last executing test programs: 12m35.606079743s ago: executing program 32 (id=809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r4 = dup3(r2, r3, 0x0) write$P9_RGETATTR(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 9m2.479549119s ago: executing program 33 (id=4325): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, 0x0, 0x4000800) r2 = dup(r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100007, 0x1, 0xf06, 0x3, 0xb4, 0x80, 0x9}, 0x9c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0x4001}]}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x20000000000002, 0x2) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x232}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001480)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9m2.280007548s ago: executing program 34 (id=4328): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x400240, 0x0) fcntl$setlease(r1, 0x400, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000180)=0xe, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000a40)=[{r3, 0x2}, {r3, 0x201}], 0x2, 0x7f) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000200), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000600000000000000046a6600180000000500000000000000f3ffffff186000000900000000000000cf00000040426bdc000000009500e84a2a4f2b76a9ebd7316cd405a9c8870000000000"], &(0x7f0000000680)='syzkaller\x00', 0x40, 0x1000, &(0x7f0000000d00)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x6, 0xd}, 0xfffffffffffffdba, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000800)=[{0x3, 0x5, 0xd, 0xb}, {0x0, 0x2, 0x1, 0xa}, {0x5, 0x4, 0x0, 0x6}, {0x0, 0x5, 0x0, 0x9}, {0x0, 0x1, 0x4, 0x5}, {0x2, 0x3, 0x6}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000000000000000000000000bbfc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff000000000000ee001f00000000000000feffffffffffffff02000000fcffffff070000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9m2.25544214s ago: executing program 35 (id=4327): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\x83\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x125, &(0x7f0000000300)={0x0, 0x3, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x5450, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) r7 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mq_timedsend(r0, 0x0, 0x3, 0x4, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet(r3, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="79f849cd63b74c9e9f5df6c7071c806f83d28c0d93", 0x15, 0x840, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000eae5ffff00000000010600", @ANYRES32=0x1, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000000000000000000000020000020000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xb, 0x5e, &(0x7f00000001c0)=""/94, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x800, 0x590}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x4, 0x9, 0x2}, {0x3, 0x1, 0xa, 0x3}, {0x3, 0x2, 0x10, 0x5}, {0x5, 0x3, 0x6, 0x7}, {0x3, 0x5, 0xa, 0xa}, {0x2, 0x1, 0x9, 0x4}, {0x5, 0x5, 0xe, 0xa}], 0x10, 0x2000000}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x42081, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r8, 0x0, 0xc9, 0x72, &(0x7f0000000440)="79d05dc49f09f8c4abfce0678e5ce3093bac2920dc7df9cefce873d3817ad764eca4508bcf63f9ce1d1a7b0f702b1eefa4008d53cb2d195276bdcdc0491ed30d96ef274f48269ab84f7bc17a53a0cffe48238f01c1ac1736d6555dedf64a932b2d9c703c32f190253cb99247b0d06bacc3782568b3fa6c5b5301b0596fe37d3a28afc79ed06145c8642174a289fb8a1c90c51a4dfd9ad67fbce81f3eb9d16e10339106fef5f6d7be203d8907d2d727038cd7cd94afb0f1e20cf5ff4f338e228d622cc6b4b0e008fa31", &(0x7f0000000640)=""/114, 0x6, 0x0, 0xd4, 0x1, &(0x7f0000000a00)="da1d4ad7028d4a44b7c2f99aaaa4337bff3af7d395bafda0bed6ea963cf6987788cb83e1a8bde24f65ace6a5cc01ae6e8e44b74c0372bfe3cb0090886784792ad5e4f070a9dd427e0cb09fce7a4156e527d94190fa4b7f9b26e2aafc6f8446918828f93f3899834078255542cd23ed51fe12b0414edeebdc5d86e5467578bfacb071ae09d344554c5ad26cda8e3a1d7d2368d9050ffc8e8c8e305d56fb5745b1aa7975ababf2de8bd11997dff9ec37bacd11433b51394ad4f0e26e3aeb0e864f38825f49b1d1e3010de9b65db50b3cef5b584c6d", &(0x7f00000007c0)='\\', 0x5, 0x0, 0x477}, 0x50) mq_timedreceive(r0, &(0x7f0000000b00)=""/209, 0xd1, 0xffefffffffffffff, 0x0) 9m0.094238844s ago: executing program 36 (id=4332): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40000000000000073113b000000000016000000000000009500740000000000f0371d260085e83b3a9088a6a988afbeb160e76f969ae2120812f0e7", @ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="f171e5d48410a9c6f1cd305f75bdaa2496a0fb732b9233b5433726bba5df1020c9cd7982e6056994cf8d4aabf6b0da6ad471ac7f876e635ffe3100eb610cf30be460c354d07d36c5bf53a47ef878d5922313c34acdc30a259b81d99e02566cf129654a2d65acdec6e2da611e7d2f01b5e2d74de52da26bce401df3ffdee2f4af895a8254346e94de842fa345d1e96999b4bbb463d9004291960ed4c8f1b78d3b8bdcbf06d993626c656636bd3be06d647121bc12f4435e92", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0x0, &(0x7f0000000280)={0x8, 0x6, 0x4, 0x7f, 0xd, 0xec1, 0x40, 0x1800000000, 0xb}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x48d}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x4, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d4020000000000000200000085100000feffffff1f175000100000f6aa100000f8ffffff850000003a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x32c, 0x49, &(0x7f0000000880)=""/73, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x10, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000d40)=[r5, 0xffffffffffffffff, r2], &(0x7f0000000d80)=[{0x7, 0x3, 0xe, 0x7}, {0x2, 0x4, 0x1, 0x9}, {0x3, 0x5, 0x6, 0x4}, {0x4, 0x1, 0xd, 0x1}], 0x10, 0x400}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000017000017fd24511f9f1a9d36cee424d674b5981e0000ff0000008500000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) getpgrp(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r8}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r10 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xc0600) readv(r11, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r12}, 0x10) 8m47.794343964s ago: executing program 37 (id=4465): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240), 0x3, 0x56a, &(0x7f00000015c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x22}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x40, "217d66d38547aa140db8a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e100000000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r5, 0x0, 0x4ffe6, 0x0) 6m54.35300718s ago: executing program 38 (id=5918): recvmmsg(0xffffffffffffffff, 0x0, 0x61, 0x142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000300)={[{@jqfmt_vfsv0}]}, 0x1, 0x58d, &(0x7f0000000bc0)="$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") r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f0000000180)={[], [{@uid_eq}, {@audit}]}, 0x1, 0x476, &(0x7f0000001900)="$eJzs3MtvG0UYAPDPm9hNXySU8mhpIVAQFY+kSR/0wKUIJIRAQoJDEaeQpFWp26AmSLSqaOFQjqgSd8QRib+AC+WCgBMSV7gjpAr1QuFktPau87Id23VxqX8/yc3MzqQz3+5OdrzjdQADazz9pxCxLSJ+jYjRWnZ1hfHaj5s3Ls7+fePibCEqlTf/LFTr/XXj4mxeNf+9rbVMpdKi3SvvRMyUy/Pnsvzk0pn3JxfPX3ju1JmZk/Mn589OH108dHBv6cj04Z7EuT3t6+6PFvbseuXtq6/PHr/67o9fp/3dlpWvjKNtr25qWTxe27sNPdlxY3e27SvSheE+doSODEVEeriK1fE/GkOxuV42Gi9/0tfOAbdVpZJUWlzFLleAu1g6UQcGUX6hT9//5q82pg2bezT96Lvrx6J+H+Nm9qqVDEeS1Slm75Fuh/GIOH75ny+Oj9TyXd2HAADowLVjEfFso/lfEg+sqHdPtjY0FhH3RsSOiLgvInZGxP0R1boPRsRDHba/doVk/fynMtpVYG1K538vZGtbq+d/+ewvxoay3PZq/MXCiVPl+QPZPtkfxU1pfqpadahhG9+99Mtnzdqvz/+yV9p++nO5RvLH8JobdHMzSzOxdp2uS9c/jtg9vBz/SD3+Qn3Om7azKyJ2d9nGqae/2tOsbOP4W+jBpLzyZcRTteN/OVYd/+W9W2i8Pnn00MGp549MH54cifL8gcn8rFjvp5+vvNGs/Wr8+WnTafw9cP1aJbY0PP/r8Y8VRiIWz184XV2vXey8jSu/fdr0PU2353+p8FY1Xcq2fTiztHRuKqJUeG399unl383zef30/N+/r/H43xHLe+LhiEhP4r0R8UhEPJr1/bGIeDwi9rWI/4cXn3iv8/hbry33Shr/3EbHP1Ye/w0TFyJi1Zah099/03n8ufT4H6qm9mdb8r9/rbTV067OZgAAAPj/SaqfgS8kE/V0kkxM1D7DvzO2JOWFxaVnTix8cHau9ln5sSgmK+905fdDp7J7w3l+ek3+YHbf+POhzdX8xOxCea7PscOg29pk/Kd+b7ycAdxNPK8Fg8v4B4DB4/oPg8v4h8HVaPxf6kM/gP/eBtf/u+Zhf2A9838YXMY/DC7jHwZS02fjk7QordHmg/QSt5Ao9ew//LbU0Xc13EIikjti161KXLozutFlohgNi4bb/jKLLhObGhb1+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb/wbAAD//2gL2IY=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0xeb, 0x0) write$binfmt_misc(r6, &(0x7f0000000480)="dc", 0x1) splice(r5, 0x0, r4, &(0x7f0000000140)=0x8008, 0x4, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES64=r7, @ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = getpid() mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000640), 0x400) close_range(r9, 0xffffffffffffffff, 0x200000000000000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000007c0)={0x9, {{0xa, 0x4e22, 0x6e9e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5m16.687765749s ago: executing program 39 (id=6785): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) (async, rerun: 64) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (rerun: 64) 5m3.194867751s ago: executing program 40 (id=6830): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000001b7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000027000103"], 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001880)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x4e24, 0x200, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x1}, {0xffff, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x42}, 0x5, 0x5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x10c}}, 0x0) getpgid(r0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x2c0, r8, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x564d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x381}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8b7d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe7}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x17, 0x3, "ae9f1aba40cfcd063baa8aa87d17b14de0a58f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc59}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xad}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdcb}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9103}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x62f0a95b}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x48}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 3m16.550277387s ago: executing program 41 (id=8172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0xffff0000, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 3m11.546763148s ago: executing program 5 (id=8218): mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) modify_ldt$write2(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000002000000000000000000"]}, 0xc0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r3) clock_gettime(0x0, &(0x7f00000000c0)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) 3m9.296562351s ago: executing program 5 (id=8256): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 3m9.145416145s ago: executing program 5 (id=8258): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000002a0933059ee7ce0ed16ae86447c6fb0000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 3m7.949227038s ago: executing program 5 (id=8277): r0 = syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r1 = openat(r0, &(0x7f0000000280)='./bus\x00', 0x481283, 0x125) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0xb) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000c00)=[{}, {@none}, {}, {@none}, {@fixed}, {@none}, {@fixed}, {}]}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x86) fchdir(r5) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x2a0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000000), 0x4) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="be529ead35e7d316000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x1a, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000004000000000000ff0f000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000000000008500000083003f03a9c5c388e28d0000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000185600000500000000000000000000008520000005000000bf910000000085f7ffff84000000b7000000000000a4009500feff00000000000029c4bffde8d5a2008970803845661824f7cd9bbf011207cf34df6d21608cbf5e66847eb8ade46d09b64e9548c9ca0f26f4d166732cca050e298e88d4"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) wait4(r10, 0x0, 0x20000000, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) 3m7.499487821s ago: executing program 5 (id=8282): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x7, 0x8, 0x9, 0x10001, {{0x38, 0x4, 0x3, 0x5, 0xe0, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @local, {[@noop, @timestamp_prespec={0x44, 0x14, 0x31, 0x3, 0x7, [{@multicast1, 0x80}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x8}]}, @lsrr={0x83, 0x13, 0x53, [@empty, @multicast1, @private=0xa010100, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x10, 0x1, 0x9, [{@private=0xa010100, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@loopback, 0xc77a}, {@remote, 0x7}, {@remote, 0x80000000}]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x1c, 0xbb, 0x3, 0x1, [{@private=0xa010102, 0xfffffffd}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0xe, "186d7886c3c84a79a7c794bd"}, {0x5, 0x10, "916f3599a2b72f7313ca8f8fa4ca"}, {0x6, 0xe, "d10f9c0a8952516dc09da215"}]}, @end, @timestamp={0x44, 0x24, 0xc7, 0x0, 0x2, [0xec, 0x2, 0x3, 0xc, 0xfff, 0xa, 0x4e55, 0x5]}]}}}}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000009c0)={{0x0, 0x8000000000000000, 0x4, 0x1, 0x2, 0x7, 0x1, 0x5, 0x1, 0x7, 0x1, 0x5, 0xe, 0xffffffffffff0000, 0x4}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001c00)={{r3, 0x1, 0xa36, 0x1, 0x1, 0x7, 0xfffffffffffffd17, 0xe5, 0xfff, 0xc2, 0x910, 0x4, 0x9e1, 0x0, 0x8}}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'pim6reg0\x00', 0x8}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000331bfbee17466f430400000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="180600000000000012000053b53ee90da1c3a66c6d8b07174b662c3d6929bd7552197c7518b52d2d3ddcf3c9bb5a13b39d22068a3f", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000020000000850000e90b000000b7000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m7.046994823s ago: executing program 5 (id=8290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000040)={[{@huge_never}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x0) listen(r3, 0xd) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x4) syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r5, &(0x7f0000000040), 0x4) 3m6.918545355s ago: executing program 42 (id=8290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000040)={[{@huge_never}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x0) listen(r3, 0xd) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400), 0x4) syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r5, &(0x7f0000000040), 0x4) 3m0.495031041s ago: executing program 0 (id=8396): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f0000000640)={0x2000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) 3m0.411188949s ago: executing program 0 (id=8397): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)=@random={'security.', '$#&G[\xd4%/:-\\\xc1\x00'}, &(0x7f0000000400)=""/57, 0x39) (async) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)=@random={'security.', '$#&G[\xd4%/:-\\\xc1\x00'}, &(0x7f0000000400)=""/57, 0x39) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0xffffffff, 0x7ff, {{0x30, 0x4, 0x2, 0x36, 0xc0, 0x66, 0x0, 0xf8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0xe, "4b4d4ffb674a5bc2d6babe44"}, @cipso={0x86, 0x39, 0xffffffffffffffff, [{0x7, 0x4, "c919"}, {0x1, 0x3, "e0"}, {0x6, 0x12, "3b6f301c65f6e35604ff353da23250fb"}, {0x2, 0x9, "bcc486ad545d57"}, {0x1, 0xd, "536359e5c71fd879d05229"}, {0x0, 0x4, "5082"}]}, @timestamp_addr={0x44, 0xc, 0xe2, 0x1, 0x8, [{@local, 0x5}]}, @generic={0x89, 0x11, "045687417cb35b84d3b93bbf026dd8"}, @end, @timestamp={0x44, 0x14, 0x16, 0x0, 0x6, [0x2, 0x5, 0x2, 0x7fffffff]}, @cipso={0x86, 0x2e, 0x3, [{0x2, 0xd, "d48adc80d500ae2c1ab8de"}, {0x1, 0xa, "51b55eafe03e0e2f"}, {0x1, 0x11, "23958b77c86fcd8817b846bdf294e4"}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x5, 0x3, 0x0, 0x10c0, r0, 0x7f, '\x00', r3, r0, 0x4, 0x0, 0x3}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x5, &(0x7f0000000440)=[{0x9, 0x66, 0xf8, 0x1}, {0x0, 0x49, 0x9, 0xd6}, {0x2, 0xc0, 0x4, 0x5}, {0x4, 0x1, 0x3, 0x7}, {0x3ff, 0x7, 0x0, 0x80000001}]}) syz_open_dev$rtc(&(0x7f00000004c0), 0x8, 0x48481) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x20100, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) (async) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) dup(r2) (async) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 3m0.358355894s ago: executing program 0 (id=8398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) 3m0.299165729s ago: executing program 0 (id=8399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz9KA0EcBeC3JpEoUbAWxEWwFO2scotcQDyCjY0G03kMwSZ4AG/gkUwjI2GX1cRWQeX7in37e/tnZsKvcP/a3lwuL5td/3K9+t5Om88XT3tJDuu8lVIyTNJf++WiJKdnGWwPNzJKcvV11cn8e08BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8JdP1orc6Pra5n9nNOOelcXvXS9U+qU+S3Y8PFiXZ6qZ+E5P5D2wdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjvSillmdWnbpCk35RVMu36UR6OMhsfVBkm9fE7+3NoAwAIAwEwwTAh87A3CvEJoQPU3ama/uf/lP3Omf/qpGWNphUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGAQAA//88nie/") 2m59.817449624s ago: executing program 0 (id=8408): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)='//sys\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/46}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x3d, 0x1, @thr={&(0x7f00000003c0)="35f63c8739b34e694ecfe77f276f72f6b5f7e92aa27bd7135b14a4e36053cd16d8e294d96b5d9771e867a13c1b2e2fec84c0d276204dc600ebb840aa23b4967c7a821c9df1e344ad1e3ea95b33d13db83cac4e9263ff541b92963f8ed31dba2c6a0f84afa130c0171af98c36cb6c4ccedf12ee93c7e11a3e99de1e7d4402a653fc40a999a3777ee9d42a38476100e7d7d8745bddcfde100e70c2133f53c4bde37dd524564dd32cc28f56481bd421785ddab01a5c9699fb760405c2fe664fba63892112ccb770a466ee2b81f2f83d6932b539090db6d98542f921ce818ec282e35ab634d52dac68ab1de6908487f758bb55e02ce54c6ed187", &(0x7f00000004c0)="09d20dc1fcb95f8e142c776857e56e667762dcb239ed74bc7c4b1e56178409b00f6a3de1e7f4d13ec1aac29260e8e1085f97d8774f2bf123b450cd9d471fe18fe249a7c0c2f4e57b055249653b17b4fddd26dfea443e52a2e2361199ff4ce54256e3d73cede8a1f4931b36053d7b3c6428a80d029b9f2613c0c1927dc6597fc3a78c32c7366b724b8fcee632e7d71e19b81f052a82b295a7b279fb10e527bc56b3d6ee6242d9684b2081c81b1dea65a3268f1b3cbd"}}, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x1, 0xfffffff8}, {0x2, 0x1}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x701440, 0x148) pwrite64(r0, &(0x7f0000000140)="f2", 0x1, 0xfecc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd20, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x4, 0x2, 0x1, 0x3}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004804) connect$unix(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 2m59.478947996s ago: executing program 0 (id=8411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x40006) 2m59.459028548s ago: executing program 4 (id=8412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000411000400000000006e6ad9ba00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001240"], 0x5c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffff}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r5, 0x852ac000) 2m59.183281154s ago: executing program 4 (id=8413): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000002a0933059ee7ce0ed16ae86447c6fb0000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2m58.254202712s ago: executing program 4 (id=8422): arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) 2m57.632013941s ago: executing program 4 (id=8426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) 2m57.549859518s ago: executing program 4 (id=8428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 2m57.473635496s ago: executing program 4 (id=8430): r0 = open(&(0x7f0000000000)='./bus\x00', 0x10d0c1, 0x170) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xa7210e10bc3c9d6b) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000100)='./file0/file0/..