last executing test programs: 2m40.56356293s ago: executing program 32 (id=349): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0xa, 0x40000000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x3c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpgid(0xffffffffffffffff) 2m36.441797914s ago: executing program 33 (id=397): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$P9_RLERRORu(r4, 0x0, 0x18) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m35.199601455s ago: executing program 34 (id=419): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) syz_io_uring_setup(0x24f7, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x6000, @fd_index=0x5, 0x4, 0x5, 0x2, 0x1, 0x1, {0x0, r4}}) syz_io_uring_setup(0x7a16, &(0x7f00000003c0)={0x0, 0x6e95, 0x40, 0x0, 0x27c}, &(0x7f00000002c0), &(0x7f0000000440)=0x0) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x10) syz_io_uring_submit(r0, r5, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="10"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) syz_io_uring_submit(r0, r8, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x2, 0x2, &(0x7f0000000080)="fe6f786b23bd62a8", 0x7, 0x0, 0x0, {0x2}}) socket$inet6_mptcp(0xa, 0x1, 0x106) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RVERSION(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r12 = dup(r11) r13 = socket$inet6(0xa, 0x6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="150a000060000000611100000000000000000000000000009500"/40], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r14 = syz_open_dev$loop(&(0x7f0000000180), 0x3a1, 0x101000) ioctl$BLKREPORTZONE(r14, 0xc0101282, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) write$P9_RLERRORu(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r12, &(0x7f0000000140)=ANY=[@ANYRES8=r12], 0x7c8) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdnk=', @ANYRESHEX=r12, @ANYBLOB=',cache=loose,k']) 2m31.059732687s ago: executing program 6 (id=398): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000780)=@framed={{}, [@ringbuf_query]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110108, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfea, 0x8046}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000002140)=ANY=[@ANYRESDEC], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00012dbd7000fedbdf250b000000080002000400000005000500da000000080003000300000008000400011000001800018014000400000000000000000000000000000000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x4c}}, 0x240008c4) write$binfmt_script(r0, 0x0, 0xf4ff) io_submit(0x0, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) io_pgetevents(0x0, 0x3, 0x3, &(0x7f0000000680)=[{}, {}, {}], 0x0, 0x0) 2m30.692936358s ago: executing program 7 (id=420): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) brk(0x20ffc004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x88, 0x31c01, 0xfffeffff, 0xfffffefe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xde}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x6e, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfffffffd}) close(r2) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xb, 0xb4, 0x9, 0xd}, {0x3, 0xf, 0x8, 0x9}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f00000092c0), &(0x7f0000009300)=0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=r5], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x6, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004f1ff00fc000050b12339cbeba47200000000008fb4c6c3f367971e9a61cc1407364f0d784100c397f6c4efa3caa8f39e59b6c6bb1759e06a06c47c899ddb35c55f803bf17277340fc1a677f9ed0c9150903192c90527b5782bbce24324347f4aa423d6ff2ea4aea1950f63f30fffffff7f000000005444417f5d5c9b697649f17b508a5ed89d20a8196a8b3c71d9549f745fb5265f6b8d3da9fd0f784fce288cdf1af45bbe3398bab0fb8a67e0150c269d855a9cbdbe73342e5e", @ANYRES32=0x1, @ANYRESDEC=r4, @ANYRES8=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r10, 0x0, 0x0, 0x404042bbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = io_uring_setup(0x1208, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x3, 0x1da}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r11, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0}, 0x20) 2m30.669912758s ago: executing program 6 (id=486): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone3(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x38, 0x800000000004, @thr={&(0x7f00000002c0)="753e7d96f5bad6df98559781984fafd2d13c097ae2bef206edccc7fd08fbfc7348e3048b56204c50bcb5964471c3696b04ff08db3bd061ec14b6d107f52dd689c65ca002", &(0x7f0000000340)="5cf62e524e513791f47bee6a0d1cb4f4797260f0cc6448d7c1520ed322ae36a450e816e73de7c369640efe47ec267b11aa63d3b58c1fc98c813db95b4292e8545031867657d3257a5ed7ac400077d5631b98f1e006a027c86bb3f7cde3d70d723e48889b32d57ff3a7e58f9728e8aff6e97a75a4bf400de67021cd76e6c5fc3469e5b8675d830a25206a3b0a79c00063febc1047084bbed51f65146977cabf37342ce634c1"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@errors_remount}]}, 0x5, 0x5e0, &(0x7f0000000600)="$eJzs3c9vFFUcAPDv2/6gpWgLMSoepIkxkCgtLWCI8QBXQxr8ES9erLQgUqChNVo0oSR4MTFejDHx5EH8L5TIlZOePHjxZEiIGo4mrtntTOmP2ZaWtlOZzydZdmbeDu873X77Zt6+NxtAZfU3/qlF7I2IyRTRm2bny9ojK+yfe929vz853XikqNff+DNFyrblr0/Zc0+2c1dE/PxTij1ty+udmrlyfnRiYvxytj44fWFycGrmysFzF0bPjp8dvzj80vCxo0eOHhs6tKbj6c6erxaUnbz+/oe9n428/d03/6Sh738bSXE8Xs1euPA4Nkp/9Dd/Jml5Uc+xja6sJG3Z78nCtzi1lxgQa5K/fx0R8VT0Rlvcf/N649PXSg0O2FT1FFEHKirJf6io/Dwgv7Zfeh1cK+WsBNgKd0/MdQAsz//2ub7B6Gr2Dey8l2Jht06KiLX1zBXbFRG3b41cP3Nr5HpsUj8cUGz2WkQ8XZT/qZn/fdEVfc38ry3K/8Z5wansubH99XXWv7SrWP7D1pnL/64V8z9a5P87C/L/3XXW339/8b3uRfnfvd5DAgAAAAAAgMq6eSIiXiz6/L82P/4nCsb/9ETE8Q2ov3/J+vLP/2t3NqAaoMDdExGvFI7/reWjf/vasqXHmuMBOtKZcxPjhyLi8Yg4EB07GutDK9Rx8PM9X7cq68/G/+WPRv23s7GAWRx32ncs3mdsdHr0YY8biLh7LeKZwvG/ab79TwXtf+PvweQD1rHn+RunWpWtnv/AZql/G7G/sP2/f9eKtPL9OQab5wOD+VnBcs9+/MUPrepfb/67xQQ8vEb7v3Pl/O9LC+/XM7X2Og7PtNdbla33/L8zvdm85Uxntu2j0enpy0MRnelkW2Prou3Da48ZHkV5PuT50sj/A8+t3P9XdP7fHRGzS/7v9NfiOcW5J//t+b1VPM7/oTyN/B9bU/u/9oXhG30/tqr/wdr/I822/kC2Rf8fzPkqT9POxdsL0rG9qGir4wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR0EtInZFqg3ML9dqAwMRPRHxROysTVyamn7hzKUPLo41yprf/1/Lv+m3d2495d//37dgfXjJ+uGI2B0RX7Z1N9cHTl+aGCv74AEAAAAAAAAAAAAAAAAAAGCb6Gkx/7/hj7ayowM2XXvZAQClKcj/X8qIA9h62n+oLvkP1SX/obrkP1TX8vzvLCUOYOtp/6G65D9Ul/wHAAAAAIBHyu59N39NETH7cnfzEQsG/3SUGhmw2WplBwCUxi1+oLoM/YHqco0PpFXKu1rutNqeK5k8/RA7AwAAAAAAAAAAAEDl7N9r/j9Ulfn/UF3m/0N15fP/95UcB7D1XOMDscpM/sL5/6vuBQAAAAAAAAAAAABspKmZK+dHJybGL1t4a3uEsZUL9Xr9auO3YLvE8z9fyIfCb5d4lizkc/0ebK/y/iYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACL/RcAAP//SNck1A==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m30.185855878s ago: executing program 6 (id=495): r0 = syz_io_uring_setup(0xe42, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m29.806419539s ago: executing program 7 (id=503): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) close(r1) 2m29.751555099s ago: executing program 7 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 2m29.666654948s ago: executing program 7 (id=507): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone3(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x38, 0x800000000004, @thr={&(0x7f00000002c0)="753e7d96f5bad6df98559781984fafd2d13c097ae2bef206edccc7fd08fbfc7348e3048b56204c50bcb5964471c3696b04ff08db3bd061ec14b6d107f52dd689c65ca002", &(0x7f0000000340)="5cf62e524e513791f47bee6a0d1cb4f4797260f0cc6448d7c1520ed322ae36a450e816e73de7c369640efe47ec267b11aa63d3b58c1fc98c813db95b4292e8545031867657d3257a5ed7ac400077d5631b98f1e006a027c86bb3f7cde3d70d723e48889b32d57ff3a7e58f9728e8aff6e97a75a4bf400de67021cd76e6c5fc3469e5b8675d830a25206a3b0a79c00063febc1047084bbed51f65146977cabf37342ce634c1"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@errors_remount}]}, 0x5, 0x5e0, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m29.520159689s ago: executing program 6 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m29.450992369s ago: executing program 35 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m29.042029119s ago: executing program 7 (id=519): request_key(&(0x7f0000000400)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000640)='[/,/$\'{\x00', 0x0) 2m27.46186215s ago: executing program 7 (id=535): unshare(0x62040200) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000200000008000100", @ANYRES8, @ANYBLOB="7b5e8206bd07afe31fd00833b09f0648e5681b78faaa8bb16ab392b9"], 0x1c}}, 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000900)="47851eb21dd71445b69eb065f8c3", 0xe}], 0x1, 0xfffffff7, 0xa, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x4b1, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$loop(0x0, 0x100000001, 0x40281) ioctl$LOOP_GET_STATUS64(r8, 0x127f, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) io_uring_setup(0x33de, &(0x7f0000000000)={0x0, 0xb665, 0x200, 0x2, 0x224}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) 2m27.45521871s ago: executing program 36 (id=535): unshare(0x62040200) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000200000008000100", @ANYRES8, @ANYBLOB="7b5e8206bd07afe31fd00833b09f0648e5681b78faaa8bb16ab392b9"], 0x1c}}, 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000900)="47851eb21dd71445b69eb065f8c3", 0xe}], 0x1, 0xfffffff7, 0xa, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x4b1, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$loop(0x0, 0x100000001, 0x40281) ioctl$LOOP_GET_STATUS64(r8, 0x127f, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) io_uring_setup(0x33de, &(0x7f0000000000)={0x0, 0xb665, 0x200, 0x2, 0x224}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) 1m43.906324873s ago: executing program 8 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r3, 0xffffffffffffffff, {}, 0xfe}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r3, 0x1, {0x0, 0xf0}, 0xff}, 0x18) 1m43.863685773s ago: executing program 8 (id=1669): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e577ec46461adc5e001600000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000c4000000720a80020008000066000000ffffff80950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m43.796452503s ago: executing program 8 (id=1671): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000002e5b208400"/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9135}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000009c0)={0x28, 0x0, 0x0, @local}, 0x10) close(r4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a0000", @ANYBLOB='\x00 '], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000980)={0x1f, 0x3, 0x3}, 0x6) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4ea1, 0x40, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="95", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="cbf1", 0x2}], 0x1}}], 0x2, 0xc8000) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000940)) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0042, &(0x7f0000000540)={[{}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7e}}, {@stripe={'stripe', 0x3d, 0xa}}, {@inode_readahead_blks}, {@nombcache}]}, 0x1, 0x480, &(0x7f0000001380)="$eJzs3MtvVNUfAPDvvX3Q8viVH+IDBEXRSHy0tDxk4UajiQuNJrrAuKptIchADa2JEKLoAqMuDIl74tLEv8CVboy6MnGre0NiDBvQ1TV37r3QDjO1U6ad4nw+yTDn3HuHc75z5sw995w7DaBn7cn/SSI2R8SvETFSZBcfsKd4un71/NRfV89PJZFlr/2Z1I+7dvX8VPlf3HjdpmJDlpX5DU3KvfhmxGStNnOmzI/Nn3pnbO7suadOnJo8PnN85vTEkSMHD+wePDxxqCNx5nFd2/n+7K4dL75x6eWpo5fe+vHrvL6by/1VHJ20p3h3m3q004V12ZYF6aS/ixWhLXm75c01UO//I9EXwzf2jcQLH3W1csCqyrIsa3Z+Ll3IgP+wJLpdA6A7qhN9fv1bPdZo6LEu/PFscQGUx329fBR7+iMtjxlouL7tpKGIrK9IXo5VmocAAFjo23z882Sz8V8a9yw47n/lGsrWiPh/RGyLiLsiYntE3B1RP/beiLivzfIbV0huHf+kV1YU2DLl479nyrWtxeO/avQXW/vK3JZ6/APJsRO1mf3le7IvBjbk+fFFL1nsu+d/+bxx22flNHse/9ELf1+uHnn5+fPNI9Mr/Q0TdNOT85MdCT6P/8OInf3N4k+iWsZJImJHROxcYRknHv9qV6t9/x7/EjqwzpR9GfFY0f4XoiH+StJyfXL86cMTh8aGojazf6z6VNzqp58vvtqq/NuKvwPy9t/Y9PNfxJ9fIyZDEXNnz52sr9fOtV/Gxd8+nkpa7Nu+ws//YPJ6PT1Ybntvcn7+zHjEYPJSnh1etH3i5murfHV8Hv++vc37/7b65VnxTtwfEfmHeHdEPBARD5Zt91BEPBwRe5eI/4fnHnm71b7W7b/ErHwH5fFPL9H++VdenrrZ/u0n+k5+/02r8rNltf/BempfFIuTy/n+W24Fb/PtAwAAgDtCWr8HPklHb6TTdHS0uId/e2xMa7Nz808cm3339HRxr/zWGEirma6RBfOh4+XccJWfaMgfKOeNv+gbrudHp2Zr090OHnrcphb9P/d7X7drB6w6v9eC3rVU//90DesBrD3nf+hd7ff/Fnc6Ancc53/oUYPNN3+w1vUAuqL98//QqtQDWHvG/9C79H/oXfo/9KSWv41Pb+sn/3dqon99VKNpYnh9VKNKRLouqtG5xCufFF1ivdSnSvQv+49ZrDCxoemubn8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMY/AQAA//8ux+PM") r7 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000300)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x10}}], 0x2, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r6, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f00000006c0)}, 0x6}], 0x1, 0x22, 0x0) close_range(r6, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x1004011, 0x4) 1m42.944639723s ago: executing program 8 (id=1685): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000240)="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", &(0x7f00000003c0)=""/210}, 0x20) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m42.741991764s ago: executing program 8 (id=1693): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1m42.527323814s ago: executing program 8 (id=1698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x701, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, ','}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x8, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1m42.501145304s ago: executing program 37 (id=1698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x701, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, ','}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x8, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1m33.190001301s ago: executing program 0 (id=1885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)=""/77, 0x4d}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x701, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, ','}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x8, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m33.179557161s ago: executing program 0 (id=1886): r0 = socket$inet6(0xa, 0x2, 0x400) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='c'}, 0x50) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffe, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="b8ffffff001a00000000000079f574892c1e14a0feeeed77b4fc8bfbee5db9ea5ab7fac67cd0b9feaee92bd1dff5aab81f137cbe"]) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x648, 0x4a8, 0x278, 0x0, 0x4a8, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, &(0x7f0000000180), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private0, [0xff, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'ip6tnl0\x00', {}, {}, 0x6c, 0x3, 0x6, 0x1}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@srh1={{0x90}, {0x87, 0x4, 0x3, 0x9, 0x7fff, @mcast1, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, [0xff, 0xffffffff, 0xff, 0xff], [0xff, 0xffffffff, 0x807fff00, 0xffffff00], [0xff, 0xff, 0x0, 0xffffff00], 0x2da2, 0x140}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast1, 0x32, 0x2b, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv6=@private1, 0x4, 0x8, 0x9}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@local, 0x8, 0x9, 0xfffc}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xfb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1070a, &(0x7f0000000940)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x7fff}}, {@noinit_itable}, {@minixdf}, {@resgid}, {@grpquota}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7fffffff}}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000b"], 0x0) 1m33.052723781s ago: executing program 0 (id=1888): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000006c0)="aa06754d2081714a99f1855c904176472cb5c54bdda06c610a9e1dd2c8e35384ea35284c79ce3a0c65cf883c6e6e3eeed5ee7f8640169f6af55df5fb84f84d01c76a0407507bac5fa9eda5e1ff021fd0b472a36baf79d0188beb0d77cae418415a2376aecf3ac925ba854e6f3c1e7a3de16548cf34cccc3636536e425da1100e97cd65ebddd0e585ee7dc9e4", 0x8c, 0x0, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x8}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@int=0x5cc577f3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r5, 0x400, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0xca2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f00000005c0)='\x03\x0f?