0x95/0xc0 [ 362.475927][ T4877] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 362.482835][ T4877] __se_sys_ioctl+0x12f/0x1b0 [ 362.488868][ T4877] __x64_sys_ioctl+0x7b/0x90 [ 362.496319][ T4877] x64_sys_call+0x58b/0x9a0 [ 362.501871][ T4877] do_syscall_64+0x4c/0xa0 [ 362.508703][ T4877] ? clear_bhb_loop+0x30/0x80 [ 362.514814][ T4877] ? clear_bhb_loop+0x30/0x80 [ 362.520905][ T4877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.528510][ T4877] RIP: 0033:0x7fa7a738f749 [ 362.533893][ T4877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.560071][ T4877] RSP: 002b:00007fa7a81cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.570869][ T4877] RAX: ffffffffffffffda RBX: 00007fa7a75e6090 RCX: 00007fa7a738f749 [ 362.581697][ T4877] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000006 [ 362.590146][ T4877] RBP: 00007fa7a81cc090 R08: 0000000000000000 R09: 0000000000000000 [ 362.601537][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.611668][ T4877] R13: 00007fa7a75e6128 R14: 00007fa7a75e6090 R15: 00007ffe70fed248 [ 362.622586][ T4877] [ 362.679926][ T4887] loop5: detected capacity change from 0 to 256 [ 363.802445][ T4895] syz.9.1192[4895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.802539][ T4895] syz.9.1192[4895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.916101][ T28] audit: type=1400 audit(2000000170.710:535): avc: denied { write } for pid=4898 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.096956][ T4907] kvm: pic: non byte write [ 367.868825][ T4979] syz.2.1215[4979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.868914][ T4979] syz.2.1215[4979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.323015][ T28] audit: type=1400 audit(2000000175.120:536): avc: denied { getopt } for pid=4988 comm="syz.5.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.784296][ T5008] loop6: detected capacity change from 0 to 128 [ 369.810321][ T5006] loop5: detected capacity change from 0 to 256 [ 371.803861][ T5020] loop9: detected capacity change from 0 to 4096 [ 371.909935][ T5020] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 372.024119][ T4335] EXT4-fs (loop9): unmounting filesystem. [ 375.364584][ T5068] loop9: detected capacity change from 0 to 256 [ 375.424751][ T5075] loop6: detected capacity change from 0 to 256 [ 376.579736][ T5090] loop5: detected capacity change from 0 to 256 [ 378.705109][ T5111] loop6: detected capacity change from 0 to 4096 [ 378.802968][ T5111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 378.867526][ T3765] EXT4-fs (loop6): unmounting filesystem. [ 380.049832][ T5148] loop6: detected capacity change from 0 to 256 [ 380.915303][ T5162] loop5: detected capacity change from 0 to 2048 [ 381.002107][ T5162] loop5: p1 p2 < > p3 < p5 p6 > p4 [ 381.031283][ T5162] loop5: partition table partially beyond EOD, truncated [ 381.066822][ T5162] loop5: p1 size 83886080 extends beyond EOD, truncated [ 381.089686][ T5162] loop5: p2 start 4278190080 is beyond EOD, truncated [ 381.116928][ T5162] loop5: p4 size 8192 extends beyond EOD, truncated [ 381.135501][ T5166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5166 comm=syz.5.1267 [ 381.153286][ T5162] loop5: p5 size 83886080 extends beyond EOD, truncated [ 381.185408][ T5162] loop5: p6 size 8192 extends beyond EOD, truncated [ 381.320352][ T1690] udevd[1690]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 381.320390][ T1715] udevd[1715]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 381.338608][ T1691] udevd[1691]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 381.349250][ T1705] udevd[1705]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 381.371005][ T2296] udevd[2296]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 381.487917][ T5168] loop9: detected capacity change from 0 to 4096 [ 381.568679][ T5168] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 382.047167][ T4335] EXT4-fs (loop9): unmounting filesystem. [ 382.654949][ T28] audit: type=1400 audit(2000000189.450:537): avc: denied { create } for pid=5192 comm="syz.2.1280" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 382.686243][ T5193] fuse: Unknown parameter 'X' [ 382.694335][ T28] audit: type=1400 audit(2000000189.480:538): avc: denied { mounton } for pid=5192 comm="syz.2.1280" path="/134/file0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.325274][ T5199] loop5: detected capacity change from 0 to 256 [ 383.546319][ T28] audit: type=1400 audit(2000000190.340:539): avc: denied { bind } for pid=5192 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.847346][ T28] audit: type=1400 audit(2000000190.640:540): avc: denied { unlink } for pid=2978 comm="syz-executor" name="file0" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 383.923493][ T28] audit: type=1400 audit(2000000190.640:541): avc: denied { unmount } for pid=2978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 384.044646][ T5214] loop6: detected capacity change from 0 to 4096 [ 384.317981][ T5214] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 385.174620][ T3765] EXT4-fs (loop6): unmounting filesystem. [ 385.419496][ T5212] loop9: detected capacity change from 0 to 40427 [ 385.494583][ T5212] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 385.521278][ T5212] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 386.208825][ T5242] loop9: detected capacity change from 0 to 256 [ 387.281231][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 387.629498][ T5265] loop6: detected capacity change from 0 to 128 [ 387.921098][ T5281] loop5: detected capacity change from 0 to 1024 [ 387.938527][ T5281] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 388.009774][ T5281] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 388.981647][ T5291] overlayfs: missing 'lowerdir' [ 389.189405][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 389.701312][ T28] audit: type=1400 audit(2000000196.440:542): avc: denied { read write } for pid=5317 comm="syz.6.1319" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 389.788871][ T28] audit: type=1400 audit(2000000196.440:543): avc: denied { open } for pid=5317 comm="syz.6.1319" path="/90/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 389.792600][ T5324] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 391.250859][ T5348] loop6: detected capacity change from 0 to 256 [ 391.334479][ T5353] loop9: detected capacity change from 0 to 4096 [ 391.363956][ T5353] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 391.427237][ T4335] EXT4-fs (loop9): unmounting filesystem. [ 391.572795][ T5366] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 391.603498][ T5366] loop5: detected capacity change from 0 to 512 [ 391.708561][ T5366] FAT-fs (loop5): Unrecognized mount option "allow_utime=00h¶&n(" or missing value [ 393.484869][ T5408] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 394.115137][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1343'. [ 394.473492][ T5425] loop6: detected capacity change from 0 to 256 [ 396.337198][ T28] audit: type=1400 audit(2000000203.130:544): avc: denied { getopt } for pid=5461 comm="syz.4.1361" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.058152][ T28] audit: type=1400 audit(2000000204.850:545): avc: denied { append } for pid=5476 comm="syz.4.1365" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 400.822163][ T28] audit: type=1400 audit(2000000207.620:546): avc: denied { read } for pid=5539 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 400.959796][ T5552] loop6: detected capacity change from 0 to 128 [ 400.969498][ T5553] netlink: 'syz.2.1387': attribute type 13 has an invalid length. [ 400.987894][ T5552] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 400.999244][ T5553] gretap0: refused to change device tx_queue_len [ 401.008234][ T5552] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 401.022871][ T5553] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.044155][ T5557] FAULT_INJECTION: forcing a failure. [ 401.044155][ T5557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.062763][ T5556] netlink: 'syz.9.1386': attribute type 13 has an invalid length. [ 401.062795][ T5557] CPU: 1 PID: 5557 Comm: syz.2.1387 Not tainted syzkaller #0 [ 401.081633][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.094900][ T5557] Call Trace: [ 401.098576][ T5557] [ 401.103441][ T5557] __dump_stack+0x21/0x24 [ 401.108798][ T5557] dump_stack_lvl+0xee/0x150 [ 401.113718][ T5557] ? __cfi_dump_stack_lvl+0x8/0x8 [ 401.119106][ T5557] dump_stack+0x15/0x24 [ 401.123727][ T5557] should_fail_ex+0x3d4/0x520 [ 401.130135][ T5557] should_fail+0xb/0x10 [ 401.135378][ T5557] should_fail_usercopy+0x1a/0x20 [ 401.142914][ T5557] _copy_from_user+0x1e/0xc0 [ 401.149933][ T5557] iovec_from_user+0x1aa/0x2e0 [ 401.155547][ T5557] ? _parse_integer+0x2a/0x40 [ 401.161507][ T5557] __import_iovec+0x71/0x470 [ 401.166684][ T5557] import_iovec+0x7c/0xb0 [ 401.172137][ T5557] ___sys_sendmsg+0x1e4/0x290 [ 401.178026][ T5557] ? __sys_sendmsg+0x270/0x270 [ 401.183433][ T5557] ? __kasan_check_write+0x14/0x20 [ 401.189956][ T5557] ? proc_fail_nth_write+0x17a/0x1f0 [ 401.195667][ T5557] ? vfs_write+0x9d6/0xca0 [ 401.201106][ T5557] ? __fdget+0x19c/0x220 [ 401.206036][ T5557] __x64_sys_sendmsg+0x1f0/0x2c0 [ 401.211531][ T5557] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 401.217889][ T5557] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 401.225607][ T5557] x64_sys_call+0x171/0x9a0 [ 401.231748][ T5557] do_syscall_64+0x4c/0xa0 [ 401.238468][ T5557] ? clear_bhb_loop+0x30/0x80 [ 401.244339][ T5557] ? clear_bhb_loop+0x30/0x80 [ 401.250510][ T5557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.258755][ T5557] RIP: 0033:0x7f99c4f8f749 [ 401.264467][ T5557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.291237][ T5557] RSP: 002b:00007f99c5e92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.302178][ T5557] RAX: ffffffffffffffda RBX: 00007f99c51e6180 RCX: 00007f99c4f8f749 [ 401.312983][ T5557] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 000000000000000a [ 401.325516][ T5557] RBP: 00007f99c5e92090 R08: 0000000000000000 R09: 0000000000000000 [ 401.336246][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.345914][ T5557] R13: 00007f99c51e6218 R14: 00007f99c51e6180 R15: 00007ffd0f9310b8 [ 401.355529][ T5557] [ 401.367039][ T5556] gretap0: refused to change device tx_queue_len [ 401.375891][ T5556] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.564329][ T5568] fscrypt (loop6, inode 12): Mutually exclusive encryption flags (0x14) [ 401.829046][ T3765] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 401.844889][ T3765] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 401.899625][ T28] audit: type=1400 audit(2000000208.690:547): avc: denied { read } for pid=5574 comm="syz.9.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 401.955591][ T3765] EXT4-fs (loop6): unmounting filesystem. [ 401.971674][ T28] audit: type=1400 audit(2000000208.760:548): avc: denied { setopt } for pid=5574 comm="syz.9.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 401.983199][ T5576] netlink: 416 bytes leftover after parsing attributes in process `syz.9.1394'. [ 402.024981][ T28] audit: type=1400 audit(2000000208.770:549): avc: denied { write } for pid=5574 comm="syz.9.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 402.326182][ T5593] loop5: detected capacity change from 0 to 512 [ 402.383828][ T5593] EXT4-fs (loop5): 1 orphan inode deleted [ 402.391229][ T5593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 402.403683][ T5593] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.418495][ T10] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 402.430320][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.443851][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.452611][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6832: comm kworker/u4:1: Failed to release dquot type 1 [ 402.464521][ T5588] device bridge_slave_0 entered promiscuous mode [ 402.482432][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.492386][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.504512][ T5593] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3297542003 (105521344096 ns) > initial count (99957982560 ns). Using initial count to start timer. [ 402.526625][ T5588] device bridge_slave_1 entered promiscuous mode [ 402.625933][ T574] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.636513][ T574] device bridge_slave_0 left promiscuous mode [ 402.644784][ T574] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.657428][ T574] device veth1_macvtap left promiscuous mode [ 402.674366][ T574] device veth0_vlan left promiscuous mode [ 403.103415][ T5618] loop9: detected capacity change from 0 to 256 [ 403.255295][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 403.358407][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.382503][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.420294][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.446965][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.481010][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.490344][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.620518][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.681806][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.712898][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.720656][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.772949][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.817259][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.844319][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.942205][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.979225][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.000327][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.024815][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.053946][ T5588] device veth0_vlan entered promiscuous mode [ 404.094021][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.127533][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.164452][ T5588] device veth1_macvtap entered promiscuous mode [ 404.185316][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.202811][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.221979][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.264590][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 404.311957][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 404.336090][ T28] audit: type=1400 audit(2000000211.130:550): avc: denied { accept } for pid=5638 comm="syz.3.