\x00', &(0x7f00000000c0)='./file1\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdc6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='rxrpc_peer\x00', r6, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 2m45.058533476s ago: executing program 43 (id=8411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x40006) 2m43.153844966s ago: executing program 44 (id=8430): r0 = open(&(0x7f0000000000)='./bus\x00', 0x10d0c1, 0x170) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xa7210e10bc3c9d6b) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000100)='./file0/file0/..\x00', &(0x7f00000000c0)='./file1\x00') bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfdc6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='rxrpc_peer\x00', r6, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 1m27.532246796s ago: executing program 7 (id=10152): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x800}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x10, @multicast1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000018c0)=ANY=[@ANYRES32=r7], 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r7, 0x3}, 0x8) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r8}, 0x18) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:hald_exec_t:s0\x00', 0x21) close_range(r5, r9, 0x2) 1m27.035417083s ago: executing program 7 (id=10155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42710, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd07, 0x40}, 0x800, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) faccessat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1m26.843172471s ago: executing program 7 (id=10160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0xa00, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 1m26.818662524s ago: executing program 7 (id=10162): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000003c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodioread_nolock}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x55a, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x4, @empty}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) sendfile(r1, r0, &(0x7f00000001c0)=0x100000000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18) fcntl$setlease(r3, 0x400, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000200)={@loopback, 0x0, 0x0, 0x20, 0x0, [{@broadcast}, {@broadcast}]}}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x11, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x1ff], 0x0, 0x200000000000000, 0x1, 0x0, r7}}, 0x40) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfc66}], 0x1}, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) accept4$unix(r3, &(0x7f0000000600), &(0x7f0000000680)=0x6e, 0x80800) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000001000)="faca0e56cd9031ab3095861739cb3f96e334112638a320e035ceb898a1aadb72992901ab3104ad97019f2d1ac3dc831ee16c8b5f7f7f020a2c43efe61e235a305aa5131125123db4c4606694f930ce3df1ffbd48ab07035ca5309d05f09c8a963562d9626ae78a3e35e42ae12b2106e4d356180b208d537b5721e9c1dd0411c7ff6e4e24392f6dfd11ea8456ccb778afc172b7", 0x93}, {&(0x7f00000010c0)="2aa3a5afb922e0ddd593fd6d4500bf9be6", 0x11}, {&(0x7f0000001100)="ebd2e1fa276241c9e8520deacffcc95b9885bbf1c157cdf2847d85d469a5912acdf33e7fbddc105a45ae54ecbff950d9de8304a8b833f3bf50a9", 0x3a}], 0x3, 0x7ff, 0x4) getpgrp(0xffffffffffffffff) stat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)) 1m26.579872896s ago: executing program 7 (id=10170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42710, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd07, 0x40}, 0x800, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) faccessat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 1m26.302952432s ago: executing program 7 (id=10172): r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000000100)=""/179, 0xb3) getdents(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7434cd48ebf8fd54000000000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) pipe(&(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r11, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m26.302548782s ago: executing program 45 (id=10172): r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000000100)=""/179, 0xb3) getdents(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7434cd48ebf8fd54000000000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) pipe(&(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r11, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 28.391895883s ago: executing program 8 (id=11119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 27.633315085s ago: executing program 8 (id=11131): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001"], 0x0) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000001975400209"], 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff4}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r5, 0x0, 0x2}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB="6ded830630dfcd4adfc487d0dc6403b3f606c6c894c9f19285e601514ad2e6cac3e181d702bd16f18426193804e8f1b94e000b830827818d"], 0x50) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) 27.035779941s ago: executing program 8 (id=11144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xfa, '\x00', 0x0, 0x1c}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) clock_adjtime(0x0, &(0x7f0000000000)={0x19b1, 0x800000, 0x0, 0x0, 0x400, 0x5, 0x101, 0x2, 0x0, 0xa00, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0x8001, 0x0, 0x100000000, 0x0, 0xe, 0x0, 0x2, 0xea, 0x0, 0x0, 0x6, 0x4}) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYRES8=r3, @ANYRES32, @ANYRESDEC=r4, @ANYBLOB="0100000003000000050000000800000000000000", @ANYRES32, @ANYRES16=r1], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000050013000000000014000800000000000000000000000000000000000500140000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10328001}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000010", @ANYRES16=r8, @ANYBLOB="00082cbd7000fcdbdf2508000043c4000d000100000001010000dc45f999dbf6c4bd172aa7f419c8991090c2904b45d24b7e6ff7745cfe9ca3b4c706be4f20f8a013888a86beb6995b089cda72103dee7ae8f7e7af58b5d6e1568efc18414e67dff2910eb0a68a42518ac9192e5068fb82c1774cf0f1b91958de4e70bd1a08c532785e24432fff7293c3ec7a94fb59630000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18) syz_read_part_table(0x60e, &(0x7f00000007c0)="$eJzs3D9olGccB/DvJbk7o9A4OLnUOHQSiuLoDVWSq2IhnJZCcLD/EGmmCIGTHqbo0GaImEE6dpHCdYhxUjM4KQqdizi0CBlcCnaR2iFX7u4luUAplkZK8fMZ7ve8Lz+e7/uDZ30u/K8NpVysOtVeefeTv+3vjG2u5/Nhe2LyeKfT6ZxOSjmTcsbLb60kGcnWXbM/SWVgnxvf7Vz95rf3y+0np168c/b+wtDGntXsTrJrsDmjf/Up1X82Ka/Dcu3BWC3JYveh3lpb/yi5+XyicefkwtLKifKxz7rvLyUPi/7+wRjNhTRzMV/k45FXjvpqc1nakj9/Zba+2Kydf1xvrX3bfnpwfW99+Pa5Iy/3rV69dyiZ60ZMpXfYN1X+5eAD+ZcH8ufGr00vtY4euLXn+uHm3UeNZ8O/d/qKyPL25AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hosd3+uzNYXm7Xzj+utta9/+vGDm88nGndOLiytnKgc+7noe1jUkaJeSDMXU04yk5l8ntlXj5wuDebXHoxd3sj/Y2fy9OD63nr79rkjLydXr9471OsqZapbhrZj4q2WR9LLz+7+89z4teml1tEDt/ZcP9y8+6jxbLj/fqaaT3vjJqlu/2cAAAAAAAAAAAAAAAAAAADwhpuYPL5v6r3G6aSUMzuS/Ppl75Z9pzr6Q3o37/v2F7VS1Bs7+v8F0H5y6kXl7P2FX4pL8fOpZj7Jru+7nW9v5FzaGlve3Jn/0p8BAAD//83YiVM=") r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1c3) writev(r10, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) truncate(&(0x7f0000000000)='./bus\x00', 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001240)=@newtaction={0x4b4, 0x31, 0x1, 0x0, 0x0, {}, [{0x4a0, 0x1, [@m_police={0x49c, 0x2, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffd, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x35cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x1]}]]}, {0x69, 0x6, "18852f8b27042ab9060b8edc714df61669bcd7a6e9211214576c457a4f355e82eb11f32bd78d000c46fb48de9f6a9e5310faa839531a09f10647dbcdb8810924f29b24a8e6ba7725c5411bd5ca3786cca7a4735ad31e9678d200bd88bb76bf8cf75379d39b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4b4}}, 0x400d0) 26.429223908s ago: executing program 8 (id=11159): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000001207020000f8ffffffb703000008000000b720000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff02}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="2e1018ff305897d214adeb33734d06113ab41f7f3103f2909b254ea809e1894f18790b4ff5e5e44da8d6658686528996c92a501c4e350b2c490e5c65a99c962645ffcdfe8cdfe39567072fc0928f44b95458322eb917951af89472c01f3bb35dc6f397ac26f565c77c94a50ae3652f6cba9a447984d3b3abb9720983db71bec35c24116a1e065da659ed82929c8d40a170c3dc70b56014ab696a3919063f3d681ef074649a2e496a0ba8c8c55662246b0be64f79fccfb63036650de06923ccc9faf096a323793fb89703fbc785d002e13ace40ebc9f6a07fa0ca65a8cee0024f5eee870c4f2db44c7577f48156a05962", 0xf0}, {&(0x7f00000003c0)="b7c5cfbac86da9cd3f181dc40a4d20fe6ab1a67bcbe70365eb33da5ea21aace5e9f26783512ed0ddce37a23a0f6c439690258a96073b0c8ac6e237365de53a28f7d3d19aec5230af8fd62f372a35def2eb04d0008be582668dab19cdda0c07200798866c23eb6f47427a1ade90d7c9df3d83705bba28cd73f95ffe338c5994f381babb62edfb340cee2e016cd6d79b121afa0276c83756c968e05edafef0fba7fac29fd511832d52ebedf5d852a9dcd6e5c66e7dc327b3549c7c844f09ca83", 0xbf}, {&(0x7f0000000500)="69c43c15aac5fc46e6cd655d4e16edd0683c7531ae4f943e7c72b21a13e4ec55670fa1d8a24f06c9b89b84385f034dc4a4ff278b3b2dd66894e9139492f8af889e8cedb4500d296671aef6755aa9af9d4f6862203be579ad", 0x58}, {&(0x7f0000000700)="29b9eafa441950666bc56e096df3a5d510e6847ca4d362e0db42d6a280cf2e05291b67ad9db64c4a1c457b7cc9775ed167c38ed20981f39925ba468bd5a0ab7491c50ec58135e3d8f536165f8dae09fceb2506505f305880d0d6a3ba90802c1844f64911407500f6e077757cdae94d4c0565e4e9669e090bc460bb9241b797350128b86050052ebfd793bc730476851ffdbef934daa5353c19b2ede47b31af2daadc0b8ffd5c8975", 0xa8}], 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x148}, 0x80) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x22f015, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) 26.039277904s ago: executing program 8 (id=11161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c00024000000000000000101400018009000100"], 0x104}}, 0x0) 25.906474777s ago: executing program 8 (id=11165): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x10c) getdents64(r2, 0x0, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='mm_collapse_huge_page\x00', r4}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8514, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x2, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x1}, &(0x7f0000000140)=0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 25.884270809s ago: executing program 46 (id=11165): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x10c) getdents64(r2, 0x0, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='mm_collapse_huge_page\x00', r4}, 0x18) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8514, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x2, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x1}, &(0x7f0000000140)=0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.242991544s ago: executing program 3 (id=11479): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x23c, @private2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001180)='\f', 0x1}], 0x1}}], 0x2, 0x931766f6159e6d55) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000004300)=""/4129, &(0x7f0000000080)=0x1021) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.062969431s ago: executing program 3 (id=11483): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18, 0x4c00}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xf00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040), &(0x7f0000000600)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0xa71, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0xd3fd, 0x0, 0x0, 0x0) 2.995106837s ago: executing program 2 (id=11484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600000000000110100000000000000000000000000000000fe8000000000000000000000000000aa8000000000000000fb36eeca6fad50b375a22a584d16ca5500"/126], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x40) accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYRESOCT=r0, @ANYBLOB="a7d1eee0d2d17e226f1f8b2405262f165d3e98a3114836bd988606bac33717e0645035dbfef14acba187a47e57a62b65155f270dea1385725f5c79113bf5a9a6c27b35f4ff876c5b167bae9c3d92b0ff521ce5734ac3747499c60574bc60fd7f30"], 0x50) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) pread64(r5, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x4}, 0x18) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 2.980712569s ago: executing program 3 (id=11485): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0x6, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) 2.96219161s ago: executing program 3 (id=11486): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x800}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x10, @multicast1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000018c0)=ANY=[@ANYRES32=r8], 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r8, 0x3}, 0x8) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r9}, 0x18) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:hald_exec_t:s0\x00', 0x21) close_range(r6, r10, 0x2) 2.914174815s ago: executing program 2 (id=11487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00010000001c58e86e8e5bd000"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x2}, 0x0, 0x0, 0x3, 0x6, 0x9, 0xff, 0x140000000, 0x495, 0x7, 0x5}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 2.875666779s ago: executing program 2 (id=11488): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ptrace$poke(0xd7c16c1c2ef5e447, r0, &(0x7f0000000180), 0xfffffffffffffff9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18003cae33158616248900000000000095fcff0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = epoll_create(0x3ff) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000440)={0x2000000}) fsopen(&(0x7f0000000280)='hpfs\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) 1.611343218s ago: executing program 1 (id=11490): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 981.353527ms ago: executing program 1 (id=11492): r0 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xa) sendto(0xffffffffffffffff, &(0x7f0000000100)="3e0afc39dd8df60f3223bba3542dc92b9eaab79939b3bfef0fbf186456ff62269f60c9c16b9ac8b8a79237e1bbe977a4d69f3fc7d1cc6f1baf48655e3013d57a20ecb3d2e1e0bc3e8c24fd4881b9881f5613a7b6eb17a49c29cdbbe60664f1c1f762621abd0f342685eb9d843a6774252275043ee16d53f4d959be2eb26dcd5b8215096ae1d5bb132eab48939fec403320d57c182a6596d1a0aa65898a4f", 0x9e, 0x0, &(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000900)="b745cd", 0x3}, {&(0x7f0000000040)="d9f2656f941b2ef1698118ab9192b35f7fee2043411be60e16ef3b7a998d1d87e02ff3b77a07b100cb366ded2d3ae7c94b67b2f937f6e6ff71806603a0eb6aaa5e922d3246f0befbddee2d61e45e43d778854f6d3a84b700000000a222399bd8103cda088748ed4875c1a2c42c8d1a8a3b63506b41b89d11ffd52cc9d798b918cefbc48fa07837672bcc74173801", 0x8e}, {&(0x7f0000000240)="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", 0x11a}], 0x3, 0x4000001, 0x0) 975.163728ms ago: executing program 9 (id=11493): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x23c, @private2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001180)='\f', 0x1}], 0x1}}], 0x2, 0x931766f6159e6d55) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000004300)=""/4129, &(0x7f0000000080)=0x1021) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 897.185825ms ago: executing program 1 (id=11494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 828.595682ms ago: executing program 1 (id=11495): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0x6, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) 827.927932ms ago: executing program 1 (id=11496): perf_event_open(0x0, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x804710, &(0x7f0000000040)={[], [{@seclabel}]}, 0xf9, 0x496, &(0x7f0000000f80)="$eJzs3M1PHOUfAPDvLNDSV/j1V6utraLV2PgChVbtwYMaTTxo4sFDPSLQWrstBjCxDVE0ph5NE+/Go4l/gTcvRj0YE6+aGE+mSZMSk1JPmHmDBRYKdGFb9vNJlnmenZl9nu/MPLPPzMNsAC2rJ/2TROyOiN8joivPLlygJ5/MTE8O3ZqeHEqiMjf75vTkUJku19tVZI5VIiqfJfFisrTc8UuXzw9WqyNjRb5v4sL7feOXLj9z7sLg2ZGzIxcHTp06eaL/+ecGnm1InGlcNw99NHr44GtvX31j6PTVd376Nq3WgSNL47itW3UCqqMn3Wo3ZjOL5z2+hrrfC/bUpJP2JlaENWmLiHR3dWTtvyvaYn7ndcWrnza1csCGSr+bti8/e2oW2MKSaHYNgOYov+jT69/ytUldj7vC9ZcithXpmenJoZm5+Nvn7nJ0bGD5PRFxeurfr9JXrPU+BADAOmR9m6fr9f8qcSCb5mMde4sxlO6I+F9E7IuI/0fE/oi4LyJb9v6IeCBfebZrleX3LMov7f9UrtWtc4Ok/b8Xavp+MzXxF5PutiK3J4u/IzlzrjpyvNgmx6Jje5rvX6GM71/57Yvl5tX2/9JXWn7ZFywqcK19e0RnzTrDgxODjdoI1z+JONReL/5kbiQgPQIORsShtX303jJx7slvDi+30O3jX0EDxplmv454It//U7Eo/lKy8vhkX2dUR473lUfFUj//euXN5cq/o/gbIN3/Oxce/4uW6PonycdrO6JaHRkbX3sZV/74fNlrmtUe/7XS439b8lY2Zv3Lu/l7Hw5OTIx1RmxLXs/y5TVd9v7A/LplPpv25/EfO1q//e8r1knjfzAi0oP4SEQ8FBEPF3V/JCIejYijK8T/48uPvbdC/Ekk0dT9P1z3/Dd3/HcnteP160i0nf/hu+VGzFe3/0/GVHauzWXnv/jrxkpxrbaCDdiEAAAAcNerRMTuSCq9ebpnd1Qqvb35//Dvj52V6uj4xFNnRj+4OJw/I9AdHZXyTldXzf3Q/mSq+MQ8P1DcKy7nnyjuG3/ZtiPL9w6NVoebHDu0ul0L23+U7T/1d1uzawdsOM9rQeta3P4rTaoHsPlW8/3vWgC2pjrtf0cz6gFsPtf/0Lrqtf+PF+X1/2FrWtr+/6z5aYAFdwOdBmCL0f+H1qX9Q+tad/vvbGw9gE11J8/1rz9RPiyw/s/pXPUT/q2SKH/xYiPL2hHz70Sl6SG3UCJtMZtb6PxvqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzL/gsAAP//ZODlWQ==") bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 742.15725ms ago: executing program 9 (id=11497): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f0000000140)=0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x5, 0x2000, 0x4, 0x4, 0x8001, 0x2, 0x9}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}]) (fail_nth: 4) 621.608001ms ago: executing program 1 (id=11499): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810013, &(0x7f00000006c0)={[{@nolazytime}, {@stripe={'stripe', 0x3d, 0x5}}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfc, 0x5bb, &(0x7f0000000740)="$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") r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0xaa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setuid(0xee01) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 543.103039ms ago: executing program 9 (id=11500): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x9}, 0x1c, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="380000000000000029000000040000003303000000000000c910fe8000000000000000000000000000bb040103c204000000000000000000b9"], 0x38}}], 0x2, 0x20004855) 542.048069ms ago: executing program 3 (id=11501): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e5928dd185c0a1acc6bf102cc8a25209bd038a8a27ddff28381dd6cd57c19ae331c00822872a3db64127f9ac67243b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000052a077208fbf7f6057b8f02bb2230e6f6e48002fe3abf16178b2a511f70a7d9038ac34867b242e2817a4ee060b2720339931e5a7153f3e485b2726034684af81b6e9ce07f86bd2fc944b66017c25851cc47f7a074e1289eabb34ae7ffd7463b9dd7eb6b67211558725c42e3b45e4245264", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000052a077208fbf7f6057b8f02bb2230e6f6e48002fe3abf16178b2a511f70a7d9038ac34867b242e2817a4ee060b2720339931e5a7153f3e485b2726034684af81b6e9ce07f86bd2fc944b66017c25851cc47f7a074e1289eabb34ae7ffd7463b9dd7eb6b67211558725c42e3b45e4245264", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) (async) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, 