\xca\x00', 0xfffffffffffffffb) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2d) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=static,mpol=default']) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000000433ee95c1eb5c8078fb5924cbbd36ae85129de19648da6c77fc969cab0e2cd248ff3809d3ae08e9157794196da3afc3dcfbb8083018f4f3ab7e30e8b23f92d467bc296e487ec30345dd3c34490c219f00d8666b48f56078e38f8764af802de9f9b2520de27680abc45f35a22e728c5aa76c541cc3607d6f14ee4aa9ee535c3be9a5a2918b0074151649bb94555b722b4c99a3bed2c95730f7814390a09cf6fccf8daa1019472e5304b526ecd", @ANYRES16=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x84) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2881b957583ede09b1514f21205d94fcc0884dd9853ccd41a871ac78ef74353fe0aa8161e14640e492155327c74b49185b954b01e9ddffac", @ANYRES16, @ANYBLOB="00082dbd7000ffdbdf2501000000080001000b00000008000300", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffff8}}, './file0\x00'}) fcntl$setlease(r6, 0x400, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x20000000) 1m32.963327911s ago: executing program 0 (id=1890): r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x7) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200848, &(0x7f0000000640)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff58", @ANYRES64=0x0, @ANYRES64=r0, @ANYRES8, @ANYRES16=r1], 0x3, 0x377, &(0x7f00000002c0)="$eJzs3UFom+UbAPAn/dKm/bP924MgCsKnN0HLNgXRix2jg2EuU8LUgxjcptLUwYrB7tCsXsSj4FFP3jzowcNuXgRFdvPg1QkyFQ+628CxT77kS/KlSWqZdLP4+x3Cs/d9nvd9v+Rl+ZqSt6+uxNrZ2Th/48b1mJ+vRHXlxErcrMRSJNF3OcbNTWgDAA6Gm1kWf2Q9EV/upaSy/6sCAPZT9/3/9cOllne/3i0/8+4PAAde8fP/Qrkt2ZEzP634wr4tCwDYR6Of/0fEI2MppV/1V8fuDQCAg+eFl15+7ng94vk0nY9Yf6/daDfimWH/8fPxZrTiXByJxbgV0btRyB8q3ceTp+qrR9I07cTPS9HIK9qNiPVOu9G7UziedOtrcTQWY6moL+42sixLTn5RXz2adkXE5U53/livtBuzsVDM/8P/4lwcizTuG6uPOFVfPZYWAzTW+/WzEdvDzy3y9S/HYnz3WlyIVpyNvLZ/W1Nf3Tqapiey+qHKsL7TbtS6eT1TPwEBAAAAAAAAAAAAAAAAAAAAAIA7spwOLA3Oz8mG5/csL0/o756P06svzgfa7p0PlNWyyLLf33m88X4SI+cD7Tifp9NuVGPm3l46AAAAAAAAAAAAAAAAAAAA/GtsbM5Fs9U6d3Fj89JaOehc3NiciYi85a1vP/tqIUZzFooBRqtGgmqRUupKh1VZ0k/OkpGcIkjyySvVXsunVwYrLufUBlcxcRm16V2t1uGHf/po2PJQ0h/59jAniYnXdSnZsYxysP7/3pKmPy27BMf+JudalmXTyrdeGa+KSkR16lLvMMjy4JvrbzzwxEZ/E2Q9jz62eObah5/8utZs5TPnWq25ixu3srVm8e/Jm216kJT2T6XYbJXyTqg2n7x9+tCUkbdHW5rJ97+9+OAHV4uWmd1fpuzM1WHL2xNykt6kn+/smusF+TIHXc/mQf4cjY8zO2HzTwqein/0wt3/8UrzytaPv+y1qvSfhIM6AAAAAAAAAAAAAAAAAADgrih9V7xQfNl3dreqp0/v/8oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O4Z/v3/QRAz2zta9hb82Yl+y5nod9XyAWOuNOPSPbxaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+q/4KAAD//1UBZGs=") r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) lseek(r3, 0x10, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x101002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010004c40800000000002c"], 0x14}}, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x80000}, 0x20) syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b32356d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) setns(r9, 0x10000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x3000000, 0x812, r2, 0x10000000) r11 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r12, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000006c0)=@keyring={'key_or_keyring:', r11}) r13 = accept4$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x39, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}) 1m32.804770661s ago: executing program 0 (id=1891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f0000000200)='./file0\x00') 1m32.502072761s ago: executing program 0 (id=1892): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000f1401000000000000000000090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m32.501841941s ago: executing program 38 (id=1892): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000f1401000000000000000000090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m31.340980452s ago: executing program 9 (id=1894): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x7, 0x91a, 0x3, 0x4, 0xff, 0x4, 0x3}, 0x1c) socket$kcm(0x23, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sync_file_range(0xffffffffffffffff, 0x401, 0x2, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000640)='[/,/$\'{\x00', 0x0) 1m31.315407032s ago: executing program 9 (id=1895): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1m31.277045852s ago: executing program 9 (id=1896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f0000000200)='./file0\x00') 1m31.263447522s ago: executing program 9 (id=1897): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) shutdown(r3, 0x2) umount2(&(0x7f0000000080)='./file1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0) read(r1, &(0x7f00000004c0)=""/210, 0xd2) renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300)='./bus\x00') r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 1m29.722008463s ago: executing program 9 (id=1912): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1m29.416783013s ago: executing program 9 (id=1922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00000085"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 1m29.416475963s ago: executing program 39 (id=1922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d00000085"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 2.193644089s ago: executing program 1 (id=3777): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1.949205738s ago: executing program 1 (id=3791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x83) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x5, &(0x7f0000000940)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000240)={0xdaa7, 0x2, {0x0, 0x2, 0x21, 0x1, 0x5}, 0x2}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x177d, &(0x7f00000008c0)={0x0, 0x572e, 0x8, 0x2, 0x2eb}) r8 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x40, 0x80101) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) process_vm_readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/210, 0xd2}], 0x3, &(0x7f0000000500)=[{&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000840)=""/70, 0x46}], 0x2, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$eJzs3TFoE3scB/DfJU372oZH33vLgwfvPRARLRTdBAfrolCQIg6CChURJ2mF2uLWOrk46KzSyUXEzeooLsVFEZyqdKiLoMXB0kGHSHJpbW3F0sSc9D4fuCR397/73ZH7/i8E7i6A3OqJiP6IKEZEb0SUIiJZ3eD/dOipj051zgxFVCrHPyS1dul4anm57oiYjIj90b6ymvHpU/NLs0d2XRsr7bwzfbKzRbu3xsL83NHF24NXHwzsG3/+8t1gEv1Rrs9bvR/NlGwwrS2J+PNnFPtFJG1ZbwGbcezy/VfV3P8VETtq+S9FIdIv7/po+5NS7Ln1vWVvvH/xTyu3FWi+SqVUPQdOVoDcKUREOZJCX0SknwuFvr70N/zrYlfhwsjopd7zI2PD57LuqYBmKUfMHX7U8bD7m/y/Lab5B7avcvpXX81iMdttAVqrev7vPTOxO+Qfckf+Ybtp33RL+Yf8kn/IL/mH/JJ/yC/5h/ySf8gv+Yf8kn/Ir9X5BwDypdKxteuGl29s0+zrkYHWybr/AQAAAAAAAAAAAAAAAAAA1pvqnBlaHlpV8+nNiIVDEdG2Uf1i7XnEEb/VXrs+JtVmK5J0sYac/q/BFTToXsZXX//+Jtv6z/7Ntv7EcMTklYhYqk9Yc/wl9eNv6/74wfzS2QYLNOjAiWzrf76bbf2B2YjH1f5n70b9TyH+rr2v738OpvdP+/oA5S26+KnBFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAyXwIAAP//VeRflA==") 1.756493899s ago: executing program 3 (id=3795): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r3, 0x0, 0x2, 0x4}}, 0x67) 1.754971069s ago: executing program 3 (id=3797): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000006c0)="aa06754d2081714a99f1855c904176472cb5c54bdda06c610a9e1dd2c8e35384ea35284c79ce3a0c65cf883c6e6e3eeed5ee7f8640169f6af55df5fb84f84d01c76a0407507bac5fa9eda5e1ff021fd0b472a36baf79d0188beb0d77cae418415a2376aecf3ac925ba854e6f3c1e7a3de16548cf34cccc3636536e425da1100e97cd65ebddd0e585ee7dc9e4", 0x8c, 0x0, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x8}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@int=0x5cc577f3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r6, 0x400, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0xca2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f00000005c0)='\x03\x0f?\xca\x00', 0xfffffffffffffffb) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2d) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='mpol=interleave=static,mpol=def']) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000000433ee95c1eb5c8078fb5924cbbd36ae85129de19648da6c77fc969cab0e2cd248ff3809d3ae08e9157794196da3afc3dcfbb8083018f4f3ab7e30e8b23f92d467bc296e487ec30345dd3c34490c219f00d8666b48f56078e38f8764af802de9f9b2520de27680abc45f35a22e728c5aa76c541cc3607d6f14ee4aa9ee535c3be9a5a2918b0074151649bb94555b722b4c99a3bed2c95730f7814390a09cf6fccf8daa1019472e5304b526ecd38c7fbd3e1", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf252600000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000300000040000000e6fd4f005050505050500000"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x84) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYRESHEX=r8, @ANYRES16=r5, @ANYBLOB="000327bd7000fddbdf2589000000", @ANYRES32=r7, @ANYBLOB="0c009900070000003300000068011d80c000008098000d8038000180050006000200000017000100160030066c0c361848601601011b123009040b0014000300b100800006000c000000b2f408000900040001800c00018005000400010000004c00028005000600000000000400020005000400010000001d000200351f4e553f0b1b0c493f232d4149340f2e281514471d33221c0000001400030008000500060003000900ee000900ffff05000900000000000c00030099cf00000000000005000c000100000005000700dd0000001400008005000c0000000000050009000000000020000080050009000100000005000900010000000400040005000a00010000002c00008005000700ef00000006000500c3000000060005005f000000040004000c0003000100000000000000340000800600050079000000050007002000000005000700a0000000050007003d000000050008004a00000005000600010000001000008005000b00010000000400040054031d800c00008006000500eb0000003002008005000c000000000005000b00010000000400040005000a0001000000c8010d80380003801400030002000100060008000200ff0704005a03200001000100061b1206363618360500061b3609361b0205061a0324480504013c00028014000500010081000300040004000400f2b703000500060002000000050006000100000014000300070005000100000080190010030006002c0000800b000100046009024848000005000600010000001400030040009dc80400000004000500fcff020018000280110002004303140c2e47062b2443385149000000140003800d0001001b18091660181e1b6c0000002800028005000600010000000500040000000000140003000900020cb00440000700070009008400d00002801e000100051b481b1b3560363060161b43050c1212481b301612011804480000130001005e12161b6060240b120616051b05180041000200482f2a1339431229022a0033221001324a3d421b4b225351173c30470c330f383056260f3946491d2445270f480a395211231f292127263d20081409210000000500040002000000140005004d56e44809000600c3f80e002d000600140003000700090009000c000400040001000b000500060000000000140005004000200d06000010ff0f7f00e4020800050006000200000005000b00010000003c000d801400038005000400ef00000005000700000000000c000280050006000200000018000180140003000900bbff0200fcff0100070003007f000400040014000080050007002400000005000900010000001800008005000a00000000000c00020000000000002000000c000080050008004e0000009000008005000a00000000000c000200020000000000000005000b000000000050000d8018000180140005000000090006000700050006000700000034000280050006000200000014000500ff010b008c82c0009f008100000004001400050006000a000600040003009db7ad620100050008002b00000005000b000000000005000c000100000005000900010000000c00008005000b0001000000400000800400040006000500ca00000005000800e2000000060005007f0000000500060001000000050007001e00000005000c0003000000050006000100000020021d801c020080050009000000000005000700db0000000500060001000000e0010d80240001801500010002046c03030c241b06363630360101090900000005000700010000000c00018005000700ff000000340001800b00020030033e470247110005000400000000000500070001000000140003000300060006000300020005000100d00f74000180140001000618046c024f18243609240c4812300505000600020000001400030003000500faff080002000b0001000104190002002b250d2813253c0c2b06044d531d4954384824195000000005000400020000001300010060041209600b030c0b3602040c16090005000400000000001c0003800500060002000000050006000100000005000600000000005c000380050004000200000009000200241d06082700000014000300c90007000200cc8807000a000900840109000100040b050016000000050006000000000005000400010000001400050007000500080004000800a00afbff08008c0001801f0001001612120516301824362a24481b056c300305061b1b0b091628024900050007000200000014000500010071000e009ef0040003000600450005000700000000001400030001000000030006000500352e780b7f0005000600000000001400050009009c0009000400030028ff040040001400030006004b4610000100090000000800030005000a00010000000c00020003000000000000000c0003000d00000000000000"], 0x704}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2881b957583ede09b1514f21205d94fcc0884dd9853ccd41a871ac78ef74353fe0aa8161e14640e492155327c74b49185b954b01e9ddffac", @ANYRES16, @ANYBLOB="00082dbd7000ffdbdf2501000000080001000b00000008000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffff8}}, './file0\x00'}) fcntl$setlease(r9, 0x400, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x20000000) 1.401770759s ago: executing program 3 (id=3800): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r3, 0x0, 0x2, 0x4}}, 0x67) 1.336574669s ago: executing program 3 (id=3802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1.241388679s ago: executing program 4 (id=3806): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fcntl$dupfd(0xffffffffffffffff, 0x279d80356afc83b5, 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000340)='sockfs\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x20040814) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r4, @ANYRES64=r6, @ANYRESDEC=r5, @ANYRES32=r4, @ANYRESHEX=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='ext4_mb_release_inode_pa\x00', r7}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = mq_open(&(0x7f0000003240)='*\x00', 0xc0, 0xa0, 0x0) mq_getsetattr(r8, &(0x7f00000032c0)={0x0, 0xc9, 0x81, 0x8000000000000000}, &(0x7f0000003300)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_open_pts(r9, 0x0) r11 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r9, 0x7c593000) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r12, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) dup3(r11, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11) 1.143795619s ago: executing program 4 (id=3811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utimes(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x101, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 1.121683509s ago: executing program 5 (id=3814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) 1.064826719s ago: executing program 5 (id=3816): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2800000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r5, r5, 0x0, 0x6) ioctl$sock_ifreq(r4, 0x891f, &(0x7f0000000380)={'geneve1\x00', @ifru_settings={0x200, 0x6, @raw_hdlc=0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a40)={0x0, "3dd8e310063d111688b4d8443b1682c2"}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001a40)={0x2, 0xc, @start={r6, 0x1, "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", "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"}, [0xd, 0x2, 0x8, 0x7, 0x400, 0x8e, 0x0, 0x7, 0x5069cb2f, 0x3, 0x4, 0x1, 0x5b1, 0x7, 0x2, 0x1, 0x78, 0x6, 0x168, 0x2, 0x1, 0x4, 0x4, 0x10001, 0x4, 0x2, 0x8, 0xfe00000000000000, 0x7, 0x6, 0x7fffffff, 0x1ff, 0x6, 0x2, 0xd, 0x1, 0x5, 0x4, 0x3, 0x1, 0xac5c, 0x9, 0x7, 0x7, 0x80000001, 0x8, 0x4, 0x8, 0x3ff, 0x10000, 0x8438, 0x6, 0xc99, 0x4, 0x83, 0x6b7, 0x2, 0x8000000000000001, 0x3, 0x9, 0x2, 0x3ff, 0x7, 0x5]}) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x80010, r3, 0xab177000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x1000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x8, 0xfffffffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast2, 0x1, 0x10, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41e9cad87b909dda, 0x10, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x8473, 0xffffffffffffffff, 0xa, &(0x7f0000000480)=[r8, r1, r1, r1, r1, r1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x5, 0x9, 0x3}, {0x4, 0x2, 0xa, 0x4}, {0x5, 0x3, 0xd, 0x8}, {0x5, 0x4, 0x1}, {0x4, 0x3, 0xa, 0x3}, {0x1, 0x1, 0xf, 0xa}, {0x1, 0x4, 0x9, 0xc}, {0x0, 0x3, 0x8, 0x9}, {0x0, 0x1, 0x0, 0xa}, {0x2, 0x3, 0x7, 0x4}], 0x10, 0x9, @void, @value}, 0x94) connect$inet(r3, 0x0, 0x0) 1.064242229s ago: executing program 5 (id=3817): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fcntl$dupfd(0xffffffffffffffff, 0x279d80356afc83b5, 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000340)='sockfs\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)}, 0x20040814) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}, &(0x7f0000000280)=0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000002c0)="fb0000000000000007000000892f", 0xe, 0x48001, &(0x7f0000000040)={0x11, 0x1b, r9, 0x1, 0x72, 0x6, @remote}, 0x14) setuid(r7) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r11, 0x0, 0x0, 0x1, 0x0, 0x0) 952.676059ms ago: executing program 2 (id=3819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 950.85157ms ago: executing program 4 (id=3820): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000780)=@framed={{}, [@ringbuf_query]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110108, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfea, 0x8046}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000002140)=ANY=[@ANYRESDEC], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00012dbd7000fedbdf250b000000080002000400000005000500da000000080003000300000008000400011000001800018014000400000000000000000000000000000000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x4c}}, 0x240008c4) write$binfmt_script(r0, 0x0, 0xf4ff) io_submit(0x0, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) io_pgetevents(0x0, 0x3, 0x3, &(0x7f0000000680)=[{}, {}, {}], 0x0, 0x0) 783.694019ms ago: executing program 2 (id=3821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlockall(0x3) 779.49553ms ago: executing program 4 (id=3822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r0) 373.85377ms ago: executing program 1 (id=3823): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000780)=@framed={{}, [@ringbuf_query]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110108, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfea, 0x8046}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000002140)=ANY=[@ANYRESDEC], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00012dbd7000fedbdf250b000000080002000400000005000500da000000080003000300000008000400011000001800018014000400000000000000000000000000000000000800030003000000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x4c}}, 0x240008c4) write$binfmt_script(r0, 0x0, 0xf4ff) io_submit(0x0, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) io_pgetevents(0x0, 0x3, 0x3, &(0x7f0000000680)=[{}, {}, {}], 0x0, 0x0) 373.26993ms ago: executing program 4 (id=3833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlockall(0x3) 282.58826ms ago: executing program 3 (id=3824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = open(&(0x7f0000000f00)='./bus\x00', 0x161142, 0x6) r4 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x1000000201005) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) stat(&(0x7f0000000740)='./file0\x00', 0x0) 209.96767ms ago: executing program 2 (id=3825): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023022301020905000000"]) 141.02888ms ago: executing program 1 (id=3826): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000180), r3, 0x0, 0x2, 0x4}}, 0x67) 130.24158ms ago: executing program 2 (id=3827): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2800000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200"], 0xfe44, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r5, r5, 0x0, 0x6) ioctl$sock_ifreq(r4, 0x891f, &(0x7f0000000380)={'geneve1\x00', @ifru_settings={0x200, 0x6, @raw_hdlc=0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a40)={0x0, "3dd8e310063d111688b4d8443b1682c2"}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001a40)={0x2, 0xc, @start={r6, 0x1, "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", "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"}, [0xd, 0x2, 0x8, 0x7, 0x400, 0x8e, 0x0, 0x7, 0x5069cb2f, 0x3, 0x4, 0x1, 0x5b1, 0x7, 0x2, 0x1, 0x78, 0x6, 0x168, 0x2, 0x1, 0x4, 0x4, 0x10001, 0x4, 0x2, 0x8, 0xfe00000000000000, 0x7, 0x6, 0x7fffffff, 0x1ff, 0x6, 0x2, 0xd, 0x1, 0x5, 0x4, 0x3, 0x1, 0xac5c, 0x9, 0x7, 0x7, 0x80000001, 0x8, 0x4, 0x8, 0x3ff, 0x10000, 0x8438, 0x6, 0xc99, 0x4, 0x83, 0x6b7, 0x2, 0x8000000000000001, 0x3, 0x9, 0x2, 0x3ff, 0x7, 0x5]}) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x80010, r3, 0xab177000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x1000}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x8, 0xfffffffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast2, 0x1, 0x10, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41e9cad87b909dda, 0x10, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000000300)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x8473, 0xffffffffffffffff, 0xa, &(0x7f0000000480)=[r8, r1, r1, r1, r1, r1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x5, 0x9, 0x3}, {0x4, 0x2, 0xa, 0x4}, {0x5, 0x3, 0xd, 0x8}, {0x5, 0x4, 0x1}, {0x4, 0x3, 0xa, 0x3}, {0x1, 0x1, 0xf, 0xa}, {0x1, 0x4, 0x9, 0xc}, {0x0, 0x3, 0x8, 0x9}, {0x0, 0x1, 0x0, 0xa}, {0x2, 0x3, 0x7, 0x4}], 0x10, 0x9, @void, @value}, 0x94) connect$inet(r3, 0x0, 0x0) 129.32389ms ago: executing program 5 (id=3828): r0 = msgget$private(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001000100ff00000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0xffffff7f) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) msgsnd(r0, &(0x7f0000000200)=ANY=[], 0x0, 0x0) msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="4e94da2993090c953cc49be596788b3df0ed32c000677202fee28a61fc66e83f22a1dbfe0e9f70097176746a7de05c35a2b8d17a08bf28dbaecf683a917decb4e25e2f569be1e99765318399b836b19c0254a2c4f034e25d4d73ded11d7788106e0537ca11edc4949aad45e70c"], 0xfd1, 0x800) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r7], 0x0, 0x26, 0x0, 0x100004, 0x1ffd, 0x0, @void, @value}, 0x28) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x13, 0x200002b0, 0x200002e0, 0x1], 0x2, 0x0, &(0x7f0000000280)=ANY=[]}, 0x78) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r8) ioctl$sock_ifreq(r5, 0x8914, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@remote}) 88.33726ms ago: executing program 2 (id=3829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 80.71029ms ago: executing program 5 (id=3830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) setgroups(0x0, 0x0) 6.07231ms ago: executing program 1 (id=3831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 5.77598ms ago: executing program 2 (id=3832): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='thermal_temperature\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 5 (id=3834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000f94f51404919a5853aa3010203010902240001000000000904000002ff5d010009050303000000000009058a03"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_tid_address(0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) kernel console output (not intermixed with test programs): f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.867690][T11742] RSP: 002b:00007f54bc9a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.876115][T11742] RAX: ffffffffffffffda RBX: 00007f54be4e5fa0 RCX: 00007f54be32e819 [ 161.884110][T11742] RDX: 0000000020000040 RSI: 0000000020000180 RDI: 0000000000000000 [ 161.892163][T11742] RBP: 00007f54bc9a1090 R08: 0000000020000580 R09: 0000000000000000 [ 161.900179][T11742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.908227][T11742] R13: 0000000000000000 R14: 00007f54be4e5fa0 R15: 00007ffd4aa703b8 [ 161.916290][T11742] [ 161.929956][T11745] tmpfs: Bad value for 'mpol' [ 161.937886][T11745] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2731'. [ 161.999034][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2737'. [ 162.106463][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.116448][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.627248][T11777] netlink: 'syz.5.2748': attribute type 10 has an invalid length. [ 162.635152][T11777] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2748'. [ 162.653433][T11777] bridge0: port 3(ipvlan0) entered blocking state [ 162.660041][T11777] bridge0: port 3(ipvlan0) entered disabled state [ 162.669788][T11777] ipvlan0: entered allmulticast mode [ 162.675177][T11777] veth0_vlan: entered allmulticast mode [ 162.681012][T11779] netlink: 'syz.4.2749': attribute type 9 has an invalid length. [ 162.689643][T11777] ipvlan0: left allmulticast mode [ 162.694806][T11777] veth0_vlan: left allmulticast mode [ 162.701013][T11777] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 162.765664][ T3647] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 162.773377][ T3647] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 162.782406][ T3647] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 162.790984][ T3647] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 162.937413][T11799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2756'. [ 162.946608][T11799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2756'. [ 162.975398][T11799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2756'. [ 163.005058][T11799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2756'. [ 163.057533][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.085279][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.487522][T11817] sctp: [Deprecated]: syz.5.2763 (pid 11817) Use of int in max_burst socket option deprecated. [ 163.487522][T11817] Use struct sctp_assoc_value instead [ 163.516468][T11817] tmpfs: Bad value for 'mpol' [ 163.543602][T11820] netlink: 'syz.5.2764': attribute type 10 has an invalid length. [ 163.552914][T11820] bridge0: port 3(ipvlan0) entered blocking state [ 163.559608][T11820] bridge0: port 3(ipvlan0) entered disabled state [ 163.575597][T11820] ipvlan0: entered allmulticast mode [ 163.580954][T11820] veth0_vlan: entered allmulticast mode [ 163.588083][T11820] ipvlan0: left allmulticast mode [ 163.593138][T11820] veth0_vlan: left allmulticast mode [ 163.599672][T11820] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 163.671090][T11826] netlink: 'syz.5.2767': attribute type 1 has an invalid length. [ 163.679055][T11826] netlink: 'syz.5.2767': attribute type 2 has an invalid length. [ 163.810825][T11838] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 163.826166][T11843] netlink: 'syz.2.2773': attribute type 9 has an invalid length. [ 163.887572][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.896144][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.600795][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 164.600813][ T29] audit: type=1326 audit(1732127023.139:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 164.630580][ T29] audit: type=1326 audit(1732127023.139:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 164.654291][ T29] audit: type=1326 audit(1732127023.139:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 164.677844][ T29] audit: type=1326 audit(1732127023.139:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd434d5d1b0 code=0x7ffc0000 [ 164.701509][ T29] audit: type=1400 audit(1732127023.139:5281): avc: denied { read } for pid=11871 comm="syz.4.2784" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.724937][ T29] audit: type=1400 audit(1732127023.139:5282): avc: denied { open } for pid=11871 comm="syz.4.2784" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.751976][ T29] audit: type=1326 audit(1732127023.139:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 164.775647][ T29] audit: type=1326 audit(1732127023.139:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd434d5d4aa code=0x7ffc0000 [ 164.799035][ T29] audit: type=1326 audit(1732127023.289:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd434d90905 code=0x7ffc0000 [ 164.871330][T11881] FAULT_INJECTION: forcing a failure. [ 164.871330][T11881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.884461][T11881] CPU: 1 UID: 0 PID: 11881 Comm: syz.1.2787 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 164.886745][T11874] usb usb7: usbfs: process 11874 (syz.2.2785) did not claim interface 8 before use [ 164.894883][T11881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 164.914235][T11881] Call Trace: [ 164.917515][T11881] [ 164.920452][T11881] dump_stack_lvl+0xf2/0x150 [ 164.925057][T11881] dump_stack+0x15/0x20 [ 164.929294][T11881] should_fail_ex+0x223/0x230 [ 164.933995][T11881] should_fail+0xb/0x10 [ 164.938254][T11881] should_fail_usercopy+0x1a/0x20 [ 164.943287][T11881] _copy_from_user+0x1e/0xb0 [ 164.947960][T11881] kstrtouint_from_user+0x76/0xe0 [ 164.953068][T11881] ? 0xffffffff81000000 [ 164.957243][T11881] ? selinux_file_permission+0x22a/0x360 [ 164.962952][T11881] proc_fail_nth_write+0x4f/0x150 [ 164.967991][T11881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.973634][T11881] vfs_write+0x281/0x920 [ 164.977884][T11881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 164.983523][T11881] ? __fget_files+0x17c/0x1c0 [ 164.988237][T11881] ksys_write+0xe8/0x1b0 [ 164.992524][T11881] __x64_sys_write+0x42/0x50 [ 164.997199][T11881] x64_sys_call+0x287e/0x2dc0 [ 165.002003][T11881] do_syscall_64+0xc9/0x1c0 [ 165.006568][T11881] ? clear_bhb_loop+0x55/0xb0 [ 165.011250][T11881] ? clear_bhb_loop+0x55/0xb0 [ 165.015934][T11881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.021871][T11881] RIP: 0033:0x7f7a3d87d2ff [ 165.026331][T11881] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 165.045998][T11881] RSP: 002b:00007f7a3bef7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 165.054522][T11881] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a3d87d2ff [ 165.062498][T11881] RDX: 0000000000000001 RSI: 00007f7a3bef70a0 RDI: 0000000000000008 [ 165.070474][T11881] RBP: 00007f7a3bef7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.078562][T11881] R10: 00000000000000f2 R11: 0000000000000293 R12: 0000000000000001 [ 165.086535][T11881] R13: 0000000000000000 R14: 00007f7a3da35fa0 R15: 00007fff034d3d28 [ 165.094516][T11881] [ 165.101345][T11882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.115228][ T29] audit: type=1326 audit(1732127023.639:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 165.120738][T11882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.207019][ T1057] IPVS: starting estimator thread 0... [ 165.295144][T11894] IPVS: using max 2112 ests per chain, 105600 per kthread [ 165.640151][T11923] __nla_validate_parse: 16 callbacks suppressed [ 165.640168][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2803'. [ 165.666792][T11923] hsr_slave_1 (unregistering): left promiscuous mode [ 165.675945][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.684974][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.708965][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.730595][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.739743][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.750101][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.783546][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.792619][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.809561][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2802'. [ 165.905554][T11954] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.940140][T11956] FAULT_INJECTION: forcing a failure. [ 165.940140][T11956] name failslab, interval 1, probability 0, space 0, times 0 [ 165.952872][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.4.2813 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 165.963356][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 165.973448][T11956] Call Trace: [ 165.976736][T11956] [ 165.979758][T11956] dump_stack_lvl+0xf2/0x150 [ 165.984368][T11956] dump_stack+0x15/0x20 [ 165.988541][T11956] should_fail_ex+0x223/0x230 [ 165.993325][T11956] ? __get_vm_area_node+0xf7/0x1b0 [ 165.998457][T11956] should_failslab+0x8f/0xb0 [ 166.003193][T11956] __kmalloc_cache_node_noprof+0x50/0x2b0 [ 166.008928][T11956] __get_vm_area_node+0xf7/0x1b0 [ 166.013885][T11956] __vmalloc_node_range_noprof+0x2c3/0xec0 [ 166.019782][T11956] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 166.025363][T11956] ? mntput_no_expire+0x70/0x3c0 [ 166.030443][T11956] ? avc_has_perm_noaudit+0x1cc/0x210 [ 166.035870][T11956] ? selinux_capable+0x1f2/0x260 [ 166.040849][T11956] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 166.046446][T11956] __vmalloc_noprof+0x5e/0x70 [ 166.051177][T11956] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 166.056799][T11956] bpf_prog_alloc_no_stats+0x49/0x360 [ 166.062175][T11956] ? bpf_prog_alloc+0x28/0x150 [ 166.066996][T11956] bpf_prog_alloc+0x3a/0x150 [ 166.071600][T11956] bpf_prog_load+0x4d1/0x1070 [ 166.076312][T11956] ? __rcu_read_unlock+0x4e/0x70 [ 166.081310][T11956] __sys_bpf+0x463/0x7a0 [ 166.085621][T11956] __x64_sys_bpf+0x43/0x50 [ 166.090126][T11956] x64_sys_call+0x2914/0x2dc0 [ 166.094889][T11956] do_syscall_64+0xc9/0x1c0 [ 166.099406][T11956] ? clear_bhb_loop+0x55/0xb0 [ 166.104094][T11956] ? clear_bhb_loop+0x55/0xb0 [ 166.108850][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.114910][T11956] RIP: 0033:0x7fd434d5e819 [ 166.119356][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.138979][T11956] RSP: 002b:00007fd4333d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.147397][T11956] RAX: ffffffffffffffda RBX: 00007fd434f15fa0 RCX: 00007fd434d5e819 [ 166.155368][T11956] RDX: 0000000000000090 RSI: 0000000020000300 RDI: 0000000000000005 [ 166.163341][T11956] RBP: 00007fd4333d7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.171333][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.179361][T11956] R13: 0000000000000000 R14: 00007fd434f15fa0 R15: 00007ffd75d853d8 [ 166.187349][T11956] [ 166.190460][T11956] syz.4.2813: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 166.207020][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.4.2813 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 166.217456][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.227590][T11956] Call Trace: [ 166.230947][T11956] [ 166.233903][T11956] dump_stack_lvl+0xf2/0x150 [ 166.238506][T11956] dump_stack+0x15/0x20 [ 166.242664][T11956] warn_alloc+0x145/0x1b0 [ 166.247023][T11956] __vmalloc_node_range_noprof+0x2e8/0xec0 [ 166.252911][T11956] ? mntput_no_expire+0x70/0x3c0 [ 166.257860][T11956] ? avc_has_perm_noaudit+0x1cc/0x210 [ 166.263236][T11956] ? selinux_capable+0x1f2/0x260 [ 166.268227][T11956] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 166.273814][T11956] __vmalloc_noprof+0x5e/0x70 [ 166.278508][T11956] ? bpf_prog_alloc_no_stats+0x49/0x360 [ 166.284071][T11956] bpf_prog_alloc_no_stats+0x49/0x360 [ 166.289445][T11956] ? bpf_prog_alloc+0x28/0x150 [ 166.294228][T11956] bpf_prog_alloc+0x3a/0x150 [ 166.299054][T11956] bpf_prog_load+0x4d1/0x1070 [ 166.303792][T11956] ? __rcu_read_unlock+0x4e/0x70 [ 166.308758][T11956] __sys_bpf+0x463/0x7a0 [ 166.313045][T11956] __x64_sys_bpf+0x43/0x50 [ 166.317581][T11956] x64_sys_call+0x2914/0x2dc0 [ 166.322274][T11956] do_syscall_64+0xc9/0x1c0 [ 166.326849][T11956] ? clear_bhb_loop+0x55/0xb0 [ 166.331556][T11956] ? clear_bhb_loop+0x55/0xb0 [ 166.336354][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.342258][T11956] RIP: 0033:0x7fd434d5e819 [ 166.346721][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.366380][T11956] RSP: 002b:00007fd4333d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.374821][T11956] RAX: ffffffffffffffda RBX: 00007fd434f15fa0 RCX: 00007fd434d5e819 [ 166.382808][T11956] RDX: 0000000000000090 RSI: 0000000020000300 RDI: 0000000000000005 [ 166.390804][T11956] RBP: 00007fd4333d7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.398779][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.406776][T11956] R13: 0000000000000000 R14: 00007fd434f15fa0 R15: 00007ffd75d853d8 [ 166.414756][T11956] [ 166.418082][T11956] Mem-Info: [ 166.421197][T11956] active_anon:4610 inactive_anon:3 isolated_anon:0 [ 166.421197][T11956] active_file:6635 inactive_file:20621 isolated_file:0 [ 166.421197][T11956] unevictable:0 dirty:503 writeback:0 [ 166.421197][T11956] slab_reclaimable:2905 slab_unreclaimable:14397 [ 166.421197][T11956] mapped:29007 shmem:1564 pagetables:853 [ 166.421197][T11956] sec_pagetables:0 bounce:0 [ 166.421197][T11956] kernel_misc_reclaimable:0 [ 166.421197][T11956] free:1870854 free_pcp:8573 free_cma:0 [ 166.466046][T11956] Node 0 active_anon:18440kB inactive_anon:12kB active_file:26540kB inactive_file:82484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116028kB dirty:2012kB writeback:0kB shmem:6256kB writeback_tmp:0kB kernel_stack:3184kB pagetables:3412kB sec_pagetables:0kB all_unreclaimable? no [ 