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 407.162938][ T5677] loop5: detected capacity change from 0 to 512 [ 407.204319][ T5677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 407.280446][ T5677] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1421: iget: bad extended attribute block 262144 [ 407.331543][ T5677] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1421: couldn't read orphan inode 15 (err -117) [ 407.789669][ T5677] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 407.957339][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 408.385605][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 408.405482][ T5691] overlayfs: './file1' not a directory [ 408.430386][ T5696] loop5: detected capacity change from 0 to 128 [ 408.467215][ T5696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 408.504441][ T5696] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.722158][ T5696] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x14) [ 408.869652][ T5717] loop9: detected capacity change from 0 to 128 [ 411.398899][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 411.600206][ T5755] loop3: detected capacity change from 0 to 1024 [ 411.631276][ T28] audit: type=1400 audit(2000000218.420:551): avc: denied { create } for pid=5757 comm="syz.9.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 411.715874][ T5760] loop9: detected capacity change from 0 to 128 [ 411.833582][ T5755] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 411.889043][ T5760] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 411.912405][ T5760] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.945820][ T5588] EXT4-fs (loop3): unmounting filesystem. [ 412.157811][ T5758] EXT4-fs warning (device loop9): ext4_group_extend:1870: can't shrink FS - resize aborted [ 412.203093][ T4335] EXT4-fs (loop9): unmounting filesystem. [ 413.611472][ T29] INFO: task syz.3.823:3497 blocked for more than 122 seconds. [ 413.643739][ T29] Not tainted syzkaller #0 [ 413.652131][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.663980][ T29] task:syz.3.823 state:D stack:23552 pid:3497 ppid:2109 flags:0x00004004 [ 413.674447][ T29] Call Trace: [ 413.679691][ T29] [ 413.682782][ T29] __schedule+0xb87/0x14e0 [ 413.688409][ T29] ? ext4_dirty_inode+0xd1/0x100 [ 413.695335][ T29] ? __mark_inode_dirty+0x203/0x9d0 [ 413.701569][ T29] ? __file_update_time+0x243/0x260 [ 413.708552][ T29] ? __sched_text_start+0x8/0x8 [ 413.716665][ T29] ? __kasan_check_write+0x14/0x20 [ 413.724193][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 413.730652][ T29] schedule+0xbd/0x170 [ 413.736163][ T29] io_schedule+0x84/0xe0 [ 413.741024][ T29] folio_wait_bit_common+0x69c/0x880 [ 413.750305][ T29] ? folio_wait_bit+0x30/0x30 [ 413.757296][ T29] ? __cfi_wake_page_function+0x10/0x10 [ 413.764781][ T29] ? xas_start+0x317/0x3e0 [ 413.771283][ T29] ? xas_load+0x380/0x3b0 [ 413.777416][ T29] __filemap_get_folio+0x48b/0x980 [ 413.783734][ T29] ? __cfi___filemap_get_folio+0x10/0x10 [ 413.790754][ T29] ? __kasan_check_write+0x14/0x20 [ 413.799457][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 413.805114][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 413.811348][ T29] shmem_get_folio_gfp+0x2d6/0x2230 [ 413.817750][ T29] ? folio_memcg_unlock+0xf0/0x100 [ 413.823646][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 413.829960][ T29] shmem_fault+0x1ae/0x650 [ 413.839267][ T29] ? __cfi_shmem_fault+0x10/0x10 [ 413.845143][ T29] ? balance_dirty_pages_ratelimited_flags+0x64b/0xb00 [ 413.855520][ T29] ? __kasan_check_write+0x14/0x20 [ 413.861777][ T29] ? fput+0x154/0x1a0 [ 413.867590][ T29] ? fault_dirty_shared_page+0x29d/0x310 [ 413.875513][ T29] do_fault+0xabd/0x1df0 [ 413.881219][ T29] ? pte_marker_clear+0x220/0x220 [ 413.887648][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 413.894610][ T29] handle_mm_fault+0x12fa/0x2640 [ 413.899807][ T29] ? __cfi_handle_mm_fault+0x10/0x10 [ 413.906132][ T29] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 413.912266][ T29] do_user_addr_fault+0x905/0x1050 [ 413.918567][ T29] exc_page_fault+0x51/0xb0 [ 413.923690][ T29] asm_exc_page_fault+0x27/0x30 [ 413.930410][ T29] RIP: 0033:0x7f435a75737c [ 413.936201][ T29] RSP: 002b:00007fff53b78f88 EFLAGS: 00010206 [ 413.942813][ T29] RAX: 0000200000000040 RBX: 0000000000000004 RCX: ffffffffffffffe3 [ 413.952510][ T29] RDX: 000000000000001c RSI: 0000001b2ee21363 RDI: 0000200000000040 [ 413.964170][ T29] RBP: 00007f435a9e7da0 R08: 0000001b2f220000 R09: 0000000000000038 [ 413.972710][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f435a9e627c [ 413.983078][ T29] R13: 00007f435a9e6270 R14: fffffffffffffffe R15: 00007fff53b790a0 [ 413.994985][ T29] [ 414.008519][ T29] INFO: task syz.3.823:3498 blocked for more than 123 seconds. [ 414.028567][ T29] Not tainted syzkaller #0 [ 414.049561][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.095351][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1452'. [ 414.108202][ T29] task:syz.3.823 state:D stack:26688 pid:3498 ppid:2109 flags:0x00004004 [ 414.124043][ T29] Call Trace: [ 414.128383][ T29] [ 414.131746][ T29] __schedule+0xb87/0x14e0 [ 414.137372][ T29] ? __sched_text_start+0x8/0x8 [ 414.143742][ T29] ? __kasan_check_write+0x14/0x20 [ 414.149268][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 414.154941][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 414.161624][ T29] schedule+0xbd/0x170 [ 414.166718][ T29] schedule_preempt_disabled+0x13/0x20 [ 414.173838][ T29] rwsem_down_read_slowpath+0x7c6/0x1510 [ 414.180192][ T29] ? down_write_killable+0x40/0x40 [ 414.188065][ T29] ? __kasan_check_write+0x14/0x20 [ 414.196052][ T29] ? __cfi_do_futex+0x10/0x10 [ 414.202199][ T29] ? downgrade_write+0x260/0x350 [ 414.209909][ T29] ? __kasan_check_write+0x14/0x20 [ 414.218946][ T29] down_read+0x96/0xf0 [ 414.223273][ T29] ? __cfi_down_read+0x10/0x10 [ 414.229065][ T29] ? futex_exit_release+0x119/0x1d0 [ 414.235925][ T29] ? sync_mm_rss+0x22a/0x280 [ 414.243996][ T29] do_exit+0x8bd/0x2650 [ 414.250115][ T29] ? __cfi_do_exit+0x10/0x10 [ 414.256319][ T29] ? __cfi_n_tty_read+0x10/0x10 [ 414.262415][ T29] ? __kasan_check_write+0x14/0x20 [ 414.268773][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 414.275703][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 414.284765][ T29] do_group_exit+0x210/0x2d0 [ 414.290915][ T29] ? __kasan_check_write+0x14/0x20 [ 414.298386][ T29] get_signal+0x13b5/0x1520 [ 414.305124][ T29] arch_do_signal_or_restart+0xb0/0x1030 [ 414.314184][ T29] ? vfs_read+0x50a/0x8c0 [ 414.319621][ T29] ? __cfi_vfs_read+0x10/0x10 [ 414.324675][ T29] ? __fget_files+0x2d5/0x330 [ 414.330558][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 414.337689][ T29] ? __kasan_check_write+0x14/0x20 [ 414.345666][ T29] ? __cfi_ksys_read+0x10/0x10 [ 414.351474][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 414.357443][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 414.366022][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 414.372431][ T29] do_syscall_64+0x58/0xa0 [ 414.378129][ T29] ? clear_bhb_loop+0x30/0x80 [ 414.384150][ T29] ? clear_bhb_loop+0x30/0x80 [ 414.390102][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.399044][ T29] RIP: 0033:0x7f435a78f749 [ 414.404241][ T29] RSP: 002b:00007f435b67c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.415455][ T29] RAX: fffffffffffffe00 RBX: 00007f435a9e5fa0 RCX: 00007f435a78f749 [ 414.424926][ T29] RDX: 000000000000001f RSI: 0000200000000040 RDI: 0000000000000004 [ 414.435401][ T29] RBP: 00007f435a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.444553][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.454276][ T29] R13: 00007f435a9e6038 R14: 00007f435a9e5fa0 R15: 00007fff53b78e28 [ 414.464830][ T29] [ 414.475999][ T5786] loop9: detected capacity change from 0 to 128 [ 414.481313][ T5783] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 414.527237][ T29] INFO: task syz.3.823:3502 blocked for more than 123 seconds. [ 414.537823][ T5786] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 414.561768][ T5786] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 414.580980][ T29] Not tainted syzkaller #0 [ 414.588895][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.612127][ T29] task:syz.3.823 state:D stack:27344 pid:3502 ppid:2109 flags:0x00004004 [ 414.651406][ T29] Call Trace: [ 414.670915][ T29] [ 414.680836][ T29] __schedule+0xb87/0x14e0 [ 414.710987][ T29] ? __sched_text_start+0x8/0x8 [ 414.723254][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 414.782717][ T5786] fscrypt (loop9, inode 12): Mutually exclusive encryption flags (0x14) [ 414.793886][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 414.801446][ T29] schedule+0xbd/0x170 [ 414.807113][ T29] rwsem_down_write_slowpath+0xae1/0x1bf0 [ 414.813886][ T29] ? clear_nonspinnable+0x60/0x60 [ 414.820212][ T29] ? rwsem_down_read_slowpath+0x1510/0x1510 [ 414.938061][ T29] ? __kasan_check_write+0x14/0x20 [ 414.944865][ T29] ? __filemap_get_folio+0x81c/0x980 [ 414.957435][ T29] ? rwsem_write_trylock+0x130/0x300 [ 414.965143][ T29] ? clear_nonspinnable+0x60/0x60 [ 414.972888][ T29] ? __kasan_check_read+0x11/0x20 [ 414.978670][ T29] ? shmem_is_huge+0x163/0x320 [ 414.984511][ T29] down_write+0x21/0x30 [ 414.989749][ T29] vma_start_write+0xbd/0x150 [ 414.996538][ T29] collapse_pte_mapped_thp+0x4f7/0xab0 [ 415.003171][ T29] madvise_collapse+0x6a9/0xa80 [ 415.010123][ T29] do_madvise+0x10ae/0x2f50 [ 415.016416][ T29] ? __cfi_do_madvise+0x10/0x10 [ 415.022893][ T29] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 415.031701][ T29] ? __kasan_check_write+0x14/0x20 [ 415.039137][ T29] ? __switch_to+0x51f/0xe30 [ 415.044434][ T29] ? __cfi___switch_to+0x10/0x10 [ 415.051140][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 415.058645][ T29] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 415.067410][ T29] ? probe_sched_switch+0x63/0x90 [ 415.074486][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 415.080258][ T29] ? finish_task_switch+0x16b/0x7b0 [ 415.087746][ T29] ? __switch_to_asm+0x3a/0x60 [ 415.093107][ T29] ? __schedule+0xb8f/0x14e0 [ 415.099142][ T29] ? __sched_text_start+0x8/0x8 [ 415.114002][ T29] ? __kasan_check_read+0x11/0x20 [ 415.119554][ T29] ? preempt_schedule_irq+0xbb/0x110 [ 415.128897][ T29] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 415.136509][ T29] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 415.143899][ T29] __x64_sys_madvise+0xa9/0xc0 [ 415.150555][ T29] x64_sys_call+0x99e/0x9a0 [ 415.158882][ T29] do_syscall_64+0x4c/0xa0 [ 415.165115][ T29] ? clear_bhb_loop+0x30/0x80 [ 415.171576][ T29] ? clear_bhb_loop+0x30/0x80 [ 415.179177][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.188177][ T29] RIP: 0033:0x7f435a78f749 [ 415.194570][ T29] RSP: 002b:00007f435b65b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 415.205714][ T29] RAX: ffffffffffffffda RBX: 00007f435a9e6090 RCX: 00007f435a78f749 [ 415.215709][ T29] RDX: 0000000000000019 RSI: 0000000008000000 RDI: 0000200000000000 [ 415.231108][ T29] RBP: 00007f435a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.242271][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.252445][ T29] R13: 00007f435a9e6128 R14: 00007f435a9e6090 R15: 00007fff53b78e28 [ 415.262772][ T29] [ 415.781652][ T29] INFO: task syz.3.823:3504 blocked for more than 125 seconds. [ 415.803554][ T29] Not tainted syzkaller #0 [ 415.811516][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.842941][ T29] task:syz.3.823 state:D stack:25008 pid:3504 ppid:2109 flags:0x00004004 [ 415.853885][ T29] Call Trace: [ 415.858055][ T29] [ 415.863088][ T29] __schedule+0xb87/0x14e0 [ 415.868847][ T29] ? __sched_text_start+0x8/0x8 [ 415.874532][ T29] ? __kasan_check_write+0x14/0x20 [ 415.882514][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 415.889099][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 415.895360][ T29] schedule+0xbd/0x170 [ 415.901199][ T29] schedule_preempt_disabled+0x13/0x20 [ 415.908111][ T29] rwsem_down_read_slowpath+0x7c6/0x1510 [ 415.915359][ T29] ? down_write_killable+0x40/0x40 [ 415.921452][ T29] ? __kasan_check_write+0x14/0x20 [ 415.927844][ T29] ? __cfi_do_futex+0x10/0x10 [ 415.933948][ T29] ? downgrade_write+0x260/0x350 [ 415.941887][ T29] ? __kasan_check_write+0x14/0x20 [ 415.947973][ T29] down_read+0x96/0xf0 [ 415.953051][ T29] ? __cfi_down_read+0x10/0x10 [ 415.958907][ T29] ? futex_exit_release+0x119/0x1d0 [ 415.966274][ T29] ? sync_mm_rss+0x22a/0x280 [ 415.971565][ T29] do_exit+0x8bd/0x2650 [ 415.979043][ T29] ? ___sys_sendmsg+0x22c/0x290 [ 415.985268][ T29] ? __cfi_do_exit+0x10/0x10 [ 415.991489][ T29] ? __sys_sendmsg+0x270/0x270 [ 415.997403][ T29] ? futex_unqueue+0x132/0x160 [ 416.002881][ T29] ? __kasan_check_write+0x14/0x20 [ 416.009339][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 416.015606][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 416.022104][ T29] do_group_exit+0x210/0x2d0 [ 416.028685][ T29] ? __kasan_check_write+0x14/0x20 [ 416.035401][ T29] get_signal+0x13b5/0x1520 [ 416.042542][ T29] arch_do_signal_or_restart+0xb0/0x1030 [ 416.050276][ T29] ? __cfi___sys_sendmmsg+0x10/0x10 [ 416.058489][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 416.067484][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 416.074005][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 416.081814][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 416.089120][ T29] do_syscall_64+0x58/0xa0 [ 416.095505][ T29] ? clear_bhb_loop+0x30/0x80 [ 416.102798][ T29] ? clear_bhb_loop+0x30/0x80 [ 416.111856][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.118976][ T29] RIP: 0033:0x7f435a78f749 [ 416.124113][ T29] RSP: 002b:00007f435b63a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 416.138381][ T29] RAX: 000000000000000b RBX: 00007f435a9e6180 RCX: 00007f435a78f749 [ 416.147562][ T29] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000008 [ 416.158484][ T29] RBP: 00007f435a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 416.169556][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.183608][ T29] R13: 00007f435a9e6218 R14: 00007f435a9e6180 R15: 00007fff53b78e28 [ 416.194356][ T29] [ 416.209091][ T29] INFO: task syz.3.823:3507 blocked for more than 125 seconds. [ 416.229310][ T29] Not tainted syzkaller #0 [ 416.236323][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.247901][ T29] task:syz.3.823 state:D stack:28672 