last executing test programs: 4m12.125429311s ago: executing program 32 (id=38): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="c9", 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 4m11.217328384s ago: executing program 33 (id=48): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x168002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0xfffffffc}}, './cgroup/../file0/../file0\x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) shutdown(r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x100000) syz_open_dev$tty1(0xc, 0x4, 0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x981c2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000180)={[{@minixdf}, {@commit={'commit', 0x3d, 0x5}}, {@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3a}}]}, 0x1, 0x59d, &(0x7f0000001100)="$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") r9 = socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r6, 0xc178) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89327e982ce0766e39dff0629217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b94afd9e21d6a3caa2f41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d9190a0a62698aecc"]) sendmmsg$inet(r9, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x18}}], 0x1, 0x64040840) r12 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x1, 0x12) 4m8.382767372s ago: executing program 4 (id=67): shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000100)) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704850000007800000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x8}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='wbt_stat\x00', r9}, 0x18) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r10 = getpid() r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r13, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 4m7.755929102s ago: executing program 4 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d47c214f78"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r8 = dup(r7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x10, "4a13f3d76addd3e8ba6640b5c7315a97"}, &(0x7f00000001c0)=0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffeffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x28, &(0x7f00000004c0)=""/40, 0x0, 0x2, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xf, 0x6777, 0x7fff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r0, r0, r0, r0, r9, r0], &(0x7f0000000640)=[{0x0, 0x4, 0x7, 0x9}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) acct(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r11}}], 0x20, 0x2400e044}, 0x0) 4m7.41678318s ago: executing program 5 (id=39): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xe, 0x0, 0x100, 0x4020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r7}, 0x65) sync() ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsm_get_self_attr(0x67, &(0x7f00000003c0)={0x0, 0x0, 0x71, 0x51, ""/81}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m7.103210375s ago: executing program 5 (id=75): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = inotify_init1(0x0) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x118) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000001,hide,session=0x0000000000000047,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB="b27dc09c5d8ef38346f13d", @ANYRESOCT=r1, @ANYBLOB="2c757466302c6d6170ff0366662c750bdb58a5064c470911dccc5c0970a2cd1f8fedf37330b47510a4492e7ff3327f8dc350b8647a5a121a1a0b9b469c0c8abb3e71a83c19df7ffab6bbe485feca15e30ecbe192848e51d8700767c462a992b1bd20b38604016154d53178389e5f4efa653cec7c984b011c43b32138d0f30d5f1c553ffa54ab317781c8ef6c990202f500d4dafe46bea60f264722ee3ef3d68cdf73cf6a3254644cd99412a07159d4e7b6eeaad6a7ae5d795e5beb4351a240844abec3bbf5a1b09ab517f6016c0369", @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x1, 0x9d7, &(0x7f0000001800)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) read(r3, &(0x7f0000000140)=""/68, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendto$inet6(r2, 0x0, 0x2, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x10d900) 4m6.932082079s ago: executing program 5 (id=78): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="00200000d55f2acdcc42bec9a3ca9ca13adc78f43a89a77500787b032b70564d3a7530393b7a11481f8ae550cebe7549a21cb5122744266ce9ed9030e95bc139c34d8a1f6f69fd3366ad9031d2b3e814c6d8e7630ce80e7466f750139eee2eaff37bb6710aaa4603f7ad9296f319cb452cfc5b6dd9dcf2aba0f354d20eaae4fc0437c951cad51c9ca141", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf25160000000500030001000000050002000000000005000200fd00000005000300010000000500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008044) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000787300000000020000000000000000000000000000f4d45489cf6a1d51218bf014"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) modify_ldt$read(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004000000041c000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setflags(r7, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendto$packet(r3, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r4, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 4m6.890672542s ago: executing program 4 (id=79): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8840) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x24b12ff8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m6.400363041s ago: executing program 4 (id=91): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = inotify_init1(0x0) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x118) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000001,hide,session=0x0000000000000047,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB="b27dc09c5d8ef38346f13d", @ANYRESOCT=r1, @ANYBLOB="2c757466302c6d6170ff0366662c750bdb58a5064c470911dccc5c0970a2cd1f8fedf37330b47510a4492e7ff3327f8dc350b8647a5a121a1a0b9b469c0c8abb3e71a83c19df7ffab6bbe485feca15e30ecbe192848e51d8700767c462a992b1bd20b38604016154d53178389e5f4efa653cec7c984b011c43b32138d0f30d5f1c553ffa54ab317781c8ef6c990202f500d4dafe46bea60f264722ee3ef3d68cdf73cf6a3254644cd99412a07159d4e7b6eeaad6a7ae5d795e5beb4351a240844abec3bbf5a1b09ab517f6016c0369", @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x1, 