166.494044][T11956] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.520976][T11956] lowmem_reserve[]: 0 2866 7844 0 [ 166.526202][T11956] Node 0 DMA32 free:2950288kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953920kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 166.554938][T11956] lowmem_reserve[]: 0 0 4978 0 [ 166.559804][T11956] Node 0 Normal free:4517768kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:18404kB inactive_anon:12kB active_file:26540kB inactive_file:82484kB unevictable:0kB writepending:2052kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:30676kB local_pcp:19628kB free_cma:0kB [ 166.590296][T11956] lowmem_reserve[]: 0 0 0 0 [ 166.594887][T11956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.607802][T11956] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950288kB [ 166.623925][T11956] Node 0 Normal: 1026*4kB (UME) 918*8kB (UME) 1015*16kB (UME) 363*32kB (UME) 353*64kB (UME) 176*128kB (UME) 170*256kB (UME) 126*512kB (UM) 78*1024kB (UME) 29*2048kB (UM) 1022*4096kB (UM) = 4517832kB [ 166.643690][T11956] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 166.653009][T11956] 28837 total pagecache pages [ 166.657740][T11956] 17 pages in swap cache [ 166.661989][T11956] Free swap = 124220kB [ 166.662264][T11963] block device autoloading is deprecated and will be removed. [ 166.666147][T11956] Total swap = 124996kB [ 166.666158][T11956] 2097051 pages RAM [ 166.666166][T11956] 0 pages HighMem/MovableOnly [ 166.666186][T11956] 80179 pages reserved [ 166.681816][T11963] syz.3.2814: attempt to access beyond end of device [ 166.681816][T11963] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.716668][T11968] FAULT_INJECTION: forcing a failure. [ 166.716668][T11968] name failslab, interval 1, probability 0, space 0, times 0 [ 166.729356][T11968] CPU: 1 UID: 0 PID: 11968 Comm: syz.2.2815 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 166.739947][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.750063][T11968] Call Trace: [ 166.753341][T11968] [ 166.756314][T11968] dump_stack_lvl+0xf2/0x150 [ 166.760940][T11968] dump_stack+0x15/0x20 [ 166.765106][T11968] should_fail_ex+0x223/0x230 [ 166.769802][T11968] ? __d_alloc+0x3d/0x340 [ 166.774138][T11968] should_failslab+0x8f/0xb0 [ 166.778793][T11968] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 166.784567][T11968] __d_alloc+0x3d/0x340 [ 166.788731][T11968] d_alloc_parallel+0x54/0xc60 [ 166.793500][T11968] ? __rcu_read_unlock+0x4e/0x70 [ 166.798442][T11968] ? __d_lookup+0x342/0x370 [ 166.803167][T11968] ? vsnprintf+0xdd8/0xe30 [ 166.807586][T11968] ? full_name_hash+0x93/0xe0 [ 166.812309][T11968] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 166.818556][T11968] proc_fill_cache+0x157/0x230 [ 166.823372][T11968] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 166.829633][T11968] proc_map_files_readdir+0x522/0x690 [ 166.835019][T11968] iterate_dir+0x11d/0x310 [ 166.839527][T11968] __se_sys_getdents64+0x87/0x1a0 [ 166.844557][T11968] ? __pfx_filldir64+0x10/0x10 [ 166.849396][T11968] __x64_sys_getdents64+0x43/0x50 [ 166.854557][T11968] x64_sys_call+0x2d24/0x2dc0 [ 166.859286][T11968] do_syscall_64+0xc9/0x1c0 [ 166.863797][T11968] ? clear_bhb_loop+0x55/0xb0 [ 166.868522][T11968] ? clear_bhb_loop+0x55/0xb0 [ 166.873205][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.879251][T11968] RIP: 0033:0x7fe86e41e819 [ 166.883682][T11968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.903328][T11968] RSP: 002b:00007fe86ca91038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 166.911812][T11968] RAX: ffffffffffffffda RBX: 00007fe86e5d5fa0 RCX: 00007fe86e41e819 [ 166.919797][T11968] RDX: 0000000000000ff6 RSI: 0000000020001fc0 RDI: 0000000000000003 [ 166.927842][T11968] RBP: 00007fe86ca91090 R08: 0000000000000000 R09: 0000000000000000 [ 166.936066][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.944036][T11968] R13: 0000000000000000 R14: 00007fe86e5d5fa0 R15: 00007fffcf8f77e8 [ 166.952029][T11968] [ 166.987529][T11954] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.067932][T11989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.076576][T11989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.086152][T11954] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.136976][T11954] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.192993][T11954] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.204149][T11954] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.217771][T11954] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.230913][T11954] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.279656][T12001] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 167.347817][T12013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.356896][T12013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.561351][T12015] chnl_net:caif_netlink_parms(): no params data found [ 167.580069][T10439] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.623986][T10439] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.663727][T12034] netlink: 'syz.4.2834': attribute type 10 has an invalid length. [ 167.672444][T12034] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 167.697209][T10439] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.708497][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.715886][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.727030][T12015] bridge_slave_0: entered allmulticast mode [ 167.733619][T12015] bridge_slave_0: entered promiscuous mode [ 167.740609][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.747700][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.757083][T12015] bridge_slave_1: entered allmulticast mode [ 167.764079][T12015] bridge_slave_1: entered promiscuous mode [ 167.772041][T10439] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.794918][T12042] netlink: 'syz.4.2838': attribute type 10 has an invalid length. [ 167.803665][T12042] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 167.820838][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.833048][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.853318][T12015] team0: Port device team_slave_0 added [ 167.860215][T12015] team0: Port device team_slave_1 added [ 167.881592][T12015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.888702][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.914644][T12015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.947935][T12015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.954947][T12015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.981021][T12015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.988034][T12050] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 168.036903][T12015] hsr_slave_0: entered promiscuous mode [ 168.045029][T12015] hsr_slave_1: entered promiscuous mode [ 168.056902][T12015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.082800][T12015] Cannot create hsr debugfs directory [ 168.170488][T10439] bond0 (unregistering): Released all slaves [ 168.181346][T10439] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 168.190023][T12065] sctp: [Deprecated]: syz.5.2848 (pid 12065) Use of int in max_burst socket option deprecated. [ 168.190023][T12065] Use struct sctp_assoc_value instead [ 168.209843][T10439] bond1 (unregistering): Released all slaves [ 168.248105][T12065] tmpfs: Bad value for 'mpol' [ 168.295781][T10439] hsr_slave_0: left promiscuous mode [ 168.303213][T10439] veth1_macvtap: left promiscuous mode [ 168.308950][T10439] veth0_macvtap: left promiscuous mode [ 168.314638][T10439] veth1_vlan: left promiscuous mode [ 168.319953][T10439] veth0_vlan: left promiscuous mode [ 168.363631][T12083] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 168.892799][T12015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.902587][T12015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.913854][T12015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.923028][T12015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.009118][T12015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.030911][T12015] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.040807][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.047908][T10435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.061098][T10429] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.068254][T10429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.185475][T12142] FAULT_INJECTION: forcing a failure. [ 169.185475][T12142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.185719][T12015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.198588][T12142] CPU: 0 UID: 0 PID: 12142 Comm: syz.5.2880 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 169.198624][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 169.198677][T12142] Call Trace: [ 169.198683][T12142] [ 169.198691][T12142] dump_stack_lvl+0xf2/0x150 [ 169.198728][T12142] dump_stack+0x15/0x20 [ 169.198755][T12142] should_fail_ex+0x223/0x230 [ 169.198802][T12142] should_fail+0xb/0x10 [ 169.249850][T12142] should_fail_usercopy+0x1a/0x20 [ 169.254899][T12142] _copy_to_user+0x20/0xa0 [ 169.259399][T12142] simple_read_from_buffer+0xa0/0x110 [ 169.264789][T12142] proc_fail_nth_read+0xf9/0x140 [ 169.269741][T12142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.275299][T12142] vfs_read+0x1a2/0x700 [ 169.279465][T12142] ? __rcu_read_unlock+0x4e/0x70 [ 169.284529][T12142] ? __fget_files+0x17c/0x1c0 [ 169.289231][T12142] ksys_read+0xe8/0x1b0 [ 169.293401][T12142] __x64_sys_read+0x42/0x50 [ 169.297918][T12142] x64_sys_call+0x2874/0x2dc0 [ 169.302680][T12142] do_syscall_64+0xc9/0x1c0 [ 169.307190][T12142] ? clear_bhb_loop+0x55/0xb0 [ 169.311889][T12142] ? clear_bhb_loop+0x55/0xb0 [ 169.316627][T12142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.322526][T12142] RIP: 0033:0x7f54be32d25c [ 169.327005][T12142] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 169.346686][T12142] RSP: 002b:00007f54bc9a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.355106][T12142] RAX: ffffffffffffffda RBX: 00007f54be4e5fa0 RCX: 00007f54be32d25c [ 169.363096][T12142] RDX: 000000000000000f RSI: 00007f54bc9a10a0 RDI: 0000000000000009 [ 169.371071][T12142] RBP: 00007f54bc9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 169.379149][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.387213][T12142] R13: 0000000000000000 R14: 00007f54be4e5fa0 R15: 00007ffd4aa703b8 [ 169.395204][T12142] [ 169.452397][T12150] serio: Serial port ptm0 [ 169.516551][T12015] veth0_vlan: entered promiscuous mode [ 169.528797][T12015] veth1_vlan: entered promiscuous mode [ 169.547699][T12015] veth0_macvtap: entered promiscuous mode [ 169.556556][T12015] veth1_macvtap: entered promiscuous mode [ 169.567416][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.578100][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.588025][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.598631][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.608547][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.619030][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.632330][T12015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.643362][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.653961][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.663826][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.674405][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.684308][T12015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.694833][T12015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.723354][T12015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.737285][T12015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.746073][T12015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.754788][T12015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.763572][T12015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.788583][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 169.788599][ T29] audit: type=1400 audit(1732127028.329:5593): avc: denied { mounton } for pid=12015 comm="syz-executor" path="/root/syzkaller.cJALfu/syz-tmp" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 169.822619][ T29] audit: type=1400 audit(1732127028.329:5594): avc: denied { mount } for pid=12015 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.845056][ T29] audit: type=1400 audit(1732127028.329:5595): avc: denied { mounton } for pid=12015 comm="syz-executor" path="/root/syzkaller.cJALfu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 169.870653][ T29] audit: type=1400 audit(1732127028.329:5596): avc: denied { mount } for pid=12015 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 169.892699][ T29] audit: type=1400 audit(1732127028.329:5597): avc: denied { mounton } for pid=12015 comm="syz-executor" path="/root/syzkaller.cJALfu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 169.919650][ T29] audit: type=1400 audit(1732127028.329:5598): avc: denied { mounton } for pid=12015 comm="syz-executor" path="/root/syzkaller.cJALfu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 169.947305][ T29] audit: type=1400 audit(1732127028.329:5599): avc: denied { unmount } for pid=12015 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 169.967134][ T29] audit: type=1400 audit(1732127028.359:5600): avc: denied { mounton } for pid=12015 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 169.981135][T12172] sctp: [Deprecated]: syz.3.2831 (pid 12172) Use of int in max_burst socket option deprecated. [ 169.981135][T12172] Use struct sctp_assoc_value instead [ 170.018367][T12172] tmpfs: Bad value for 'mpol' [ 170.032710][ T29] audit: type=1400 audit(1732127028.569:5601): avc: denied { create } for pid=12175 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.062622][ T29] audit: type=1400 audit(1732127028.569:5602): avc: denied { connect } for pid=12175 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.083585][T12178] program syz.3.2889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.117324][T12182] netlink: 'syz.2.2892': attribute type 10 has an invalid length. [ 170.125660][T12182] bridge0: port 1(ipvlan0) entered blocking state [ 170.132296][T12182] bridge0: port 1(ipvlan0) entered disabled state [ 170.142758][T12182] ipvlan0: entered allmulticast mode [ 170.148263][T12182] veth0_vlan: entered allmulticast mode [ 170.156327][T12182] ipvlan0: left allmulticast mode [ 170.161388][T12187] netlink: 'syz.1.2893': attribute type 1 has an invalid length. [ 170.169338][T12182] veth0_vlan: left allmulticast mode [ 170.176730][T12182] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 170.203864][T12190] bond0: entered allmulticast mode [ 170.217912][T12192] FAULT_INJECTION: forcing a failure. [ 170.217912][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 170.230831][T12192] CPU: 1 UID: 0 PID: 12192 Comm: syz.2.2896 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 170.241366][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 170.251471][T12192] Call Trace: [ 170.254767][T12192] [ 170.257772][T12192] dump_stack_lvl+0xf2/0x150 [ 170.262436][T12192] dump_stack+0x15/0x20 [ 170.266619][T12192] should_fail_ex+0x223/0x230 [ 170.271347][T12192] ? getname_kernel+0x3d/0x1e0 [ 170.276248][T12192] should_failslab+0x8f/0xb0 [ 170.280876][T12192] kmem_cache_alloc_noprof+0x4c/0x290 [ 170.286326][T12192] getname_kernel+0x3d/0x1e0 [ 170.290966][T12192] kern_path+0x21/0x120 [ 170.295319][T12192] bpf_uprobe_multi_link_attach+0x1d0/0x7c0 [ 170.301236][T12192] ? kstrtouint_from_user+0xb0/0xe0 [ 170.306497][T12192] ? __fget_files+0x17c/0x1c0 [ 170.311203][T12192] link_create+0x636/0x650 [ 170.315643][T12192] __sys_bpf+0x430/0x7a0 [ 170.319941][T12192] __x64_sys_bpf+0x43/0x50 [ 170.324424][T12192] x64_sys_call+0x2914/0x2dc0 [ 170.329199][T12192] do_syscall_64+0xc9/0x1c0 [ 170.333853][T12192] ? clear_bhb_loop+0x55/0xb0 [ 170.338569][T12192] ? clear_bhb_loop+0x55/0xb0 [ 170.343297][T12192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.349210][T12192] RIP: 0033:0x7fe86e41e819 [ 170.353635][T12192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.373331][T12192] RSP: 002b:00007fe86ca91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.381779][T12192] RAX: ffffffffffffffda RBX: 00007fe86e5d5fa0 RCX: 00007fe86e41e819 [ 170.389767][T12192] RDX: 000000000000003c RSI: 00000000200012c0 RDI: 000000000000001c [ 170.397765][T12192] RBP: 00007fe86ca91090 R08: 0000000000000000 R09: 0000000000000000 [ 170.405929][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.413913][T12192] R13: 0000000000000000 R14: 00007fe86e5d5fa0 R15: 00007fffcf8f77e8 [ 170.421979][T12192] [ 170.517991][T12198] sctp: [Deprecated]: syz.2.2899 (pid 12198) Use of int in max_burst socket option deprecated. [ 170.517991][T12198] Use struct sctp_assoc_value instead [ 170.536751][T12202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 170.543305][T12202] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.550850][T12202] vhci_hcd vhci_hcd.0: Device attached [ 170.558146][T12206] vhci_hcd: connection closed [ 170.558336][T10429] vhci_hcd: stop threads [ 170.567337][T10429] vhci_hcd: release socket [ 170.571797][T10429] vhci_hcd: disconnect device [ 170.579053][T12198] tmpfs: Bad value for 'mpol' [ 170.664738][T12217] __nla_validate_parse: 20 callbacks suppressed [ 170.664803][T12217] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2906'. [ 170.666032][T12219] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 170.687987][T12219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2907'. [ 170.698347][T12219] bridge0: port 3(ipvlan0) entered blocking state [ 170.704832][T12219] bridge0: port 3(ipvlan0) entered