pid:3507 ppid:2109 flags:0x00004004 [ 416.264660][ T29] Call Trace: [ 416.269363][ T29] [ 416.273092][ T29] __schedule+0xb87/0x14e0 [ 416.278353][ T29] ? __sched_text_start+0x8/0x8 [ 416.284572][ T29] ? __kasan_check_write+0x14/0x20 [ 416.290309][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 416.296682][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 416.306398][ T29] schedule+0xbd/0x170 [ 416.310930][ T29] schedule_preempt_disabled+0x13/0x20 [ 416.318087][ T29] rwsem_down_read_slowpath+0x7c6/0x1510 [ 416.326360][ T29] ? down_write_killable+0x40/0x40 [ 416.332215][ T29] ? kasan_save_alloc_info+0x25/0x30 [ 416.339553][ T29] ? __kasan_check_write+0x14/0x20 [ 416.346492][ T29] ? __cfi_do_futex+0x10/0x10 [ 416.352310][ T29] ? downgrade_write+0x260/0x350 [ 416.359248][ T29] ? __kasan_check_write+0x14/0x20 [ 416.365952][ T29] down_read+0x96/0xf0 [ 416.370192][ T29] ? __cfi_down_read+0x10/0x10 [ 416.378025][ T29] ? futex_exit_release+0x119/0x1d0 [ 416.384475][ T29] ? sync_mm_rss+0x22a/0x280 [ 416.390640][ T29] do_exit+0x8bd/0x2650 [ 416.396506][ T29] ? __cfi_do_exit+0x10/0x10 [ 416.403561][ T29] ? plist_del+0x3df/0x3f0 [ 416.409553][ T29] ? queued_spin_lock_slowpath+0x47/0x50 [ 416.416104][ T29] ? _raw_spin_lock_irq+0xd9/0xe0 [ 416.422467][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 416.429508][ T29] do_group_exit+0x210/0x2d0 [ 416.436832][ T29] ? __kasan_check_write+0x14/0x20 [ 416.443043][ T29] get_signal+0x13b5/0x1520 [ 416.449580][ T29] arch_do_signal_or_restart+0xb0/0x1030 [ 416.456122][ T29] ? do_futex+0x2dc/0x420 [ 416.462712][ T29] ? memcpy+0x56/0x70 [ 416.467738][ T29] ? __cfi_do_futex+0x10/0x10 [ 416.473242][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 416.479963][ T29] ? __se_sys_futex+0x273/0x2e0 [ 416.486040][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 416.494286][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 416.500414][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 416.509252][ T29] do_syscall_64+0x58/0xa0 [ 416.515339][ T29] ? clear_bhb_loop+0x30/0x80 [ 416.521337][ T29] ? clear_bhb_loop+0x30/0x80 [ 416.526582][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.534098][ T29] RIP: 0033:0x7f435a78f749 [ 416.539825][ T29] RSP: 002b:00007f435b6190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.551002][ T29] RAX: fffffffffffffe00 RBX: 00007f435a9e6278 RCX: 00007f435a78f749 [ 416.562283][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f435a9e6278 [ 416.574788][ T29] RBP: 00007f435a9e6270 R08: 0000000000000000 R09: 0000000000000000 [ 416.585297][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.596525][ T29] R13: 00007f435a9e6308 R14: 00007fff53b78d40 R15: 00007fff53b78e28 [ 416.608080][ T29] [ 416.616784][ T4335] EXT4-fs (loop9): unmounting filesystem. [ 416.623885][ T29] INFO: task syz.3.823:3512 blocked for more than 125 seconds. [ 416.633756][ T29] Not tainted syzkaller #0 [ 416.639989][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.656909][ T29] task:syz.3.823 state:D stack:29416 pid:3512 ppid:2109 flags:0x00004004 [ 416.667188][ T29] Call Trace: [ 416.671265][ T29] [ 416.674741][ T29] __schedule+0xb87/0x14e0 [ 416.679751][ T29] ? __sched_text_start+0x8/0x8 [ 416.685486][ T29] ? __kasan_check_write+0x14/0x20 [ 416.692227][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 416.698634][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 416.705856][ T29] schedule+0xbd/0x170 [ 416.711479][ T29] schedule_preempt_disabled+0x13/0x20 [ 416.719290][ T29] rwsem_down_read_slowpath+0x7c6/0x1510 [ 416.726291][ T29] ? down_write_killable+0x40/0x40 [ 416.732552][ T29] ? __kasan_check_write+0x14/0x20 [ 416.738294][ T29] ? __cfi_do_futex+0x10/0x10 [ 416.745564][ T29] ? downgrade_write+0x260/0x350 [ 416.751095][ T29] ? __kasan_check_write+0x14/0x20 [ 416.758144][ T29] down_read+0x96/0xf0 [ 416.764672][ T29] ? __cfi_down_read+0x10/0x10 [ 416.769932][ T29] ? futex_exit_release+0x119/0x1d0 [ 416.775888][ T29] ? sync_mm_rss+0x22a/0x280 [ 416.781147][ T29] do_exit+0x8bd/0x2650 [ 416.786937][ T29] ? __cfi_do_exit+0x10/0x10 [ 416.793366][ T29] ? plist_del+0x3df/0x3f0 [ 416.801571][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 416.807725][ T29] ? futex_unqueue+0x126/0x160 [ 416.814499][ T29] ? __kasan_check_write+0x14/0x20 [ 416.820193][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 416.828084][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 416.834759][ T29] do_group_exit+0x210/0x2d0 [ 416.842302][ T29] ? __kasan_check_write+0x14/0x20 [ 416.848470][ T29] get_signal+0x13b5/0x1520 [ 416.853886][ T29] arch_do_signal_or_restart+0xb0/0x1030 [ 416.861251][ T29] ? do_futex+0x2dc/0x420 [ 416.867513][ T29] ? __cfi_do_futex+0x10/0x10 [ 416.874038][ T29] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 416.881046][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 416.890289][ T29] ? __se_sys_futex+0x273/0x2e0 [ 416.896413][ T29] ? __cfi_ksys_read+0x10/0x10 [ 416.902942][ T29] ? do_user_addr_fault+0x9ac/0x1050 [ 416.910044][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 416.918557][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 416.926306][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 416.932933][ T29] do_syscall_64+0x58/0xa0 [ 416.937714][ T29] ? clear_bhb_loop+0x30/0x80 [ 416.942758][ T29] ? clear_bhb_loop+0x30/0x80 [ 416.948877][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.955577][ T29] RIP: 0033:0x7f435a78f749 [ 416.961419][ T29] RSP: 002b:00007f435b5f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.975205][ T29] RAX: fffffffffffffe00 RBX: 00007f435a9e6368 RCX: 00007f435a78f749 [ 416.986967][ T29] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f435a9e6368 [ 416.996700][ T29] RBP: 00007f435a9e6360 R08: 0000000000000000 R09: 0000000000000000 [ 417.007047][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.017039][ T29] R13: 00007f435a9e63f8 R14: 00007fff53b78d40 R15: 00007fff53b78e28 [ 417.026178][ T29] [ 417.031281][ T29] NMI backtrace for cpu 1 [ 417.036539][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 417.048213][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.060892][ T29] Call Trace: [ 417.064496][ T29] [ 417.069782][ T29] __dump_stack+0x21/0x24 [ 417.075206][ T29] dump_stack_lvl+0xee/0x150 [ 417.081868][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 417.089104][ T29] dump_stack+0x15/0x24 [ 417.094791][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 417.101176][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 417.109413][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 417.117544][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 417.123215][ T29] ? memcpy+0x56/0x70 [ 417.130030][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 417.137928][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 417.147081][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 417.154670][ T29] watchdog+0xd44/0xe80 [ 417.159219][ T29] ? __cfi_watchdog+0x10/0x10 [ 417.164965][ T29] ? __kasan_check_read+0x11/0x20 [ 417.171529][ T29] ? __kthread_parkme+0x142/0x180 [ 417.180374][ T29] kthread+0x281/0x320 [ 417.185398][ T29] ? __cfi_watchdog+0x10/0x10 [ 417.191865][ T29] ? __cfi_kthread+0x10/0x10 [ 417.197820][ T29] ret_from_fork+0x1f/0x30 [ 417.203882][ T29] [ 417.207751][ T29] Sending NMI from CPU 1 to CPUs 0: [ 417.214865][ C0] NMI backtrace for cpu 0 [ 417.214883][ C0] CPU: 0 PID: 4335 Comm: syz-executor Not tainted syzkaller #0 [ 417.214903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.214914][ C0] RIP: 0010:get_stack_info+0x83/0xf0 [ 417.214942][ C0] Code: 8b 05 11 73 d5 7e 49 39 c7 75 09 80 3d 0d 46 42 06 00 74 17 41 c7 06 00 00 00 00 b8 ea ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c6 05 ed 45 42 06 01 41 8b 36 48 c7 c7 c8 15 41 86 e8 82 af bc [ 417.214957][ C0] RSP: 0018:ffffc900007a73a8 EFLAGS: 00000202 [ 417.214981][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 417.214994][ C0] RDX: 0000000000000002 RSI: ffffc900007a8000 RDI: ffffc900007a7418 [ 417.215007][ C0] RBP: ffffc900007a7418 R08: dffffc0000000001 R09: ffffc900007a7428 [ 417.215093][ C0] R10: fffff520000f4e91 R11: 1ffff920000f4e85 R12: 0000000000000000 [ 417.215116][ C0] R13: ffffc900007a7418 R14: ffffc900007a7428 R15: ffff88810ce4e540 [ 417.215129][ C0] FS: 0000555574d4b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 417.215143][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.215192][ C0] CR2: 00007f3d2ee3a599 CR3: 000000012571b000 CR4: 00000000003526b0 [ 417.215210][ C0] Call Trace: [ 417.215218][ C0] [ 417.215225][ C0] ? __unwind_start+0x1e2/0x3a0 [ 417.215253][ C0] ? kernel_text_address+0xa0/0xd0 [ 417.215280][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 417.215306][ C0] arch_stack_walk+0xe4/0x150 [ 417.215339][ C0] stack_trace_save+0x98/0xe0 [ 417.215362][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 417.215385][ C0] ? __stack_depot_save+0x36/0x480 [ 417.215406][ C0] ? memset+0x35/0x40 [ 417.215424][ C0] kasan_set_track+0x4b/0x70 [ 417.215458][ C0] ? debug_smp_processor_id+0x17/0x20 [ 417.215479][ C0] ? kasan_quarantine_put+0x34/0x190 [ 417.215499][ C0] ? kmem_cache_free+0x12d/0x300 [ 417.215525][ C0] kasan_save_free_info+0x31/0x50 [ 417.215553][ C0] ____kasan_slab_free+0x132/0x180 [ 417.215577][ C0] __kasan_slab_free+0x11/0x20 [ 417.215602][ C0] slab_free_freelist_hook+0xc2/0x190 [ 417.215683][ C0] ? free_buffer_head+0x49/0xb0 [ 417.215705][ C0] kmem_cache_free+0x12d/0x300 [ 417.215732][ C0] free_buffer_head+0x49/0xb0 [ 417.215753][ C0] try_to_free_buffers+0x198/0x1e0 [ 417.215779][ C0] filemap_release_folio+0x202/0x220 [ 417.215804][ C0] mapping_evict_folio+0x181/0x1f0 [ 417.215824][ C0] invalidate_mapping_pagevec+0x3b8/0x5a0 [ 417.215844][ C0] ? irqentry_exit+0x37/0x40 [ 417.215860][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 417.215891][ C0] ? __cfi_invalidate_mapping_pagevec+0x10/0x10 [ 417.215920][ C0] ? _find_next_bit+0xf7/0x130 [ 417.215951][ C0] ? __lru_add_drain_all+0x74a/0x7b0 [ 417.215982][ C0] invalidate_mapping_pages+0x27/0x30 [ 417.216002][ C0] invalidate_bdev+0xa6/0x150 [ 417.216027][ C0] ext4_put_super+0x718/0xac0 [ 417.216051][ C0] ? __cfi_ext4_put_super+0x10/0x10 [ 417.216072][ C0] generic_shutdown_super+0x15f/0x370 [ 417.216114][ C0] kill_block_super+0x7f/0xf0 [ 417.216141][ C0] deactivate_locked_super+0xb5/0x120 [ 417.216165][ C0] deactivate_super+0xaf/0xe0 [ 417.216188][ C0] cleanup_mnt+0x45f/0x4e0 [ 417.216208][ C0] __cleanup_mnt+0x19/0x20 [ 417.216224][ C0] task_work_run+0x1db/0x240 [ 417.216247][ C0] ? __cfi_task_work_run+0x10/0x10 [ 417.216270][ C0] ? __x64_sys_umount+0x125/0x160 [ 417.216294][ C0] ? __cfi___x64_sys_umount+0x10/0x10 [ 417.216320][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 417.216341][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 417.216362][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 417.216388][ C0] do_syscall_64+0x58/0xa0 [ 417.216409][ C0] ? clear_bhb_loop+0x30/0x80 [ 417.216437][ C0] ? clear_bhb_loop+0x30/0x80 [ 417.216464][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.216512][ C0] RIP: 0033:0x7f512f190a77 [ 417.216529][ C0] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 417.216551][ C0] RSP: 002b:00007ffff1d5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 417.216572][ C0] RAX: 0000000000000000 RBX: 00007f512f213d7d RCX: 00007f512f190a77 [ 417.216591][ C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff1d5a0f0 [ 417.216603][ C0] RBP: 00007ffff1d5a0f0 R08: 0000000000000000 R09: 0000000000000000 [ 417.216614][ C0] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff1d5b180 [ 417.216627][ C0] R13: 00007f512f213d7d R14: 000000000006560f R15: 00007ffff1d5b1c0 [ 417.216644][ C0] [ 417.832593][ T28] audit: type=1400 audit(2000000224.630:552): avc: denied { setopt } for pid=5818 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.874882][ T28] audit: type=1400 audit(2000000224.670:553): avc: denied { bind } for pid=5818 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.909857][ T5821] loop3: detected capacity change from 0 to 128 [ 417.931953][ T5821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 417.947249][ T5821] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.088506][ T419] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 418.613674][ T5832] fuse: Bad value for 'fd' [ 418.644671][ T5821] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x14) [ 419.091527][ T419] usb 10-1: Using ep0 maxpacket: 8 [ 419.098228][ T419] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 250, using maximum allowed: 30 [ 419.154605][ T5588] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 419.176334][ T5837] loop5: detected capacity change from 0 to 512 [ 419.184501][ T419] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 419.201752][ T419] usb 10-1: config 0 interface 0 has no altsetting 0 [ 419.210463][ T419] usb 10-1: New USB device found, idVendor=056a, idProduct=0024, bcdDevice= 0.00 [ 419.226252][ T419] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.228987][ T5588] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 419.255695][ T419] usb 10-1: config 0 descriptor?? [ 419.348943][ T5846] FAULT_INJECTION: forcing a failure. [ 419.348943][ T5846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.372335][ T5848] loop5: detected capacity change from 0 to 128 [ 419.384344][ T5846] CPU: 1 PID: 5846 Comm: syz.2.1468 Not tainted syzkaller #0 [ 419.393712][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.406998][ T5846] Call Trace: [ 419.411383][ T5846] [ 419.415090][ T5846] __dump_stack+0x21/0x24 [ 419.421011][ T5846] dump_stack_lvl+0xee/0x150 [ 419.427128][ T5846] ? __cfi_dump_stack_lvl+0x8/0x8 [ 419.433317][ T5846] dump_stack+0x15/0x24 [ 419.438846][ T5846] should_fail_ex+0x3d4/0x520 [ 419.445555][ T5846] should_fail+0xb/0x10 [ 419.450269][ T5846] should_fail_usercopy+0x1a/0x20 [ 419.456099][ T5846] _copy_to_user+0x1e/0x90 [ 419.461970][ T5846] simple_read_from_buffer+0xe9/0x160 [ 419.469134][ T5846] proc_fail_nth_read+0x19a/0x210 [ 419.475026][ T5846] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 419.481325][ T5846] ? security_file_permission+0x94/0xb0 [ 419.488716][ T5846] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 419.495095][ T5846] vfs_read+0x26e/0x8c0 [ 419.499852][ T5846] ? __cfi_vfs_read+0x10/0x10 [ 419.504738][ T5846] ? __kasan_check_write+0x14/0x20 [ 419.511205][ T5846] ? mutex_lock+0x8d/0x1a0 [ 419.516140][ T5846] ? __cfi_mutex_lock+0x10/0x10 [ 419.522991][ T5846] ? __fdget_pos+0x2cd/0x380 [ 419.528351][ T5846] ? ksys_read+0x71/0x240 [ 419.534064][ T5846] ksys_read+0x140/0x240 [ 419.540251][ T5846] ? __cfi_ksys_read+0x10/0x10 [ 419.547331][ T5846] ? do_user_addr_fault+0x9ac/0x1050 [ 419.554385][ T5846] ? debug_smp_processor_id+0x17/0x20 [ 419.560766][ T5846] __x64_sys_read+0x7b/0x90 [ 419.566203][ T5846] x64_sys_call+0x2f/0x9a0 [ 419.572602][ T5846] do_syscall_64+0x4c/0xa0 [ 419.580645][ T5846] ? clear_bhb_loop+0x30/0x80 [ 419.587109][ T5846] ? clear_bhb_loop+0x30/0x80 [ 419.592201][ T5846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.600912][ T5846] RIP: 0033:0x7f99c4f8e15c [ 419.607703][ T5846] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 419.632667][ T5846] RSP: 002b:00007f99c5ed4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.644454][ T5846] RAX: ffffffffffffffda RBX: 00007f99c51e5fa0 RCX: 00007f99c4f8e15c [ 419.655006][ T5846] RDX: 000000000000000f RSI: 00007f99c5ed40a0 RDI: 0000000000000003 [ 419.666339][ T5846] RBP: 00007f99c5ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 419.676321][ T5846] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 419.686491][ T5846] R13: 00007f99c51e6038 R14: 00007f99c51e5fa0 R15: 00007ffd0f9310b8 [ 419.696814][ T5846] [ 419.710205][ T5848] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 419.724217][ T5848] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.772262][ T5588] EXT4-fs (loop3): unmounting filesystem. [ 419.801543][ T419] usbhid 10-1:0.0: can't add hid device: -71 [ 419.819415][ T419] usbhid: probe of 10-1:0.0 failed with error -71 [ 419.835952][ T419] usb 10-1: USB disconnect, device number 4 [ 420.156871][ T5860] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x14) [ 420.570292][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 420.808830][ T560] device bridge_slave_1 left promiscuous mode [ 420.829332][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.117516][ T560] device bridge_slave_0 left promiscuous mode [ 421.125782][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.142444][ T560] device veth1_macvtap left promiscuous mode [ 421.150230][ T560] device veth0_vlan left promiscuous mode [ 421.571122][ T5885] loop9: detected capacity change from 0 to 128 [ 421.758722][ T5885] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 421.783519][ T5885] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.819876][ T5885] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1477'. [ 422.299962][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.343705][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.378881][ T5873] device bridge_slave_0 entered promiscuous mode [ 422.418944][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.482157][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.532131][ T5873] device bridge_slave_1 entered promiscuous mode [ 422.731100][ T4335] EXT4-fs (loop9): unmounting filesystem. [ 422.835238][ T5898] loop9: detected capacity change from 0 to 128 [ 422.909690][ T28] audit: type=1400 audit(2000000229.700:554): avc: denied { ioctl } for pid=5889 comm="syz.5.1478" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 422.982251][ T5910] loop5: detected capacity change from 0 to 128 [ 423.026767][ T5910] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 423.039505][ T5910] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 423.056785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 423.071135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.123013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 423.150371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.163010][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.172421][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.181142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 423.191643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.208568][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.217611][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.236167][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.246318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.258650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.288402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.307513][ T5910] fscrypt (loop5, inode 12): Mutually exclusive encryption flags (0x14) [ 423.328678][ T5873] device veth0_vlan entered promiscuous mode [ 423.411978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.431857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.453125][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.489122][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.503846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.556087][ T5873] device veth1_macvtap entered promiscuous mode [ 423.572512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 423.581982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 423.593902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.611115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.622538][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.840409][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 424.021980][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 424.344578][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.417041][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.497759][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.982696][ T24] usb 10-1: Product: syz [ 424.988545][ T24] usb 10-1: Manufacturer: syz [ 424.994729][ T24] usb 10-1: SerialNumber: syz [ 425.301882][ T419] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 425.481001][ T5955] loop5: detected capacity change from 0 to 128 [ 425.491238][ T419] usb 5-1: Using ep0 maxpacket: 8 [ 425.501933][ T5955] EXT4-fs (loop5): Test dummy encryption mode enabled [ 425.510035][ T5955] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 576460752303423507)! [ 425.527189][ T5955] EXT4-fs (loop5): group descriptors corrupted! [ 425.538328][ T419] usb 5-1: config 125 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.553791][ T419] usb 5-1: config 125 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.567321][ T419] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 425.579046][ T419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.032116][ T24] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 426.048261][ T24] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 426.066471][ T5963] syz.8.1496[5963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.066567][ T5963] syz.8.1496[5963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.097537][ T24] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 426.125990][ T419] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 426.143016][ T419] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 426.147283][ T5965] loop8: detected capacity change from 0 to 512 [ 426.173736][ T419] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 426.205228][ T419] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 426.252247][ T419] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 426.285907][ T24] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 426.299901][ T419] kone 0003:1E7D:2CED.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 426.320348][ T5965] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.1496: inode has both inline data and extents flags [ 426.346131][ T5965] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1496: couldn't read orphan inode 15 (err -117) [ 426.409549][ T5965] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 426.465221][ T28] audit: type=1400 audit(2000000233.260:555): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 426.507428][ T24] usb 10-1: USB disconnect, device number 5 [ 426.572107][ T24] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 426.606182][ T28] audit: type=1400 audit(2000000233.260:556): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.778725][ T28] audit: type=1400 audit(2000000233.260:557): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=10432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 426.789575][ T6] usb 5-1: USB disconnect, device number 8 [ 426.817691][ T5976] loop9: detected capacity change from 0 to 128 [ 426.885838][ T5976] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 426.936538][ T28] audit: type=1400 audit(2000000233.260:558): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 426.965011][ T28] audit: type=1400 audit(2000000233.260:559): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=10432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 426.974699][ T5976] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 427.015525][ T28] audit: type=1400 audit(2000000233.320:560): avc: denied { append } for pid=5958 comm="syz.8.1496" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 427.188770][ T28] audit: type=1400 audit(2000000233.560:561): avc: denied { read } for pid=5974 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.324303][ T5976] fscrypt (loop9, inode 12): Mutually exclusive encryption flags (0x14) [ 427.403518][ T28] audit: type=1400 audit(2000000233.560:562): avc: denied { open } for pid=5974 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.604376][ T28] audit: type=1400 audit(2000000233.560:563): avc: denied { getattr } for pid=5974 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.701338][ T4335] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 427.787547][ T4335] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid [ 427.931082][ T4335] EXT4-fs (loop9): unmounting filesystem. [ 429.246265][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.255464][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.265944][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 429.266130][ T28] audit: type=1400 audit(2000000236.060:571): avc: denied { connect } for pid=6030 comm="syz.2.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 429.268644][ T6033] device bridge_slave_0 entered promiscuous mode [ 429.332293][ T6043] netlink: 'syz.5.1510': attribute type 13 has an invalid length. [ 429.342287][ T6043] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1510'. [ 429.374014][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.405582][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.447020][ T6033] device bridge_slave_1 entered promiscuous mode [ 429.644289][ T360] device bridge_slave_1 left promiscuous mode [ 429.663703][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.759000][ T360] device bridge_slave_0 left promiscuous mode [ 429.772148][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.811524][ T360] device veth1_macvtap left promiscuous mode [ 429.819096][ T360] device veth0_vlan left promiscuous mode [ 430.774427][ T6051] loop5: detected capacity change from 0 to 128 [ 431.260647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.287520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.303211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.316832][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.337849][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.664066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.675443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.686595][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.696638][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.737683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.759453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.773363][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.782621][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.795799][ T5873] EXT4-fs (loop8): unmounting filesystem. [ 431.814330][ T6033] device veth0_vlan entered promiscuous mode [ 431.831862][ T6033] device veth1_macvtap entered promiscuous mode [ 431.890910][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.907040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.922356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.932742][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.192814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.203568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.214904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 435.090614][ T6098] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 435.170621][ T6097] loop7: detected capacity change from 0 to 512 [ 435.188389][ T6097] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 435.214589][ T6097] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 435.244053][ T6097] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 435.254011][ T6097] EXT4-fs (loop7): failed to initialize system zone (-117) [ 435.264135][ T6097] EXT4-fs (loop7): mount failed [ 435.352831][ T6097] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 435.372414][ T6110] loop5: detected capacity change from 0 to 4096 [ 435.387669][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'. [ 435.420117][ T6097] SELinux: failed to load policy [ 435.448416][ T6110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 435.497231][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 435.726463][ T28] audit: type=1400 audit(2000000242.520:572): avc: denied { create } for pid=6137 comm="syz.5.