0x9d7, &(0x7f0000001800)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) read(r3, &(0x7f0000000140)=""/68, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendto$inet6(r2, 0x0, 0x2, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x10d900) 4m6.361296334s ago: executing program 2 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) close(r4) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d47c214f78"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r8 = dup(r7) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x10, "4a13f3d76addd3e8ba6640b5c7315a97"}, &(0x7f00000001c0)=0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffeffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x28, &(0x7f00000004c0)=""/40, 0x0, 0x2, '\x00', r2, 0x0, r8, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xf, 0x6777, 0x7fff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r0, r0, r0, r0, r9, r0], &(0x7f0000000640)=[{0x0, 0x4, 0x7, 0x9}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) acct(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r11}}], 0x20, 0x2400e044}, 0x0) 4m6.143964392s ago: executing program 34 (id=94): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = inotify_init1(0x0) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x118) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000001,hide,session=0x0000000000000047,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB="b27dc09c5d8ef38346f13d", @ANYRESOCT=r1, @ANYBLOB="2c757466302c6d6170ff0366662c750bdb58a5064c470911dccc5c0970a2cd1f8fedf37330b47510a4492e7ff3327f8dc350b8647a5a121a1a0b9b469c0c8abb3e71a83c19df7ffab6bbe485feca15e30ecbe192848e51d8700767c462a992b1bd20b38604016154d53178389e5f4efa653cec7c984b011c43b32138d0f30d5f1c553ffa54ab317781c8ef6c990202f500d4dafe46bea60f264722ee3ef3d68cdf73cf6a3254644cd99412a07159d4e7b6eeaad6a7ae5d795e5beb4351a240844abec3bbf5a1b09ab517f6016c0369", @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x1, 0x9d7, &(0x7f0000001800)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) read(r3, &(0x7f0000000140)=""/68, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x10d900) 4m6.142010282s ago: executing program 4 (id=96): syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x7, 0x400) syz_emit_ethernet(0xf5, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004a1c00e70064000009069078ffffffffffffffff0759f4ac1414aae0000001ac300001e0000001004e244e21", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="50100007907801011e1024020900000000000000000800000402040201fe04f9890303080204090002040100080a45e859d5000000401312b3096d6945ccab612ecb8a3b55b515cefa563634ad9325d9bb1f0e7db89e9f2b42fe9683ceb3305eb8451c8a92e35a44c3478993396e81b84d4ced90455652f3d6b61f4ab192df5de482cebba221428df91b344c3d6cf4d2759223633dc696d5c5f747b0dc851991dddfcdbdae13209fdae16d5c46601228afd5a3"], 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000003000000000000004000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000007000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) time(0x0) fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = dup(r6) connect$inet(r7, &(0x7f0000000080)={0x27, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000b240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2500000000000000000005000000000000000000b911018edc74c0697940ea41ebad52e586b186478ea6793de2d49859d7821f9384af11790e882a1b525b1673dc4bba4abb7470a4de442c1af026218a7ad4061e940b92fb94d46f324658e7a3b709fbcf0d3b8be3d2c9711631e97ac51e652940ea05817d44ebabbe64a938ad0c1d8090d448a3f25b3c0e990cdb5589693e33d726b75c1e00441e2aa2ef88bd3eaad7b27f4c33358b1b24ad93851ec17d90c32893bdc834555f9ff59337a8b0fc897211b4fcfc64e0e391aa44e4b268973ee604e00ec6934e70e8a713"], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') 4m6.04597576s ago: executing program 4 (id=97): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x50) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) 4m6.045692769s ago: executing program 35 (id=97): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x50) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) 4m5.764740642s ago: executing program 6 (id=101): socket$inet6(0xa, 0x805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) rmdir(0x0) 4m5.731261755s ago: executing program 6 (id=102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000040), 0x1004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x50) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) (fail_nth: 5) 4m5.303914629s ago: executing program 2 (id=103): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @loopback, @broadcast}}}}) (fail_nth: 2) 4m5.013128773s ago: executing program 5 (id=104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) r5 = fspick(r4, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10, &(0x7f0000000380)}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="00000c00f10f0000b7050000080000008596f29b4a00800095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x803400, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) write$ppp(r9, &(0x7f0000000200)='Av', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m5.010452343s ago: executing program 36 (id=104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) r5 = fspick(r4, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10, &(0x7f0000000380)}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="00000c00f10f0000b7050000080000008596f29b4a00800095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x803400, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) write$ppp(r9, &(0x7f0000000200)='Av', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m4.909263921s