disabled state [ 170.711768][T12219] ipvlan0: entered allmulticast mode [ 170.717156][T12219] veth0_vlan: entered allmulticast mode [ 170.723595][T12219] ipvlan0: left allmulticast mode [ 170.728725][T12219] veth0_vlan: left allmulticast mode [ 170.734413][T12219] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 170.917707][T12241] sctp: [Deprecated]: syz.3.2913 (pid 12241) Use of int in max_burst socket option deprecated. [ 170.917707][T12241] Use struct sctp_assoc_value instead [ 170.942730][T12241] tmpfs: Bad value for 'mpol' [ 170.948125][T12241] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2913'. [ 171.052698][T12256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.061231][T12256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.072820][T12258] Invalid ELF header magic: != ELF [ 171.160304][T12267] sctp: [Deprecated]: syz.3.2924 (pid 12267) Use of int in max_burst socket option deprecated. [ 171.160304][T12267] Use struct sctp_assoc_value instead [ 171.186392][T12267] tmpfs: Bad value for 'mpol' [ 171.191672][T12267] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2924'. [ 171.414720][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2930'. [ 171.709847][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2932'. [ 171.718972][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2932'. [ 171.728140][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2932'. [ 171.745591][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2932'. [ 171.754600][T12291] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2932'. [ 172.933638][T12325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.942143][T12325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.417383][T12352] Invalid ELF header magic: != ELF [ 173.422715][T12354] netlink: 'syz.3.2951': attribute type 10 has an invalid length. [ 173.431837][T12354] bridge0: port 3(ipvlan0) entered blocking state [ 173.438494][T12354] bridge0: port 3(ipvlan0) entered disabled state [ 173.445493][T12354] ipvlan0: entered allmulticast mode [ 173.450917][T12354] veth0_vlan: entered allmulticast mode [ 173.458533][T12354] ipvlan0: left allmulticast mode [ 173.463627][T12354] veth0_vlan: left allmulticast mode [ 173.470079][T12354] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 174.075691][T12377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.156990][T12377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.218252][T12377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.296890][T12377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.422290][T12377] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.437285][T12377] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.460094][T12377] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.496686][T12393] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.526548][T12377] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.557773][T12393] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.581020][T12404] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.626964][T12393] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.676616][T12404] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.720508][T12393] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.771942][T12404] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.810371][T12393] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.830361][T12393] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.841860][T12404] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.858690][T12393] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.888812][T12393] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.954157][T12425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.962765][T12425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.971688][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 174.971700][ T29] audit: type=1326 audit(1732127033.509:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.4.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 175.004647][ T29] audit: type=1326 audit(1732127033.539:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.4.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 175.028252][ T29] audit: type=1326 audit(1732127033.539:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.4.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 175.051859][ T29] audit: type=1326 audit(1732127033.539:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.4.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 175.051887][ T29] audit: type=1326 audit(1732127033.539:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.4.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 175.051910][ T29] audit: type=1326 audit(1732127033.539:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12424 comm="syz.4.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd434d5e819 code=0x7ffc0000 [ 175.258291][T12433] Invalid ELF header magic: != ELF [ 175.360871][ T29] audit: type=1326 audit(1732127033.899:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900651e819 code=0x7ffc0000 [ 175.413866][ T29] audit: type=1326 audit(1732127033.899:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900651e819 code=0x7ffc0000 [ 175.437559][ T29] audit: type=1326 audit(1732127033.899:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f900651e819 code=0x7ffc0000 [ 175.461083][ T29] audit: type=1326 audit(1732127033.899:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900651e819 code=0x7ffc0000 [ 175.830949][T12453] sctp: [Deprecated]: syz.5.2989 (pid 12453) Use of int in max_burst socket option deprecated. [ 175.830949][T12453] Use struct sctp_assoc_value instead [ 175.862699][T12453] tmpfs: Bad value for 'mpol' [ 175.862743][T12458] netlink: 'syz.2.2991': attribute type 10 has an invalid length. [ 175.873423][T12459] __nla_validate_parse: 24 callbacks suppressed [ 175.873461][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 175.875331][T12458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2991'. [ 175.885745][T12458] bridge0: port 1(ipvlan0) entered blocking state [ 175.890600][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 175.899572][T12458] bridge0: port 1(ipvlan0) entered disabled state [ 175.912290][T12458] ipvlan0: entered allmulticast mode [ 175.917204][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 175.921457][T12458] veth0_vlan: entered allmulticast mode [ 175.937151][T12453] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2989'. [ 175.941797][T12458] ipvlan0: left allmulticast mode [ 175.955667][T12458] veth0_vlan: left allmulticast mode [ 175.961670][T12458] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 175.974884][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 175.986273][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 176.017356][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 176.046117][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.054686][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.081142][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 176.090336][T12459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2990'. [ 176.181574][ T3642] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.191420][ T3642] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.227556][ T3642] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.237402][ T3642] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.301553][ T3642] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.311506][ T3642] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.337503][T12479] chnl_net:caif_netlink_parms(): no params data found [ 176.348004][ T3642] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.357910][ T3642] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.393488][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.400626][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.408085][T12479] bridge_slave_0: entered allmulticast mode [ 176.414687][T12479] bridge_slave_0: entered promiscuous mode [ 176.422044][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.429216][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.436471][T12479] bridge_slave_1: entered allmulticast mode [ 176.442962][T12479] bridge_slave_1: entered promiscuous mode [ 176.459942][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.472970][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.496897][T12479] team0: Port device team_slave_0 added [ 176.505880][T12479] team0: Port device team_slave_1 added [ 176.562505][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.573049][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.583724][ T3642] bond0 (unregistering): Released all slaves [ 176.609227][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.616294][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.642305][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.653837][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.660875][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.687035][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.714679][ T3642] hsr_slave_0: left promiscuous mode [ 176.726798][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.734421][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.756276][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.763759][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.786518][ T3642] veth1_macvtap: left promiscuous mode [ 176.792053][ T3642] veth0_macvtap: left promiscuous mode [ 176.797613][ T3642] veth1_vlan: left promiscuous mode [ 176.802838][ T3642] veth0_vlan: left promiscuous mode [ 176.962728][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 176.979609][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 177.077515][T12479] hsr_slave_0: entered promiscuous mode [ 177.087651][T12479] hsr_slave_1: entered promiscuous mode [ 177.473399][T12479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 177.482500][T12479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 177.494156][T12479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 177.502781][T12479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 177.558114][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.576781][T12479] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.595468][T10439] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.602665][T10439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.619587][T10439] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.626706][T10439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.709078][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.857018][T12479] veth0_vlan: entered promiscuous mode [ 177.866850][T12479] veth1_vlan: entered promiscuous mode [ 177.884128][T12479] veth0_macvtap: entered promiscuous mode [ 177.893277][T12479] veth1_macvtap: entered promiscuous mode [ 177.905123][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.915707][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.925707][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.936181][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.946067][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.956573][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.968192][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.978868][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.989421][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.999399][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.009913][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.019902][T12479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.030413][T12479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.042758][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.053273][T12479] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.062132][T12479] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.070930][T12479] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.079732][T12479] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.134944][T12404] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.160985][T12404] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.183264][T12404] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.204659][T12404] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.109641][T12639] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.191721][T12639] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.218017][T12648] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.237003][T12639] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.278224][T12648] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.317555][T12639] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.357465][T12648] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.391757][T12639] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.404096][T12639] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.416923][T12639] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.427505][T12648] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.443607][T12639] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.491970][T12648] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.503104][T12648] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.514169][T12648] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.527558][T12648] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.912686][T12662] __nla_validate_parse: 16 callbacks suppressed [ 180.912703][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 180.928122][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 180.937655][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 180.955671][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 180.964720][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 180.974397][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 181.004447][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 181.009040][T12668] sctp: [Deprecated]: syz.4.3060 (pid 12668) Use of int in max_burst socket option deprecated. [ 181.009040][T12668] Use struct sctp_assoc_value instead [ 181.013563][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 181.039229][T12662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3059'. [ 181.041691][T12668] tmpfs: Bad value for 'mpol' [ 181.054176][T12668] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3060'. [ 181.085449][T12672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.093913][T12672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.102906][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 181.102923][ T29] audit: type=1326 audit(1732127039.639:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.132903][ T29] audit: type=1326 audit(1732127039.639:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.156584][ T29] audit: type=1326 audit(1732127039.639:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.180091][ T29] audit: type=1326 audit(1732127039.639:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.203768][ T29] audit: type=1326 audit(1732127039.639:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.227516][ T29] audit: type=1326 audit(1732127039.639:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.251252][ T29] audit: type=1326 audit(1732127039.639:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.274824][ T29] audit: type=1326 audit(1732127039.639:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12671 comm="syz.4.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 181.341073][ T29] audit: type=1326 audit(1732127039.879:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be32e819 code=0x7ffc0000 [ 181.366124][ T29] audit: type=1326 audit(1732127039.879:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.5.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be32e819 code=0x7ffc0000 [ 181.724256][T12697] Invalid ELF header magic: != ELF [ 181.728340][T12695] sctp: [Deprecated]: syz.3.3071 (pid 12695) Use of int in max_burst socket option deprecated. [ 181.728340][T12695] Use struct sctp_assoc_value instead [ 181.758743][T12695] tmpfs: Bad value for 'mpol' [ 181.787592][T12702] Invalid ELF header magic: != ELF [ 181.833642][T12710] netlink: 'syz.3.3078': attribute type 9 has an invalid length. [ 182.895322][T12734] sctp: [Deprecated]: syz.4.3085 (pid 12734) Use of int in max_burst socket option deprecated. [ 182.895322][T12734] Use struct sctp_assoc_value instead [ 182.921016][T12734] tmpfs: Bad value for 'mpol' [ 183.455679][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.464167][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.494336][T12770] Invalid ELF header magic: != ELF [ 183.643512][T12784] Invalid ELF header magic: != ELF [ 184.229882][T12818] sctp: [Deprecated]: syz.3.3120 (pid 12818) Use of int in max_burst socket option deprecated. [ 184.229882][T12818] Use struct sctp_assoc_value instead [ 184.254789][T12818] tmpfs: Bad value for 'mpol' [ 184.336786][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.345391][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.630896][T12857] Invalid ELF header magic: != ELF [ 184.965770][T12900] Invalid ELF header magic: != ELF [ 185.062103][T12915] netlink: 'syz.2.3152': attribute type 10 has an invalid length. [ 185.070839][T12915] bridge0: port 1(ipvlan0) entered blocking state [ 185.077479][T12915] bridge0: port 1(ipvlan0) entered disabled state [ 185.085784][T12915] ipvlan0: entered allmulticast mode [ 185.091115][T12915] veth0_vlan: entered allmulticast mode [ 185.097770][T12915] ipvlan0: left allmulticast mode [ 185.102921][T12915] veth0_vlan: left allmulticast mode [ 185.109170][T12915] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 185.287177][T12931] Invalid ELF header magic: != ELF [ 185.876863][ T1057] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 185.884588][ T1057] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 185.902683][ T1057] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 185.918805][ T1057] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 186.108212][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 186.108227][ T29] audit: type=1326 audit(1732127044.649:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.5.