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 435.753430][ T6140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6140 comm=syz.5.1536 [ 435.772415][ T28] audit: type=1400 audit(2000000242.560:573): avc: denied { bind } for pid=6137 comm="syz.5.1536" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 435.834548][ T28] audit: type=1400 audit(2000000242.560:574): avc: denied { name_bind } for pid=6137 comm="syz.5.1536" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 436.137200][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1535'. [ 436.150994][ T6144] device bridge_slave_1 left promiscuous mode [ 436.160107][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.316635][ T6144] device bridge_slave_0 left promiscuous mode [ 436.325526][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.615751][ T28] audit: type=1400 audit(2000000242.560:575): avc: denied { node_bind } for pid=6137 comm="syz.5.1536" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 436.824005][ T28] audit: type=1400 audit(2000000242.930:576): avc: denied { ioctl } for pid=6135 comm="syz.8.1535" path="socket:[41242]" dev="sockfs" ino=41242 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.067071][ T6151] loop7: detected capacity change from 0 to 512 [ 437.084400][ T6151] EXT4-fs: Ignoring removed orlov option [ 437.093223][ T6151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 437.095081][ T6159] loop8: detected capacity change from 0 to 128 [ 437.145949][ T6151] EXT4-fs (loop7): orphan cleanup on readonly fs [ 437.154451][ T6151] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1540: bg 0: block 248: padding at end of block bitmap is not set [ 437.180362][ T6151] Quota error (device loop7): write_blk: dquota write failed [ 437.208637][ T6151] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 437.223072][ T6151] EXT4-fs error (device loop7): ext4_acquire_dquot:6796: comm syz.7.1540: Failed to acquire dquot type 1 [ 437.242190][ T6151] EXT4-fs (loop7): 1 truncate cleaned up [ 437.250954][ T6151] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 437.313737][ T6151] EXT4-fs: Ignoring removed orlov option [ 437.322851][ T28] audit: type=1400 audit(2000000244.110:577): avc: denied { remount } for pid=6148 comm="syz.7.1540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 437.358695][ T6151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 437.373650][ T6151] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 437.402321][ T6151] EXT4-fs error (device loop7): __ext4_remount:6605: comm syz.7.1540: Abort forced by user [ 437.419856][ T6151] EXT4-fs (loop7): Remounting filesystem read-only [ 437.430764][ T6151] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 437.440461][ T6151] ext4 filesystem being remounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.457766][ T6168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'. [ 437.477619][ T6033] EXT4-fs (loop7): unmounting filesystem. [ 437.488403][ T28] audit: type=1400 audit(2000000244.290:578): avc: denied { unmount } for pid=6163 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 437.602321][ T6178] 9pnet_fd: Insufficient options for proto=fd [ 437.780445][ T6181] xt_CT: No such helper "snmp" [ 437.984379][ T29] INFO: task syz.3.823:3497 blocked for more than 147 seconds. [ 438.262849][ T29] Not tainted syzkaller #0 [ 438.451586][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.461578][ T29] task:syz.3.823 state:D stack:23552 pid:3497 ppid:2109 flags:0x00004004 [ 438.474614][ T29] Call Trace: [ 438.479428][ T29] [ 438.482804][ T29] __schedule+0xb87/0x14e0 [ 438.488212][ T29] ? ext4_dirty_inode+0xd1/0x100 [ 438.496921][ T29] ? __mark_inode_dirty+0x203/0x9d0 [ 438.505190][ T29] ? __file_update_time+0x243/0x260 [ 438.511953][ T29] ? __sched_text_start+0x8/0x8 [ 438.517803][ T29] ? __kasan_check_write+0x14/0x20 [ 438.525643][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 438.532282][ T29] schedule+0xbd/0x170 [ 438.540261][ T29] io_schedule+0x84/0xe0 [ 438.545746][ T29] folio_wait_bit_common+0x69c/0x880 [ 438.554392][ T29] ? folio_wait_bit+0x30/0x30 [ 438.562574][ T29] ? __cfi_wake_page_function+0x10/0x10 [ 438.569968][ T29] ? xas_start+0x317/0x3e0 [ 438.597132][ T29] ? xas_load+0x380/0x3b0 [ 438.602913][ T29] __filemap_get_folio+0x48b/0x980 [ 438.624642][ T29] ? __cfi___filemap_get_folio+0x10/0x10 [ 438.634329][ T29] ? __kasan_check_write+0x14/0x20 [ 438.641378][ T29] ? _raw_spin_lock+0x8e/0xe0 [ 438.648037][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 438.659778][ T29] shmem_get_folio_gfp+0x2d6/0x2230 [ 438.678261][ T29] ? folio_memcg_unlock+0xf0/0x100 [ 438.686530][ T29] ? __cfi__raw_spin_lock+0x10/0x10 [ 438.694343][ T29] shmem_fault+0x1ae/0x650 [ 438.700964][ T29] ? __cfi_shmem_fault+0x10/0x10 [ 438.724806][ T29] ? balance_dirty_pages_ratelimited_flags+0x64b/0xb00 [ 438.733723][ T29] ? __kasan_check_write+0x14/0x20 [ 438.741798][ T29] ? fput+0x154/0x1a0 [ 438.771408][ T29] ? fault_dirty_shared_page+0x29d/0x310 [ 438.779950][ T29] do_fault+0xabd/0x1df0 [ 438.785745][ T29] ? pte_marker_clear+0x220/0x220 [ 438.804579][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 438.811710][ T29] handle_mm_fault+0x12fa/0x2640 [ 438.820578][ T29] ? __cfi_handle_mm_fault+0x10/0x10 [ 438.827025][ T29] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 438.834395][ T29] do_user_addr_fault+0x905/0x1050 [ 438.846410][ T29] exc_page_fault+0x51/0xb0 [ 438.853683][ T29] asm_exc_page_fault+0x27/0x30 [ 438.861135][ T29] RIP: 0033:0x7f435a75737c [ 438.867982][ T29] RSP: 002b:00007fff53b78f88 EFLAGS: 00010206 [ 438.876025][ T29] RAX: 0000200000000040 RBX: 0000000000000004 RCX: ffffffffffffffe3 [ 438.898727][ T29] RDX: 000000000000001c RSI: 0000001b2ee21363 RDI: 0000200000000040 [ 438.908617][ T29] RBP: 00007f435a9e7da0 R08: 0000001b2f220000 R09: 0000000000000038 [ 438.920979][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f435a9e627c [ 438.931128][ T29] R13: 00007f435a9e6270 R14: fffffffffffffffe R15: 00007fff53b790a0 [ 438.942503][ T29] [ 439.029695][ T29] INFO: task syz.3.823:3498 blocked for more than 148 seconds. [ 439.259528][ T29] Not tainted syzkaller #0 [ 439.265545][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 439.275712][ T29] task:syz.3.823 state:D stack:26688 pid:3498 ppid:2109 flags:0x00004004 [ 439.286837][ T29] Call Trace: [ 439.290906][ T29] [ 439.295007][ T29] __schedule+0xb87/0x14e0 [ 439.300601][ T29] ? __sched_text_start+0x8/0x8 [ 439.307171][ T29] ? __kasan_check_write+0x14/0x20 [ 439.314847][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 439.321023][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 439.328415][ T29] schedule+0xbd/0x170 [ 439.342045][ T29] schedule_preempt_disabled+0x13/0x20 [ 439.359000][ T29] rwsem_down_read_slowpath+0x7c6/0x1510 [ 439.368985][ T29] ? down_write_killable+0x40/0x40 [ 439.379485][ T29] ? __kasan_check_write+0x14/0x20 [ 439.386352][ T29] ? __cfi_do_futex+0x10/0x10 [ 439.391950][ T29] ? downgrade_write+0x260/0x350 [ 439.399081][ T29] ? __kasan_check_write+0x14/0x20 [ 439.407063][ T29] down_read+0x96/0xf0 [ 439.413297][ T29] ? __cfi_down_read+0x10/0x10 [ 439.420284][ T29] ? futex_exit_release+0x119/0x1d0 [ 439.426979][ T29] ? sync_mm_rss+0x22a/0x280 [ 439.435336][ T29] do_exit+0x8bd/0x2650 [ 439.443071][ T29] ? __cfi_do_exit+0x10/0x10 [ 439.449926][ T29] ? __cfi_n_tty_read+0x10/0x10 [ 439.460379][ T29] ? __kasan_check_write+0x14/0x20 [ 439.477241][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 439.484007][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 439.490718][ T29] do_group_exit+0x210/0x2d0 [ 439.497299][ T29] ? __kasan_check_write+0x14/0x20 [ 439.504600][ T29] get_signal+0x13b5/0x1520 [ 439.510750][ T29] arch_do_signal_or_restart+0xb0/0x1030 [ 439.530148][ T29] ? vfs_read+0x50a/0x8c0 [ 439.538973][ T29] ? __cfi_vfs_read+0x10/0x10 [ 439.546207][ T29] ? __fget_files+0x2d5/0x330 [ 439.553055][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 439.562420][ T29] ? __kasan_check_write+0x14/0x20 [ 439.570246][ T29] ? __cfi_ksys_read+0x10/0x10 [ 439.577430][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 439.586711][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 439.607919][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 439.627266][ T29] do_syscall_64+0x58/0xa0 [ 439.632902][ T29] ? clear_bhb_loop+0x30/0x80 [ 439.662631][ T29] ? clear_bhb_loop+0x30/0x80 [ 439.670595][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.677571][ T29] RIP: 0033:0x7f435a78f749 [ 439.696455][ T29] RSP: 002b:00007f435b67c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.723971][ T29] RAX: fffffffffffffe00 RBX: 00007f435a9e5fa0 RCX: 00007f435a78f749 [ 439.736266][ T29] RDX: 000000000000001f RSI: 0000200000000040 RDI: 0000000000000004 [ 439.758222][ T29] RBP: 00007f435a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 439.769061][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.781053][ T29] R13: 00007f435a9e6038 R14: 00007f435a9e5fa0 R15: 00007fff53b78e28 [ 439.791807][ T29] [ 439.864542][ T29] INFO: task syz.3.823:3502 blocked for more than 149 seconds. [ 440.152848][ T29] Not tainted syzkaller #0 [ 440.161025][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.173474][ T29] task:syz.3.823 state:D stack:27344 pid:3502 ppid:2109 flags:0x00004004 [ 440.246722][ T29] Call Trace: [ 440.254826][ T29] [ 440.258368][ T29] __schedule+0xb87/0x14e0 [ 440.263550][ T29] ? __sched_text_start+0x8/0x8 [ 440.269928][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 440.277673][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 440.284417][ T29] schedule+0xbd/0x170 [ 440.291390][ T29] rwsem_down_write_slowpath+0xae1/0x1bf0 [ 440.298662][ T29] ? clear_nonspinnable+0x60/0x60 [ 440.305233][ T29] ? rwsem_down_read_slowpath+0x1510/0x1510 [ 440.312563][ T29] ? __kasan_check_write+0x14/0x20 [ 440.318265][ T29] ? __filemap_get_folio+0x81c/0x980 [ 440.326356][ T29] ? rwsem_write_trylock+0x130/0x300 [ 440.333703][ T29] ? clear_nonspinnable+0x60/0x60 [ 440.342086][ T29] ? __kasan_check_read+0x11/0x20 [ 440.349456][ T29] ? shmem_is_huge+0x163/0x320 [ 440.357230][ T29] down_write+0x21/0x30 [ 440.362758][ T29] vma_start_write+0xbd/0x150 [ 440.368482][ T29] collapse_pte_mapped_thp+0x4f7/0xab0 [ 440.374711][ T29] madvise_collapse+0x6a9/0xa80 [ 440.381615][ T29] do_madvise+0x10ae/0x2f50 [ 440.388677][ T29] ? __cfi_do_madvise+0x10/0x10 [ 440.396201][ T29] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 440.404057][ T29] ? __kasan_check_write+0x14/0x20 [ 440.410806][ T29] ? __switch_to+0x51f/0xe30 [ 440.416379][ T29] ? __cfi___switch_to+0x10/0x10 [ 440.422981][ T29] ? __this_cpu_preempt_check+0x13/0x20 [ 440.431547][ T29] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 440.440290][ T29] ? probe_sched_switch+0x63/0x90 [ 440.447334][ T29] ? _raw_spin_unlock+0x4c/0x70 [ 440.455023][ T29] ? finish_task_switch+0x16b/0x7b0 [ 440.462209][ T29] ? __switch_to_asm+0x3a/0x60 [ 440.471344][ T29] ? __schedule+0xb8f/0x14e0 [ 440.477372][ T29] ? __sched_text_start+0x8/0x8 [ 440.483376][ T29] ? __kasan_check_read+0x11/0x20 [ 440.490753][ T29] ? preempt_schedule_irq+0xbb/0x110 [ 440.497420][ T29] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 440.506844][ T29] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 440.514835][ T29] __x64_sys_madvise+0xa9/0xc0 [ 440.521500][ T29] x64_sys_call+0x99e/0x9a0 [ 440.527483][ T29] do_syscall_64+0x4c/0xa0 [ 440.534172][ T29] ? clear_bhb_loop+0x30/0x80 [ 440.540053][ T29] ? clear_bhb_loop+0x30/0x80 [ 440.545787][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.553875][ T29] RIP: 0033:0x7f435a78f749 [ 440.560401][ T29] RSP: 002b:00007f435b65b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 440.571954][ T29] RAX: ffffffffffffffda RBX: 00007f435a9e6090 RCX: 00007f435a78f749 [ 440.581430][ T29] RDX: 0000000000000019 RSI: 0000000008000000 RDI: 0000200000000000 [ 440.590583][ T29] RBP: 00007f435a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 440.600478][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.610136][ T29] R13: 00007f435a9e6128 R14: 00007f435a9e6090 R15: 00007fff53b78e28 [ 440.619258][ T29] [ 440.634617][ T29] INFO: task syz.3.823:3504 blocked for more than 149 seconds. [ 440.648228][ T29] Not tainted syzkaller #0 [ 440.653548][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.668838][ T29] task:syz.3.823 state:D stack:25008 pid:3504 ppid:2109 flags:0x00004004 [ 440.698558][ T29] Call Trace: [ 440.708912][ T29] [ 440.715638][ T29] __schedule+0xb87/0x14e0 [ 440.728347][ T29] ? __sched_text_start+0x8/0x8 [ 440.751208][ T29] ? __kasan_check_write+0x14/0x20 [ 440.758189][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 440.771194][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 440.780087][ T29] schedule+0xbd/0x170 [ 440.805345][ T29] schedule_preempt_disabled+0x13/0x20 [ 440.843910][ T29] rwsem_down_read_slowpath+0x7c6/0x1510 [ 440.865525][ T29] ? down_write_killable+0x40/0x40 [ 440.873318][ T29] ? __kasan_check_write+0x14/0x20 [ 440.880502][ T29] ? __cfi_do_futex+0x10/0x10 [ 440.887037][ T29] ? downgrade_write+0x260/0x350 [ 440.893313][ T29] ? __kasan_check_write+0x14/0x20 [ 440.900224][ T29] down_read+0x96/0xf0 [ 440.906146][ T29] ? __cfi_down_read+0x10/0x10 [ 440.911988][ T29] ? futex_exit_release+0x119/0x1d0 [ 440.918485][ T29] ? sync_mm_rss+0x22a/0x280 [ 440.924589][ T29] do_exit+0x8bd/0x2650 [ 440.930060][ T29] ? ___sys_sendmsg+0x22c/0x290 [ 440.936690][ T29] ? __cfi_do_exit+0x10/0x10 [ 440.942684][ T29] ? __sys_sendmsg+0x270/0x270 [ 440.949084][ T29] ? futex_unqueue+0x132/0x160 [ 440.955410][ T29] ? __kasan_check_write+0x14/0x20 [ 440.962042][ T29] ? _raw_spin_lock_irq+0x8f/0xe0 [ 440.967920][ T29] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 440.975252][ T29] do_group_exit+0x210/0x2d0 [ 440.983199][ T29] ? __kasan_check_write+0x14/0x20 [ 440.989445][ T29] get_signal+0x13b5/0x1520 [ 440.996233][ T29] arch_do_signal_or_restart+0xb0/0x1030 [ 441.003263][ T29] ? __cfi___sys_sendmmsg+0x10/0x10 [ 441.013351][ T29] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 441.021678][ T29] exit_to_user_mode_loop+0x7a/0xb0 [ 441.028923][ T29] exit_to_user_mode_prepare+0x87/0xd0 [ 441.037068][ T29] syscall_exit_to_user_mode+0x1a/0x30 [ 441.043861][ T29] do_syscall_64+0x58/0xa0 [ 441.048990][ T29] ? clear_bhb_loop+0x30/0x80 [ 441.054787][ T29] ? clear_bhb_loop+0x30/0x80 [ 441.061715][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.068973][ T29] RIP: 0033:0x7f435a78f749 [ 441.074134][ T29] RSP: 002b:00007f435b63a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.084475][ T29] RAX: 000000000000000b RBX: 00007f435a9e6180 RCX: 00007f435a78f749 [ 441.095049][ T29] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000008 [ 441.107053][ T29] RBP: 00007f435a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 441.118651][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.129153][ T29] R13: 00007f435a9e6218 R14: 00007f435a9e6180 R15: 00007fff53b78e28 [ 441.140705][ T29] [ 441.147216][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 441.192023][ T6197] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1553'. [ 441.216018][ T29] NMI backtrace for cpu 1 [ 441.222160][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 441.230965][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.243506][ T29] Call Trace: [ 441.248172][ T29] [ 441.252538][ T29] __dump_stack+0x21/0x24 [ 441.258441][ T29] dump_stack_lvl+0xee/0x150 [ 441.264688][ T29] ? __cfi_dump_stack_lvl+0x8/0x8 [ 441.272012][ T29] dump_stack+0x15/0x24 [ 441.279619][ T29] nmi_cpu_backtrace+0x2b4/0x2c0 [ 441.287230][ T29] ? rcu_read_unlock_special+0xab/0x480 [ 441.293672][ T29] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 441.300834][ T29] ? __rcu_read_unlock+0xa0/0xa0 [ 