ago: executing program 2 (id=106): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x581842, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x0, r2, 0x4007) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000000)={0x0, 0x8}) 4m4.850516296s ago: executing program 6 (id=107): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xffc8}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r11}, 0x18) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2a, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf33d, 0x0, 0x0, 0x0, 0x545c}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x0, 0x5}, 0x10, 0x0, r0, 0x2, &(0x7f00000005c0)=[r8, r9], &(0x7f0000000600)=[{0x1, 0x2, 0xa, 0x7}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x10}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x68ec, 0x2, 0x201, 0x20000000}, 0x0, 0x0) 4m4.593897257s ago: executing program 2 (id=108): socket$inet6(0xa, 0x805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) rmdir(0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 4m4.086034307s ago: executing program 2 (id=109): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80ff, 0x29c) open(&(0x7f0000000040)='./file0\x00', 0x18000, 0x1c4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x3) syslog(0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800c6b90570597902ec475ec20157e21f00df3cb6f17c32931c134d4c30f5e601142616d0e4e07986e2da27a85918755e8b", @ANYRES16=r7, @ANYBLOB="000325bd7000fedbdf254b0000000c009900020000007b0000000a0006000802110000010000080077000000008008007700020000000a0006000802110000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, &(0x7f00000001c0)) 4m3.936914289s ago: executing program 2 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r2, 0x0, 0x0, 0x8000c61) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xd}, 0x110a3, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0xbc3, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x2, &(0x7f0000000000)={{0x6}, {0x0, 0x3}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b33000000feffffff0005000000080003"], 0x38}}, 0x0) 4m3.914285591s ago: executing program 6 (id=111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = inotify_init1(0x0) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x118) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000001,hide,session=0x0000000000000047,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB="b27dc09c5d8ef38346f13d", @ANYRESOCT=r1, @ANYBLOB="2c757466302c6d6170ff0366662c750bdb58a5064c470911dccc5c0970a2cd1f8fedf37330b47510a4492e7ff3327f8dc350b8647a5a121a1a0b9b469c0c8abb3e71a83c19df7ffab6bbe485feca15e30ecbe192848e51d8700767c462a992b1bd20b38604016154d53178389e5f4efa653cec7c984b011c43b32138d0f30d5f1c553ffa54ab317781c8ef6c990202f500d4dafe46bea60f264722ee3ef3d68cdf73cf6a3254644cd99412a07159d4e7b6eeaad6a7ae5d795e5beb4351a240844abec3bbf5a1b09ab517f6016c0369", @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x1, 0x9d7, &(0x7f0000001800)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) read(r3, &(0x7f0000000140)=""/68, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendto$inet6(r2, 0x0, 0x2, 0x0, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x10d900) 4m3.755023474s ago: executing program 6 (id=112): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0xb9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m2.825694999s ago: executing program 6 (id=113): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x8, 0x166e, 0x62fc, 0xfffffffe, 0x3ff, 0x3, 0x4}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x1, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x18) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x824c, 0x5, 0x1, 0x5, 0xfffffff4, 0xfffffe03, 0x5}, 0x1c) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x72) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x24) sendmmsg$inet6(r8, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)="c6b5c54440ec61ef6af41f9ac4e9e57d447add976c0df1bdc6c9aab21b572e933aab99eb6089fc1f0a22fbfa94913d6be6270cec59a1494e345a7719efefe13d06285d3c0843ddd034317a24e70ef26e74dce055c3c6d9dc0fb3d68f05ff", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x124}, {&(0x7f0000001a80)="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", 0x387}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0xfffff565, @mcast1, 0x4}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x48) 4m2.824192789s ago: executing program 37 (id=113): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x8, 0x166e, 0x62fc, 0xfffffffe, 0x3ff, 0x3, 0x4}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x1, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x18) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x824c, 0x5, 0x1, 0x5, 0xfffffff4, 0xfffffe03, 0x5}, 0x1c) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x72) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x24) sendmmsg$inet6(r8, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)="c6b5c54440ec61ef6af41f9ac4e9e57d447add976c0df1bdc6c9aab21b572e933aab99eb6089fc1f0a22fbfa94913d6be6270cec59a1494e345a7719efefe13d06285d3c0843ddd034317a24e70ef26e74dce055c3c6d9dc0fb3d68f05ff", 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x124}, {&(0x7f0000001a80)="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", 0x387}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r9, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0xfffff565, @mcast1, 0x4}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x48) 3m48.906432987s ago: executing program 38 (id=110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r2, 0x0, 0x0, 0x8000c61) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xd}, 0x110a3, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0xbc3, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x2, &(0x7f0000000000)={{0x6}, {0x0, 