0x0, 0x0, 0x1, 0x0) (async) msgrcv(r4, 0x0, 0x0, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000e10000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) (async) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) (async) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461a6683ec19d3e48489bffa5602001300111200000f0000ff3f210000001700000000e0da89", 0x2a}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000001c0)=ANY=[@ANYRES64=r7]) msgrcv(r4, &(0x7f0000000640)={0x0, ""/262}, 0x10e, 0x3, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7, 0xf83, 0x6}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed180e, &(0x7f0000000b80)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nodioread_nolock}, {@errors_continue}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@quota}], [{@appraise_type}]}, 0xfa, 0x487, &(0x7f0000000f00)="$eJzs3c9vFFUcAPDvbLulgNiK+AOEUEUj8UdLyw85eNFowkETEz1gPNW2kEqhhtZECFH0gEdD4t34F3g1nvRi1IsmXvVuSIjhAurBNbMzQ0u7019sd1v280lm+97M7L73nZm382be7jaAjjWQPiQR90XE7xHRl2XvXGEg+3PrxqWxv29cGkuiVnvzr6S+3s0bl8aKVYvnbc8ytVqe39Kg3CvvRIxOTU2cz/NDs2ffH5q5cPH5ybOjpydOT5wbOX78yOF9PcdGjjYlzjSum3s+mt67+8TbV18fO3n13Z+SSmRxx4I4mmUg27oNPdXswtpsx7x00p0+9ua5/b/MLWl0JNBOXRGR7q5qvf33RVdsvb2sL179tK2VA9ZVrVarLfGufLkG3MOSaHcNgPYoTvTp9W8xtajrsSFcfym7AErjvpVP2ZLuqGSJ/dUF17fNNBARJy//82U6xTrdhwAAmO+7tP/zXKP+XyUezhI96cP9+RhKf0Q8EBE7I+LBiNgVEQ9F1Nd9JCIeXWX5C0dIFvd/KtfWHNwKpP2/F/OxrTv7f5Vilf6uPLejHn81OTU5NXEo3yYHo7rl1GQyMbxEGd+/8tvnZcvm9//SKS2/6Avm9bjWveAG3fjo7OjdxDzf9U8i9nQ3ij+pjwtEPq63OyL2rLGMyWe6S5ctH/8Syl92xWpfRTyd7f/LsSD+QlI6Pjn8wrGRo0O9MTVxaKg4Khb7+dcrb5SVf1fxN0G6/7c1PP5vx9+f9EbMXLh4pj5eO7P6Mq788VnpNc0qj/8TO/Ljvyd5qz6jJ1/w4ejs7PnhiJ7ktcXzR+ZercgX66fxHzzQuP3vjLkt8VhE7I2IfflL78/r/nhEPBERB5aI/8eXn3xv9fG3Zqw0jX98uf0f8/f/6hNdZ374dvn4eyOibP8fqacO5nNW8v630grezbYDAACAzSL7DHxSGZxLJ4OD2Wf4d8W2ytT0zOyzp6Y/ODeefVa+P6qV4k5X37z7ocP5veEiP7Igfzi/b/xF19Z6fnBsemq83cFDh9u+qP1XKmn7T/3Z1e7aAeuuCeNowCal/UPn0v6hMyXLtv9qy+oCtJ7zP3SuRu3/49K1B79Z18oALeX8D51rqfb/9R258l4BsDk5/0Pn0v6hI5V+N75SLPov/6XAtX33v1WJf/NabpT63PuJqGyIaqw1Ufx7go1Sn/JE94p/zKIsUV3czGt9WfjpnC0Nn9XOdyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDm+T8AAP//H1vmFQ==") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed180e, &(0x7f0000000b80)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nodioread_nolock}, {@errors_continue}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@quota}], [{@appraise_type}]}, 0xfa, 0x487, &(0x7f0000000f00)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000100)='./file0\x00', 0x10081, 0x5) 515.568241ms ago: executing program 6 (id=11502): r0 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000900)="b745cdd59e12", 0x6}], 0x1, 0x4000001, 0x2040000) 500.145283ms ago: executing program 2 (id=11503): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 492.060643ms ago: executing program 9 (id=11504): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x204, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) fcntl$getown(r0, 0x9) 407.291662ms ago: executing program 6 (id=11505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) 392.287813ms ago: executing program 6 (id=11506): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0x6, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) 351.858167ms ago: executing program 6 (id=11507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x1, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) socketpair(0x11, 0x6, 0x8, &(0x7f0000000280)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000001500)=0xe8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000014c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xa}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xff4f1e2bb1a569fd}, 0x20000890) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x1c, r1, 0xb29, 0x2000, 0x10, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x2004c0c5) 303.190551ms ago: executing program 3 (id=11508): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100000a, @local, 0x4}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001680)="1a", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x23c, @private2}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001180)='\f', 0x1}], 0x1}}], 0x2, 0x931766f6159e6d55) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000004300)=""/4129, &(0x7f0000000080)=0x1021) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 294.822152ms ago: executing program 9 (id=11509): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x90, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x0, 0x0, 0xffffffff}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x6, 0x80, 0xffffff20}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xd18, 0x7}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0x6}}, @TCA_NETEM_DELAY_DIST={0x2b, 0x2, "9fe632cf33e12bd741ebfc3a076eba38810af8acd9943dac95fb69eeeda673629aa6ffc4fee718"}]}}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 212.07435ms ago: executing program 6 (id=11510): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff0000000000a1, 0x0, 0xf4ff) dup3(r3, r1, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50) 163.334874ms ago: executing program 9 (id=11511): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={0x0, 0x800}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x10, @multicast1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000018c0)=ANY=[@ANYRES32=r8], 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r8, 0x3}, 0x8) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r9}, 0x18) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:hald_exec_t:s0\x00', 0x21) close_range(r6, r10, 0x2) 99.99992ms ago: executing program 2 (id=11512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00010000001c58e86e8e5bd000"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x2}, 0x0, 0x0, 0x3, 0x6, 0x9, 0xff, 0x140000000, 0x495, 0x7, 0x5}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 30.440617ms ago: executing program 2 (id=11513): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 0s ago: executing program 6 (id=11514): r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x49c52d0ee03db24e, 0xa3, [{{0x9, 0x4, 0x0, 0x54, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x80a, 0x0, 0x1, {0x22, 0x2d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xff, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x1, 0x4, 0x7a}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x298, 0x82, 0x1, 0x5, 0x40, 0x13}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "078b9f4a5d44e79da58bb256d2c6bef5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x1, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x7, 0x7}]}, 0x2, [{0xdd, &(0x7f0000000380)=@string={0xdd, 0x3, "087bba1124c2bff304cef3dc91a873ac8ba6784541ec92ef7d9c4ba00e1fa535eadb0164f8148d5107d38c8ed7eb690adaa638c1cfe60acb2437cf50d43bb344f6729ec80e61a2784d20ddd00cc526d9232c5a1391423b559708d0ae986a4554f7c72ba428da382b8f48ee281d9ca6954513646e9643fd5eda5231f647935c16ced219d490c66087ad7bc718333c6b65edc133c9efda5d3a763c179c3eb2356c75d4380ddc0ed757fa73ed293ec1ed458b3da671dbd81db471cc31c4d025077e51b5a34e634bd2534009316db542e4f85fc52ccb5e9f786edf330a"}}, {0xf6, &(0x7f0000000480)=@string={0xf6, 0x3, "93c256cda65d10c6488e86fd124261f4aefc7467ef02f0024c51f8726da882803b430d20b606a7403ae2349ea585187a7d6c1aa9e510e210eebc2571521d9f2fdf6dd49a1da4adc3efb52587daa4c9bb5ebe4d9a730222d5575ed62e6cac5b9e707950d03f760766b750d74895fde7100acc49f9e21b554f48e1bc5d4a9a2bec83a7580ea25b675a49a7bf52e60eb1b17970861f45ef6b39d9bf0ccb988d41fb9b10a0ac1d65ac9b868916f11e36c301ace568f0c7f83b8bc71e9d788f295127312afe9fde026f3c8b677f2fe6aabba8eb5dafa9360b4f35f737a34f0572ccf6ba7c88aeb672d36e7059820e4a2b1d142b19db82"}}]}) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x0, 0xd, 0x91, {0x91, 0xb, "4b39a335012a95f5ab4f21e1f30b4b8e3c8994a37486531acd013f0b405b05958ea2591e18b7689fdbf475cd2074ab662dc72705108393b85657c953eeaa11f8225ab5348b3cc518ebbefc031a394f3296a86a670afd80ef718f83737f28cc9dc79ba0ced9fb0f37765c534252399264e34ccd67ae226b481d501985875b1ea5db485317d498eff30ed878291f9e50"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000006c0)={0x0, 0xf, 0x1e, {0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x22, 0x7, 0x1, 0x5}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x4, 0x81, 0xd, 0xfa}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0x5, 0x4, "613ccde1", "6f3149c3"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x18, 0xf, 0x0, 0xff, 0x58b, 0x7}}}, &(0x7f0000001200)={0x84, &(0x7f00000007c0)={0x20, 0xe, 0xf9, "c51507128c7db1b136ddb243142550dc878ea65a452a716fd8f739800830367d38d69c4eb78f7fb909b070913ae93fdbd7bb087f8152d0c1965ff8de36f0651d40e2e31f8bf8db6f2bbca014ed984146a491b7b19f6162094039a41d2e010554a784c39abd332f6c6c00b5ca05798826b68f22ed454cc33d42fd51dd0cfe6dcc052ac112a4e8f0e5ee3a2fd41b16dab747ff2267c6261288d8836a28c89605ee64ae6bf5d54118674c5579e49594454608b042d4d2a46c266e997b876b94e61e3c7902698026d1ce443e491d3ad10bbe58ae9db371dc79fe5cf195f5ba5fb4a9b01ade34194beefba84e7d864b9a20f4b91a2abe05f12b2611"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x140, 0x8, [0xf]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "380e"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000001040)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001080)={0x40, 0x17, 0x6, @local}, &(0x7f00000010c0)={0x40, 0x19, 0x2, "8085"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x80}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x3}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) kernel console output (not intermixed with test programs): ip=0x7f2287c8f749 code=0x7ffc0000 [ 801.136516][ T29] audit: type=1326 audit(2000005645.609:78696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.8.10767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2287c8f749 code=0x7ffc0000 [ 801.160272][ T29] audit: type=1326 audit(2000005645.609:78694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.8.10767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2287c8f749 code=0x7ffc0000 [ 801.183996][ T29] audit: type=1326 audit(2000005645.609:78697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.8.10767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2287c8f749 code=0x7ffc0000 [ 801.207906][ T29] audit: type=1326 audit(2000005645.640:78698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.8.10767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2287c8f749 code=0x7ffc0000 [ 801.233826][T13767] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 801.245296][T15417] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10774'. [ 801.253473][ T29] audit: type=1400 audit(2000005645.840:78699): avc: denied { read write } for pid=15414 comm="syz.6.10774" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 801.309833][T15404] lo speed is unknown, defaulting to 1000 [ 801.430792][T15404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15404 comm=syz.3.10772 [ 801.515866][T15451] FAULT_INJECTION: forcing a failure. [ 801.515866][T15451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.529028][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.9.10780 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 801.529100][T15451] Tainted: [W]=WARN [ 801.529107][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.529124][T15451] Call Trace: [ 801.529131][T15451] [ 801.529140][T15451] __dump_stack+0x1d/0x30 [ 801.529171][T15451] dump_stack_lvl+0x95/0xd0 [ 801.529229][T15451] dump_stack+0x15/0x1b [ 801.529328][T15451] should_fail_ex+0x265/0x280 [ 801.529355][T15451] should_fail+0xb/0x20 [ 801.529381][T15451] should_fail_usercopy+0x1a/0x20 [ 801.529426][T15451] strncpy_from_user+0x27/0x260 [ 801.529472][T15451] __se_sys_memfd_create+0x206/0x6b0 [ 801.529518][T15451] __x64_sys_memfd_create+0x31/0x40 [ 801.529570][T15451] x64_sys_call+0x28cb/0x3000 [ 801.529596][T15451] do_syscall_64+0xca/0x2b0 [ 801.529763][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.529792][T15451] RIP: 0033:0x7fe877fef749 [ 801.529812][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.529831][T15451] RSP: 002b:00007fe876a56d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 801.529851][T15451] RAX: ffffffffffffffda RBX: 0000000000000593 RCX: 00007fe877fef749 [ 801.529865][T15451] RDX: 00007fe876a56dec RSI: 0000000000000000 RDI: 00007fe878074960 [ 801.529919][T15451] RBP: 00002000000005c0 R08: 00007fe876a56b07 R09: 0000000000000000 [ 801.529933][T15451] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 801.529949][T15451] R13: 00007fe876a56dec R14: 00007fe876a56df0 R15: 00007fffc2483f78 [ 801.529974][T15451] [ 801.836918][T15462] loop9: detected capacity change from 0 to 2048 [ 801.896056][T15467] loop8: detected capacity change from 0 to 128 [ 801.913103][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10788'. [ 801.923459][T15467] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 801.957881][T15467] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.975016][T15462] loop9: p2 p3 p7 [ 802.002517][T15481] bridge_slave_0: left allmulticast mode [ 802.008331][T15481] bridge_slave_0: left promiscuous mode [ 802.014020][T15481] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.041272][T15481] bridge_slave_1: left allmulticast mode [ 802.047243][T15481] bridge_slave_1: left promiscuous mode [ 802.053353][T15481] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.068296][T15481] bond0: (slave bond_slave_0): Releasing backup interface [ 802.080683][T15481] bond0: (slave bond_slave_1): Releasing backup interface [ 802.131667][T15481] team0: Port device team_slave_0 removed [ 802.151898][T15481] team0: Port device team_slave_1 removed [ 802.170471][T13767] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 802.183900][T15481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 802.265863][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10799'. [ 802.327969][T15523] netlink: 'syz.3.10800': attribute type 1 has an invalid length. [ 802.341394][T15526] FAULT_INJECTION: forcing a failure. [ 802.341394][T15526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.354581][T15526] CPU: 0 UID: 0 PID: 15526 Comm: syz.6.10797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 802.354621][T15526] Tainted: [W]=WARN [ 802.354631][T15526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.354647][T15526] Call Trace: [ 802.354696][T15526] [ 802.354706][T15526] __dump_stack+0x1d/0x30 [ 802.354737][T15526] dump_stack_lvl+0x95/0xd0 [ 802.354758][T15526] dump_stack+0x15/0x1b [ 802.354777][T15526] should_fail_ex+0x265/0x280 [ 802.354802][T15526] should_fail+0xb/0x20 [ 802.354882][T15526] should_fail_usercopy+0x1a/0x20 [ 802.354988][T15526] _copy_from_user+0x1c/0xb0 [ 802.355024][T15526] memdup_user+0x5e/0xd0 [ 802.355048][T15526] strndup_user+0x68/0xb0 [ 802.355072][T15526] __se_sys_mount+0x8e/0x2e0 [ 802.355148][T15526] ? fput+0x8f/0xc0 [ 802.355182][T15526] ? ksys_write+0x192/0x1a0 [ 802.355255][T15526] __x64_sys_mount+0x67/0x80 [ 802.355284][T15526] x64_sys_call+0x2cca/0x3000 [ 802.355333][T15526] do_syscall_64+0xca/0x2b0 [ 802.355374][T15526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.355462][T15526] RIP: 0033:0x7fd2d94df749 [ 802.355481][T15526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.355503][T15526] RSP: 002b:00007fd2d7f26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 802.355525][T15526] RAX: ffffffffffffffda RBX: 00007fd2d9736090 RCX: 00007fd2d94df749 [ 802.355541][T15526] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 802.355554][T15526] RBP: 00007fd2d7f26090 R08: 0000200000000300 R09: 0000000000000000 [ 802.355633][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.355644][T15526] R13: 00007fd2d9736128 R14: 00007fd2d9736090 R15: 00007fff2d06f7b8 [ 802.355662][T15526] [ 802.429800][T15523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.559020][T15566] bond2 (unregistering): Released all slaves [ 802.597835][T15568] ..@ÿ: renamed from bond_slave_0 (while UP) [ 802.883640][T15648] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10815'. [ 802.892788][T15648] netlink: 96 bytes leftover after parsing attributes in process `syz.8.10815'. [ 802.911630][T15650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.029781][T15658] loop9: detected capacity change from 0 to 512 [ 803.079929][T15666] netlink: 'syz.6.10820': attribute type 4 has an invalid length. [ 803.086408][T15658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.101371][T15658] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.123636][T15666] netlink: 'syz.6.10820': attribute type 4 has an invalid length. [ 803.151731][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.190991][T15673] netlink: 'syz.2.10816': attribute type 12 has an invalid length. [ 803.305363][T15684] loop8: detected capacity change from 0 to 128 [ 803.314998][T15684] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 803.328050][T15684] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.551838][T13767] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 803.577200][T15705] loop8: detected capacity change from 0 to 1024 [ 803.589407][T15705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 803.676081][T13767] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 803.782855][T15719] lo speed is unknown, defaulting to 1000 [ 803.877802][T15754] loop9: detected capacity change from 0 to 128 [ 803.959027][T15754] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 803.978858][T15754] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.992817][T15772] netlink: 'syz.2.10847': attribute type 29 has an invalid length. [ 804.333334][T15783] netlink: 'syz.2.10849': attribute type 12 has an invalid length. [ 804.341646][T15783] netlink: 'syz.2.10849': attribute type 11 has an invalid length. [ 804.748785][T15754] __nla_validate_parse: 9 callbacks suppressed [ 804.748806][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10844'. [ 804.829035][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 805.082658][T15803] bond2 (unregistering): Released all slaves [ 805.103724][T15838] netlink: 'syz.6.10855': attribute type 39 has an invalid length. [ 805.117459][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10855'. [ 805.772232][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10866'. [ 805.814168][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 805.814198][ T29] audit: type=1326 audit(2000008210.644:79187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 805.851599][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10861'. [ 805.870589][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10862'. [ 805.916898][T15906] loop9: detected capacity change from 0 to 512 [ 805.955064][ T29] audit: type=1326 audit(2000008210.686:79188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 805.979917][ T29] audit: type=1326 audit(2000008210.686:79189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 806.004418][ T29] audit: type=1326 audit(2000008210.686:79190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 806.028920][ T29] audit: type=1326 audit(2000008210.686:79191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 806.053423][ T29] audit: type=1326 audit(2000008210.686:79192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 