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be32e819 code=0x7ffc0000 [ 186.164998][ T29] audit: type=1326 audit(1732127044.699:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.3.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900651e819 code=0x7ffc0000 [ 186.221022][ T29] audit: type=1326 audit(1732127044.729:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.3.3182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900651e819 code=0x7ffc0000 [ 186.437816][T13008] sctp: [Deprecated]: syz.2.3190 (pid 13008) Use of int in max_burst socket option deprecated. [ 186.437816][T13008] Use struct sctp_assoc_value instead [ 186.446427][T13005] __nla_validate_parse: 75 callbacks suppressed [ 186.446449][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3189'. [ 186.485539][T13008] tmpfs: Bad value for 'mpol' [ 186.495776][T13008] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3190'. [ 186.539157][ T29] audit: type=1400 audit(1732127045.069:5951): avc: denied { read write } for pid=9404 comm="syz-executor" name="loop1" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.562648][ T29] audit: type=1400 audit(1732127045.069:5952): avc: denied { open } for pid=9404 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.586023][ T29] audit: type=1400 audit(1732127045.069:5953): avc: denied { ioctl } for pid=9404 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.625752][ T29] audit: type=1326 audit(1732127045.169:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be32e819 code=0x7ffc0000 [ 186.628829][ T29] audit: type=1326 audit(1732127045.169:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f54be32e819 code=0x7ffc0000 [ 186.674695][ T29] audit: type=1326 audit(1732127045.169:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be32e819 code=0x7ffc0000 [ 186.674799][ T29] audit: type=1326 audit(1732127045.169:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13013 comm="syz.5.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be32e819 code=0x7ffc0000 [ 186.726893][T13017] sctp: [Deprecated]: syz.1.3193 (pid 13017) Use of int in max_burst socket option deprecated. [ 186.726893][T13017] Use struct sctp_assoc_value instead [ 186.755283][T13017] tmpfs: Bad value for 'mpol' [ 186.760563][T13017] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3193'. [ 186.889674][T13038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.934703][T13041] FAULT_INJECTION: forcing a failure. [ 186.934703][T13041] name failslab, interval 1, probability 0, space 0, times 0 [ 186.947413][T13041] CPU: 1 UID: 0 PID: 13041 Comm: syz.1.3203 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 186.957926][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 186.968064][T13041] Call Trace: [ 186.971383][T13041] [ 186.974464][T13041] dump_stack_lvl+0xf2/0x150 [ 186.979127][T13041] dump_stack+0x15/0x20 [ 186.983378][T13041] should_fail_ex+0x223/0x230 [ 186.988158][T13041] ? get_callchain_buffers+0x18d/0x2d0 [ 186.993789][T13041] should_failslab+0x8f/0xb0 [ 186.998450][T13041] __kmalloc_node_noprof+0xa8/0x380 [ 187.003762][T13041] get_callchain_buffers+0x18d/0x2d0 [ 187.009082][T13041] stack_map_alloc+0x247/0x2b0 [ 187.013895][T13041] map_create+0x850/0xb70 [ 187.018249][T13041] __sys_bpf+0x667/0x7a0 [ 187.022600][T13041] __x64_sys_bpf+0x43/0x50 [ 187.027099][T13041] x64_sys_call+0x2914/0x2dc0 [ 187.031804][T13041] do_syscall_64+0xc9/0x1c0 [ 187.036337][T13041] ? clear_bhb_loop+0x55/0xb0 [ 187.041039][T13041] ? clear_bhb_loop+0x55/0xb0 [ 187.045731][T13041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.051805][T13041] RIP: 0033:0x7f7a3d87e819 [ 187.056229][T13041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.075962][T13041] RSP: 002b:00007f7a3bef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.084402][T13041] RAX: ffffffffffffffda RBX: 00007f7a3da35fa0 RCX: 00007f7a3d87e819 [ 187.092471][T13041] RDX: 0000000000000048 RSI: 00000000200009c0 RDI: 0000000000000000 [ 187.100494][T13041] RBP: 00007f7a3bef7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.108482][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.116470][T13041] R13: 0000000000000000 R14: 00007f7a3da35fa0 R15: 00007fff034d3d28 [ 187.124461][T13041] [ 187.148179][T10439] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.168075][T13038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.187316][ T3390] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 187.195154][ T3390] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 187.206703][T10439] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.209012][ T3390] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 187.226334][T13050] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3205'. [ 187.227523][ T3390] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 187.251298][T13038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.290129][T10439] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.329864][T13061] syz.1.3208[13061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.330209][T13061] syz.1.3208[13061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.342669][T13061] syz.1.3208[13061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.357702][T13038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.387160][T10439] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.418216][T13061] loop1: detected capacity change from 0 to 512 [ 187.446737][T13038] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.477065][T13061] EXT4-fs mount: 122 callbacks suppressed [ 187.477084][T13061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.504678][T13061] ext4 filesystem being mounted at /217/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 187.507811][T13038] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.528324][T13038] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.554599][T13061] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 187.554714][T13038] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.571085][T13061] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3208: Failed to acquire dquot type 0 [ 187.578586][T10439] bridge_slave_1: left allmulticast mode [ 187.594160][T10439] bridge_slave_1: left promiscuous mode [ 187.599918][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.661909][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 187.673321][T10439] bridge_slave_0: left allmulticast mode [ 187.679049][T10439] bridge_slave_0: left promiscuous mode [ 187.684831][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.704897][ T9404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.773582][T10439] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 187.837866][T10439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.848806][T10439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.859057][T10439] bond0 (unregistering): Released all slaves [ 187.867825][T10439] bond1 (unregistering): Released all slaves [ 187.890181][T13043] chnl_net:caif_netlink_parms(): no params data found [ 187.926191][T10439] hsr_slave_0: left promiscuous mode [ 187.931892][T10439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.939373][T10439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.947430][T10439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.954893][T10439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.966853][T13088] FAULT_INJECTION: forcing a failure. [ 187.966853][T13088] name failslab, interval 1, probability 0, space 0, times 0 [ 187.979557][T13088] CPU: 0 UID: 0 PID: 13088 Comm: syz.1.3214 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 187.990002][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 188.000098][T13088] Call Trace: [ 188.003385][T13088] [ 188.006387][T13088] dump_stack_lvl+0xf2/0x150 [ 188.011120][T13088] dump_stack+0x15/0x20 [ 188.015288][T13088] should_fail_ex+0x223/0x230 [ 188.020037][T13088] ? security_inode_alloc+0x37/0x100 [ 188.025354][T13088] should_failslab+0x8f/0xb0 [ 188.029957][T13088] kmem_cache_alloc_noprof+0x4c/0x290 [ 188.035413][T13088] security_inode_alloc+0x37/0x100 [ 188.040697][T13088] inode_init_always_gfp+0x4a2/0x4f0 [ 188.045994][T13088] ? __pfx_sock_alloc_inode+0x10/0x10 [ 188.051388][T13088] alloc_inode+0x82/0x160 [ 188.055781][T13088] new_inode_pseudo+0x15/0x20 [ 188.060531][T13088] __sock_create+0x12b/0x500 [ 188.065135][T13088] __sys_socketpair+0x1be/0x430 [ 188.070064][T13088] __x64_sys_socketpair+0x52/0x60 [ 188.075149][T13088] x64_sys_call+0x1cad/0x2dc0 [ 188.079906][T13088] do_syscall_64+0xc9/0x1c0 [ 188.084434][T13088] ? clear_bhb_loop+0x55/0xb0 [ 188.089118][T13088] ? clear_bhb_loop+0x55/0xb0 [ 188.093852][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.099753][T13088] RIP: 0033:0x7f7a3d87e819 [ 188.104171][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.123910][T13088] RSP: 002b:00007f7a3bef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 188.132389][T13088] RAX: ffffffffffffffda RBX: 00007f7a3da35fa0 RCX: 00007f7a3d87e819 [ 188.140367][T13088] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 188.148346][T13088] RBP: 00007f7a3bef7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.156490][T13088] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 188.164464][T13088] R13: 0000000000000000 R14: 00007f7a3da35fa0 R15: 00007fff034d3d28 [ 188.172446][T13088] [ 188.175735][T13088] socket: no more sockets [ 188.182567][T10439] veth1_macvtap: left promiscuous mode [ 188.187482][T13090] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3215'. [ 188.188169][T10439] veth0_macvtap: left promiscuous mode [ 188.202672][T10439] veth1_vlan: left promiscuous mode [ 188.208049][T10439] veth0_vlan: left promiscuous mode [ 188.307337][T10439] team0 (unregistering): Port device team_slave_1 removed [ 188.317548][T13098] loop1: detected capacity change from 0 to 2048 [ 188.324271][T10439] team0 (unregistering): Port device team_slave_0 removed [ 188.361228][T13043] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.368381][T13043] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.375846][T13043] bridge_slave_0: entered allmulticast mode [ 188.382676][T13043] bridge_slave_0: entered promiscuous mode [ 188.390140][T13098] loop1: p1 < > p4 [ 188.394775][T13098] loop1: p4 size 8388608 extends beyond EOD, truncated [ 188.402378][T13043] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.409581][T13043] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.417096][T13043] bridge_slave_1: entered allmulticast mode [ 188.423577][T13043] bridge_slave_1: entered promiscuous mode [ 188.454464][T13043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.468661][T13043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.485386][T13101] Invalid ELF header magic: != ELF [ 188.510717][T13043] team0: Port device team_slave_0 added [ 188.527056][T13043] team0: Port device team_slave_1 added [ 188.571695][T13043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.578778][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.604823][T13043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.619747][T13043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.626926][T13043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.652925][T13043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.683613][T13043] hsr_slave_0: entered promiscuous mode [ 188.693305][T13043] hsr_slave_1: entered promiscuous mode [ 188.699786][T13115] Invalid ELF header magic: != ELF [ 188.706814][T13043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.714720][T13043] Cannot create hsr debugfs directory [ 188.732093][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3225'. [ 188.741201][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3225'. [ 188.751423][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3225'. [ 188.758029][T13117] loop1: detected capacity change from 0 to 512 [ 188.778343][T13117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.791111][T13117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.820600][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3225'. [ 188.910681][T13129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.933906][T13129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.141789][T13043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.158516][T13043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.174383][T13043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.189955][T13043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.261334][T13043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.279050][T13043] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.306291][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.313400][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.334511][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.341634][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.411489][T13043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.421907][T13043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.578736][T13043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.755746][T13043] veth0_vlan: entered promiscuous mode [ 189.767281][T13043] veth1_vlan: entered promiscuous mode [ 189.779628][T13043] veth0_macvtap: entered promiscuous mode [ 189.786944][T13043] veth1_macvtap: entered promiscuous mode [ 189.796286][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.806814][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.816697][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.827183][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.837051][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.847675][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.858308][T13043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.866567][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.877108][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.887183][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.898015][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.908083][T13043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.918775][T13043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.929640][T13043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.938287][T13043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.947094][T13043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.955904][T13043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.964721][T13043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.652813][T13201] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.737129][T13201] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.791799][T13201] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.869211][T13201] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.931757][T13201] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.961272][T13201] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.988925][T13201] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.014478][T13201] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.014572][T13208] sctp: [Deprecated]: syz.1.3251 (pid 13208) Use of int in max_burst socket option deprecated. [ 191.014572][T13208] Use struct sctp_assoc_value instead [ 191.098284][T13208] tmpfs: Bad value for 'mpol' [ 191.283087][T13223] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 191.293252][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 191.293265][ T29] audit: type=1400 audit(1732127049.829:6011): avc: denied { relabelto } for pid=13222 comm="syz.2.3258" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 191.326941][ T29] audit: type=1400 audit(1732127049.829:6012): avc: denied { associate } for pid=13222 comm="syz.2.3258" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 191.372297][T13225] FAULT_INJECTION: forcing a failure. [ 191.372297][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 191.384977][T13225] CPU: 0 UID: 0 PID: 13225 Comm: syz.2.3260 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 191.395479][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 191.405552][T13225] Call Trace: [ 191.408921][T13225] [ 191.411867][T13225] dump_stack_lvl+0xf2/0x150 [ 191.416524][T13225] dump_stack+0x15/0x20 [ 191.420724][T13225] should_fail_ex+0x223/0x230 [ 191.425493][T13225] ? sidtab_sid2str_get+0xb8/0x140 [ 191.430654][T13225] should_failslab+0x8f/0xb0 [ 191.435274][T13225] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 191.441678][T13225] ? __rcu_read_unlock+0x4e/0x70 [ 191.446675][T13225] kmemdup_noprof+0x2a/0x60 [ 191.451273][T13225] sidtab_sid2str_get+0xb8/0x140 [ 191.456241][T13225] security_sid_to_context_core+0x1eb/0x2f0 [ 191.462243][T13225] security_sid_to_context_force+0x2a/0x40 [ 191.468127][T13225] selinux_inode_getsecurity+0x2f7/0x320 [ 191.473784][T13225] security_inode_getsecurity+0xcb/0xe0 [ 191.479398][T13225] vfs_getxattr+0x17f/0x220 [ 191.483995][T13225] do_getxattr+0x10c/0x270 [ 191.488428][T13225] path_getxattrat+0x220/0x290 [ 191.493334][T13225] __x64_sys_fgetxattr+0x5b/0x70 [ 191.498301][T13225] x64_sys_call+0xbc6/0x2dc0 [ 191.502997][T13225] do_syscall_64+0xc9/0x1c0 [ 191.507588][T13225] ? clear_bhb_loop+0x55/0xb0 [ 191.512295][T13225] ? clear_bhb_loop+0x55/0xb0 [ 191.517069][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.523024][T13225] RIP: 0033:0x7fe86e41e819 [ 191.527446][T13225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.547098][T13225] RSP: 002b:00007fe86ca91038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 191.555529][T13225] RAX: ffffffffffffffda RBX: 00007fe86e5d5fa0 RCX: 00007fe86e41e819 [ 191.563509][T13225] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 191.571487][T13225] RBP: 00007fe86ca91090 R08: 0000000000000000 R09: 0000000000000000 [ 191.579460][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.587434][T13225] R13: 0000000000000000 R14: 00007fe86e5d5fa0 R15: 00007fffcf8f77e8 [ 191.595437][T13225] [ 191.692098][T13239] syz.2.3266[13239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.692186][T13239] syz.2.3266[13239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.704838][T13239] syz.2.3266[13239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.723141][T13241] __nla_validate_parse: 7 callbacks suppressed [ 191.723222][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.750329][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.759418][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.769049][T13240] Invalid ELF header magic: != ELF [ 191.778321][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.787360][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.812708][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.854909][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.863976][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.876934][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3259'. [ 191.899587][ T29] audit: type=1326 audit(1732127050.439:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 191.923286][ T29] audit: type=1326 audit(1732127050.439:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 192.025970][ T29] audit: type=1326 audit(1732127050.499:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 192.049649][ T29] audit: type=1326 audit(1732127050.499:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 192.073179][ T29] audit: type=1326 audit(1732127050.499:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 192.096762][ T29] audit: type=1326 audit(1732127050.499:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 192.120346][ T29] audit: type=1326 audit(1732127050.499:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 192.143975][ T29] audit: type=1326 audit(1732127050.499:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.2.3272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86e41e819 code=0x7ffc0000 [ 192.502455][T13273] syz.3.3278[13273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.502546][T13273] syz.3.3278[13273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.518448][T13273] syz.3.3278[13273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.530182][T13273] syz.3.3278[13273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.563641][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 192.816418][T13284] netlink: 'syz.1.3283': attribute type 3 has an invalid length. [ 192.824215][T13284] netlink: 'syz.1.3283': attribute type 3 has an invalid length. [ 193.028279][T13309] sctp: [Deprecated]: syz.3.3294 (pid 13309) Use of int in max_burst socket option deprecated. [ 193.028279][T13309] Use struct sctp_assoc_value instead [ 193.049859][T13314] Invalid ELF header magic: != ELF [ 193.059107][T13309] tmpfs: Bad value for 'mpol' [ 193.157793][T13323] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.212768][T13323] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.269668][T13323] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.327280][T13323] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.381896][T13323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.408092][T13323] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.438373][T13323] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.468825][T13323] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.601917][T13343] sctp: [Deprecated]: syz.2.3308 (pid 13343) Use of int in max_burst socket option deprecated. [ 193.601917][T13343] Use struct sctp_assoc_value instead [ 193.643881][T13343] tmpfs: Bad value for 'mpol' [ 193.755684][T13353] Invalid ELF header magic: != ELF [ 194.008895][T13374] Invalid ELF header magic: != ELF [ 194.055784][T13380] Invalid ELF header magic: != ELF [ 194.379093][T13412] Invalid ELF header magic: != ELF [ 194.730806][T13455] Invalid ELF header magic: != ELF [ 194.956253][T13474] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.997348][T13474] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.018033][T13481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.026675][T13481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.037676][T13474] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.087685][T13474] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.142234][T13474] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.153381][T13474] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.164510][T13474] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.175911][T13474] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.271335][T13491] Invalid ELF header magic: != ELF [ 195.672923][T13528] sctp: [Deprecated]: syz.3.3383 (pid 13528) Use of int in max_burst socket option deprecated. [ 195.672923][T13528] Use struct sctp_assoc_value instead [ 195.701279][T13528] tmpfs: Bad value for 'mpol' [ 196.186477][T13554] sctp: [Deprecated]: syz.2.3394 (pid 13554) Use of int in max_burst socket option deprecated. [ 196.186477][T13554] Use struct sctp_assoc_value instead [ 196.214652][T13554] tmpfs: Bad value for 'mpol' [ 196.783163][T13617] __nla_validate_parse: 32 callbacks suppressed [ 196.783178][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3419'. [ 196.830537][T13625] FAULT_INJECTION: forcing a failure. [ 196.830537][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 196.843303][T13625] CPU: 0 UID: 0 PID: 13625 Comm: syz.5.3421 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 196.853761][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 196.863905][T13625] Call Trace: [ 196.867195][T13625] [ 196.870254][T13625] dump_stack_lvl+0xf2/0x150 [ 196.874935][T13625] dump_stack+0x15/0x20 [ 196.879139][T13625] should_fail_ex+0x223/0x230 [ 196.883905][T13625] ? security_inode_alloc+0x37/0x100 [ 196.889210][T13625] should_failslab+0x8f/0xb0 [ 196.893973][T13625] kmem_cache_alloc_noprof+0x4c/0x290 [ 196.899468][T13625] security_inode_alloc+0x37/0x100 [ 196.904762][T13625] inode_init_always_gfp+0x4a2/0x4f0 [ 196.910108][T13625] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 196.915944][T13625] alloc_inode+0x82/0x160 [ 196.920289][T13625] new_inode+0x1e/0x100 [ 196.924517][T13625] hugetlbfs_get_inode+0x7d/0x380 [ 196.929695][T13625] hugetlb_file_setup+0x188/0x3c0 [ 196.934876][T13625] ksys_mmap_pgoff+0x172/0x330 [ 196.939740][T13625] x64_sys_call+0x1940/0x2dc0 [ 196.944432][T13625] do_syscall_64+0xc9/0x1c0 [ 196.948959][T13625] ? clear_bhb_loop+0x55/0xb0 [ 196.953647][T13625] ? clear_bhb_loop+0x55/0xb0 [ 196.958337][T13625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.964263][T13625] RIP: 0033:0x7fa22e3ce819 [ 196.968737][T13625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.988397][T13625] RSP: 002b:00007fa22ca41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 196.996841][T13625] RAX: ffffffffffffffda RBX: 00007fa22e585fa0 RCX: 00007fa22e3ce819 [ 197.004828][T13625] RDX: 0000000000000008 RSI: 0000000000c00000 RDI: 0000000020400000 [ 197.012914][T13625] RBP: 00007fa22ca41090 R08: ffffffffffffffff R09: 0000000000000000 [ 197.020988][T13625] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 197.028970][T13625] R13: 0000000000000001 R14: 00007fa22e585fa0 R15: 00007ffe83ee15f8 [ 197.037124][T13625] [ 197.063618][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 197.063632][ T29] audit: type=1326 audit(1732127055.599:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22e3ce819 code=0x7ffc0000 [ 197.093964][ T29] audit: type=1326 audit(1732127055.639:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fa22e3ce819 code=0x7ffc0000 [ 197.135525][T13631] sctp: [Deprecated]: syz.4.3424 (pid 13631) Use of int in max_burst socket option deprecated. [ 197.135525][T13631] Use struct sctp_assoc_value instead [ 197.167389][T13631] tmpfs: Bad value for 'mpol' [ 197.172750][T13631] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3424'. [ 197.380312][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.401907][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.410707][ T29] audit: type=1326 audit(1732127055.949:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22e3ce819 code=0x7ffc0000 [ 197.434329][ T29] audit: type=1326 audit(1732127055.949:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13628 comm="syz.5.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22e3ce819 code=0x7ffc0000 [ 197.445963][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 197.485127][ T29] audit: type=1326 audit(1732127056.009:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.1.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3d87e819 code=0x7ffc0000 [ 197.508823][ T29] audit: type=1326 audit(1732127056.019:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.1.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f7a3d87e819 code=0x7ffc0000 [ 197.532414][ T29] audit: type=1326 audit(1732127056.019:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.1.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3d87e819 code=0x7ffc0000 [ 197.561414][ T29] audit: type=1326 audit(1732127056.019:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.1.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f7a3d87e819 code=0x7ffc0000 [ 197.585056][ T29] audit: type=1326 audit(1732127056.099:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.1.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3d87e819 code=0x7ffc0000 [ 197.585119][ T29] audit: type=1326 audit(1732127056.099:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.1.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a3d87e819 code=0x7ffc0000 [ 197.644470][T13659] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3435'. [ 197.667248][T13659] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3435'. [ 197.683034][T13663] sctp: [Deprecated]: syz.2.3436 (pid 13663) Use of int in max_burst socket option deprecated. [ 197.683034][T13663] Use struct sctp_assoc_value instead [ 197.710446][T13663] tmpfs: Bad value for 'mpol' [ 197.715916][T13663] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3436'. [ 197.771417][T13675] block device autoloading is deprecated and will be removed. [ 197.852061][T13681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3444'. [ 197.861058][T13681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3444'. [ 197.870159][T13681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3444'. [ 197.889560][T13681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3444'. [ 198.260720][T13704] sctp: [Deprecated]: syz.5.3451 (pid 13704) Use of int in max_burst socket option deprecated. [ 198.260720][T13704] Use struct sctp_assoc_value instead [ 198.287337][T13704] tmpfs: Bad value for 'mpol' [ 198.643609][T13736] sctp: [Deprecated]: syz.5.3463 (pid 13736) Use of int in max_burst socket option deprecated. [ 198.643609][T13736] Use struct sctp_assoc_value instead [ 198.682221][T13736] tmpfs: Bad value for 'mpol' [ 199.029569][T13778] Invalid ELF header magic: != ELF [ 199.228988][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.421163][T13815] Invalid ELF header magic: != ELF [ 199.674912][T13840] pim6reg1: entered promiscuous mode [ 199.680313][T13840] pim6reg1: entered allmulticast mode [ 199.891566][T13854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.900355][T13854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.920882][T13856] Invalid ELF header magic: != ELF [ 200.141261][T13874] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 200.147856][T13874] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.155490][T13874] vhci_hcd vhci_hcd.0: Device attached [ 200.172510][T13875] vhci_hcd: connection closed [ 200.174364][T10435] vhci_hcd: stop threads [ 200.183571][T10435] vhci_hcd: release socket [ 200.188070][T10435] vhci_hcd: disconnect device [ 200.438715][T13891] netlink: 'syz.2.3525': attribute type 5 has an invalid length. [ 200.455485][T13891] Invalid ELF header magic: != ELF [ 200.522096][T13900] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.557150][T13900] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.610481][T13900] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.666644][T13900] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.750806][T13926] sctp: [Deprecated]: syz.1.3541 (pid 13926) Use of int in max_burst socket option deprecated. [ 200.750806][T13926] Use struct sctp_assoc_value instead [ 200.754496][T13900] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.779748][T13926] tmpfs: Bad value for 'mpol' [ 200.797775][T13900] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.817714][T13900] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.843985][T13932] Invalid ELF header magic: != ELF [ 200.852252][T13900] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.895139][T13938] wireguard0: entered promiscuous mode [ 200.900770][T13938] wireguard0: entered allmulticast mode [ 201.108971][T13959] sctp: [Deprecated]: syz.1.3555 (pid 13959) Use of int in max_burst socket option deprecated. [ 201.108971][T13959] Use struct sctp_assoc_value instead [ 201.151189][T13959] tmpfs: Bad value for 'mpol' [ 201.246917][T13972] : renamed from bond0 (while UP) [ 201.455194][T13992] sctp: [Deprecated]: syz.5.3569 (pid 13992) Use of int in max_burst socket option deprecated. [ 201.455194][T13992] Use struct sctp_assoc_value instead [ 201.489471][T13992] tmpfs: Bad value for 'mpol' [ 201.788639][T14023] __nla_validate_parse: 40 callbacks suppressed [ 201.788660][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 201.803939][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 201.813153][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 201.861450][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 201.870613][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 201.880511][T14023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 201.976232][T14035] random: crng reseeded on system resumption [ 202.045928][T14041] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3588'. [ 202.063472][T14035] FAULT_INJECTION: forcing a failure. [ 202.063472][T14035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.076660][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz.5.3586 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 202.087092][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 202.097195][T14035] Call Trace: [ 202.100581][T14035] [ 202.103523][T14035] dump_stack_lvl+0xf2/0x150 [ 202.108194][T14035] dump_stack+0x15/0x20 [ 202.112466][T14035] should_fail_ex+0x223/0x230 [ 202.117257][T14035] should_fail+0xb/0x10 [ 202.121528][T14035] should_fail_usercopy+0x1a/0x20 [ 202.126633][T14035] _copy_from_iter+0xd5/0xd00 [ 202.131337][T14035] ? __alloc_pages_noprof+0x1bc/0x340 [ 202.136767][T14035] copy_page_from_iter+0x14f/0x280 [ 202.141904][T14035] pipe_write+0x444/0xd20 [ 202.146431][T14035] vfs_write+0x77f/0x920 [ 202.150700][T14035] ? __pfx_pipe_write+0x10/0x10 [ 202.155718][T14035] ksys_write+0xe8/0x1b0 [ 202.160049][T14035] __x64_sys_write+0x42/0x50 [ 202.164672][T14035] x64_sys_call+0x287e/0x2dc0 [ 202.169380][T14035] do_syscall_64+0xc9/0x1c0 [ 202.173962][T14035] ? clear_bhb_loop+0x55/0xb0 [ 202.178715][T14035] ? clear_bhb_loop+0x55/0xb0 [ 202.183541][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.189525][T14035] RIP: 0033:0x7fa22e3ce819 [ 202.193969][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.213622][T14035] RSP: 002b:00007fa22ca41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.222062][T14035] RAX: ffffffffffffffda RBX: 00007fa22e585fa0 RCX: 00007fa22e3ce819 [ 202.230137][T14035] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 202.238255][T14035] RBP: 00007fa22ca41090 R08: 0000000000000000 R09: 0000000000000000 [ 202.246261][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.254245][T14035] R13: 0000000000000000 R14: 00007fa22e585fa0 R15: 00007ffe83ee15f8 [ 202.262248][T14035] [ 202.418393][T14058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'. [ 202.425085][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3595'. [ 202.427428][T14058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3593'. [ 202.645738][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 202.645753][ T29] audit: type=1400 audit(1732127061.189:6275): avc: denied { read } for pid=14069 comm="syz.1.3597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 202.913086][T14085] FAULT_INJECTION: forcing a failure. [ 202.913086][T14085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.926435][T14085] CPU: 1 UID: 0 PID: 14085 Comm: syz.2.3602 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 202.936936][T14085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 202.947045][T14085] Call Trace: [ 202.950338][T14085] [ 202.953280][T14085] dump_stack_lvl+0xf2/0x150 [ 202.957906][T14085] dump_stack+0x15/0x20 [ 202.962165][T14085] should_fail_ex+0x223/0x230 [ 202.966877][T14085] should_fail+0xb/0x10 [ 202.971124][T14085] should_fail_usercopy+0x1a/0x20 [ 202.976216][T14085] _copy_from_user+0x1e/0xb0 [ 202.980849][T14085] memdup_user+0x64/0xc0 [ 202.985176][T14085] strndup_user+0x68/0xa0 [ 202.989536][T14085] __se_sys_mount+0x4e/0x2d0 [ 202.994162][T14085] ? fput+0x1c4/0x200 [ 202.998174][T14085] ? ksys_write+0x176/0x1b0 [ 203.002823][T14085] __x64_sys_mount+0x67/0x80 [ 203.007525][T14085] x64_sys_call+0x2c84/0x2dc0 [ 203.012265][T14085] do_syscall_64+0xc9/0x1c0 [ 203.016800][T14085] ? clear_bhb_loop+0x55/0xb0 [ 203.021509][T14085] ? clear_bhb_loop+0x55/0xb0 [ 203.026209][T14085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.032114][T14085] RIP: 0033:0x7fe86e41e819 [ 203.036590][T14085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.056210][T14085] RSP: 002b:00007fe86ca91038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.064653][T14085] RAX: ffffffffffffffda RBX: 00007fe86e5d5fa0 RCX: 00007fe86e41e819 [ 203.072648][T14085] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 203.080661][T14085] RBP: 00007fe86ca91090 R08: 0000000020000500 R09: 0000000000000000 [ 203.088778][T14085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.096764][T14085] R13: 0000000000000000 R14: 00007fe86e5d5fa0 R15: 00007fffcf8f77e8 [ 203.104786][T14085] [ 203.308863][T14101] No such timeout policy "syz1" [ 203.364777][ T29] audit: type=1326 audit(1732127061.899:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.428719][ T29] audit: type=1326 audit(1732127061.929:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.452288][ T29] audit: type=1326 audit(1732127061.929:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.475929][ T29] audit: type=1326 audit(1732127061.929:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.499513][ T29] audit: type=1326 audit(1732127061.929:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.523125][ T29] audit: type=1326 audit(1732127061.929:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.546689][ T29] audit: type=1326 audit(1732127061.929:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.570249][ T29] audit: type=1326 audit(1732127061.929:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 203.593897][ T29] audit: type=1326 audit(1732127061.929:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.4.