0x3}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b33000000feffffff0005000000080003"], 0x38}}, 0x0) 3m10.410217302s ago: executing program 0 (id=1993): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) 3m10.391753444s ago: executing program 0 (id=1996): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 3m10.374886145s ago: executing program 0 (id=1998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8840) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x24b12ff8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m10.3087958s ago: executing program 0 (id=2003): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000008014"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) accept4(r0, 0x0, 0x0, 0x400000000000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) 3m10.273276983s ago: executing program 0 (id=2005): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) syz_pidfd_open(0x0, 0x0) r0 = eventfd2(0x7, 0x80001) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 3m10.252665385s ago: executing program 0 (id=2006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m55.149226079s ago: executing program 39 (id=2006): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.816442663s ago: executing program 8 (id=6625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20080, 0x401}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40) futex(&(0x7f0000000240)=0x1000, 0x5, 0x0, 0x0, &(0x7f0000000140)=0x2, 0x35000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(&(0x7f0000000300)=""/10) 1.798827345s ago: executing program 8 (id=6628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, 0x0, 0x0, 0x2, 0x1}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 1.769284937s ago: executing program 8 (id=6630): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) accept4(r0, 0x0, 0x0, 0x400000000000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) 1.36216105s ago: executing program 1 (id=6645): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0x1, 0x10008, 0x8, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{}], 0x1) 1.272936847s ago: executing program 1 (id=6652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="160000000000000004000000ff00000001800000431ff9c04fd0344ed898c9bb7ac8d1b0054c31e09b62a0d205ba7a72fe126051a26b23d3e0d85e65cb542e37f5c8caa73fa3427e32bd5a08b893a74ac5c290616a45c4a5517932fa84c1dd7fc5428ea592ac615fcd958ca001b4f7c14acd5e23e319cc1193c2ed4c63fbff4e6470a76b13efa0a82c8efcb5bb363a49d4d5a53654aed1659d5d9050232221ed421c16396bfed95df8b21b708216ebe80c97cdf168ef42d051b2a16392ff93bff78f0019627af26021596aa1c5e8f484968de907cfa3c8c0d63916bdac7def19593c871a0cc5be", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) dup(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) r5 = socket(0x25, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.265081898s ago: executing program 1 (id=6654): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x10) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0xa) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x8, 0x208, 0xd9}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000993d0000850000001b0000009500"/36], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="7f02d4bd34ab2000000000000109022400010000d72009040001010300c80701"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) close_range(r2, r5, 0x0) r9 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r12 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x3777, 0x1, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0xe, 0x2004, @fd_index=0x5, 0x7, 0x2, 0x72, 0x1a, 0x1, {0x3, r15}}) syz_io_uring_submit(r13, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r9, 0x0, &(0x7f0000000300)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1, 0x0, 0x0, {0x0, r15}}) io_uring_enter(r9, 0x47ba, 0x0, 0x0, 0x0, 0x0) close(r0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x41, 0x4, 0xc, 0x7, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0) 1.213853772s ago: executing program 7 (id=6655): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb01, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8a08ff000072ac9d64fbbf36b5deed5d007c5ca200000000007780dcade29c4dc3ffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'erspan0\x00'}) 1.166071796s ago: executing program 7 (id=6656): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x4, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 1.154664487s ago: executing program 7 (id=6657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x400000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x50000840}, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x19, &(0x7f00000007c0)=@raw=[@exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x875c}, @alu={0x7, 0x0, 0x1, 0x0, 0x5, 0xfffffffffffffff8, 0x4}, @call={0x85, 0x0, 0x0, 0xcd}, @call={0x85, 0x0, 0x0, 0x66}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xae, &(0x7f0000000900)=""/174, 0x82100, 0x16, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r1, r0, r0, r0, r0, r0, r0, r0, 0x1], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010800000000000000000000fffd14000780080011400000000005001502000000000500010006000000050005000a00000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r6 = dup(r5) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x7fffffffffffffff}, 0x18) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.054904485s ago: executing program 7 (id=6658): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r2, r3, 0x0) 978.825891ms ago: executing program 3 (id=6663): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 978.234591ms ago: executing program 3 (id=6664): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xfffffffe, 0x1, 0x8, 0x20205, 