806.078007][ T29] audit: type=1326 audit(2000008210.686:79193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 806.102636][ T29] audit: type=1326 audit(2000008210.759:79194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f65c6f749 code=0x7ffc0000 [ 806.127257][ T29] audit: type=1326 audit(2000008210.759:79195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f65c6f783 code=0x7ffc0000 [ 806.151660][ T29] audit: type=1326 audit(2000008210.759:79196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.2.10861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6f65c6f807 code=0x7ffc0000 [ 806.179719][T15906] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.207505][T15906] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.298199][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.301329][T15919] loop8: detected capacity change from 0 to 256 [ 806.361321][T15919] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 806.370657][T15919] FAT-fs (loop8): Filesystem has been set read-only [ 806.378302][T15919] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 806.484069][T15938] bridge0: entered allmulticast mode [ 806.558473][T15945] netlink: 'syz.6.10874': attribute type 10 has an invalid length. [ 806.566498][T15945] netlink: 168 bytes leftover after parsing attributes in process `syz.6.10874'. [ 806.626537][T15951] FAULT_INJECTION: forcing a failure. [ 806.626537][T15951] name failslab, interval 1, probability 0, space 0, times 0 [ 806.639654][T15951] CPU: 1 UID: 0 PID: 15951 Comm: syz.9.10875 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 806.639714][T15951] Tainted: [W]=WARN [ 806.639721][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.639734][T15951] Call Trace: [ 806.639741][T15951] [ 806.639768][T15951] __dump_stack+0x1d/0x30 [ 806.639798][T15951] dump_stack_lvl+0x95/0xd0 [ 806.639856][T15951] dump_stack+0x15/0x1b [ 806.639946][T15951] should_fail_ex+0x265/0x280 [ 806.639972][T15951] should_failslab+0x8c/0xb0 [ 806.640070][T15951] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 806.640097][T15951] ? __alloc_skb+0x2ff/0x4b0 [ 806.640206][T15951] __alloc_skb+0x2ff/0x4b0 [ 806.640236][T15951] ? __alloc_skb+0x228/0x4b0 [ 806.640264][T15951] netlink_alloc_large_skb+0xbf/0xf0 [ 806.640304][T15951] netlink_sendmsg+0x3cf/0x6b0 [ 806.640346][T15951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.640466][T15951] __sock_sendmsg+0x145/0x180 [ 806.640519][T15951] ____sys_sendmsg+0x31e/0x4a0 [ 806.640548][T15951] ___sys_sendmsg+0x17b/0x1d0 [ 806.640699][T15951] __x64_sys_sendmsg+0xd4/0x160 [ 806.640738][T15951] x64_sys_call+0x17ba/0x3000 [ 806.640773][T15951] do_syscall_64+0xca/0x2b0 [ 806.640808][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.640833][T15951] RIP: 0033:0x7fe877fef749 [ 806.640906][T15951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.640928][T15951] RSP: 002b:00007fe876a15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.641007][T15951] RAX: ffffffffffffffda RBX: 00007fe878246180 RCX: 00007fe877fef749 [ 806.641021][T15951] RDX: 0000000020000000 RSI: 0000200000000300 RDI: 000000000000000b [ 806.641032][T15951] RBP: 00007fe876a15090 R08: 0000000000000000 R09: 0000000000000000 [ 806.641047][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.641101][T15951] R13: 00007fe878246218 R14: 00007fe878246180 R15: 00007fffc2483f78 [ 806.641119][T15951] [ 807.255482][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10883'. [ 807.265159][T15960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10883'. [ 807.287117][T15963] loop8: detected capacity change from 0 to 128 [ 807.312594][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10885'. [ 807.322408][T15964] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10885'. [ 807.353985][T15963] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 807.395753][T15963] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.498953][T15972] veth4: entered promiscuous mode [ 807.504595][T15972] veth4: entered allmulticast mode [ 808.100451][T13767] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 808.318548][T15994] lo speed is unknown, defaulting to 1000 [ 808.396287][T16026] loop9: detected capacity change from 0 to 512 [ 808.422635][T16026] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.10899: error while reading EA inode 32 err=-116 [ 808.435843][T16026] EXT4-fs (loop9): Remounting filesystem read-only [ 808.442740][T16026] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 808.453743][T16026] EXT4-fs (loop9): 1 orphan inode deleted [ 808.460358][T16026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.494341][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.541619][T16051] loop9: detected capacity change from 0 to 512 [ 808.561486][T16054] FAULT_INJECTION: forcing a failure. [ 808.561486][T16054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.574838][T16054] CPU: 0 UID: 0 PID: 16054 Comm: syz.8.10905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 808.574897][T16054] Tainted: [W]=WARN [ 808.574906][T16054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 808.574922][T16054] Call Trace: [ 808.574930][T16054] [ 808.574939][T16054] __dump_stack+0x1d/0x30 [ 808.574989][T16054] dump_stack_lvl+0x95/0xd0 [ 808.575018][T16054] dump_stack+0x15/0x1b [ 808.575113][T16054] should_fail_ex+0x265/0x280 [ 808.575144][T16054] should_fail+0xb/0x20 [ 808.575169][T16054] should_fail_usercopy+0x1a/0x20 [ 808.575201][T16054] _copy_from_user+0x1c/0xb0 [ 808.575287][T16054] vmemdup_user+0x5e/0xd0 [ 808.575311][T16054] path_setxattrat+0x1b6/0x310 [ 808.575432][T16054] __x64_sys_lsetxattr+0x71/0x90 [ 808.575464][T16054] x64_sys_call+0x2ef0/0x3000 [ 808.575496][T16054] do_syscall_64+0xca/0x2b0 [ 808.575577][T16054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.575601][T16054] RIP: 0033:0x7f2287c8f749 [ 808.575622][T16054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.575645][T16054] RSP: 002b:00007f22866ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 808.575670][T16054] RAX: ffffffffffffffda RBX: 00007f2287ee5fa0 RCX: 00007f2287c8f749 [ 808.575687][T16054] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900 [ 808.575703][T16054] RBP: 00007f22866ef090 R08: 0000000000000000 R09: 0000000000000000 [ 808.575763][T16054] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 808.575778][T16054] R13: 00007f2287ee6038 R14: 00007f2287ee5fa0 R15: 00007ffe96c727b8 [ 808.575803][T16054] [ 808.771443][T16051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.798600][T16051] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.876247][T16068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.899718][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.065039][T16078] SELinux: Context system_u:object is not valid (left unmapped). [ 809.159501][T16083] netlink: 'syz.9.10913': attribute type 7 has an invalid length. [ 809.367768][T16087] lo speed is unknown, defaulting to 1000 [ 809.408003][T16094] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 809.573794][T16130] __nla_validate_parse: 3 callbacks suppressed [ 809.573814][T16130] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10922'. [ 809.589182][T16130] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10922'. [ 809.631044][T16135] FAULT_INJECTION: forcing a failure. [ 809.631044][T16135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.644194][T16135] CPU: 0 UID: 0 PID: 16135 Comm: syz.6.10923 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 809.644274][T16135] Tainted: [W]=WARN [ 809.644282][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.644403][T16135] Call Trace: [ 809.644410][T16135] [ 809.644418][T16135] __dump_stack+0x1d/0x30 [ 809.644448][T16135] dump_stack_lvl+0x95/0xd0 [ 809.644477][T16135] dump_stack+0x15/0x1b [ 809.644502][T16135] should_fail_ex+0x265/0x280 [ 809.644590][T16135] should_fail+0xb/0x20 [ 809.644640][T16135] should_fail_usercopy+0x1a/0x20 [ 809.644667][T16135] _copy_from_iter+0xcf/0xe70 [ 809.644700][T16135] ? __alloc_skb+0x396/0x4b0 [ 809.644726][T16135] ? __alloc_skb+0x228/0x4b0 [ 809.644775][T16135] netlink_sendmsg+0x471/0x6b0 [ 809.644831][T16135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.644870][T16135] __sock_sendmsg+0x145/0x180 [ 809.644893][T16135] ____sys_sendmsg+0x31e/0x4a0 [ 809.644999][T16135] ___sys_sendmsg+0x17b/0x1d0 [ 809.645050][T16135] __x64_sys_sendmsg+0xd4/0x160 [ 809.645129][T16135] x64_sys_call+0x17ba/0x3000 [ 809.645165][T16135] do_syscall_64+0xca/0x2b0 [ 809.645279][T16135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.645305][T16135] RIP: 0033:0x7fd2d94df749 [ 809.645322][T16135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.645345][T16135] RSP: 002b:00007fd2d7f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.645448][T16135] RAX: ffffffffffffffda RBX: 00007fd2d9735fa0 RCX: 00007fd2d94df749 [ 809.645465][T16135] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000005 [ 809.645480][T16135] RBP: 00007fd2d7f47090 R08: 0000000000000000 R09: 0000000000000000 [ 809.645495][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.645510][T16135] R13: 00007fd2d9736038 R14: 00007fd2d9735fa0 R15: 00007fff2d06f7b8 [ 809.645534][T16135] [ 809.876107][T16137] vlan0: entered allmulticast mode [ 809.881591][T16137] bridge_slave_0: entered allmulticast mode [ 810.385894][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10927'. [ 810.486292][T16151] lo speed is unknown, defaulting to 1000 [ 810.552738][T16174] veth2: entered promiscuous mode [ 810.558114][T16174] veth2: entered allmulticast mode [ 810.597479][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 810.597496][ T29] audit: type=1326 audit(2000008215.674:79733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.650843][ T29] audit: type=1326 audit(2000008215.674:79734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.675618][ T29] audit: type=1326 audit(2000008215.674:79735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.700123][ T29] audit: type=1326 audit(2000008215.674:79736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.724949][ T29] audit: type=1326 audit(2000008215.674:79737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.749841][ T29] audit: type=1326 audit(2000008215.674:79738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.773148][T16211] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10939'. [ 810.775900][ T29] audit: type=1326 audit(2000008215.674:79739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.807574][ T29] audit: type=1326 audit(2000008215.674:79740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.832430][ T29] audit: type=1326 audit(2000008215.674:79741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.856886][ T29] audit: type=1326 audit(2000008215.684:79742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16175 comm="syz.6.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 810.906125][T16214] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10940'. [ 810.958853][T16220] loop9: detected capacity change from 0 to 1024 [ 810.965687][T16220] EXT4-fs: inline encryption not supported [ 811.002914][T16220] EXT4-fs: Ignoring removed bh option [ 811.058721][T16220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.193118][T16240] loop8: detected capacity change from 0 to 128 [ 811.203684][T16240] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 811.216730][T16240] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.231378][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10943'. [ 811.241405][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10943'. [ 811.320042][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.392037][T16258] loop9: detected capacity change from 0 to 1024 [ 811.419847][T16258] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 811.430856][T16258] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 811.470939][T16258] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 811.493730][T16258] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 811.509924][T16258] EXT4-fs (loop9): mount failed [ 811.594274][T16251] lo speed is unknown, defaulting to 1000 [ 811.662898][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10949'. [ 811.807917][T13767] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 811.841481][T16289] netlink: 72 bytes leftover after parsing attributes in process `syz.8.10954'. [ 811.998975][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10955'. [ 812.008518][T16293] netlink: 'syz.8.10955': attribute type 30 has an invalid length. [ 812.017017][T16293] netlink: 'syz.8.10955': attribute type 29 has an invalid length. [ 812.226696][T16309] FAULT_INJECTION: forcing a failure. [ 812.226696][T16309] name failslab, interval 1, probability 0, space 0, times 0 [ 812.239533][T16309] CPU: 0 UID: 0 PID: 16309 Comm: syz.9.10962 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 812.239573][T16309] Tainted: [W]=WARN [ 812.239633][T16309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.239646][T16309] Call Trace: [ 812.239652][T16309] [ 812.239659][T16309] __dump_stack+0x1d/0x30 [ 812.239699][T16309] dump_stack_lvl+0x95/0xd0 [ 812.239728][T16309] dump_stack+0x15/0x1b [ 812.239818][T16309] should_fail_ex+0x265/0x280 [ 812.239847][T16309] should_failslab+0x8c/0xb0 [ 812.239943][T16309] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 812.239975][T16309] ? dup_task_struct+0x5b/0x950 [ 812.239999][T16309] dup_task_struct+0x5b/0x950 [ 812.240017][T16309] ? copy_process+0x36c/0x1ef0 [ 812.240114][T16309] copy_process+0x37d/0x1ef0 [ 812.240136][T16309] ? kstrtouint+0x76/0xc0 [ 812.240158][T16309] ? kstrtouint_from_user+0x9f/0xf0 [ 812.240184][T16309] ? 0xffffffff81000000 [ 812.240254][T16309] kernel_clone+0x16c/0x5c0 [ 812.240335][T16309] ? vfs_write+0x7e8/0x960 [ 812.240360][T16309] __x64_sys_clone+0xe6/0x120 [ 812.240395][T16309] x64_sys_call+0x12d0/0x3000 [ 812.240423][T16309] do_syscall_64+0xca/0x2b0 [ 812.240494][T16309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.240520][T16309] RIP: 0033:0x7fe877fef749 [ 812.240540][T16309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.240562][T16309] RSP: 002b:00007fe876a56fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 812.240626][T16309] RAX: ffffffffffffffda RBX: 00007fe878245fa0 RCX: 00007fe877fef749 [ 812.240640][T16309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 812.240654][T16309] RBP: 00007fe876a57090 R08: 0000000000000000 R09: 0000000000000000 [ 812.240669][T16309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 812.240682][T16309] R13: 00007fe878246038 R14: 00007fe878245fa0 R15: 00007fffc2483f78 [ 812.240703][T16309] [ 812.666592][T16335] random: crng reseeded on system resumption [ 812.727687][T16325] lo speed is unknown, defaulting to 1000 [ 813.254967][T16333] loop9: detected capacity change from 0 to 512 [ 813.316491][T16333] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.10965: EA inode hash validation failed [ 813.357354][T16333] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.10965: corrupted inode contents [ 813.388512][T16333] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.10965: mark_inode_dirty error [ 813.417606][T16333] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.10965: corrupted inode contents [ 813.429953][T16333] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #15: comm syz.9.10965: mark_inode_dirty error [ 813.442367][T16333] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #15: comm syz.9.10965: mark inode dirty (error -117) [ 813.458645][T16333] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 813.467913][T16333] EXT4-fs (loop9): 1 orphan inode deleted [ 813.474324][T16333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.596032][T16409] vlan0: entered allmulticast mode [ 813.601626][T16409] dummy0: entered allmulticast mode [ 813.796539][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.815421][T16429] ..@ÿ: renamed from bond_slave_0 (while UP) [ 813.966019][T16440] loop9: detected capacity change from 0 to 128 [ 813.987046][T16440] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 814.036196][T16440] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.069411][T16441] loop8: detected capacity change from 0 to 2048 [ 814.167770][T16441] loop8: p1 < > p4 [ 814.212464][T16441] loop8: p4 size 8388608 extends beyond EOD, truncated [ 814.522826][ T6498] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.575650][T16450] lo speed is unknown, defaulting to 1000 [ 814.625992][ T6498] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.643947][T16440] __nla_validate_parse: 4 callbacks suppressed [ 814.643966][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10999'. [ 814.671318][T16494] loop8: detected capacity change from 0 to 1024 [ 814.697413][ T6498] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.719079][T16494] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.770963][ T6498] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.826899][T16465] lo speed is unknown, defaulting to 1000 [ 814.861201][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.930257][T16450] chnl_net:caif_netlink_parms(): no params data found [ 814.971642][ T6498] bridge_slave_1: left allmulticast mode [ 814.977542][ T6498] bridge_slave_1: left promiscuous mode [ 814.983568][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.991854][ T6498] bridge_slave_0: left allmulticast mode [ 814.997592][ T6498] bridge_slave_0: left promiscuous mode [ 815.003616][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.084041][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11010'. [ 815.101838][T16641] serio: Serial port ptm0 [ 815.300186][T13767] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.372365][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 815.372395][ T29] audit: type=1400 audit(2000010780.682:80207): avc: denied { read write } for pid=16649 comm="syz.8.11012" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 815.403486][ T29] audit: type=1400 audit(2000010780.682:80208): avc: denied { open } for pid=16649 comm="syz.8.11012" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 815.428379][ T29] audit: type=1400 audit(2000010780.703:80209): avc: denied { ioctl } for pid=16649 comm="syz.8.11012" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 815.541081][ T6498] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 815.550877][ T6498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.561375][ T6498] bond0 (unregistering): Released all slaves [ 815.582228][ T9] syû: Port: 1 Link DOWN [ 815.585754][ T29] audit: type=1326 audit(2000010780.913:80210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 815.611654][ T29] audit: type=1326 audit(2000010780.934:80211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 815.660116][ T6498] tipc: Left network mode [ 815.677952][T16450] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.685216][T16450] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.723074][T16450] bridge_slave_0: entered allmulticast mode [ 815.730360][T16450] bridge_slave_0: entered promiscuous mode [ 815.738459][T16450] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.745850][T16450] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.753649][T16450] bridge_slave_1: entered allmulticast mode [ 815.760757][T16450] bridge_slave_1: entered promiscuous mode [ 815.793963][ T29] audit: type=1400 audit(2000010781.123:80212): avc: denied { create } for pid=16699 