441.308498][ T29] ? memcpy+0x56/0x70 [ 441.313146][ T29] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 441.319530][ T29] nmi_trigger_cpumask_backtrace+0x16b/0x3a0 [ 441.326748][ T29] arch_trigger_cpumask_backtrace+0x10/0x20 [ 441.333390][ T29] watchdog+0xd44/0xe80 [ 441.339000][ T29] ? __cfi_watchdog+0x10/0x10 [ 441.343811][ T29] ? __kasan_check_read+0x11/0x20 [ 441.349448][ T29] ? __kthread_parkme+0x142/0x180 [ 441.356333][ T29] kthread+0x281/0x320 [ 441.362417][ T29] ? __cfi_watchdog+0x10/0x10 [ 441.367954][ T29] ? __cfi_kthread+0x10/0x10 [ 441.374192][ T29] ret_from_fork+0x1f/0x30 [ 441.379644][ T29] [ 441.383720][ T29] Sending NMI from CPU 1 to CPUs 0: [ 441.390503][ C0] NMI backtrace for cpu 0 [ 441.390523][ C0] CPU: 0 PID: 6189 Comm: kworker/0:8 Not tainted syzkaller #0 [ 441.390544][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.390558][ C0] Workqueue: events jump_label_update_timeout [ 441.390589][ C0] RIP: 0010:__kasan_check_read+0x0/0x20 [ 441.390612][ C0] Code: 47 86 eb 0a 48 c7 c7 10 01 3e 86 48 89 de e8 bf f8 34 03 45 31 ff eb d1 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef <55> 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 df e7 ff ff 5d c3 66 2e 0f [ 441.390629][ C0] RSP: 0018:ffffc90000daf960 EFLAGS: 00000083 [ 441.390644][ C0] RAX: 000000010005e000 RBX: 000000010005e000 RCX: ffffffff7fffffff [ 441.390659][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881000617c0 [ 441.390673][ C0] RBP: ffffc90000daf9b0 R08: dffffc0000000000 R09: ffffed102000c2e5 [ 441.390688][ C0] R10: ffffed102000c2e5 R11: 1ffff1102000c2e4 R12: ffff888100061400 [ 441.390703][ C0] R13: 0000000000000000 R14: ffff8881000617c0 R15: 0000000000010583 [ 441.390716][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 441.390733][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.390746][ C0] CR2: 00007f3869c9b000 CR3: 000000010005e000 CR4: 00000000003506b0 [ 441.390775][ C0] Call Trace: [ 441.390783][ C0] [ 441.390790][ C0] ? switch_mm_irqs_off+0x704/0x980 [ 441.390812][ C0] ? __get_locked_pte+0x28e/0x350 [ 441.390839][ C0] __text_poke+0x461/0x650 [ 441.390862][ C0] ? __cfi_text_poke_memcpy+0x10/0x10 [ 441.390885][ C0] ? kvm_lapic_enabled+0x61/0x180 [ 441.390907][ C0] ? text_poke+0x30/0x30 [ 441.390927][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 441.390953][ C0] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 441.390980][ C0] ? __cfi_do_sync_core+0x10/0x10 [ 441.391003][ C0] ? on_each_cpu_cond_mask+0x66/0x80 [ 441.391027][ C0] text_poke_bp_batch+0x40d/0x580 [ 441.391051][ C0] ? kvm_irq_delivery_to_apic+0x3d8/0x9c0 [ 441.391075][ C0] ? text_poke_loc_init+0x570/0x570 [ 441.391098][ C0] ? __kasan_check_write+0x14/0x20 [ 441.391116][ C0] ? mutex_lock+0x8d/0x1a0 [ 441.391149][ C0] ? bit_wait_io_timeout+0x10f/0x120 [ 441.391174][ C0] ? text_poke_queue+0xdf/0x180 [ 441.391195][ C0] text_poke_finish+0x1a/0x30 [ 441.391217][ C0] arch_jump_label_transform_apply+0x15/0x30 [ 441.391246][ C0] __jump_label_update+0x37c/0x3a0 [ 441.391272][ C0] jump_label_update+0x39b/0x450 [ 441.391296][ C0] __static_key_slow_dec_cpuslocked+0xf7/0x150 [ 441.391321][ C0] jump_label_update_timeout+0x1e/0x30 [ 441.391344][ C0] process_one_work+0x71f/0xc40 [ 441.391367][ C0] worker_thread+0xa29/0x11f0 [ 441.391385][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 441.391413][ C0] ? __kthread_parkme+0x142/0x180 [ 441.391432][ C0] kthread+0x281/0x320 [ 441.391451][ C0] ? __cfi_worker_thread+0x10/0x10 [ 441.391468][ C0] ? __cfi_kthread+0x10/0x10 [ 441.391489][ C0] ret_from_fork+0x1f/0x30 [ 441.391514][ C0] [ 441.962790][ T28] audit: type=1400 audit(2000000248.760:579): avc: denied { setopt } for pid=6208 comm="syz.2.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.050253][ T6201] loop7: detected capacity change from 0 to 40427 [ 442.087398][ T6201] F2FS-fs (loop7): fault_injection options not supported [ 442.104752][ T6201] F2FS-fs (loop7): invalid crc value [ 442.137494][ T6201] F2FS-fs (loop7): Found nat_bits in checkpoint [ 442.189204][ T6201] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 443.705367][ T6221] overlayfs: failed to resolve './file1': -2 [ 443.972937][ T6033] syz-executor: attempt to access beyond end of device [ 443.972937][ T6033] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 444.310358][ T6234] loop7: detected capacity change from 0 to 4096 [ 444.338454][ T6234] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 444.394737][ T6033] EXT4-fs (loop7): unmounting filesystem. [ 444.451358][ T3111] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 444.651276][ T3111] usb 6-1: Using ep0 maxpacket: 16 [ 444.660889][ T3111] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 444.688098][ T3111] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.700863][ T3111] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.715282][ T3111] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.727260][ T3111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.736384][ T3111] usb 6-1: Product: syz [ 444.742670][ T3111] usb 6-1: Manufacturer: syz [ 444.748990][ T3111] usb 6-1: SerialNumber: syz [ 444.967972][ T3111] usb 6-1: 0:2 : does not exist [ 444.984178][ T3111] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 444.999540][ T6245] syz.2.1567[6245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.999837][ T6245] syz.2.1567[6245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.037114][ T3111] usb 6-1: USB disconnect, device number 6 [ 445.057215][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1567'. [ 445.326771][ T6253] loop8: detected capacity change from 0 to 4096 [ 445.350767][ T6253] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 445.431265][ T5873] EXT4-fs (loop8): unmounting filesystem. [ 447.174267][ T6265] loop5: detected capacity change from 0 to 512 [ 447.335697][ T6265] EXT4-fs (loop5): 1 orphan inode deleted [ 447.345234][ T6265] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 447.361439][ T6265] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.584725][ T560] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 448.629035][ T560] EXT4-fs error (device loop5): ext4_release_dquot:6832: comm kworker/u4:21: Failed to release dquot type 1 [ 448.652967][ T28] audit: type=1400 audit(2000000255.450:580): avc: denied { mounton } for pid=6280 comm="syz.8.1578" path="/20/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 448.686430][ T6265] EXT4-fs (loop5): unmounting filesystem. [ 448.956352][ T6292] loop5: detected capacity change from 0 to 512 [ 448.969763][ T6292] EXT4-fs (loop5): Test dummy encryption mode enabled [ 448.982778][ T6292] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 449.173622][ T6292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 449.186819][ T6292] EXT4-fs (loop5): orphan cleanup on readonly fs [ 449.196118][ T6292] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1579: bg 0: block 361: padding at end of block bitmap is not set [ 449.216686][ T6292] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 449.231603][ T6292] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1579: attempt to clear invalid blocks 33619980 len 1 [ 449.253273][ T6292] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1579: invalid indirect mapped block 1811939328 (level 0) [ 449.275448][ T6292] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1579: invalid indirect mapped block 2185560079 (level 1) [ 449.298543][ T6292] EXT4-fs (loop5): 1 truncate cleaned up [ 449.306804][ T6292] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 449.336622][ T6292] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.1579: dx entry: limit 0 != root limit 125 [ 449.355502][ T6292] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1579: Corrupt directory, running e2fsck is recommended [ 449.377530][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'. [ 449.411493][ T28] audit: type=1400 audit(2000000256.200:581): avc: denied { read write } for pid=6285 comm="syz.5.1579" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 449.453912][ T6189] hid-generic 0003:0004:0000.0005: unknown main item tag 0x6 [ 449.533756][ T6189] hid-generic 0003:0004:0000.0005: item fetching failed at offset 17/18 [ 449.603749][ T6189] hid-generic: probe of 0003:0004:0000.0005 failed with error -22 [ 449.615789][ T28] audit: type=1400 audit(2000000256.200:582): avc: denied { open } for pid=6285 comm="syz.5.1579" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 450.409674][ T6302] netlink: 'syz.2.1583': attribute type 3 has an invalid length. [ 450.419514][ T6302] netlink: 'syz.2.1583': attribute type 3 has an invalid length. [ 450.453301][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 450.499303][ T6300] loop7: detected capacity change from 0 to 4096 [ 450.742164][ T6305] input: syz0 as /devices/virtual/input/input14 [ 450.773943][ T28] audit: type=1400 audit(2000000257.570:583): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1414 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.794618][ T6305] netlink: 'syz.5.1584': attribute type 29 has an invalid length. [ 450.817029][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 450.837226][ T6305] netlink: 'syz.5.1584': attribute type 29 has an invalid length. [ 450.846859][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 450.867438][ T28] audit: type=1400 audit(2000000257.570:584): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1414 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.897399][ T28] audit: type=1400 audit(2000000257.570:585): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1414 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.989295][ T6300] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 451.094274][ T6033] EXT4-fs (loop7): unmounting filesystem. [ 451.283230][ T6325] 9pnet_fd: Insufficient options for proto=fd [ 452.717886][ T6332] loop5: detected capacity change from 0 to 512 [ 452.728408][ T6332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.737712][ T6332] ext4: Unknown parameter 'subj_type' [ 452.751117][ T6336] loop7: detected capacity change from 0 to 256 [ 452.823299][ T28] audit: type=1400 audit(2000000259.620:586): avc: denied { map } for pid=6333 comm="syz.4.1595" path="socket:[42269]" dev="sockfs" ino=42269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 456.329532][ T6390] loop5: detected capacity change from 0 to 512 [ 456.337928][ T6390] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 456.447777][ T6390] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1607: inode has both inline data and extents flags [ 456.501586][ T6390] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1607: couldn't read orphan inode 15 (err -117) [ 456.584431][ T6397] 8021q: VLANs not supported on gre0 [ 456.931073][ T6390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 457.685163][ T6406] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1607: inode has both inline data and extents flags [ 457.715978][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1607'. [ 457.728132][ T6406] device bridge_slave_1 left promiscuous mode [ 457.736734][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.750467][ T6406] device bridge_slave_0 left promiscuous mode [ 457.758218][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.899239][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 457.946674][ T6408] device ipip0 entered promiscuous mode [ 457.956298][ T6408] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 458.250920][ T4328] EXT4-fs (loop5): unmounting filesystem. [ 458.330031][ T6418] device syzkaller0 entered promiscuous mode [ 458.456980][ T6423] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1612'. [ 458.499109][ T28] audit: type=1400 audit(2000000265.280:587): avc: denied { read } for pid=6410 comm="syz.2.1612" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.016201][ T6429] loop5: detected capacity change from 0 to 512 [ 459.102865][ T6429] EXT4-fs: Mount option(s) incompatible with ext2 [ 459.663858][ T6448] tipc: Started in network mode [ 459.691219][ T6448] tipc: Node identity ac14140f, cluster identity 4711 [ 459.710973][ T6448] tipc: New replicast peer: 255.255.255.255 [ 459.730087][ T6448] tipc: Enabled bearer , priority 10 [ 459.988965][ T6460] loop7: detected capacity change from 0 to 256 [ 460.186752][ T28] audit: type=1400 audit(2000000266.980:588): avc: denied { mount } for pid=6458 comm="syz.4.1627" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 460.223333][ T6464] xt_hashlimit: max too large, truncated to 1048576 [ 460.443128][ T6473] loop5: detected capacity change from 0 to 128 [ 460.741554][ T3111] tipc: Node number set to 2886997007 [ 460.763449][ T6483] FAULT_INJECTION: forcing a failure. [ 460.763449][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 460.797164][ T6483] CPU: 1 PID: 6483 Comm: syz.8.1635 Not tainted syzkaller #0 [ 460.807846][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.821684][ T6483] Call Trace: [ 460.826752][ T6483] [ 460.830306][ T6483] __dump_stack+0x21/0x24 [ 460.835677][ T6483] dump_stack_lvl+0xee/0x150 [ 460.842917][ T6483] ? __cfi_dump_stack_lvl+0x8/0x8 [ 460.849274][ T6483] ? __local_bh_enable_ip+0x58/0x80 [ 460.858204][ T6483] ? release_sock+0x169/0x1c0 [ 460.864002][ T6483] dump_stack+0x15/0x24 [ 460.869136][ T6483] should_fail_ex+0x3d4/0x520 [ 460.874702][ T6483] __should_failslab+0xac/0xf0 [ 460.880537][ T6483] should_failslab+0x9/0x20 [ 460.885739][ T6483] kmem_cache_alloc_node+0x42/0x340 [ 460.893936][ T6483] ? __alloc_skb+0xea/0x4b0 [ 460.899611][ T6483] __alloc_skb+0xea/0x4b0 [ 460.904955][ T6483] ? netlink_autobind+0x168/0x1a0 [ 460.910857][ T6483] netlink_sendmsg+0x626/0xbc0 [ 460.917309][ T6483] ? __cfi_netlink_sendmsg+0x10/0x10 [ 460.925549][ T6483] ? security_socket_sendmsg+0x93/0xb0 [ 460.934221][ T6483] __sys_sendto+0x464/0x5e0 [ 460.940025][ T6483] ? slab_free_freelist_hook+0xc2/0x190 [ 460.948512][ T6483] ? __cfi___sys_sendto+0x10/0x10 [ 460.955371][ T6483] ? ksys_write+0x1eb/0x240 [ 460.963051][ T6483] ? __cfi_ksys_write+0x10/0x10 [ 460.969752][ T6483] __x64_sys_sendto+0xe5/0x100 [ 460.976940][ T6483] x64_sys_call+0x83/0x9a0 [ 460.982792][ T6483] do_syscall_64+0x4c/0xa0 [ 460.987765][ T6483] ? clear_bhb_loop+0x30/0x80 [ 460.994295][ T6483] ? clear_bhb_loop+0x30/0x80 [ 460.999502][ T6483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.006678][ T6483] RIP: 0033:0x7fcbeb78f749 [ 461.012530][ T6483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.037630][ T6483] RSP: 002b:00007fcbec58e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 461.048283][ T6483] RAX: ffffffffffffffda RBX: 00007fcbeb9e5fa0 RCX: 00007fcbeb78f749 [ 461.052922][ T6189] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 461.057403][ T6483] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 461.057430][ T6483] RBP: 00007fcbec58e090 R08: 0000000000000000 R09: 0000000000000000 [ 461.057442][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.057456][ T6483] R13: 00007fcbeb9e6038 R14: 00007fcbeb9e5fa0 R15: 00007fff72e6c428 [ 461.057504][ T6483] [ 461.252042][ T6189] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 461.297064][ T6189] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 461.313835][ T6189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.329743][ T6189] usb 3-1: config 0 descriptor?? [ 461.340478][ T6189] usb 3-1: bad CDC descriptors [ 461.681872][ T596] usb 3-1: USB disconnect, device number 3 [ 463.267642][ T6526] tipc: Started in network mode [ 463.295035][ T6526] tipc: Node identity ac14140f, cluster identity 4711 [ 463.325494][ T6526] tipc: New replicast peer: 255.255.255.255 [ 463.351594][ T6526] tipc: Enabled bearer , priority 10 [ 463.389887][ T6530] loop7: detected capacity change from 0 to 128 [ 463.543450][ T28] audit: type=1400 audit(2000000270.340:589): avc: denied { setopt } for pid=6532 comm="syz.8.