0xe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500ff010a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40341, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x10, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 925.405575ms ago: executing program 8 (id=6665): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0x1, 0x10008, 0x8, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x132d, &(0x7f00000004c0)={0x0, 0x9ce9, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 882.504369ms ago: executing program 8 (id=6666): r0 = syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad6, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x40000, 0x60, &(0x7f0000000400)='M', 0x1, 0x4, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = msgget$private(0x0, 0x620) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20680, 0x21, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x989}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000180)) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x401, 0x0) r6 = getpid() prlimit64(r6, 0xc, 0x0, &(0x7f0000000540)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r7, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r6, 0x12) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="7800000003070104000000000000000000000009080005400000000208000540000000020c00034000000000000000030c00034000000000000000070900010073790931000000000800054000000001080005400000000108000540000000010c00024000008000000100010c0003400000000000000005"], 0x78}}, 0x4000015) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x120) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000340)={0x1, 0x10, 0xa}) r9 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvfrom$x25(r9, &(0x7f00000004c0)=""/100, 0x64, 0x40000000, &(0x7f00000003c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x13f) 669.828296ms ago: executing program 1 (id=6667): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb01, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8a08ff000072ac9d64fbbf36b5deed5d007c5ca200000000007780dcade29c4dc3ffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'erspan0\x00'}) 637.027309ms ago: executing program 1 (id=6668): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) getxattr(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d852ece3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getpgrp(0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0x65, 0x45, ""/69}, &(0x7f00000000c0)=0x65, 0x1) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000440)={'veth0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}, 0x22}, {@errors_continue}, {@nombcache}, {@barrier}]}, 0x1, 0x463, &(0x7f0000001300)="$eJzs3MtvG0UYAPBv7Th9k1DKo6WFQEFUPJImfdADlyKQOICEBIciTiFNq1K3QU2QaFVByqEcUSXuiCMS4g/gQrkg4ITEFe4IqaBcKJyM1t5N3cR2nMSOS/37SZvMeMaa+XZ37PGs1wH0rZH0TxKxPSJ+jYihWvb2CiO1fzcXLk/9s3B5KolK5Y2/kmq9vxcuT+VV8+dtq2UqlRbtXn07YrJcnr6Q5cfmzr03Nnvx0nNnzk2enj49fX7i2LHDh/YNHp040pE4d6R93fPhzN7dr7x17bWpE9fe+fGrtL/bs/L6ODplpLZ3G3qy04312I66dDLQw46wKsWISA9XqTr+h6IYWxbLhuLlj3vaOaCrKpVCZVPz4vkKcBdLJ+pAP8rf6NPPv/m2QVOPO8KN47G4jnEz22olA1HI6pSyz0jdMBIRJ+b//TzdokvrEAAA9a4fj4hnG83/CvFAXb17smtDwxFxb0TsjIj7ImJXRNwfUa37YEQ81Ga7+Srz0isky+c/laE1B9eGdP73QnZt6/b5Xz77i+FilttRjb+UnDpTnj6Y7ZMDUdqU5sdbtPHdS7982qysfv6Xbmn7+Vww68cfA0sW6E5Ozk2uJ+Z6N65E7BloFH+yOOdN58e7I2LPGts48/SXe5uVrRx/Cx2YlFe+iHiqdvznY0n8uaTp9cnx549OHBnbHOXpg2P5WbHcTz9ffT1rLVlatq74O+DG9UpsbXj+L3Z1ONkcMXvx0tnq9drZ1bdx9bdPmn6mWev5P5i8WU0PZo99MDk3d2E8YjB5dfnjE7eem+fz+un5f2B/4/G/M27tiYcjIj2J90XEIxHxaNb3xyLi8YjY3yL+H1584t3Vx99iVb6D0vj/LK1w/KP++K8+UTz7/Terjz+XHv/D1dSB7JF2Xv9a9evKhfWczQAAAPD/U6h+Bz4pjC6mC4XR0dp3+HfF1kJ5ZnbumVMz758/Wfuu/HCUCvlK11Ddeuh4tjac5yeW5A9l68afFbdU86NTM+WTvQ4e+ty2JuM/9Xux170Dus79WtC/jH/oX+2N//mu9wPYeN7/oX81Gv9fe1GAvtBoqH/Ug34AG2+Ft/otG9UPYOOZ6kP/Mv6hfxn/0Jea3iRfWNct/xJdSJTaqPPt4Pp+q6H9RBTukN1y1yRK0bBooOWPWXQgsalhUa9fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//X27lkw==") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = socket(0x11, 0x803, 0xfffffffe) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}}, 0x24}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x1b, r8, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) 346.275941ms ago: executing program 9 (id=6671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x400000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x50000840}, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x19, &(0x7f00000007c0)=@raw=[@exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x875c}, @alu={0x7, 0x0, 0x1, 0x0, 0x5, 0xfffffffffffffff8, 0x4}, @call={0x85, 0x0, 0x0, 0xcd}, @call={0x85, 0x0, 0x0, 0x66}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xae, &(0x7f0000000900)=""/174, 0x82100, 0x16, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r1, r0, r0, r0, r0, r0, r0, r0, 0x1], 0x0, 0x10, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206010800000000000000000000fffd14000780080011400000000005001502000000000500010006000000050005000a00000005000400000000000900020073797a30000000000c000300686173683a697000"], 0x58}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x7fffffffffffffff}, 0x18) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) open(&(0x7f0000000540)='./file0\x00', 0x8100, 0x40) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r11, 0x310, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x80000001, 0x1c}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x880) utimes(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x2}, 0x18) setrlimit(0x9, &(0x7f0000000380)) 287.067796ms ago: executing program 9 (id=6672): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 271.396158ms ago: executing program 9 (id=6673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x7f7, &(0x7f0000001580)="$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") r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r1, 0x16, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, r2, 