comm="syz.9.11014" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 815.835773][ T3420] hid_parser_main: 8 callbacks suppressed [ 815.835801][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.849714][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.857434][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.873267][ T29] audit: type=1400 audit(2000010781.165:80213): avc: denied { write } for pid=16699 comm="syz.9.11014" name="file0" dev="tmpfs" ino=2735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 815.897215][ T29] audit: type=1400 audit(2000010781.165:80214): avc: denied { open } for pid=16699 comm="syz.9.11014" path="/508/file0" dev="tmpfs" ino=2735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 815.921258][ T29] audit: type=1400 audit(2000010781.165:80215): avc: denied { ioctl } for pid=16699 comm="syz.9.11014" path="/508/file0" dev="tmpfs" ino=2735 ioctlcmd=0x4c08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 815.946878][ T6498] hsr_slave_0: left promiscuous mode [ 815.950666][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.960150][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.967888][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.975575][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.983311][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.991275][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 815.998996][ T3420] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 816.006834][ T6498] hsr_slave_1: left promiscuous mode [ 816.010766][ T3420] hid-generic 0000:0000:0000.00CD: hidraw0: HID v8.01 Device [syz0] on syz0 [ 816.025436][ T6498] veth1_vlan: left promiscuous mode [ 816.031003][ T6498] veth0_vlan: left promiscuous mode [ 816.130713][ T6498] team0 (unregistering): Port device team_slave_0 removed [ 816.146346][ T6490] smc: removing ib device syû [ 816.173216][T16727] loop8: detected capacity change from 0 to 512 [ 816.237619][T16450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.256361][T16727] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.279743][T16727] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.291393][ T29] audit: type=1400 audit(2000010781.659:80216): avc: denied { unlink } for pid=2162 comm="syz-executor" name="file0" dev="tmpfs" ino=2735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 816.318460][T16450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.414716][T16727] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11016'. [ 816.499476][T16450] team0: Port device team_slave_0 added [ 816.518132][T16450] team0: Port device team_slave_1 added [ 816.525476][T13767] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.598698][T16801] loop8: detected capacity change from 0 to 128 [ 816.617592][T16450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.624881][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.651907][T16450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.663997][T16801] EXT4-fs: Ignoring removed nobh option [ 816.664790][T16450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.677050][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.704077][T16450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.719154][T16801] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.731322][T16769] lo speed is unknown, defaulting to 1000 [ 816.760492][T16450] hsr_slave_0: entered promiscuous mode [ 816.767139][T16801] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 816.774933][T16450] hsr_slave_1: entered promiscuous mode [ 816.802317][T16450] debugfs: 'hsr0' already exists in 'hsr' [ 816.808119][T16450] Cannot create hsr debugfs directory [ 816.834143][T16801] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11021'. [ 816.853764][ T6498] IPVS: stop unused estimator thread 0... [ 816.886130][T13767] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.954483][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11023'. [ 816.975986][T16910] netlink: 152 bytes leftover after parsing attributes in process `syz.9.11024'. [ 817.077086][T16927] geneve1: entered promiscuous mode [ 817.082445][T16927] geneve1: entered allmulticast mode [ 817.103298][ T6490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.121235][ T6490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.130516][ T6490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.139579][ T6490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.634279][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11031'. [ 817.872243][T16450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 817.894317][T16450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 817.913262][T16450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 817.938656][T16450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 818.056370][T16450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.071126][T16955] loop8: detected capacity change from 0 to 512 [ 818.096490][T16955] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.11029: EA inode hash validation failed [ 818.097648][T16450] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.131664][T11820] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.139100][T11820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.154367][T11820] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.161863][T11820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.174206][T16955] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.11029: corrupted inode contents [ 818.190314][T16955] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.11029: mark_inode_dirty error [ 818.202262][T16955] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.11029: corrupted inode contents [ 818.216393][T16955] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #15: comm syz.8.11029: mark_inode_dirty error [ 818.235098][T16955] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #15: comm syz.8.11029: mark inode dirty (error -117) [ 818.248514][T16450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 818.253601][ T9] hid-generic 0000:0000:0000.00CE: hidraw0: HID v8.01 Device [syz0] on syz0 [ 818.324220][T16955] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 818.343333][T16955] EXT4-fs (loop8): 1 orphan inode deleted [ 818.346438][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11036'. [ 818.359028][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11036'. [ 818.360532][T16955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.383496][T16450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.529200][T16450] veth0_vlan: entered promiscuous mode [ 818.543251][T16450] veth1_vlan: entered promiscuous mode [ 818.569838][T16450] veth0_macvtap: entered promiscuous mode [ 818.579255][T16450] veth1_macvtap: entered promiscuous mode [ 818.614684][T16450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.627260][T17035] loop9: detected capacity change from 0 to 128 [ 818.645869][T16450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.664303][T17035] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 818.678067][T13767] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.692359][T17035] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.705805][T11820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.726854][T11820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.737196][T11820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.775050][ T6498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.919108][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 818.966329][T17044] lo speed is unknown, defaulting to 1000 [ 818.985594][T17064] loop9: detected capacity change from 0 to 512 [ 819.032274][T17064] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 819.055202][T17063] veth2: entered promiscuous mode [ 819.060374][T17063] veth2: entered allmulticast mode [ 819.081687][T17064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 819.090111][T17064] System zones: 1-12 [ 819.095139][T17064] EXT4-fs (loop9): 1 truncate cleaned up [ 819.120198][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11041'. [ 819.131302][T17064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.224545][T17103] FAULT_INJECTION: forcing a failure. [ 819.224545][T17103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.238348][T17103] CPU: 1 UID: 0 PID: 17103 Comm: syz.2.11048 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 819.238405][T17103] Tainted: [W]=WARN [ 819.238414][T17103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.238431][T17103] Call Trace: [ 819.238439][T17103] [ 819.238450][T17103] __dump_stack+0x1d/0x30 [ 819.238544][T17103] dump_stack_lvl+0x95/0xd0 [ 819.238567][T17103] dump_stack+0x15/0x1b [ 819.238598][T17103] should_fail_ex+0x265/0x280 [ 819.238623][T17103] should_fail+0xb/0x20 [ 819.238644][T17103] should_fail_usercopy+0x1a/0x20 [ 819.238678][T17103] _copy_to_user+0x20/0xa0 [ 819.238707][T17103] simple_read_from_buffer+0xb5/0x130 [ 819.238731][T17103] proc_fail_nth_read+0x10e/0x150 [ 819.238832][T17103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.238862][T17103] vfs_read+0x1a8/0x770 [ 819.238933][T17103] ? __rcu_read_unlock+0x4f/0x70 [ 819.238955][T17103] ? __fget_files+0x184/0x1c0 [ 819.238979][T17103] ? mutex_lock+0x58/0x90 [ 819.239009][T17103] ksys_read+0xda/0x1a0 [ 819.239030][T17103] __x64_sys_read+0x40/0x50 [ 819.239116][T17103] x64_sys_call+0x2889/0x3000 [ 819.239146][T17103] do_syscall_64+0xca/0x2b0 [ 819.239189][T17103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.239264][T17103] RIP: 0033:0x7f48c5bbe15c [ 819.239283][T17103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 819.239304][T17103] RSP: 002b:00007f48c4627030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 819.239328][T17103] RAX: ffffffffffffffda RBX: 00007f48c5e15fa0 RCX: 00007f48c5bbe15c [ 819.239407][T17103] RDX: 000000000000000f RSI: 00007f48c46270a0 RDI: 0000000000000006 [ 819.239422][T17103] RBP: 00007f48c4627090 R08: 0000000000000000 R09: 0000000000000000 [ 819.239438][T17103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.239452][T17103] R13: 00007f48c5e16038 R14: 00007f48c5e15fa0 R15: 00007fffe7464708 [ 819.239475][T17103] [ 819.506133][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.617559][T17123] loop8: detected capacity change from 0 to 512 [ 819.635295][T17123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.648033][T17123] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.667634][T17114] lo speed is unknown, defaulting to 1000 [ 819.704889][T13767] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.060856][T17164] lo speed is unknown, defaulting to 1000 [ 820.368157][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 820.368173][ T29] audit: type=1400 audit(2000010785.922:80522): avc: denied { setopt } for pid=17200 comm="syz.2.11066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 820.395562][ T29] audit: type=1400 audit(2000010785.922:80523): avc: denied { write } for pid=17200 comm="syz.2.11066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 820.677030][T17211] netlink: 92 bytes leftover after parsing attributes in process `syz.8.11068'. [ 820.705401][T17212] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11069'. [ 820.708729][T17211] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11068'. [ 820.715230][T17212] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11069'. [ 820.784691][ T29] audit: type=1400 audit(2000010786.363:80524): avc: denied { unmount } for pid=12226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 820.806573][T17213] lo speed is unknown, defaulting to 1000 [ 820.898999][ T29] audit: type=1400 audit(2000010786.479:80525): avc: denied { create } for pid=17242 comm="syz.6.11073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 820.942280][T17248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11074'. [ 821.281294][ T29] audit: type=1326 audit(2000010786.899:80526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.9.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 crond[3105]: time disparity of 1[ 821.311759][ T29] audit: type=1326 audit(2000010786.920:80527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.9.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 29 minutes detected [ 821.341151][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11075'. [ 821.396045][ T29] audit: type=1326 audit(2000010787.014:80528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.9.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 821.420867][ T29] audit: type=1326 audit(2000010787.014:80529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.9.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 821.445521][ T29] audit: type=1326 audit(2000010787.014:80530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.9.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 821.470230][ T29] audit: type=1326 audit(2000010787.014:80531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.9.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 821.749946][T17273] netlink: 72 bytes leftover after parsing attributes in process `syz.6.11081'. [ 821.769468][T17275] netlink: 19 bytes leftover after parsing attributes in process `syz.8.11082'. [ 821.922579][T17266] lo speed is unknown, defaulting to 1000 [ 822.024010][T17283] lo speed is unknown, defaulting to 1000 [ 822.202824][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11087'. [ 822.212077][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11087'. [ 822.330515][T17251] loop9: detected capacity change from 0 to 512 [ 822.372216][T17251] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.11065: EA inode hash validation failed [ 822.385419][T17251] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.11065: corrupted inode contents [ 822.397876][T17251] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.11065: mark_inode_dirty error [ 822.436071][T17251] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.11065: corrupted inode contents [ 822.476104][T17350] bridge: RTM_NEWNEIGH with invalid ether address [ 822.482370][T17251] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #15: comm syz.9.11065: mark_inode_dirty error [ 822.508807][T17251] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #15: comm syz.9.11065: mark inode dirty (error -117) [ 822.528973][T17355] loop8: detected capacity change from 0 to 512 [ 822.538472][T17251] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 822.548248][T17251] EXT4-fs (loop9): 1 orphan inode deleted [ 822.572234][T17355] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.11095: error while reading EA inode 32 err=-116 [ 822.589244][T17251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.603870][T17355] EXT4-fs (loop8): Remounting filesystem read-only [ 822.610422][T17355] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 822.621099][T17355] EXT4-fs (loop8): 1 orphan inode deleted [ 822.627364][T17355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.765191][T17370] lo speed is unknown, defaulting to 1000 [ 823.261859][T17438] rtc_cmos 00:00: Alarms can be up to one day in the future [ 823.514706][T17450] lo speed is unknown, defaulting to 1000 [ 823.617470][T17478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17478 comm=syz.3.11123 [ 823.873172][T17508] FAULT_INJECTION: forcing a failure. [ 823.873172][T17508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.887333][T17508] CPU: 1 UID: 0 PID: 17508 Comm: syz.6.11130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 823.887440][T17508] Tainted: [W]=WARN [ 823.887449][T17508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 823.887465][T17508] Call Trace: [ 823.887472][T17508] [ 823.887481][T17508] __dump_stack+0x1d/0x30 [ 823.887513][T17508] dump_stack_lvl+0x95/0xd0 [ 823.887604][T17508] dump_stack+0x15/0x1b [ 823.887627][T17508] should_fail_ex+0x265/0x280 [ 823.887736][T17508] should_fail+0xb/0x20 [ 823.887773][T17508] should_fail_usercopy+0x1a/0x20 [ 823.887800][T17508] _copy_from_user+0x1c/0xb0 [ 823.887832][T17508] __se_sys_add_key+0x20e/0x350 [ 823.887995][T17508] __x64_sys_add_key+0x67/0x80 [ 823.888032][T17508] x64_sys_call+0x2ea3/0x3000 [ 823.888063][T17508] do_syscall_64+0xca/0x2b0 [ 823.888121][T17508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.888215][T17508] RIP: 0033:0x7fd2d94df749 [ 823.888231][T17508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.888251][T17508] RSP: 002b:00007fd2d7f47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 823.888340][T17508] RAX: ffffffffffffffda RBX: 00007fd2d9735fa0 RCX: 00007fd2d94df749 [ 823.888354][T17508] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 823.888367][T17508] RBP: 00007fd2d7f47090 R08: ffffffffffffffff R09: 0000000000000000 [ 823.888380][T17508] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 823.888392][T17508] R13: 00007fd2d9736038 R14: 00007fd2d9735fa0 R15: 00007fff2d06f7b8 [ 823.888413][T17508] [ 824.082303][T17510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.106835][T17510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.116360][T17510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.125172][T17510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.152178][ T8311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 824.159985][ T8311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 824.167757][ T8311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 824.175519][ T8311] rtc_cmos 00:00: Alarms can be up to one day in the future [ 824.182896][ T8311] rtc rtc0: __rtc_set_alarm: err=-22 [ 824.207969][T17519] netlink: 'syz.3.11133': attribute type 10 has an invalid length. [ 824.351297][T17538] tipc: Started in network mode [ 824.356427][T17538] tipc: Node identity 9e42a1d005fb, cluster identity 4711 [ 824.363986][T17538] tipc: Enabled bearer , priority 0 [ 824.372428][T17545] loop9: detected capacity change from 0 to 128 [ 824.390778][T17538] syzkaller0: entered promiscuous mode [ 824.397246][T17538] syzkaller0: entered allmulticast mode [ 824.414622][T17545] EXT4-fs mount: 2 callbacks suppressed [ 824.414640][T17545] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 824.433297][T17545] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.446593][T17538] tipc: Resetting bearer [ 824.482044][T17538] netlink: 'syz.2.11140': attribute type 1 has an invalid length. [ 824.500356][T17540] lo speed is unknown, defaulting to 1000 [ 824.526239][T17538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55568 sclass=netlink_route_socket pid=17538 comm=syz.2.11140 [ 824.545984][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.577403][T17537] tipc: Resetting bearer [ 824.595683][T17537] tipc: Disabling bearer [ 824.780073][T17589] loop8: detected capacity change from 0 to 2048 [ 824.822690][T17589] loop8: p1 < > p4 [ 824.842543][T17589] loop8: p4 size 8388608 extends beyond EOD, truncated [ 824.980986][T17614] bridge6: entered allmulticast mode [ 824.988520][T17620] random: crng reseeded on system resumption [ 825.063813][ T3420] hid_parser_main: 54 callbacks suppressed [ 825.063845][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.077917][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.085723][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.105870][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.113727][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.121523][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.129317][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.137143][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.145002][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.153032][ T3420] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 825.200638][ T3420] hid-generic 0000:0000:0000.00CF: hidraw0: HID v8.01 Device [syz0] on syz0 [ 825.230014][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 825.230044][ T29] audit: type=1400 audit(2000015911.036:80703): avc: denied { read } for pid=17630 comm="syz.2.11157" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.358864][ T29] audit: type=1400 audit(2000015911.036:80704): avc: denied { open } for pid=17630 comm="syz.2.11157" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.383321][ T29] audit: type=1400 audit(2000015911.036:80705): avc: denied { ioctl } for pid=17630 comm="syz.2.11157" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.409126][ T29] audit: type=1400 audit(2000015911.089:80706): avc: denied { write } for pid=17630 comm="syz.2.11157" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 825.433119][ T29] audit: type=1326 audit(2000015911.099:80707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 825.457799][ T29] audit: type=1326 audit(2000015911.099:80708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd2d94df807 code=0x7ffc0000 [ 825.482208][ T29] audit: type=1326 audit(2000015911.099:80709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 825.506840][ T29] audit: type=1326 audit(2000015911.099:80710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2d9496bdd code=0x7ffc0000 [ 825.531824][ T29] audit: type=1326 audit(2000015911.099:80711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd2d9513e89 code=0x7ffc0000 [ 825.556509][ T29] audit: type=1326 audit(2000015911.099:80712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.11150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2d9496c47 code=0x7ffc0000 [ 825.601948][T17661] __nla_validate_parse: 12 callbacks suppressed [ 825.601963][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11160'. [ 825.690572][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11150'. [ 825.727092][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.736284][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.771172][ T6511] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.795908][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.830062][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.839190][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.854472][ T6511] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.889864][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.935369][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.944450][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11163'. [ 825.957812][ T6511] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.000966][T17674] lo speed is unknown, defaulting to 1000 [ 826.006973][T17691] ..