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 463.709410][ T28] audit: type=1400 audit(2000000270.500:590): avc: denied { create } for pid=6532 comm="syz.8.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 463.786298][ T28] audit: type=1400 audit(2000000270.510:591): avc: denied { sys_admin } for pid=6532 comm="syz.8.1650" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 464.376655][ T341] tipc: Node number set to 2886997007 [ 464.394444][ T6543] loop7: detected capacity change from 0 to 1024 [ 464.405764][ T6543] EXT4-fs: Ignoring removed bh option [ 464.446000][ T6548] loop8: detected capacity change from 0 to 128 [ 464.486285][ T6543] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 464.534720][ T6543] FAULT_INJECTION: forcing a failure. [ 464.534720][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 464.553665][ T6543] CPU: 0 PID: 6543 Comm: syz.7.1652 Not tainted syzkaller #0 [ 464.563169][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.576484][ T6543] Call Trace: [ 464.581276][ T6543] [ 464.585065][ T6543] __dump_stack+0x21/0x24 [ 464.590948][ T6543] dump_stack_lvl+0xee/0x150 [ 464.596310][ T6543] ? __cfi_dump_stack_lvl+0x8/0x8 [ 464.602606][ T6543] ? __local_bh_enable_ip+0x58/0x80 [ 464.609194][ T6543] ? release_sock+0x169/0x1c0 [ 464.617087][ T6543] dump_stack+0x15/0x24 [ 464.623001][ T6543] should_fail_ex+0x3d4/0x520 [ 464.629849][ T6543] __should_failslab+0xac/0xf0 [ 464.638844][ T6543] should_failslab+0x9/0x20 [ 464.646436][ T6543] kmem_cache_alloc_node+0x42/0x340 [ 464.654375][ T6543] ? __alloc_skb+0xea/0x4b0 [ 464.660309][ T6543] __alloc_skb+0xea/0x4b0 [ 464.665232][ T6543] ? netlink_autobind+0x168/0x1a0 [ 464.671047][ T6543] netlink_sendmsg+0x626/0xbc0 [ 464.677859][ T6543] ? __cfi_netlink_sendmsg+0x10/0x10 [ 464.686128][ T6543] ? security_socket_sendmsg+0x93/0xb0 [ 464.693204][ T6543] ? __cfi_netlink_sendmsg+0x10/0x10 [ 464.700493][ T6543] ____sys_sendmsg+0x5a9/0x990 [ 464.706452][ T6543] ? __sys_sendmsg_sock+0x40/0x40 [ 464.713141][ T6543] ? import_iovec+0x7c/0xb0 [ 464.720295][ T6543] ___sys_sendmsg+0x21c/0x290 [ 464.726202][ T6543] ? __sys_sendmsg+0x270/0x270 [ 464.732460][ T6543] ? __kasan_check_write+0x14/0x20 [ 464.739104][ T6543] ? proc_fail_nth_write+0x17a/0x1f0 [ 464.745749][ T6543] ? vfs_write+0x9d6/0xca0 [ 464.751623][ T6543] ? __fdget+0x19c/0x220 [ 464.758642][ T6543] __x64_sys_sendmsg+0x1f0/0x2c0 [ 464.765425][ T6543] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 464.772541][ T6543] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 464.779465][ T6543] x64_sys_call+0x171/0x9a0 [ 464.785128][ T6543] do_syscall_64+0x4c/0xa0 [ 464.790594][ T6543] ? clear_bhb_loop+0x30/0x80 [ 464.797537][ T6543] ? clear_bhb_loop+0x30/0x80 [ 464.803444][ T6543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.812295][ T6543] RIP: 0033:0x7f85e438f749 [ 464.818105][ T6543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.843951][ T6543] RSP: 002b:00007f85e5270038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.853917][ T6543] RAX: ffffffffffffffda RBX: 00007f85e45e5fa0 RCX: 00007f85e438f749 [ 464.863706][ T6543] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 464.874752][ T6543] RBP: 00007f85e5270090 R08: 0000000000000000 R09: 0000000000000000 [ 464.885565][ T6543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.896426][ T6543] R13: 00007f85e45e6038 R14: 00007f85e45e5fa0 R15: 00007ffdbd850878 [ 464.909976][ T6543] [ 464.955720][ T6033] EXT4-fs (loop7): unmounting filesystem. [ 465.745602][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.755457][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.772064][ T6567] device bridge_slave_0 entered promiscuous mode [ 465.804096][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.833231][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.844812][ T6567] device bridge_slave_1 entered promiscuous mode [ 466.126311][ T6590] loop7: detected capacity change from 0 to 512 [ 466.137854][ T6590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.182236][ T6590] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.1664: inode #1: comm syz.7.1664: iget: illegal inode # [ 466.203035][ T6590] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.1664: error while reading EA inode 1 err=-117 [ 466.205170][ T560] device veth1_macvtap left promiscuous mode [ 466.229870][ T6590] EXT4-fs (loop7): 1 orphan inode deleted [ 466.236962][ T6590] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 466.256771][ T560] device veth0_vlan left promiscuous mode [ 466.567833][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.608138][ T6033] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 466.622711][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.689296][ T6567] device veth0_vlan entered promiscuous mode [ 466.700289][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.714687][ T6033] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 466.731550][ T28] audit: type=1400 audit(2000000273.510:592): avc: denied { unlink } for pid=6033 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 466.764486][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.775682][ T6033] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 466.791842][ T574] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.800711][ T574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.821424][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.845432][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.866956][ T574] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.877751][ T574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.898071][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.909443][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.922324][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 466.937952][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.951709][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 466.964354][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.978693][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.989710][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.011410][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.041435][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.075249][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.113299][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 467.127573][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 467.154123][ T6567] device veth1_macvtap entered promiscuous mode [ 467.179560][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 467.197670][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.200525][ T6033] EXT4-fs (loop7): unmounting filesystem. [ 467.221037][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 467.247976][ T6622] loop8: detected capacity change from 0 to 512 [ 467.267748][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 467.300438][ T574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 467.313697][ T6622] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 467.376153][ T6622] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.406351][ T560] tipc: Disabling bearer [ 467.428996][ T5873] EXT4-fs (loop8): unmounting filesystem. [ 467.443300][ T560] tipc: Left network mode [ 467.495237][ T6632] loop8: detected capacity change from 0 to 128 [ 467.497805][ T6631] loop0: detected capacity change from 0 to 1024 [ 467.519277][ T6631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.529994][ T6631] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 467.560822][ T6631] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 467.584196][ T6632] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 467.596305][ T6631] System zones: 0-1, 3-36 [ 467.602754][ T6631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 467.605268][ T6632] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.651877][ T6632] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 467.666295][ T6567] EXT4-fs (loop0): unmounting filesystem. [ 467.695928][ T6640] loop0: detected capacity change from 0 to 1024 [ 467.722170][ T6640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 467.878478][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.890393][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.899626][ T6644] device bridge_slave_0 entered promiscuous mode [ 469.567055][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.576454][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.585935][ T28] audit: type=1400 audit(2000000275.900:593): avc: denied { accept } for pid=6648 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 469.625093][ T6567] EXT4-fs (loop0): unmounting filesystem. [ 469.633302][ T6644] device bridge_slave_1 entered promiscuous mode [ 469.663991][ T28] audit: type=1400 audit(2000000276.460:594): avc: denied { read } for pid=6656 comm="syz.2.1679" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.696418][ T28] audit: type=1400 audit(2000000276.460:595): avc: denied { open } for pid=6656 comm="syz.2.1679" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.726016][ T28] audit: type=1400 audit(2000000276.490:596): avc: denied { ioctl } for pid=6656 comm="syz.2.1679" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 469.727050][ T6658] binder: BINDER_SET_CONTEXT_MGR already set [ 469.769669][ T28] audit: type=1400 audit(2000000276.490:597): avc: denied { set_context_mgr } for pid=6656 comm="syz.2.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 469.788713][ T6658] binder: 6656:6658 ioctl 4018620d 200000000040 returned -16 [ 469.888863][ T28] audit: type=1400 audit(2000000276.520:598): avc: denied { map } for pid=6656 comm="syz.2.1679" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 470.866829][ T28] audit: type=1326 audit(2000000277.630:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c4f8f749 code=0x7ffc0000 [ 470.920568][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 470.931763][ T28] audit: type=1326 audit(2000000277.630:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c4f8f749 code=0x7ffc0000 [ 470.963271][ T5873] EXT4-fs (loop8): unmounting filesystem. [ 470.987445][ T28] audit: type=1326 audit(2000000277.630:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99c4f8f749 code=0x7ffc0000 [ 471.017927][ T28] audit: type=1326 audit(2000000277.630:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6656 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99c4f8f783 code=0x7ffc0000 [ 471.073480][ T6669] loop8: detected capacity change from 0 to 256 [ 471.493448][ T560] device bridge_slave_1 left promiscuous mode [ 471.527697][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.552675][ T6678] loop0: detected capacity change from 0 to 512 [ 471.649313][ T6678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.659205][ T560] device bridge_slave_0 left promiscuous mode [ 471.678953][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.690237][ T560] device veth1_macvtap left promiscuous mode [ 471.699192][ T560] device veth0_vlan left promiscuous mode [ 471.731026][ T6678] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 471.792116][ T6678] EXT4-fs (loop0): 1 truncate cleaned up [ 471.809988][ T6678] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 471.934757][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.946605][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.972547][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 471.985046][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.997409][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.006278][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.018420][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.030671][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.041018][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.050515][ T547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.085182][ T547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.132995][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.151872][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.191914][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.211774][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.272046][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.293840][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.311343][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.325644][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.450215][ T6644] device veth0_vlan entered promiscuous mode [ 472.480720][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.732995][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.743783][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1688'. [ 472.781350][ T6644] device veth1_macvtap entered promiscuous mode [ 472.799648][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.823827][ T6567] EXT4-fs (loop0): unmounting filesystem. [ 472.880946][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.895015][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.094304][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.136546][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.164650][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.186092][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 