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7edfa6e853 code=0x7ffc0000 [ 204.195945][T14139] Invalid ELF header magic: != ELF [ 204.650087][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.666459][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.731302][T14174] geneve0: entered allmulticast mode [ 204.945478][T14185] sctp: [Deprecated]: syz.1.3644 (pid 14185) Use of int in max_burst socket option deprecated. [ 204.945478][T14185] Use struct sctp_assoc_value instead [ 204.975855][T14185] tmpfs: Bad value for 'mpol' [ 205.354713][T14205] FAULT_INJECTION: forcing a failure. [ 205.354713][T14205] name failslab, interval 1, probability 0, space 0, times 0 [ 205.367479][T14205] CPU: 0 UID: 0 PID: 14205 Comm: syz.3.3651 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 205.377954][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 205.388039][T14205] Call Trace: [ 205.391363][T14205] [ 205.394301][T14205] dump_stack_lvl+0xf2/0x150 [ 205.399105][T14205] dump_stack+0x15/0x20 [ 205.403318][T14205] should_fail_ex+0x223/0x230 [ 205.408029][T14205] ? getname_flags+0x81/0x3b0 [ 205.412783][T14205] should_failslab+0x8f/0xb0 [ 205.417396][T14205] kmem_cache_alloc_noprof+0x4c/0x290 [ 205.422951][T14205] getname_flags+0x81/0x3b0 [ 205.427482][T14205] getname+0x17/0x20 [ 205.431536][T14205] do_sys_openat2+0x67/0x120 [ 205.436158][T14205] __x64_sys_openat+0xf3/0x120 [ 205.440961][T14205] x64_sys_call+0x2b30/0x2dc0 [ 205.445703][T14205] do_syscall_64+0xc9/0x1c0 [ 205.450217][T14205] ? clear_bhb_loop+0x55/0xb0 [ 205.454911][T14205] ? clear_bhb_loop+0x55/0xb0 [ 205.459633][T14205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.465537][T14205] RIP: 0033:0x7f900651d1b0 [ 205.469957][T14205] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 205.489709][T14205] RSP: 002b:00007f9004b8eef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 205.498129][T14205] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f900651d1b0 [ 205.506183][T14205] RDX: 0000000000000002 RSI: 00007f90065914f4 RDI: 00000000ffffff9c [ 205.514200][T14205] RBP: 00007f90065914f4 R08: 0000000000000000 R09: 0000000000000000 [ 205.522197][T14205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 205.530233][T14205] R13: 0000000000000024 R14: 0000000020000540 R15: 00007fff36f7f128 [ 205.538217][T14205] [ 205.968531][T14240] sctp: [Deprecated]: syz.1.3666 (pid 14240) Use of int in max_burst socket option deprecated. [ 205.968531][T14240] Use struct sctp_assoc_value instead [ 206.022169][T14240] tmpfs: Bad value for 'mpol' [ 206.342371][T14271] sctp: [Deprecated]: syz.4.3679 (pid 14271) Use of int in max_burst socket option deprecated. [ 206.342371][T14271] Use struct sctp_assoc_value instead [ 206.396198][T14271] tmpfs: Bad value for 'mpol' [ 206.411016][T14279] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.438913][T14282] syz.4.3683[14282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.438990][T14282] syz.4.3683[14282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.457845][T14279] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.482062][T14282] syz.4.3683[14282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.482147][T14282] syz.4.3683[14282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.537094][T14279] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.607264][T14279] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.684726][T14279] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.725366][T14279] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.742769][T14279] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.754758][T14279] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.829448][T14308] sctp: [Deprecated]: syz.3.3694 (pid 14308) Use of int in max_burst socket option deprecated. [ 206.829448][T14308] Use struct sctp_assoc_value instead [ 206.871479][T14308] tmpfs: Bad value for 'mpol' [ 206.881492][T14308] __nla_validate_parse: 54 callbacks suppressed [ 206.881510][T14308] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3694'. [ 207.005057][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.016424][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.171955][T14352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3713'. [ 207.581802][T14400] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3735'. [ 207.602847][T14406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3737'. [ 207.659198][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 207.659314][ T29] audit: type=1400 audit(1732127066.199:6433): avc: denied { read } for pid=14408 comm="syz.2.3740" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.688454][ T29] audit: type=1400 audit(1732127066.199:6434): avc: denied { open } for pid=14408 comm="syz.2.3740" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 207.710799][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3740'. [ 207.724862][T14416] FAULT_INJECTION: forcing a failure. [ 207.724862][T14416] name failslab, interval 1, probability 0, space 0, times 0 [ 207.737578][T14416] CPU: 1 UID: 0 PID: 14416 Comm: syz.2.3740 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 207.748050][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 207.758126][T14416] Call Trace: [ 207.761490][T14416] [ 207.764438][T14416] dump_stack_lvl+0xf2/0x150 [ 207.769046][T14416] dump_stack+0x15/0x20 [ 207.773291][T14416] should_fail_ex+0x223/0x230 [ 207.778068][T14416] ? getname_kernel+0x3d/0x1e0 [ 207.782938][T14416] should_failslab+0x8f/0xb0 [ 207.787557][T14416] kmem_cache_alloc_noprof+0x4c/0x290 [ 207.793065][T14416] getname_kernel+0x3d/0x1e0 [ 207.797675][T14416] open_exec+0x2c/0x170 [ 207.801910][T14416] bm_register_write+0x83a/0xb00 [ 207.806865][T14416] ? __pfx_bm_register_write+0x10/0x10 [ 207.812346][T14416] vfs_write+0x281/0x920 [ 207.816616][T14416] ? putname+0xcf/0xf0 [ 207.820703][T14416] ? __fget_files+0x17c/0x1c0 [ 207.825397][T14416] ksys_write+0xe8/0x1b0 [ 207.829660][T14416] __x64_sys_write+0x42/0x50 [ 207.834258][T14416] x64_sys_call+0x287e/0x2dc0 [ 207.838967][T14416] do_syscall_64+0xc9/0x1c0 [ 207.843552][T14416] ? clear_bhb_loop+0x55/0xb0 [ 207.848238][T14416] ? clear_bhb_loop+0x55/0xb0 [ 207.852982][T14416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.858939][T14416] RIP: 0033:0x7fe86e41e819 [ 207.863453][T14416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.883116][T14416] RSP: 002b:00007fe86ca70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.891556][T14416] RAX: ffffffffffffffda RBX: 00007fe86e5d6080 RCX: 00007fe86e41e819 [ 207.899528][T14416] RDX: 000000000000002d RSI: 00000000200000c0 RDI: 0000000000000006 [ 207.907505][T14416] RBP: 00007fe86ca70090 R08: 0000000000000000 R09: 0000000000000000 [ 207.915547][T14416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.923557][T14416] R13: 0000000000000000 R14: 00007fe86e5d6080 R15: 00007fffcf8f77e8 [ 207.931541][T14416] [ 207.934624][T14416] binfmt_misc: register: failed to install interpreter file ./file0 [ 208.165422][ T29] audit: type=1326 audit(1732127066.699:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.189062][ T29] audit: type=1326 audit(1732127066.699:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.194024][T14437] sctp: [Deprecated]: syz.5.3749 (pid 14437) Use of int in max_burst socket option deprecated. [ 208.194024][T14437] Use struct sctp_assoc_value instead [ 208.212577][ T29] audit: type=1326 audit(1732127066.699:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.212610][ T29] audit: type=1326 audit(1732127066.699:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.256793][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3750'. [ 208.275271][ T29] audit: type=1326 audit(1732127066.699:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.275304][ T29] audit: type=1326 audit(1732127066.699:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.275335][ T29] audit: type=1326 audit(1732127066.699:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.275432][ T29] audit: type=1326 audit(1732127066.699:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.4.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7edfa6e819 code=0x7ffc0000 [ 208.287425][T14433] FAULT_INJECTION: forcing a failure. [ 208.287425][T14433] name failslab, interval 1, probability 0, space 0, times 0 [ 208.308192][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3750'. [ 208.331664][T14433] CPU: 1 UID: 0 PID: 14433 Comm: syz.4.3748 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 208.359491][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3750'. [ 208.378526][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 208.378545][T14433] Call Trace: [ 208.378553][T14433] [ 208.378562][T14433] dump_stack_lvl+0xf2/0x150 [ 208.378597][T14433] dump_stack+0x15/0x20 [ 208.378641][T14433] should_fail_ex+0x223/0x230 [ 208.393258][T14437] tmpfs: Bad value for 'mpol' [ 208.400213][T14433] ? __d_alloc+0x3d/0x340 [ 208.413389][T14437] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3749'. [ 208.419657][T14433] should_failslab+0x8f/0xb0 [ 208.419694][T14433] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 208.419721][T14433] ? selinux_inode_permission+0x341/0x410 [ 208.483854][T14433] __d_alloc+0x3d/0x340 [ 208.488089][T14433] d_alloc_parallel+0x54/0xc60 [ 208.492869][T14433] ? __rcu_read_unlock+0x4e/0x70 [ 208.497855][T14433] ? __d_lookup+0x342/0x370 [ 208.502417][T14433] ? try_to_unlazy+0x279/0x3b0 [ 208.507202][T14433] path_openat+0x6c8/0x1fa0 [ 208.511769][T14433] ? audit_log_end+0x1d0/0x1e0 [ 208.516558][T14433] do_filp_open+0x107/0x230 [ 208.521229][T14433] do_sys_openat2+0xab/0x120 [ 208.525839][T14433] __x64_sys_creat+0x66/0x90 [ 208.530528][T14433] x64_sys_call+0x1084/0x2dc0 [ 208.535247][T14433] do_syscall_64+0xc9/0x1c0 [ 208.539840][T14433] ? clear_bhb_loop+0x55/0xb0 [ 208.544529][T14433] ? clear_bhb_loop+0x55/0xb0 [ 208.549214][T14433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.555129][T14433] RIP: 0033:0x7f7edfa6e819 [ 208.559586][T14433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.579216][T14433] RSP: 002b:00007f7ede0e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 208.587638][T14433] RAX: ffffffffffffffda RBX: 00007f7edfc25fa0 RCX: 00007f7edfa6e819 [ 208.595686][T14433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 208.603656][T14433] RBP: 00007f7ede0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.611649][T14433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.620231][T14433] R13: 0000000000000000 R14: 00007f7edfc25fa0 R15: 00007ffff0221118 [ 208.628212][T14433] [ 208.667206][T14438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3750'. [ 208.848498][T14469] loop1: detected capacity change from 0 to 1024 [ 208.856061][T14469] EXT4-fs: Ignoring removed orlov option [ 208.861772][T14469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.877119][T14469] EXT4-fs (loop1): stripe (106) is not aligned with cluster size (16), stripe is disabled [ 208.925801][T14469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.051491][ T9404] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.482665][T14548] geneve0: entered allmulticast mode [ 209.528820][T14550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.621621][T14550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.670380][T14563] sctp: [Deprecated]: syz.3.3797 (pid 14563) Use of int in max_burst socket option deprecated. [ 209.670380][T14563] Use struct sctp_assoc_value instead [ 209.690590][T14550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.728361][T14566] loop1: detected capacity change from 0 to 128 [ 209.839497][T14566] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.852546][T14566] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.890673][T14574] tmpfs: Bad value for 'mpol' [ 209.918785][T14550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.063517][T14550] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.079390][T14550] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.091247][T14550] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.103476][T14550] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.310181][T14611] smc: net device bond0 applied user defined pnetid SYZ0 [ 210.375593][ T9404] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.387189][T14611] can0: slcan on pts0. [ 210.475421][T14624] binfmt_misc: register: failed to install interpreter file ./file0 [ 211.095384][T14596] can0 (unregistered): slcan off pts0. [ 211.391869][T14655] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.446519][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.463114][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.471218][T14637] ================================================================== [ 211.479335][T14637] BUG: KCSAN: data-race in file_update_time / inode_set_ctime_current [ 211.487562][T14637] [ 211.489898][T14637] read to 0xffff8881183d66b0 of 8 bytes by task 14640 on cpu 1: [ 211.497553][T14637] file_update_time+0xce/0x2b0 [ 211.502352][T14637] shmem_file_write_iter+0x99/0xe0 [ 211.507494][T14637] iter_file_splice_write+0x5f1/0x980 [ 211.512895][T14637] direct_splice_actor+0x160/0x2c0 [ 211.518038][T14637] splice_direct_to_actor+0x302/0x670 [ 211.523439][T14637] do_splice_direct+0xd7/0x150 [ 211.528230][T14637] do_sendfile+0x398/0x660 [ 211.532695][T14637] __x64_sys_sendfile64+0x110/0x150 [ 211.537934][T14637] x64_sys_call+0xfbd/0x2dc0 [ 211.542565][T14637] do_syscall_64+0xc9/0x1c0 [ 211.547133][T14637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.553058][T14637] [ 211.555394][T14637] write to 0xffff8881183d66b0 of 8 bytes by task 14637 on cpu 0: [ 211.563132][T14637] inode_set_ctime_current+0x4ea/0x7a0 [ 211.568643][T14637] inode_update_timestamps+0x85/0x250 [ 211.574066][T14637] file_update_time+0x219/0x2b0 [ 211.578944][T14637] fault_dirty_shared_page+0xde/0x340 [ 211.584381][T14637] handle_mm_fault+0x1370/0x2aa0 [ 211.589352][T14637] exc_page_fault+0x296/0x650 [ 211.594061][T14637] asm_exc_page_fault+0x26/0x30 [ 211.598938][T14637] rep_movs_alternative+0x4a/0x70 [ 211.603989][T14637] _copy_to_iter+0x141/0xd00 [ 211.608609][T14637] get_random_bytes_user+0x112/0x260 [ 211.613931][T14637] __x64_sys_getrandom+0xb5/0x190 [ 211.618998][T14637] x64_sys_call+0x118a/0x2dc0 [ 211.623714][T14637] do_syscall_64+0xc9/0x1c0 [ 211.628293][T14637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.634216][T14637] [ 211.636554][T14637] value changed: 0x00000000673e295d -> 0x00000000673e295e [ 211.643679][T14637] [ 211.646016][T14637] Reported by Kernel Concurrency Sanitizer on: [ 211.652184][T14637] CPU: 0 UID: 0 PID: 14637 Comm: syz.3.3824 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 211.662637][T14637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 211.672717][T14637] ================================================================== [ 211.683577][T14655] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.737402][T14655] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.797742][T14655] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.871164][T14655] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.885053][T14655] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.899083][T14655] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.911531][T14655] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0