@ÿ: renamed from bond_slave_0 (while UP) [ 826.035814][ T6511] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.075343][T17689] netlink: '+}[@': attribute type 13 has an invalid length. [ 826.088645][T17689] gretap0: refused to change device tx_queue_len [ 826.095602][T17689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 826.129366][T17694] netlink: 'syz.3.11168': attribute type 4 has an invalid length. [ 826.389400][ T6511] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 826.407629][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.428435][ T6511] bond0 (unregistering): Released all slaves [ 826.510588][T17745] bridge0: port 3(gretap0) entered blocking state [ 826.517094][T17745] bridge0: port 3(gretap0) entered disabled state [ 826.523968][T17745] gretap0: entered allmulticast mode [ 826.533019][T17745] gretap0: entered promiscuous mode [ 826.538802][T17745] bridge0: port 3(gretap0) entered blocking state [ 826.545289][T17745] bridge0: port 3(gretap0) entered forwarding state [ 826.587514][T17683] lo speed is unknown, defaulting to 1000 [ 826.650397][ T6511] hsr_slave_0: left promiscuous mode [ 826.670824][ T6511] hsr_slave_1: left promiscuous mode [ 826.686463][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.693921][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.713185][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.720641][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.804938][ T6511] veth1_macvtap: left promiscuous mode [ 826.810469][ T6511] veth0_macvtap: left promiscuous mode [ 826.823751][T17766] loop9: detected capacity change from 0 to 512 [ 826.834114][ T6511] veth1_vlan: left promiscuous mode [ 826.839378][ T6511] veth0_vlan: left promiscuous mode [ 826.842897][T17766] EXT4-fs: Ignoring removed mblk_io_submit option [ 826.863140][T17766] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 826.890119][T17766] EXT4-fs (loop9): 1 truncate cleaned up [ 826.901700][T17766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.098169][ T6511] team0 (unregistering): Port device team_slave_0 removed [ 827.110548][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.158928][ T6511] team0 (unregistering): Port device dummy0 removed [ 827.203869][T17777] syzkaller0: entered promiscuous mode [ 827.209381][T17777] syzkaller0: entered allmulticast mode [ 827.229204][T17778] bridge7: entered promiscuous mode [ 827.234504][T17778] bridge7: entered allmulticast mode [ 827.424189][T17683] chnl_net:caif_netlink_parms(): no params data found [ 827.512304][T17912] bridge1: entered allmulticast mode [ 827.619706][T17878] lo speed is unknown, defaulting to 1000 [ 827.626301][T17683] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.633906][T17683] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.653181][T17683] bridge_slave_0: entered allmulticast mode [ 827.668898][T17683] bridge_slave_0: entered promiscuous mode [ 827.704743][T17683] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.711897][T17683] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.726873][T17683] bridge_slave_1: entered allmulticast mode [ 827.733942][T17683] bridge_slave_1: entered promiscuous mode [ 827.796751][T17683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.809251][T17683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.852048][T17683] team0: Port device team_slave_0 added [ 827.862184][T17683] team0: Port device team_slave_1 added [ 827.882265][T17683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.889322][T17683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.915386][T17683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.927332][T17683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.934315][T17683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.960391][T17683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.034908][T17683] hsr_slave_0: entered promiscuous mode [ 828.041462][T17683] hsr_slave_1: entered promiscuous mode [ 828.047583][T17683] debugfs: 'hsr0' already exists in 'hsr' [ 828.053433][T17683] Cannot create hsr debugfs directory [ 828.276021][T18165] loop9: detected capacity change from 0 to 1024 [ 828.283668][T18165] EXT4-fs: Ignoring removed mblk_io_submit option [ 828.290913][T18165] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 828.317805][T18165] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.11195: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 828.338727][T18165] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.11195: couldn't read orphan inode 11 (err -117) [ 828.357111][T18165] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.382742][T18165] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.11195: Invalid block bitmap block 0 in block_group 0 [ 828.404037][T18165] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.11195: Failed to acquire dquot type 0 [ 828.433672][T18165] FAULT_INJECTION: forcing a failure. [ 828.433672][T18165] name failslab, interval 1, probability 0, space 0, times 0 [ 828.447007][T18165] CPU: 1 UID: 0 PID: 18165 Comm: syz.9.11195 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 828.447049][T18165] Tainted: [W]=WARN [ 828.447058][T18165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 828.447075][T18165] Call Trace: [ 828.447082][T18165] [ 828.447091][T18165] __dump_stack+0x1d/0x30 [ 828.447133][T18165] dump_stack_lvl+0x95/0xd0 [ 828.447162][T18165] dump_stack+0x15/0x1b [ 828.447188][T18165] should_fail_ex+0x265/0x280 [ 828.447218][T18165] should_failslab+0x8c/0xb0 [ 828.447361][T18165] kmem_cache_alloc_noprof+0x69/0x4b0 [ 828.447391][T18165] ? getname_flags+0x80/0x3b0 [ 828.447447][T18165] getname_flags+0x80/0x3b0 [ 828.447479][T18165] __se_sys_quotactl+0x16a/0x670 [ 828.447505][T18165] ? fput+0x8f/0xc0 [ 828.447542][T18165] __x64_sys_quotactl+0x55/0x70 [ 828.447589][T18165] x64_sys_call+0x19a4/0x3000 [ 828.447621][T18165] do_syscall_64+0xca/0x2b0 [ 828.447664][T18165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.447742][T18165] RIP: 0033:0x7fe877fef749 [ 828.447765][T18165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.447790][T18165] RSP: 002b:00007fe876a57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 828.447895][T18165] RAX: ffffffffffffffda RBX: 00007fe878245fa0 RCX: 00007fe877fef749 [ 828.447911][T18165] RDX: 0000000000000000 RSI: 0000200000005bc0 RDI: ffffffff80000800 [ 828.447928][T18165] RBP: 00007fe876a57090 R08: 0000000000000000 R09: 0000000000000000 [ 828.447945][T18165] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 828.448041][T18165] R13: 00007fe878246038 R14: 00007fe878245fa0 R15: 00007fffc2483f78 [ 828.448068][T18165] [ 828.682265][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.726758][T17683] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 828.756280][T17683] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 828.769745][T17683] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 828.785619][T17683] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 828.832523][T18224] FAULT_INJECTION: forcing a failure. [ 828.832523][T18224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.845719][T18224] CPU: 0 UID: 0 PID: 18224 Comm: syz.9.11206 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 828.845752][T18224] Tainted: [W]=WARN [ 828.845761][T18224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 828.845777][T18224] Call Trace: [ 828.845805][T18224] [ 828.845815][T18224] __dump_stack+0x1d/0x30 [ 828.845845][T18224] dump_stack_lvl+0x95/0xd0 [ 828.845930][T18224] dump_stack+0x15/0x1b [ 828.845954][T18224] should_fail_ex+0x265/0x280 [ 828.845984][T18224] should_fail+0xb/0x20 [ 828.846009][T18224] should_fail_usercopy+0x1a/0x20 [ 828.846057][T18224] _copy_from_user+0x1c/0xb0 [ 828.846091][T18224] ___sys_sendmsg+0xc1/0x1d0 [ 828.846136][T18224] __x64_sys_sendmsg+0xd4/0x160 [ 828.846178][T18224] x64_sys_call+0x17ba/0x3000 [ 828.846264][T18224] do_syscall_64+0xca/0x2b0 [ 828.846301][T18224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.846321][T18224] RIP: 0033:0x7fe877fef749 [ 828.846337][T18224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.846437][T18224] RSP: 002b:00007fe876a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.846530][T18224] RAX: ffffffffffffffda RBX: 00007fe878245fa0 RCX: 00007fe877fef749 [ 828.846571][T18224] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 828.846585][T18224] RBP: 00007fe876a57090 R08: 0000000000000000 R09: 0000000000000000 [ 828.846680][T18224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.846695][T18224] R13: 00007fe878246038 R14: 00007fe878245fa0 R15: 00007fffc2483f78 [ 828.846717][T18224] [ 829.030021][T17683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.084303][T17683] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.103875][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.111069][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.123296][T18230] netlink: zone id is out of range [ 829.128933][T18230] netlink: zone id is out of range [ 829.164617][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.171768][ T6494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.180174][T18230] netlink: zone id is out of range [ 829.203074][T18230] netlink: del zone limit has 8 unknown bytes [ 829.322577][T17683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.442232][T17683] veth0_vlan: entered promiscuous mode [ 829.455923][T17683] veth1_vlan: entered promiscuous mode [ 829.476906][T17683] veth0_macvtap: entered promiscuous mode [ 829.486887][T17683] veth1_macvtap: entered promiscuous mode [ 829.501626][T17683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.515547][T17683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.529547][ T6498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.541505][ T6498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.593864][ T6498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.614920][T18261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18261 comm=syz.6.11215 [ 829.627693][T18261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18261 comm=syz.6.11215 [ 829.643568][ T6498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.683134][T18264] loop9: detected capacity change from 0 to 512 [ 829.696084][T18264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 829.756873][T18264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.772564][T18264] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 829.787079][T18277] block device autoloading is deprecated and will be removed. [ 829.798699][T18264] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #18: comm +}[@: corrupted inode contents [ 829.839173][T18264] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #18: comm +}[@: mark_inode_dirty error [ 829.890190][ T3961] hid_parser_main: 22 callbacks suppressed [ 829.890220][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 829.904108][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 829.911912][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 829.926834][T18264] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #18: comm +}[@: corrupted inode contents [ 829.953292][T18264] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #18: comm +}[@: mark_inode_dirty error [ 829.965430][T18264] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #18: comm +}[@: mark inode dirty (error -117) [ 829.988965][T18264] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 830.000167][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 830.007928][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 830.015759][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 830.023498][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 830.031309][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 830.038986][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 830.046809][ T3961] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 830.059982][ T3961] hid-generic 0000:0000:0000.00D0: hidraw0: HID v8.01 Device [syz0] on syz0 [ 830.091629][T18282] lo speed is unknown, defaulting to 1000 [ 830.111159][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.290975][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 830.291003][ T29] audit: type=1400 audit(2000018476.357:81193): avc: denied { remount } for pid=18329 comm="syz.3.11223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 830.335197][ T29] audit: type=1326 audit(2000018476.389:81194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.359735][ T29] audit: type=1326 audit(2000018476.389:81195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.384365][ T29] audit: type=1326 audit(2000018476.389:81196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.409034][ T29] audit: type=1326 audit(2000018476.389:81197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.433743][ T29] audit: type=1326 audit(2000018476.389:81198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.458348][ T29] audit: type=1326 audit(2000018476.389:81199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.482954][ T29] audit: type=1326 audit(2000018476.389:81200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.516568][ T29] audit: type=1326 audit(2000018476.399:81201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.541190][ T29] audit: type=1326 audit(2000018476.399:81202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.3.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efedac5f749 code=0x7ffc0000 [ 830.632206][T18343] __nla_validate_parse: 13 callbacks suppressed [ 830.632224][T18343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11228'. [ 830.752596][T18349] veth4: entered promiscuous mode [ 830.758210][T18349] veth4: entered allmulticast mode [ 830.839106][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11219'. [ 830.906066][T18347] lo speed is unknown, defaulting to 1000 [ 830.961868][T18392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11237'. [ 830.971032][T18392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11237'. [ 831.019153][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11226'. [ 832.681639][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11248'. [ 833.183389][T18458] netlink: 'syz.1.11251': attribute type 4 has an invalid length. [ 833.197323][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11250'. [ 833.206850][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11250'. [ 833.274860][T18460] ..