0x24, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r3}}, 0x1c) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 271.006378ms ago: executing program 1 (id=6674): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) capset(0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 227.198451ms ago: executing program 3 (id=6675): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') readlink(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x5, 0x50c, &(0x7f0000000ac0)="$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") bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsmount(r1, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r6, 0x0, 0x800000000000000}, 0x18) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x4480) ioctl$FIONREAD(r8, 0x541b, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}}, {{&(0x7f0000001180)={0xa, 0x4e24, 0x7, @private0, 0x5}, 0x1c, &(0x7f00000011c0)=[{&(0x7f00000024c0)="8091b1963dca1c0effa40af0d449af203ae737081c320555306b0a452a54067cedaddda4033c6f6db754bdf4e275e090eaec4d74c794e0f42440d8eb34dd7ddc33bbe5647cd3ef9533b7c50c67d2661f7df5a7e4936ffefa090cf539a8bc82c0cc41b64afbf2dff75c4c8814d41a14aa5c357adc571da5fa5e7cc1c4366fb4f6b6193f67772b0acdbfd8ef2c7ef9e4f3b00435243a1dc1968dedcf54b9afb188a3ce48e82251d0f3b7bfa0e9ac8b142f9bda9e9a3426bdf1db4e6f149d85624a9987cf3ba93ad66b0fb6c5da703d628708c84b25295b291d6f43f14f92263152e70d33b7341648feec600c2800ceb391f3d184620c2e5307edd0484eb8c0e684314f9c25a0dc6f1ba539aa20f02ad33570bdacecfdb6653773082f8c6e40b6fcc3f491034c196827c86093bab12b21ea4b8a25912f6040d4b29e66eb4be17c59339b37ac22de41fa87183fe2f06adaece391f3c8a886a63f6e1229290b86aa372b57db1ad5246c6a7970c49f4c6386ecbd9a1cd3df95839c2673d8febc5e8dc6818092e0befbad58848fcecb3738d6034f31b2618cad255eb891b849813d4c912d33fb9fb498d2216a98130eb4192d8c985c1faaf52d6017506705d42c3f94ceab5f1ef68fd032051692cc3eb3d54399c62406540dcc9b12ba86ba92cc05c659368c32a2a038ceb294947e8ce21a59124e9ec6a02138ee971efc08c9e69d08e447f8bcde517d31e736a8e02d0a0583f53968baa80c85c81f47938ca3aa15d550e59ffaa25c19038bc17d25695307d372bd5000706f761e373ed6f1711d4f75d5abb05d89d3caab710ef66ff09b1d0cbfa1f5fccf490a1e5c2694298ab13f2a5b7d94273093c595a5e47903fd73baa7e41f6260f84ddb7a9dd684b6eff353e073999a3e1f0f4f033bf1e367ba749cef77b2cff459749fefd1995d7b03a9b5150abe35962f347b4259157e9d1f1ce85dc986d4178e0eb392db2e60d1bbca37d9f9ce4fa71a9dd524bc63d87cd9ef41e9f004263b751435cb9081d85702ae68ccf9b2068b7e80189a5aeaa9b3388bb1f9775e6cb16cc062ce5ba064e8383c94a3fde09686e9f1f12ca656bfe5b455facca3bee692f0050e6e0c36a6bd7db36d4f1c7c09a364e2e2f1d8d60d6dfce00c9dde1930c524fd863773ceb2ccb78f855aba80f0073487b7740a974afef140d1e169a62f136ab826d19941574528b082a23e0f3d1a9dacb826c395d0b519b584749a192a8125e7f8fc08ae1305713e29b66ad9b066ac11b50342fd693e681a153e2cfebf2c6d805023b5da57cfb39cf1f52213ea7b1738b69a76e9d83f6c6e84a1f89bb2fe3fb5dabbb16b3ea7a8a6c61f892062efedb37b1e0c4cf3001e1f50239793ea2287af20724a303cd738387c086b719606fa70c18e501f50a48f3b856b1b2b6567182ba67652eca2f23476d74226aa590b6605928439f4b3729d5169203b59ff417c1651087c0e5c9312f4e9c97802dddd22c13713859f02e47053f6061641835db1317ef5ab5f909f3a02a766d36a4bd3665ccc39cb074d3fafd2e897a9594691296d764e93079f14e48f49b52861630e64e7ea0e074121844f2d3477dba6cae5272275d86e5621735f2f8ad5593913ccde3fea84be85d37c5879129c73bbd920d5232fec4118eeda5cb890eae9dd5b48ff372cc132ac49476ad0a8b0971810bac5225612c00b1263f1ab98e01e8dc2e291044a809f2a6f3c1a634eab3eec815a3cc82e18f49003e2f47200c4bc31d20a31d6b35b632d97f64cd527f3ba3a65f07b99609227ad9a534d44508f2a50c1949b946eff8cd089c20e1dd4a1c8fac2e81a19976eb39ac66f3cd42b63ef8b0019de523b0e6c558a358254ded9cd9e3e52f1578dc8945df70493d81ff0b91ccd01decacbd9df5412c92aecfb1fc4401cb894c82b27d930f0857c4375e6773fe030831a9a1da452ec5469df5bec740ff454137356f644adfe9f38bd7c51f4e44a2ec80a134dae7cc41e546ccc68ee8aff38ca64765e5271528b0bddd4cd1c64c20ea88c973a848b17e01b2e99f99019f0c5012509c50289f171f8ed73e6c0d433ad667d4919a790c02c18761f33f9490ee8c98a01522eb330e07b431ab984ee522d6bf2cc70155ecf6bfd09b02cc27b5e408b82f96835bafd4b923ecb4a07a4b67d283133d67cffed07c2d1e6492adc4f004976501f6bca783269d53c5dc22beaaf9b9537a3baa69be58f8df7c2f7d9ad87c9fec4853ea82dc26eff5c494a63a538c3b3e6dde7e401863f18443b1c1e83e52c84401ec582474740022e22c91e4c82bd264c651c8da28dd7e664b03f77805c47d523162b00e6ff4852a8d4ef51ec16164b86db9646926ff32ec492927742fc6047ffbfac3e1bff21fcd2a0d33a5d6595969d4265a0b1015df4757d2663f6eb7b1eda2b41239ffc6f64e4c15bf32755adeb341007240e419f2c644e8d8aba5ad0db56b870c9041f5ba24b786d0d15ec27b40ebfd8012f895a8ddf8e745e0f27509bde0d8903382c238df39a091ec45d78b7432c157f02671c3bef6262175e7ba07e43f4e18f63deb25bb105d6edbfe00594f6f04ada069296b7817b4943852678c9ad2c34be8990588f52b4f4c9e4df5e7c5a27b3d69f7a9896f21684b05321d123450d8b82384fcb90a76e8cddb31f7a9a84ccef4e44566414a4f71d8c06669b5595ff00e3fddf620249533c40915fae82e4906cb5366953262c75732ea4dd6ea3131b398d4a2548131f7daf5f7820c62b20de13be0746eb1d1b97e0eff3f22dc1be777255262d44d2dbedbd06937a06163b7f7d2e7809dbcb5158d14f483bc803e278be06c447ff1b7d5833d7b88364e429043434e7598b280b39026c45e0519d1260312a8d3b672e5bfbf2376cb7b4e8d56399a1e3545abc8784b3fae4c683817d45b607f1fa548f22af3795c5c5f9e998eb84a2bb7b54d18eab4ee5d5896b06e725a37abb82d5b070066a9c71f118443ac38a0329869a09bc143052096f6157e590e1b02232b863e0f9bb3a2e7b5205fac20d788afa20b1d9d14bdbdefd95cabaef976781ae2ba1726622073ca2fcd3f94fa69cc98c6d59c5412deac85b5d730723389a78a468af7077d9186667915481fbff3a148a3d8c4e3b9c3245a5a5074ae5615a064848193fe5b62c72b0197a26db0514e3fd14a9831b643e63da4f2a2c6680632dc15b849f41aabd655e864fde78be5075b776c3ae10cf75d419ca64a3d6434f3409555ec8de7460d1db76efe07801e22bea30dcab825fe922e8d68f131687399d52b83f7ee278da4f91b1b791846ac4499027b9ddaf39f1f096a14fa209b489c1171e9f4afbb864d2fc3e79c5bf27d304150fb53ee4647ac3c28cf752c4c6c32f4c148ea3c632f5b08127a583fb0fe4183e6da7c5431119b5cefa96f9dc5170573c56d2b7b0bf0abce3918cba04ca9ef91765ac1cbca9a82db