476.291616][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 476.604351][ T6764] loop1: detected capacity change from 0 to 512 [ 476.613502][ T6764] EXT4-fs: Ignoring removed bh option [ 476.622266][ T6764] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.633992][ T6764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 476.659428][ T6764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 476.671517][ T6764] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 476.745980][ T6644] EXT4-fs (loop1): unmounting filesystem. [ 476.755515][ T6772] FAULT_INJECTION: forcing a failure. [ 476.755515][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 476.925467][ T6772] CPU: 1 PID: 6772 Comm: syz.2.1704 Not tainted syzkaller #0 [ 476.933919][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.946679][ T6772] Call Trace: [ 476.950987][ T6772] [ 476.954328][ T6772] __dump_stack+0x21/0x24 [ 476.960734][ T6772] dump_stack_lvl+0xee/0x150 [ 476.966549][ T6772] ? __cfi_dump_stack_lvl+0x8/0x8 [ 476.971997][ T6772] dump_stack+0x15/0x24 [ 476.977276][ T6772] should_fail_ex+0x3d4/0x520 [ 476.982991][ T6772] __should_failslab+0xac/0xf0 [ 476.991386][ T6772] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 477.000652][ T6772] should_failslab+0x9/0x20 [ 477.005983][ T6772] __kmem_cache_alloc_node+0x3d/0x2c0 [ 477.013162][ T6772] ? __cfi_mutex_lock+0x10/0x10 [ 477.019143][ T6772] ? delete_node+0x2f4/0xa60 [ 477.025843][ T6772] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 477.034072][ T6772] __kmalloc+0xa1/0x1e0 [ 477.040232][ T6772] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 477.048449][ T6772] tracepoint_probe_unregister+0x1e6/0x8b0 [ 477.056712][ T6772] bpf_probe_unregister+0x61/0x70 [ 477.062525][ T6772] bpf_raw_tp_link_release+0x63/0x90 [ 477.071176][ T6772] bpf_link_free+0x13a/0x390 [ 477.077544][ T6772] ? bpf_link_put_deferred+0x20/0x20 [ 477.083700][ T6772] ? security_file_free+0xd8/0xf0 [ 477.089095][ T6772] bpf_link_release+0x15f/0x170 [ 477.095246][ T6772] ? __cfi_bpf_link_release+0x10/0x10 [ 477.101222][ T6772] __fput+0x1fc/0x8f0 [ 477.105763][ T6772] ____fput+0x15/0x20 [ 477.110150][ T6772] task_work_run+0x1db/0x240 [ 477.116411][ T6772] ? __cfi_task_work_run+0x10/0x10 [ 477.122487][ T6772] ? __cfi___close_range+0x10/0x10 [ 477.128021][ T6772] exit_to_user_mode_loop+0x9b/0xb0 [ 477.134504][ T6772] exit_to_user_mode_prepare+0x87/0xd0 [ 477.141241][ T6772] syscall_exit_to_user_mode+0x1a/0x30 [ 477.147561][ T6772] do_syscall_64+0x58/0xa0 [ 477.153011][ T6772] ? clear_bhb_loop+0x30/0x80 [ 477.158163][ T6772] ? clear_bhb_loop+0x30/0x80 [ 477.164132][ T6772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.170790][ T6772] RIP: 0033:0x7f99c4f8f749 [ 477.175955][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.199639][ T6772] RSP: 002b:00007f99c5e92038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 477.209705][ T6772] RAX: 0000000000000000 RBX: 00007f99c51e6180 RCX: 00007f99c4f8f749 [ 477.219349][ T6772] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 477.231253][ T6772] RBP: 00007f99c5e92090 R08: 0000000000000000 R09: 0000000000000000 [ 477.242926][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.252411][ T6775] usb usb1: usbfs: process 6775 (syz.8.1710) did not claim interface 3 before use [ 477.253318][ T6772] R13: 00007f99c51e6218 R14: 00007f99c51e6180 R15: 00007ffd0f9310b8 [ 477.278219][ T6772] [ 477.317367][ T6772] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 477.322086][ T6644] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 477.332808][ T6772] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 477.355665][ T6772] CPU: 0 PID: 6772 Comm: syz.2.1704 Not tainted syzkaller #0 [ 477.365883][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.380095][ T6772] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 477.389639][ T6772] Code: 80 3c 30 00 74 05 e8 a4 8d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 477.420039][ T6772] RSP: 0018:ffffc90000ef7650 EFLAGS: 00010096 [ 477.430205][ T6772] RAX: 1ffff11024284f09 RBX: ffff888121427840 RCX: ffff88810cd50000 [ 477.441278][ T6772] RDX: ffff88815cd46540 RSI: 0000000000000001 RDI: ffffc90000fd7000 [ 477.453198][ T6772] RBP: ffffc90000ef7690 R08: 0000000000000000 R09: fffffbfff0ee4f26 [ 477.463035][ T6772] R10: 00000000b720eca3 R11: 1ffffffff0ee4f25 R12: 0000000000000001 [ 477.473303][ T6772] R13: ffff888121427840 R14: dffffc0000000000 R15: ffffffff81714650 [ 477.483727][ T6772] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 477.495258][ T6772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.503763][ T6772] CR2: 0000000005ffffe8 CR3: 0000000118715000 CR4: 00000000003506b0 [ 477.516824][ T6772] Call Trace: [ 477.521637][ T6772] [ 477.525306][ T6772] __schedule+0x1263/0x14e0 [ 477.531639][ T6772] ? preempt_schedule_thunk+0x16/0x18 [ 477.539203][ T6772] ? __sched_text_start+0x8/0x8 [ 477.546452][ T6772] preempt_schedule_notrace+0xca/0x110 [ 477.553739][ T6772] ? __cfi_preempt_schedule_notrace+0x10/0x10 [ 477.562764][ T6772] ? __cfi_bpf_trace_run2+0x10/0x10 [ 477.568280][ T6772] ? __seccomp_filter_release+0x167/0x1e0 [ 477.575437][ T6772] ? bpf_prog_destroy+0xa7/0xe0 [ 477.583529][ T6772] ? __kmem_cache_free+0xb7/0x1b0 [ 477.592213][ T6772] ? __seccomp_filter_release+0x167/0x1e0 [ 477.600744][ T6772] preempt_schedule_notrace_thunk+0x16/0x18 [ 477.609388][ T6772] ? __seccomp_filter_release+0x167/0x1e0 [ 477.620088][ T6772] kfree+0xde/0xf0 [ 477.625037][ T6772] __seccomp_filter_release+0x167/0x1e0 [ 477.634418][ T6772] seccomp_filter_release+0x8b/0xb0 [ 477.641612][ T6772] release_task+0x10b7/0x1200 [ 477.647655][ T6772] do_exit+0x18af/0x2650 [ 477.654058][ T6772] ? do_syscall_64+0x58/0xa0 [ 477.660219][ T6772] ? __cfi_do_exit+0x10/0x10 [ 477.665567][ T6772] ? __kasan_check_write+0x14/0x20 [ 477.672954][ T6772] ? _raw_spin_lock_irq+0x8f/0xe0 [ 477.679954][ T6772] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 477.687115][ T6772] do_group_exit+0x210/0x2d0 [ 477.695351][ T6772] ? __kasan_check_write+0x14/0x20 [ 477.702910][ T6772] get_signal+0x13b5/0x1520 [ 477.708414][ T6772] arch_do_signal_or_restart+0xb0/0x1030 [ 477.716298][ T6772] ? percpu_counter_add_batch+0x13c/0x160 [ 477.724458][ T6772] ? __fput+0x66a/0x8f0 [ 477.730129][ T6772] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 477.740040][ T6772] ? blkcg_maybe_throttle_current+0x1df/0x9f0 [ 477.749343][ T6772] ? __cfi___close_range+0x10/0x10 [ 477.756576][ T6772] exit_to_user_mode_loop+0x7a/0xb0 [ 477.762535][ T6772] exit_to_user_mode_prepare+0x87/0xd0 [ 477.770053][ T6772] syscall_exit_to_user_mode+0x1a/0x30 [ 477.777503][ T6772] do_syscall_64+0x58/0xa0 [ 477.782649][ T6772] ? clear_bhb_loop+0x30/0x80 [ 477.788238][ T6772] ? clear_bhb_loop+0x30/0x80 [ 477.794726][ T6772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.801463][ T6772] RIP: 0033:0x7f99c4f8f749 [ 477.807208][ T6772] Code: Unable to access opcode bytes at 0x7f99c4f8f71f. [ 477.817266][ T6772] RSP: 002b:00007f99c5e92038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 477.827316][ T6772] RAX: 0000000000000000 RBX: 00007f99c51e6180 RCX: 00007f99c4f8f749 [ 477.836961][ T6772] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 477.847963][ T6772] RBP: 00007f99c5e92090 R08: 0000000000000000 R09: 0000000000000000 [ 477.859709][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.869768][ T6772] R13: 00007f99c51e6218 R14: 00007f99c51e6180 R15: 00007ffd0f9310b8 [ 477.881338][ T6772] [ 477.885591][ T6772] Modules linked in: [ 477.891349][ T6772] ---[ end trace 0000000000000000 ]--- [ 477.891351][ T6644] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 477.891375][ T6644] CPU: 1 PID: 6644 Comm: syz-executor Tainted: G D syzkaller #0 [ 477.899703][ T6772] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 477.910310][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.920318][ T6772] Code: 80 3c 30 00 74 05 e8 a4 8d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 477.929228][ T6644] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 477.942903][ T6772] RSP: 0018:ffffc90000ef7650 EFLAGS: 00010096 [ 477.966668][ T6644] Code: 80 3c 30 00 74 05 e8 a4 8d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 477.974706][ T6772] [ 477.974720][ T6772] RAX: 1ffff11024284f09 RBX: ffff888121427840 RCX: ffff88810cd50000 [ 477.983934][ T6644] RSP: 0018:ffffc900022f7a50 EFLAGS: 00010096 [ 478.008885][ T6772] RDX: ffff88815cd46540 RSI: 0000000000000001 RDI: ffffc90000fd7000 [ 478.012262][ T6644] [ 478.012273][ T6644] RAX: 1ffff11024284f09 RBX: ffff888121427840 RCX: ffff888116058000 [ 478.022800][ T6772] RBP: ffffc90000ef7690 R08: 0000000000000000 R09: fffffbfff0ee4f26 [ 478.030682][ T6644] RDX: ffff8881143ad100 RSI: 0000000000000001 RDI: ffffc90000fd7000 [ 478.041360][ T6772] R10: 00000000b720eca3 R11: 1ffffffff0ee4f25 R12: 0000000000000001 [ 478.045651][ T6644] RBP: ffffc900022f7a90 R08: 0000000000000000 R09: fffffbfff0ee4f26 [ 478.056699][ T6772] R13: ffff888121427840 R14: dffffc0000000000 R15: ffffffff81714650 [ 478.067354][ T6644] R10: 00000000b720eca3 R11: 1ffffffff0ee4f25 R12: 0000000000000001 [ 478.077448][ T6772] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 478.086509][ T6644] R13: ffff888121427840 R14: dffffc0000000000 R15: ffffffff81714650 [ 478.096942][ T6772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.106285][ T6644] FS: 00005555798d5500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 478.115949][ T6772] CR2: 0000000005ffffe8 CR3: 0000000118715000 CR4: 00000000003506b0 [ 478.125951][ T6644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.136074][ T6772] Kernel panic - not syncing: Fatal exception [ 478.144217][ T6644] CR2: 00005555798f84e8 CR3: 000000011c845000 CR4: 00000000003506a0 [ 478.144247][ T6644] DR0: 0000000000000000 DR1: 000000000000008c DR2: 0000000000000000 [ 478.144260][ T6644] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 478.144274][ T6644] Call Trace: [ 478.144282][ T6644] [ 478.144294][ T6644] __schedule+0x1263/0x14e0 [ 478.144343][ T6644] ? __kasan_check_write+0x14/0x20 [ 478.144365][ T6644] ? __sched_text_start+0x8/0x8 [ 478.144388][ T6644] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 478.144411][ T6644] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 478.144433][ T6644] ? free_unref_page+0x1db/0x530 [ 478.144460][ T6644] preempt_schedule_irq+0x9b/0x110 [ 478.144484][ T6644] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 478.144508][ T6644] ? __unfreeze_partials+0x12b/0x190 [ 478.144538][ T6644] raw_irqentry_exit_cond_resched+0x29/0x30 [ 478.144559][ T6644] irqentry_exit+0x37/0x40 [ 478.144576][ T6644] sysvec_apic_timer_interrupt+0x64/0xc0 [ 478.144604][ T6644] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 478.144632][ T6644] RIP: 0010:qlist_free_all+0x98/0x140 [ 478.144654][ T6644] Code: 48 8b 4c 10 08 f6 c1 01 75 59 48 01 d0 48 8b 08 48 c1 e1 36 48 c1 f9 3f 48 21 c1 4c 8b 61 18 49 8b 1f 49 63 84 24 ec 00 00 00 <49> 29 c7 4c 89 e7 4c 89 fe e8 aa e9 ff ff 66 90 4c 89 f8 48 c1 e8 [ 478.144671][ T6644] RSP: 0018:ffffc900022f7d30 EFLAGS: 00000282 [ 478.144688][ T6644] RAX: 0000000000000000 RBX: ffff88811cb963e8 RCX: ffffea000472e580 [ 478.144702][ T6644] RDX: ffffea0000000000 RSI: ffffea000472e580 RDI: 0000000000000000 [ 478.144716][ T6644] RBP: ffffc900022f7d68 R08: ffff88811cb96190 R09: 000000008014000c [ 478.144731][ T6644] R10: fffff5200045ef6c R11: 1ffff9200045ef6c R12: ffff8881001ecd80 [ 478.144745][ T6644] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811cb96708 [ 478.144771][ T6644] kasan_quarantine_reduce+0x14a/0x170 [ 478.144792][ T6644] __kasan_slab_alloc+0x24/0x80 [ 478.144816][ T6644] slab_post_alloc_hook+0x4f/0x2d0 [ 478.144841][ T6644] ? getname_flags+0xb9/0x500 [ 478.144859][ T6644] ? getname_flags+0xb9/0x500 [ 478.144876][ T6644] kmem_cache_alloc+0x16e/0x330 [ 478.144900][ T6644] ? getname_flags+0xb9/0x500 [ 478.144917][ T6644] getname_flags+0xb9/0x500 [ 478.144934][ T6644] ? debug_smp_processor_id+0x17/0x20 [ 478.144954][ T6644] __x64_sys_unlink+0x3c/0x50 [ 478.144977][ T6644] x64_sys_call+0x958/0x9a0 [ 478.145000][ T6644] do_syscall_64+0x4c/0xa0 [ 478.145021][ T6644] ? clear_bhb_loop+0x30/0x80 [ 478.145048][ T6644] ? clear_bhb_loop+0x30/0x80 [ 478.145074][ T6644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.145100][ T6644] RIP: 0033:0x7fa72e58ecf7 [ 478.145115][ T6644] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.145131][ T6644] RSP: 002b:00007ffdec0bd208 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 478.145150][ T6644] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa72e58ecf7 [ 478.145163][ T6644] RDX: 00007ffdec0bd230 RSI: 00007ffdec0bd2c0 RDI: 00007ffdec0bd2c0 [ 478.145177][ T6644] RBP: 00007ffdec0bd2c0 R08: 0000000000000000 R09: 0000000000000000 [ 478.145190][ T6644] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdec0be350 [ 478.145203][ T6644] R13: 00007fa72e613d7d R14: 000000000007461f R15: 00007ffdec0be390 [ 478.145221][ T6644] [ 478.145227][ T6644] Modules linked in: [ 478.157075][ T6644] ---[ end trace 0000000000000000 ]--- [ 478.157091][ T6644] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 478.157119][ T6644] Code: 80 3c 30 00 74 05 e8 a4 8d 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 478.157134][ T6644] RSP: 0018:ffffc90000ef7650 EFLAGS: 00010096 [ 478.157150][ T6644] RAX: 1ffff11024284f09 RBX: ffff888121427840 RCX: ffff88810cd50000 [ 478.157163][ T6644] RDX: ffff88815cd46540 RSI: 0000000000000001 RDI: ffffc90000fd7000 [ 478.157175][ T6644] RBP: ffffc90000ef7690 R08: 0000000000000000 R09: fffffbfff0ee4f26 [ 478.157187][ T6644] R10: 00000000b720eca3 R11: 1ffffffff0ee4f25 R12: 0000000000000001 [ 478.157198][ T6644] R13: ffff888121427840 R14: dffffc0000000000 R15: ffffffff81714650 [ 478.157255][ T6644] FS: 00005555798d5500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 478.157280][ T6644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.157295][ T6644] CR2: 00005555798f84e8 CR3: 000000011c845000 CR4: 00000000003506a0 [ 478.157334][ T6644] DR0: 0000000000000000 DR1: 000000000000008c DR2: 0000000000000000 [ 478.157346][ T6644] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 479.416621][ T6772] Shutting down cpus with NMI [ 480.007584][ T6772] Kernel Offset: disabled [ 480.013560][ T6772] Rebooting in 86400 seconds..