@ÿ: renamed from bond_slave_0 (while UP) [ 833.362462][T18460] loop9: detected capacity change from 0 to 2048 [ 833.443647][T18460] loop9: p1 < > p4 [ 833.496340][T18460] loop9: p4 size 8388608 extends beyond EOD, truncated [ 833.732132][T18487] veth6: entered promiscuous mode [ 833.737599][T18487] veth6: entered allmulticast mode [ 834.002277][T18463] lo speed is unknown, defaulting to 1000 [ 834.109012][T18503] lo speed is unknown, defaulting to 1000 [ 834.153580][T18508] lo speed is unknown, defaulting to 1000 [ 834.275628][T18572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11264'. [ 834.285409][T18572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11264'. [ 834.561096][T18597] loop9: detected capacity change from 0 to 128 [ 834.590686][T18597] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 834.611063][T18597] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.778117][T18605] veth2: entered promiscuous mode [ 834.783410][T18605] veth2: entered allmulticast mode [ 834.980634][T18630] netlink: 'syz.1.11276': attribute type 4 has an invalid length. [ 835.002421][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 835.055155][T18636] loop9: detected capacity change from 0 to 128 [ 835.082234][T18636] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 835.111381][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 835.111410][ T29] audit: type=1326 audit(2000023601.409:81796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd2d94df807 code=0x7ffc0000 [ 835.142431][ T29] audit: type=1326 audit(2000023601.409:81797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2d9496bdd code=0x7ffc0000 [ 835.145758][T18636] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.169395][ T29] audit: type=1326 audit(2000023601.409:81798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd2d9513e89 code=0x7ffc0000 [ 835.201747][ T29] audit: type=1326 audit(2000023601.409:81799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2d9496c47 code=0x7ffc0000 [ 835.226298][ T29] audit: type=1326 audit(2000023601.409:81800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 835.250868][ T29] audit: type=1326 audit(2000023601.409:81801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 835.275401][ T29] audit: type=1326 audit(2000023601.409:81802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd2d9496357 code=0x7ffc0000 [ 835.300089][ T29] audit: type=1326 audit(2000023601.409:81803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd2d94963b6 code=0x7ffc0000 [ 835.324637][ T29] audit: type=1326 audit(2000023601.409:81804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2d94df34b code=0x7ffc0000 [ 835.349130][ T29] audit: type=1326 audit(2000023601.409:81805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18615 comm="syz.6.11274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd2d94df749 code=0x7ffc0000 [ 835.400487][T18645] __nla_validate_parse: 3 callbacks suppressed [ 835.400504][T18645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11279'. [ 835.415949][T18645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11279'. [ 835.494316][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 835.589524][T18659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.610438][T18659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.824562][T18676] program syz.1.11287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 835.886450][T18679] loop9: detected capacity change from 0 to 128 [ 835.896136][T18679] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 835.909774][T18679] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.978144][T18684] veth4: entered promiscuous mode [ 835.983255][T18684] veth4: entered allmulticast mode [ 836.007975][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11291'. [ 836.017536][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11291'. [ 836.196219][T18700] lo speed is unknown, defaulting to 1000 [ 836.393887][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11289'. [ 836.557608][T18752] gretap0: left allmulticast mode [ 836.562815][T18752] gretap0: left promiscuous mode [ 836.568028][T18752] bridge0: port 3(gretap0) entered disabled state [ 836.580375][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 836.651043][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11294'. [ 836.660418][T18758] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11303'. [ 836.669526][T18758] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11303'. [ 836.847857][T18768] veth4: entered promiscuous mode [ 836.852947][T18768] veth4: entered allmulticast mode [ 836.871297][ T8311] hid_parser_main: 22 callbacks suppressed [ 836.871319][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.884653][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.892109][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.905912][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11300'. [ 836.918276][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.925740][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.933271][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.940737][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.948364][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.955801][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.963258][ T8311] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 836.994330][T18787] ..@ÿ: renamed from bond_slave_0 [ 837.008758][ T8311] hid-generic 0000:0000:0000.00D1: hidraw0: HID v8.01 Device [syz0] on syz0 [ 837.855371][T18830] loop9: detected capacity change from 0 to 128 [ 837.894460][T18830] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 837.946099][T18830] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.121675][T18840] lo speed is unknown, defaulting to 1000 [ 838.149606][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 838.642289][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11334'. [ 838.807417][T18907] tipc: Enabling of bearer rejected, failed to enable media [ 838.939624][T18913] lo speed is unknown, defaulting to 1000 [ 839.214575][T18954] netlink: '+}[@': attribute type 13 has an invalid length. [ 839.228089][T18954] gretap0: refused to change device tx_queue_len [ 839.241151][T18954] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 839.287028][T18957] netlink: 'syz.2.11349': attribute type 4 has an invalid length. [ 839.441917][ T8311] hid-generic 0000:0000:0000.00D2: hidraw0: HID v8.01 Device [syz0] on syz0 [ 839.498655][T18975] loop9: detected capacity change from 0 to 512 [ 839.528150][T18975] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 839.548134][T18975] EXT4-fs (loop9): orphan cleanup on readonly fs [ 839.560958][T18975] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.11353: bad orphan inode 15 [ 839.575231][T18982] veth2: entered promiscuous mode [ 839.580721][T18982] veth2: entered allmulticast mode [ 839.657539][T18975] ext4_test_bit(bit=14, block=18) = 1 [ 839.663189][T18975] is_bad_inode(inode)=0 [ 839.667554][T18975] NEXT_ORPHAN(inode)=1023 [ 839.672135][T18975] max_ino=32 [ 839.675658][T18975] i_nlink=0 [ 839.696042][T18998] tipc: Started in network mode [ 839.701222][T18998] tipc: Node identity 22b0c07803f7, cluster identity 4711 [ 839.708938][T18998] tipc: Enabled bearer , priority 0 [ 839.735648][T18975] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2971: inode #15: comm syz.9.11353: corrupted xattr block 19: e_value size too large [ 839.760762][T19007] syzkaller0: entered promiscuous mode [ 839.766472][T19007] syzkaller0: entered allmulticast mode [ 839.777045][T18998] tipc: Resetting bearer [ 839.784234][T18997] tipc: Resetting bearer [ 839.791711][T18997] tipc: Disabling bearer [ 839.797825][T18975] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 839.807970][T18975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 839.881890][ T2162] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.915799][ T29] kauditd_printk_skb: 893 callbacks suppressed [ 839.915817][ T29] audit: type=1326 audit(2000028726.460:82699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 839.965125][T19023] loop9: detected capacity change from 0 to 128 [ 839.968917][T19009] lo speed is unknown, defaulting to 1000 [ 839.981328][T19026] netlink: 'syz.6.11362': attribute type 13 has an invalid length. [ 839.996184][ T29] audit: type=1326 audit(2000028726.491:82700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.019981][ T29] audit: type=1326 audit(2000028726.491:82701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.043691][ T29] audit: type=1326 audit(2000028726.502:82702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.067551][ T29] audit: type=1326 audit(2000028726.502:82703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.091314][ T29] audit: type=1326 audit(2000028726.502:82704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.115044][ T29] audit: type=1326 audit(2000028726.502:82705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.138774][ T29] audit: type=1326 audit(2000028726.502:82706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.162594][ T29] audit: type=1326 audit(2000028726.502:82707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.186404][ T29] audit: type=1326 audit(2000028726.502:82708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.9.11363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 840.214897][T19026] gretap0: refused to change device tx_queue_len [ 840.222420][T19023] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 840.246810][T19026] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 840.273757][T19023] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 840.538998][T19032] __nla_validate_parse: 3 callbacks suppressed [ 840.539088][T19032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11364'. [ 840.746157][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11363'. [ 840.840275][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11368'. [ 840.850318][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11366'. [ 840.904168][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 841.052733][T19083] tipc: Started in network mode [ 841.057976][T19083] tipc: Node identity fa548d3c09bd, cluster identity 4711 [ 841.065526][T19083] tipc: Enabled bearer , priority 0 [ 841.084803][T19083] syzkaller0: entered promiscuous mode [ 841.090717][T19083] syzkaller0: entered allmulticast mode [ 841.134098][T19083] tipc: Resetting bearer [ 841.141003][T19082] tipc: Resetting bearer [ 841.159088][T19082] tipc: Disabling bearer [ 841.271589][ T8311] hid-generic 0000:0000:0000.00D3: hidraw0: HID v8.01 Device [syz0] on syz0 [ 841.279117][T19101] netlink: '+}[@': attribute type 13 has an invalid length. [ 841.293074][T19101] gretap0: refused to change device tx_queue_len [ 841.303890][T19101] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 841.324164][T19087] lo speed is unknown, defaulting to 1000 [ 841.354427][T19115] netlink: 'syz.6.11375': attribute type 4 has an invalid length. [ 841.376917][T19117] veth6: entered promiscuous mode [ 841.382079][T19117] veth6: entered allmulticast mode [ 841.505334][ T6542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.568973][ T6542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.744218][ T6542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.789801][T19160] lo speed is unknown, defaulting to 1000 [ 841.799079][ T6542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.991348][ T6542] bridge_slave_1: left allmulticast mode [ 841.997497][ T6542] bridge_slave_1: left promiscuous mode [ 842.003756][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.027350][ T6542] bridge_slave_0: left allmulticast mode [ 842.033308][ T6542] bridge_slave_0: left promiscuous mode [ 842.039363][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.104515][T19288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11385'. [ 842.219718][ T6542] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 842.229398][ T6542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.239012][ T6542] bond0 (unregistering): Released all slaves [ 842.248393][ T6542] bond1 (unregistering): Released all slaves [ 842.264549][T19295] tipc: Enabled bearer , priority 0 [ 842.280276][T19160] chnl_net:caif_netlink_parms(): no params data found [ 842.293361][T19290] syzkaller0: entered promiscuous mode [ 842.299167][T19290] syzkaller0: entered allmulticast mode [ 842.321232][ T6542] tipc: Disabling bearer [ 842.323607][ T4307] hid_parser_main: 86 callbacks suppressed [ 842.323692][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.326583][ T6542] tipc: Left network mode [ 842.330880][T19290] tipc: Resetting bearer [ 842.333238][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.358454][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.366441][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.374415][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.382176][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.389932][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.397741][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.405435][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.413157][ T4307] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 842.422192][ T4307] hid-generic 0000:0000:0000.00D4: hidraw0: HID v8.01 Device [syz0] on syz0 [ 842.437124][T19289] tipc: Resetting bearer [ 842.448449][T19289] tipc: Disabling bearer [ 842.581219][ T6542] hsr_slave_0: left promiscuous mode [ 842.587474][ T6542] hsr_slave_1: left promiscuous mode [ 842.599127][ T6542] pim6reg (unregistering): left allmulticast mode [ 842.674627][ T6542] team0 (unregistering): Port device team_slave_0 removed [ 842.718525][T19160] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.725720][T19160] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.733917][T19352] netlink: '+}[@': attribute type 4 has an invalid length. [ 842.741405][T19160] bridge_slave_0: entered allmulticast mode [ 842.743441][T19388] loop9: detected capacity change from 0 to 128 [ 842.748953][T19160] bridge_slave_0: entered promiscuous mode [ 842.776605][T19388] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 842.777172][T19160] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.796305][T19160] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.803505][T19388] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.917244][T19160] bridge_slave_1: entered allmulticast mode [ 842.928609][T19160] bridge_slave_1: entered promiscuous mode [ 842.938310][T19405] netlink: 'syz.6.11398': attribute type 4 has an invalid length. [ 842.950992][T19405] netlink: 'syz.6.11398': attribute type 4 has an invalid length. [ 842.977512][T19381] lo speed is unknown, defaulting to 1000 [ 843.037434][T19160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.049954][ T6542] IPVS: stop unused estimator thread 0... [ 843.070185][T19160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.090988][T19455] tipc: Enabled bearer , priority 0 [ 843.133384][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11395'. [ 843.148997][T19455] syzkaller0: entered promiscuous mode [ 843.154559][T19455] syzkaller0: entered allmulticast mode [ 843.170277][T19160] team0: Port device team_slave_0 added [ 843.193660][T19160] team0: Port device team_slave_1 added [ 843.207460][T19455] tipc: Resetting bearer [ 843.216320][T19494] FAULT_INJECTION: forcing a failure. [ 843.216320][T19494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.229596][T19494] CPU: 0 UID: 0 PID: 19494 Comm: syz.6.11405 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 843.229636][T19494] Tainted: [W]=WARN [ 843.229643][T19494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 843.229658][T19494] Call Trace: [ 843.229667][T19494] [ 843.229677][T19494] __dump_stack+0x1d/0x30 [ 843.229716][T19494] dump_stack_lvl+0x95/0xd0 [ 843.229745][T19494] dump_stack+0x15/0x1b [ 843.229766][T19494] should_fail_ex+0x265/0x280 [ 843.229852][T19494] should_fail+0xb/0x20 [ 843.229874][T19494] should_fail_usercopy+0x1a/0x20 [ 843.229899][T19494] _copy_from_iter+0xcf/0xe70 [ 843.230044][T19494] ? __alloc_skb+0x396/0x4b0 [ 843.230071][T19494] ? __alloc_skb+0x228/0x4b0 [ 843.230105][T19494] netlink_sendmsg+0x471/0x6b0 [ 843.230213][T19494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.230250][T19494] __sock_sendmsg+0x145/0x180 [ 843.230349][T19494] ____sys_sendmsg+0x31e/0x4a0 [ 843.230394][T19494] ___sys_sendmsg+0x17b/0x1d0 [ 843.230510][T19494] __x64_sys_sendmsg+0xd4/0x160 [ 843.230555][T19494] x64_sys_call+0x17ba/0x3000 [ 843.230587][T19494] do_syscall_64+0xca/0x2b0 [ 843.230632][T19494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.230659][T19494] RIP: 0033:0x7fd2d94df749 [ 843.230697][T19494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.230720][T19494] RSP: 002b:00007fd2d7f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.230744][T19494] RAX: ffffffffffffffda RBX: 00007fd2d9735fa0 RCX: 00007fd2d94df749 [ 843.230838][T19494] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 843.230917][T19494] RBP: 00007fd2d7f47090 R08: 0000000000000000 R09: 0000000000000000 [ 843.230936][T19494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.230949][T19494] R13: 00007fd2d9736038 R14: 00007fd2d9735fa0 R15: 00007fff2d06f7b8 [ 843.230974][T19494] [ 843.465396][T19454] tipc: Resetting bearer [ 843.488514][T19454] tipc: Disabling bearer [ 843.521345][T19160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.528362][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.554701][T19160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.576782][ T2162] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 843.579544][T19160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.592900][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.618887][T19160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.691027][T19467] lo speed is unknown, defaulting to 1000 [ 843.696900][T19160] hsr_slave_0: entered promiscuous mode [ 843.703240][T19160] hsr_slave_1: entered promiscuous mode [ 843.712424][T19160] debugfs: 'hsr0' already exists in 'hsr' [ 843.718277][T19160] Cannot create hsr debugfs directory [ 844.057117][T19614] lo speed is unknown, defaulting to 1000 [ 844.064848][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11408'. [ 844.159291][T19160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 844.183223][T19160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 844.199057][T19160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 844.208913][T19160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 844.275831][T19706] tipc: Enabled bearer , priority 0 [ 844.315672][T19706] syzkaller0: entered promiscuous mode [ 844.321377][T19706] syzkaller0: entered allmulticast mode [ 844.355688][T19706] tipc: Resetting bearer [ 844.381218][T19705] tipc: Resetting bearer [ 844.396247][T19705] tipc: Disabling bearer [ 844.396741][T19723] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11422'. [ 844.485068][T19160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.498257][T19160] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.510068][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.512299][T19736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11427'. [ 844.517260][T11794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.549245][T19160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 844.559743][T19160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 844.594586][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.601709][T11794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.646677][ T3491] hid-generic 0000:0000:0000.00D5: hidraw0: HID v8.01 Device [syz0] on syz0 [ 844.678004][T19755] loop9: detected capacity change from 0 to 512 [ 844.713666][T19755] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 844.723337][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11432'. [ 844.748802][T19160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.780556][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 844.780616][ T29] audit: type=1326 audit(2000036411.578:83404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 844.807265][T19737] lo speed is unknown, defaulting to 1000 [ 844.862654][ T29] audit: type=1326 audit(2000036411.578:83405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 844.886437][ T29] audit: type=1326 audit(2000036411.578:83406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 844.910007][ T29] audit: type=1326 audit(2000036411.578:83407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 844.933770][ T29] audit: type=1326 audit(2000036411.578:83408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 844.957907][ T29] audit: type=1326 audit(2000036411.578:83409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 844.982032][ T29] audit: type=1326 audit(2000036411.610:83410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 845.005745][ T29] audit: type=1326 audit(2000036411.610:83411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 845.044591][ T29] audit: type=1326 audit(2000036411.841:83412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 845.068496][ T29] audit: type=1326 audit(2000036411.841:83413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19749 comm="syz.9.11432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe877fef749 code=0x7ffc0000 [ 845.150440][T19812] tipc: Enabled bearer , priority 0 [ 845.190306][T19817] tipc: Enabling of bearer rejected, failed to enable media [ 845.199587][T19160] veth0_vlan: entered promiscuous mode [ 845.214172][T19812] syzkaller0: entered promiscuous mode [ 845.219855][T19812] syzkaller0: entered allmulticast mode [ 