46baa002d0d2f2c211cbf0eb90a12c926d8b89abbfad714103a5bc5f4282c39388bd7610c7e388adf1be5fbda194f52bf4029d33934a5b06a5cec115c71bc930e06ae7a27be02f445005efdbf5bf69d125c34ba991cb6cc80e887fa126f4e9bd401996a17060975bdca95415d6f48969a44ea43b7954a951f2671f6a9ce6752ff9c346653ce271070bc0bc96989f26329fe110e9144ff42791e09974f31c015189494304f8b2e0c48aca5111087f275557aca53d63e9ce34d3f29d94c68fe44239a50daf7e9b40f6b446bb1311bd13178aa615aec65aa1789099b1257c016bb3403a4eb3a0301df6ccd9057fcd8d6dfaeb893817e7e0debab0de47d0596949327e979b15d7f8520cfc8d6b386581a9945f9a66d8a3037b6c62ad8d33f0c14812b7ebe487c6b1c0acd731b55812f56a88c3e86996f850833aa91f5b746b6f74de789fa186ba1b553dc0bcf533463ad5e8fe100fe20c3878f619fc59f2aa92451fa856457f234945b353058ffd32bd5b62c2883946a521a94b34a19d1dd90b4ed3ba18ed0a4119b92de396556acd640186b7ac2106b68b12424193f262ea7eccdb3532b788ff471c09efdbd4b420d971e9c67720defa000e6820c5bb5e1865b0b40b91ea0962672a539ac07084dad39d9bb127bc9dbd9149e3f47f0ed101a3eba0807be78e12503fdd0c9877d8b3110a76dec942955ff4c910626ab4090eec96c80fd5a9c360840240a4b58df366a6891d2a0af38d831839b308506bb17001cdc263d4c6a344e6084ca54cd9f0634bd96a8d102b95860835b7875395e669be525a3223862ebdfdc44897d48a5765172dbdf7444ffe3099acdb989278cfcdc9162ca3ae22d0c50efa9ab20ad7faa3d734b2ab31f1f52ca49a59690f64d2700640e41038a8f12a2dcf9af9845f3eb2de2732d6575c8044ac205efcb4ac2c8696a4e1e1af4e9ce6d5cf6258317ff822544ff29e70ec59445c1f2a826f7d0ba90a86b2035d18a13f816beb0174db9242a1cf6502bfcd536e1bb91cbaaa2b1d6b4003975f079ce9702ea855b4b115976037e68b919164fbce0687d1bda61d7ae4b47283c011ce4b4840b953dac38bcc882641ee74b5130dbd2eb8d633325a54734af8c2b227ba6218c40eedf9b3738d7e8329587879738d0de65ea8d6567245f1deff1994dbc3cbd5940f02908cc36373d7a93dd37a4b6e1f8cb88526dfb4e3b0ae59ac55826a27f68296a958f3caee41775d75b71a76c5e4306b6d384f4ec8cbebe9fcae8fb9c8b6ed51619b1e5777d7ea8f14cc79df9141ad6878ba44f8caae37acafd287ee069ba9e9f10bf1e7e2576c8fa301e1815ac56fdbd96eb2241a8a7773f848d3e01f929a0f6220125cbfb9046d594a3ca3bdd2e8dc908c9e92b49d9175898defba0e7d1749aca31014f8717cc6cb43800e43649270f9e9a71400063d031bce592a5442ea1067bd925a3e44669e48faf0e0b84b56a8da298611942248ea4d706ece8564d7825396b3b7252810e6a9ea7ec5680362b8036cf89475216a33b9c4500795dd4dc35b315e2f25670c55cde2e76123b0aeb4717d4485c2400aafa9137d4dbbf211cd5d3aa4d32b8a49bb73b7490fed3030459ef9c4b54af01f39b14a7dbdcbbbec7d00aa123fb214a556670cda254fc0fca4d8b53104b1262a34c13842a88d9f15f5f05d34ac6dd1dbe593f412861e904875728384b1a5ab6d89334124c24669cffa8de446bcc7f1cf3a1f2a4ad90cc42", 0xe68}, {&(0x7f0000002240)}, {&(0x7f0000002300)="25f82e1aa481775f8f7e768b35e897e720c3835c9a9e0a050d013c655fc17bd178cec6cba26373c8ada075c164ca5e6dcaa312bf689ae4958fdf4618de2a4e3f0cce0d10bb32ee6ec6151b05ec0e44df0c45f93f7b14ea5f89319c8aeb8e0b33541c783213dbad324f4c", 0x6a}], 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="180000000000000029001800360000003a00000000000000"], 0x18}}, {{&(0x7f0000002400)={0xa, 0x4e23, 0x400, @local, 0x7}, 0x1c, &(0x7f0000003580)=[{&(0x7f00000034c0)="bb8ce0ca153156d58c09c2776658af933767c4cc6b200741a6db1e8345abb19a425b3454a913f4f0cc9cb162858d54f679c8a18f4dbc8c735b128572cf3ad4e7627ecf5859948af17a48bc433cc540402e24ef441daa867f96b208e148a8b2487a3cfadf9c703d66ec835ec7d8079fd0bf5d4c18fb28022c90bdf825014b9c0cb41b4c0765cb6ee8384109abefec666a7f56f851b27da7b930", 0x99}], 0x1, &(0x7f00000035c0)}}], 0x3, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 203.339833ms ago: executing program 7 (id=6676): socket(0x40000000015, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3ff, 0x100000001}, 0x46d8, 0x4, 0x0, 0x1, 0x8, 0x2000a, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 177.244415ms ago: executing program 3 (id=6677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, 0xffffffffffffffff, 0x8000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) syz_open_dev$vcsa(&(0x7f0000000640), 0x3, 0x286503) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000140)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000c80)={&(0x7f0000000800)="ba1226", 0x3}}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5aa, &(0x7f0000001940)="$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") 124.38768ms ago: executing program 7 (id=6678): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb01, 0x0) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8a08ff000072ac9d64fbbf36b5deed5d007c5ca200000000007780dcade29c4dc3ffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'erspan0\x00'}) 97.994992ms ago: executing program 3 (id=6679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, 0xffffffffffffffff, 0x8000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) syz_open_dev$vcsa(&(0x7f0000000640), 0x3, 0x286503) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000140)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000c80)={&(0x7f0000000800)="ba1226", 0x3}}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5aa, &(0x7f0000001940)="$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") 53.843616ms ago: executing program 9 (id=6680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="160000000000000004000000ff00000001800000431ff9c04fd0344ed898c9bb7ac8d1b0054c31e09b62a0d205ba7a72fe126051a26b23d3e0d85e65cb542e37f5c8caa73fa3427e32bd5a08b893a74ac5c290616a45c4a5517932fa84c1dd7fc5428ea592ac615fcd958ca001b4f7c14acd5e23e319cc1193c2ed4c63fbff4e6470a76b13efa0a82c8efcb5bb363a49d4d5a53654aed1659d5d9050232221ed421c16396bfed95df8b21b708216ebe80c97cdf168ef42d051b2a16392ff93bff78f0019627af26021596aa1c5e8f484968de907cfa3c8c0d63916bdac7def19593c871a0cc5be", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) dup(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) r5 = socket(0x25, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 26.474068ms ago: executing program 8 (id=6681): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0x1, 0x10008, 0x8, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f0200c00e7f4e32f61bcdf1e42200000000010080000000", 