845.240698][T19160] veth1_vlan: entered promiscuous mode [ 845.261885][T19812] tipc: Resetting bearer [ 845.280725][T19811] tipc: Resetting bearer [ 845.305801][T19811] tipc: Disabling bearer [ 845.325082][T19160] veth0_macvtap: entered promiscuous mode [ 845.390316][T19160] veth1_macvtap: entered promiscuous mode [ 845.402086][T19160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.413985][T19160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.426268][ T6542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.445317][ T6542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.475587][ T6542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.493820][T19827] netlink: '+}[@': attribute type 4 has an invalid length. [ 845.494696][ T6542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.745406][ T2162] syz_tun (unregistering): left allmulticast mode [ 845.761535][T19835] lo speed is unknown, defaulting to 1000 [ 845.857545][T19865] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.992686][ T6542] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.099803][T19898] veth4: entered promiscuous mode [ 846.104937][T19898] veth4: entered allmulticast mode [ 846.161222][ T6542] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.193514][T19907] tipc: Enabled bearer , priority 0 [ 846.212311][T19907] syzkaller0: entered promiscuous mode [ 846.217877][T19907] syzkaller0: entered allmulticast mode [ 846.245744][ T6542] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.272105][T19907] tipc: Resetting bearer [ 846.280045][T19906] tipc: Resetting bearer [ 846.288785][T19906] tipc: Disabling bearer [ 846.311846][ T6542] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.437525][T19858] lo speed is unknown, defaulting to 1000 [ 846.493022][T19937] netlink: '+}[@': attribute type 13 has an invalid length. [ 846.515749][T19937] gretap0: refused to change device tx_queue_len [ 846.522872][T19937] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 846.571627][T19971] netlink: 'syz.1.11459': attribute type 4 has an invalid length. [ 846.680600][T19978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19978 comm=syz.2.11462 [ 846.721820][ T6542] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 847.037793][ T6542] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 847.048840][ T6542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.059297][ T6542] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 847.069087][ T6542] bond0 (unregistering): Released all slaves [ 847.079028][ T6542] bond1 (unregistering): Released all slaves [ 847.097550][T19977] vlan2: entered allmulticast mode [ 847.107424][T19977] dummy0: entered allmulticast mode [ 847.132495][T19865] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.148607][ T6542] tipc: Left network mode [ 847.261264][ T6542] hsr_slave_0: left promiscuous mode [ 847.267277][ T6542] hsr_slave_1: left promiscuous mode [ 847.275379][ T6542] veth1_macvtap: left promiscuous mode [ 847.280879][ T6542] veth0_macvtap: left promiscuous mode [ 847.290467][ T6542] veth1_vlan: left promiscuous mode [ 847.296080][ T6542] veth0_vlan: left promiscuous mode [ 847.413470][ T6542] team0 (unregistering): Port device team_slave_0 removed [ 847.474700][T20068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11465'. [ 847.483880][T20068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11465'. [ 847.520078][T19858] chnl_net:caif_netlink_parms(): no params data found [ 847.590262][T19858] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.597465][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.604938][T19858] bridge_slave_0: entered allmulticast mode [ 847.611673][T19858] bridge_slave_0: entered promiscuous mode [ 847.619144][T19858] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.626345][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.633587][T19858] bridge_slave_1: entered allmulticast mode [ 847.640608][T19858] bridge_slave_1: entered promiscuous mode [ 847.665889][T19858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.684899][T19858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.703337][ T6542] IPVS: stop unused estimator thread 0... [ 847.717633][T19858] team0: Port device team_slave_0 added [ 847.736631][T19858] team0: Port device team_slave_1 added [ 847.767098][T19858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.774156][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.800647][T19858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.816586][T19858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.823590][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.849591][T19858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.893486][T19865] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.905719][T20229] tipc: Enabled bearer , priority 0 [ 847.913325][T20229] syzkaller0: entered promiscuous mode [ 847.918914][T20229] syzkaller0: entered allmulticast mode [ 847.942801][T20229] tipc: Resetting bearer [ 847.974416][T19858] hsr_slave_0: entered promiscuous mode [ 847.983948][T19858] hsr_slave_1: entered promiscuous mode [ 847.998241][T20228] tipc: Resetting bearer [ 848.008431][T20228] tipc: Disabling bearer [ 848.124743][T20311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11474'. [ 848.166277][T20311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11474'. [ 848.190973][T20348] pimreg: entered allmulticast mode [ 848.249881][T20337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.257575][T20337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.265669][T20337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.273242][T20337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.289632][T19865] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.450397][T11805] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.462232][T11805] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.495992][T11805] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.550574][T11805] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.637120][T19858] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 848.656055][T19858] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 848.676766][T19858] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 848.720658][T19858] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 848.748860][T20457] loop3: detected capacity change from 0 to 128 [ 848.783035][T20457] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 848.820876][T20457] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.931740][T19858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.963213][T19858] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.978512][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.985694][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.998418][T11805] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.005528][T11805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.084726][T20346] pimreg: left allmulticast mode [ 849.167706][T20479] can0: slcan on ttyS3. [ 849.224693][T20479] can0 (unregistered): slcan off ttyS3. [ 849.266699][T19858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.277144][T19858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.555399][T19858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.853204][T20479] can0: slcan on ttyS3. [ 849.947425][T20479] can0 (unregistered): slcan off ttyS3. [ 849.967496][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11486'. [ 849.967496][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 849.967519][ T29] audit: type=1326 audit(2000036415.990:83884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.007180][ T29] audit: type=1326 audit(2000036415.990:83885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.031198][ T29] audit: type=1326 audit(2000036415.990:83886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.054897][ T29] audit: type=1326 audit(2000036415.990:83887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.078783][ T29] audit: type=1326 audit(2000036415.990:83888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.103138][ T29] audit: type=1326 audit(2000036415.990:83889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.127227][ T29] audit: type=1326 audit(2000036416.000:83891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.150913][ T29] audit: type=1326 audit(2000036416.000:83890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.174706][ T29] audit: type=1326 audit(2000036416.032:83892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.198561][ T29] audit: type=1326 audit(2000036416.032:83893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20455 comm="syz.3.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7685f749 code=0x7ffc0000 [ 850.395786][T19858] veth0_vlan: entered promiscuous mode [ 850.416317][T19858] veth1_vlan: entered promiscuous mode [ 850.442362][T19858] veth0_macvtap: entered promiscuous mode [ 850.453310][T19858] veth1_macvtap: entered promiscuous mode [ 850.474893][T19858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.500329][T19858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.521777][ T172] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.552593][ T172] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.602223][ T172] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.626496][ T172] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.721447][T20550] netlink: 'syz.1.11492': attribute type 3 has an invalid length. [ 850.729487][T20550] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11492'. [ 850.884523][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11496'. [ 851.037268][T20594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11498'. [ 851.046412][T20594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11498'. [ 851.153208][T19160] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 851.247120][T20606] wireguard0: entered promiscuous mode [ 851.252764][T20606] wireguard0: entered allmulticast mode [ 851.420869][T20654] tipc: Started in network mode [ 851.425962][T20654] tipc: Node identity 6266523af74a, cluster identity 4711 [ 851.433244][T20654] tipc: Enabled bearer , priority 0 [ 851.461057][T20654] tipc: Resetting bearer [ 851.468292][T20652] tipc: Disabling bearer [ 851.549421][T20665] loop9: detected capacity change from 0 to 128 [ 851.576593][T20665] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 851.599437][T20665] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 851.734632][ T6542] ================================================================== [ 851.742759][ T6542] BUG: KCSAN: data-race in copy_process / free_pid [ 851.749316][ T6542] [ 851.751659][ T6542] read-write to 0xffffffff86860008 of 4 bytes by task 20696 on cpu 1: [ 851.759820][ T6542] free_pid+0xb9/0x1d0 [ 851.763929][ T6542] free_pids+0x7a/0xb0 [ 851.768030][ T6542] release_task+0x9a7/0xb60 [ 851.772556][ T6542] do_exit+0xd4d/0x1590 [ 851.776736][ T6542] call_usermodehelper_exec_async+0x247/0x250 [ 851.782827][ T6542] ret_from_fork+0x149/0x290 [ 851.787436][ T6542] ret_from_fork_asm+0x1a/0x30 [ 851.792223][ T6542] [ 851.794561][ T6542] read to 0xffffffff86860008 of 4 bytes by task 6542 on cpu 0: [ 851.802108][ T6542] copy_process+0x16d4/0x1ef0 [ 851.806815][ T6542] kernel_clone+0x16c/0x5c0 [ 851.811333][ T6542] user_mode_thread+0x7d/0xb0 [ 851.816044][ T6542] call_usermodehelper_exec_work+0x41/0x160 [ 851.821972][ T6542] process_scheduled_works+0x4ce/0x9d0 [ 851.827478][ T6542] worker_thread+0x582/0x770 [ 851.832129][ T6542] kthread+0x489/0x510 [ 851.836239][ T6542] ret_from_fork+0x149/0x290 [ 851.840851][ T6542] ret_from_fork_asm+0x1a/0x30 [ 851.845631][ T6542] [ 851.847983][ T6542] value changed: 0x80000146 -> 0x80000145 [ 851.853709][ T6542] [ 851.856041][ T6542] Reported by Kernel Concurrency Sanitizer on: [ 851.862205][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: kworker/u8:68 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 851.873767][ T6542] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 851.877585][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 851.887654][ T6542] Workqueue: events_unbound call_usermodehelper_exec_work [ 851.894804][ T6542] ================================================================== [ 852.033109][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11511'. [ 852.248291][T11805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.293435][T11805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.368743][T11805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.445386][T11805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.536081][T11805] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.581147][T20665] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 852.592265][T11805] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.625195][T11805] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.664406][T11805] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.745726][T11805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.834681][T11805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.892574][T11805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.940010][T11805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.000113][T11805] bridge_slave_1: left allmulticast mode [ 853.005819][T11805] bridge_slave_1: left promiscuous mode [ 853.011457][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.019430][T11805] bridge_slave_0: left allmulticast mode [ 853.025192][T11805] bridge_slave_0: left promiscuous mode [ 853.030884][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.040579][T11805] bridge_slave_1: left allmulticast mode [ 853.046288][T11805] bridge_slave_1: left promiscuous mode [ 853.052109][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.060082][T11805] bridge_slave_0: left allmulticast mode [ 853.065789][T11805] bridge_slave_0: left promiscuous mode [ 853.071668][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.291538][T11805] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 853.301196][T11805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.310740][T11805] bond0 (unregistering): Released all slaves [ 853.424040][T11805] bond0 (unregistering): Released all slaves [ 853.463508][T11805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.473623][T11805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.483421][T11805] bond0 (unregistering): Released all slaves [ 853.540659][T11805] tipc: Left network mode [ 853.545214][T11805] tipc: Left network mode [ 853.549825][T11805] tipc: Left network mode [ 853.608250][T11805] hsr_slave_0: left promiscuous mode [ 853.613993][T11805] hsr_slave_1: left promiscuous mode [ 853.619586][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.627052][T11805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.634715][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.642168][T11805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.651569][T11805] hsr_slave_0: left promiscuous mode [ 853.657217][T11805] hsr_slave_1: left promiscuous mode [ 853.665208][T11805] hsr_slave_0: left promiscuous mode [ 853.670963][T11805] hsr_slave_1: left promiscuous mode [ 853.683502][T11805] veth1_macvtap: left promiscuous mode [ 853.689128][T11805] veth0_macvtap: left promiscuous mode [ 853.694770][T11805] veth1_vlan: left promiscuous mode [ 853.700017][T11805] veth0_vlan: left promiscuous mode [ 853.705775][T11805] veth1_macvtap: left promiscuous mode [ 853.711389][T11805] veth0_macvtap: left promiscuous mode [ 853.716928][T11805] veth1_vlan: left promiscuous mode [ 853.722287][T11805] veth0_vlan: left promiscuous mode [ 853.727934][T11805] veth1_macvtap: left promiscuous mode [ 853.733393][T11805] veth0_macvtap: left promiscuous mode [ 853.738973][T11805] veth1_vlan: left promiscuous mode [ 853.744236][T11805] veth0_vlan: left promiscuous mode [ 853.871994][T11805] team0 (unregistering): Port device team_slave_1 removed [ 853.881568][T11805] team0 (unregistering): Port device team_slave_0 removed [ 854.001824][T11805] team0 (unregistering): Port device team_slave_1 removed [ 854.012467][T11805] team0 (unregistering): Port device team_slave_0 removed [ 854.590908][T11805] IPVS: stop unused estimator thread 0... [ 854.645719][T11805] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.691616][T11805] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.739124][T11805] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.796413][T11805] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.846850][T11805] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.880948][T11805] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.928606][T11805] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.966164][T11805] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.028109][T11805] bridge_slave_1: left allmulticast mode [ 855.034028][T11805] bridge_slave_1: left promiscuous mode [ 855.039708][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.047735][T11805] bridge_slave_0: left allmulticast mode [ 855.053435][T11805] bridge_slave_0: left promiscuous mode [ 855.059048][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.067721][T11805] bridge_slave_1: left allmulticast mode [ 855.073472][T11805] bridge_slave_1: left promiscuous mode [ 855.079278][T11805] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.087122][T11805] bridge_slave_0: left allmulticast mode [ 855.092918][T11805] bridge_slave_0: left promiscuous mode [ 855.098674][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.214568][T11805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.224659][T11805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.234474][T11805] bond0 (unregistering): Released all slaves [ 855.291440][T11805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.301559][T11805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.311099][T11805] bond0 (unregistering): Released all slaves [ 855.347956][T11805] tipc: Left network mode [ 855.388202][T11805] hsr_slave_0: left promiscuous mode [ 855.394097][T11805] hsr_slave_1: left promiscuous mode [ 855.399972][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.407471][T11805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.415107][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.422634][T11805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.432329][T11805] hsr_slave_0: left promiscuous mode [ 855.438090][T11805] hsr_slave_1: left promiscuous mode [ 855.443877][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.451671][T11805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.459247][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.466715][T11805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.480132][T11805] veth1_macvtap: left promiscuous mode [ 855.485613][T11805] veth0_macvtap: left promiscuous mode [ 855.491375][T11805] veth1_vlan: left promiscuous mode [ 855.496602][T11805] veth0_vlan: left promiscuous mode [ 855.502594][T11805] veth1_macvtap: left promiscuous mode [ 855.508163][T11805] veth0_macvtap: left promiscuous mode [ 855.513644][T11805] veth1_vlan: left promiscuous mode [ 855.518943][T11805] veth0_vlan: left promiscuous mode [ 855.620490][T11805] team0 (unregistering): Port device team_slave_1 removed [ 855.630206][T11805] team0 (unregistering): Port device team_slave_0 removed [ 855.689186][T11805] team0 (unregistering): Port device team_slave_1 removed [ 855.700184][T11805] team0 (unregistering): Port device team_slave_0 removed