0x2c}], 0x1) 15.741259ms ago: executing program 3 (id=6682): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4010000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000540)='devfreq_monitor\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332abd70000000478d1500000008009900"], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) kexec_load(0xffff, 0x7, &(0x7f0000000c80)=[{&(0x7f0000000740)="c1d04c3caf1b1b000e0d93c7e09cd7f522bedb6f3d4094ed4f307414f7f764eb0ab44fbe68e3f75b68b98a87b81e11f2f56d24f12c8beaefa2be6653bb43f5407f76ba61d53df83b99c6faf5c78ff6dbd64cd77e7e0f2c8496be2df4ac9cab13c01f5f43cfd53f619e3f90", 0x6b, 0x8, 0xa}, {&(0x7f0000000540), 0x0, 0x3, 0x400}, {&(0x7f0000000940)="928b5e5bb7875721620d34c117517396c43e3e6509f60d1ac008c7c972a4ba4be4cdbc0951cceaf79179eb4ad19bc0b8308e732c5b1123e9842f48f5ad72c426c8f61a24a25d5e868c405c0ab976adf058b5caa167d4b788714c442e1c3ddcbe294716f5a3a34f9f7f91ef3628f6023428f8fbba687e5001b7112f6e628186779f39220af949a6e3282d534e404587c5a86098293f3991e30970ee27e6f1e58de6110e6fccf3e0c4a293309c957d16b0ef9f4bb11d075de69272f0ca303bbeb3fe9c6f85aed37ec9a660076b9c764971e2657dbb453386e7a2168352dadd22017e0c0c769aea71d7b10766cc3363a14b8ad3fdc94fcc", 0xf6, 0x8, 0x7}, {&(0x7f0000001380)="526adaf7b815dbe2606c439b0955acf1516bfeb2cbc564f41247d05c605fdd9bd16e56598a3b6d340985b3cbf8490ab8ab4f775ecadcc9b1927bab401c3521ee4c9889a5602c217bb64f6e69654fd3b41c6a10e7d833adb1d2ba0d63c89849ca648ac3af05642ccb2170c6014970938a8dfd43f4a3ccd0f1194b7aa981a650c5282af2f2731f112cdf9bf87fc188ff305ac37848f02688a3f472e49845d72b80ac8d1ee6f4d0cde90ddbce55b83b0ec6caae85d84fb09159dae95981e1699db1d838ca6990b6f82239ec7f73ae2d1eef429a3998f1ea73121122d7b8d925658ce3748a4f0c1322be9739422d4a1b62966b5c3deaaee2683c9c111a1bf1cb8542e53bb754d68447b50790e312b32b2de6a5f528414a7458d023dfe3fefdde93a52cea31f8a893555bd0e993a7dadf6f0920682d834d37d71847caa4130fc81f491a498f0887f43a160aa2e9271e94e0fc147a1c2ca915ef6cf7eae6b9a35ce25e127822973ffa95bae693d15fd75f5d8808ca94b9bc1f243593ebe26bbc95556047964f0fde9b5e4adc631d166939d7df39558504165ca34074d4486a43e750f64a7f66d5a677b2c800ff2b5a453530e14b4df5f29d7d41192e3cf80c31776455ddbf522927ee30224810115084169196ac93a049b9926d0951a74e01f925cd58114c93823fd412a16660631d3f9ecec5250cb3c4e0f01d93adbf1f3313d70274a4da2831cb7284fb6c39a69732a2bb248e9759bfb1bd17b9a5d1c11fd06629c9562aa4fcbf131ab9d78e7b59476ec1f922e72f647e8f356bde22c471c9dc5d7c15960217f425e9de7e14fd08b55a52f247e3995c302c08d58cf764e8c919493367ef72d44185f84fd93b86f00f504d33c9112aed5da3eea702b6f032bfb4fb2ef65f241ff529532eba46b7dab5c64e01b0bef519eca74df1c587a43a4b8a282377c2fae63038d85a90e33eaeba169c6d615b673f08532984830d63f4f38fff956c0efcfa56c9486389f53d417dc401f15320b4f5f5f8e0496ec3ba93f6d4dbbac19f851368cabe4da44a260f89f955271c899484a8c77807134af8a8f56b1f7b5243f2a895aeda2b6f7b14d76f229ecc2229b377e15ccb5fe5c6ba8800d053935c5900ea75a9df50a524446f4cef566b648fc395e633262cdcaf46547fadfaa46dad373c78a14ecda420500e8c2c72c8d85381b1fa5c6186ef992fefd43a9d382efe376fe178e10f66700a1713f600ee299030bc4999561b2fbd3a84cea3f57a1dfb09d280b2ffbf91955ecb122ebd1b9723e27256cc429bf95f59c6a3d40f684b40c77d0e27bd5794afafc2ce2c873d9e94eea3fc1fa5d045779ce10a9d75afe583f2a7399d0e1018556c3a545017085f00c8b9197bfedb4f6c61f9d6d2254988a23092915443bdac8bd923cdcdb4150f46a39c6f0c0b3321edb569f7d9efa0a7825e3afc5b9078073fa43edd254c6ac947358f25d6c808676788454ed3787b8c7453da66117e1470f7163e9e92670026fca2ba7de3b331f8f3263e95194768b8f812026af9d48c8d3fcd85f34d7220b12172182d9635fb8cc35464e68ea017a300844c247f58cebf953062918f5e2bcf88bee92df93187e1278fda7e3cc05618cd8defd063532ea9aa1682f2909c17624d5f8862b61edde2550627a76faad3b1993bd7973faac1b0f6670e20f5c7574be49cf8a916fd4a4ff89778dc175fee2c10683029f46f7e0bcc67ac3158d03ec01071504a284510c608882bef4f7f0d688420bee26daab822064716c024d4d6087dbc1d3ade45094551c525adf5f12bd7092dd3d448679c16609c7080934651fb0fc2678e25e014866a3497cdddbab979c6428c596e3a52fea4a8050a50c5cc9c406a49d3465aecd82a8a0d137a4c28a0ac100b843c30587b1e03af37ea4163f14d7cbbcae201e8d686e7c2f013c8c563a3c907c607c1a477a19bc387855bc341567865a8f0de3e947a1e3132e522bb85cf7333930c4ad6ac2697dccad4a824e6dc637422f7902fdef0ff952fed3409c5998ad82ab083c3fe336392541a388226324a3634f9c59a5adfe53b49bd2ef65583547e708a2663ba5910ab6fdd05897f5cccb1ca7f0f9e3b4650364f26d2ee39cae3f10249e7d6a624d49a59ac6a16314bf6778a2509a3177ccdeaebd08d1f16cffaca44f736dab8f414945135338fc0c6ad29f37918ac13b341a60df5422cd4eeb6fc049d36f969f2a488e8e5e61aba427f5c08584a89be5f9e7fd82f9a4e6fcdd3fc9d16030778b14d57dbc88f5b6e43488017907052463187fb88278be9e6508878165a5b08287bc4c5e73d7d920d9933efdd8e10280bffe7ea97ff01e8389431de7727044e35abb9bcc399e549b82889f017473e42cad2642cf6123c611cf8decd6df7831d6eab75f3e3a10de62a37b1b76e5fab108752984921f531dc83ab7f6eb58cc785308a4277caa7e9fd7e146d8177a112088b4a348ee72f331e570c4b9d151dadb94952c842c6eb3e353c995345a82027ca2bac4c7c0a04801cb06d228db734e6b99a7f8aede0b227d804b2c7a3e1424285d2506df0abb1245f9f28f6d61d62f824797b6073ffde33033c453e01244aaefc02f11e94d768f34e9eda0061cab2116c8f06765fa4ac05a2cb2bea0ddae31f49593dd7fb4dccf467649b161dc87f2c87b2e2a1078fcf7887f8a8b7179ef76ee1725c1292a3a2f6f7584f268d5d17e10ecdb405f13b5dcc9d28a3dd0424d213dc79c0b8cd360fc185f5c8330e2d479fb960ce819c1738762eae99b3a9b06fdf5aa3566d6606ac67708af43e77bf300323b122161fce7cb87232fb11275f94cb5b004ebb745ced636fcdf147008ec178be2e2226fe6390541afbba806e95a54c8ba949e8f730fbf503cec7727df62be325fd8f3fa0964386a74ffba356867dcf40997fbad3ab0ea87d5c5831372e08a5fcdfe2fbdccdb13aa3bc6cdac0552d01346ac9b2af99d2cc6dcd1f37414b0c205421d68c7840427f259a94518b87d35529e85cf0612f31cc1c72c6f62f0510bdd83d6dd22830815cb42d11c50a97e02b403af489aefcd1fb4d76afa4bcb4d4f0d8d417e5fb7789bdb03ad7ab2ee5a7a19f6e6c34dd21d5ab3b6bfc9f7a1b28d98b8ec7189495c66a30c93e494b9f9d9ae6ebe8c90ac3a2225c7f3712ca040c7707d5671b55a4843e740abee31c06cf580f23990cad1fd064f10663da884e63e30107b90a7f0e41361b9757e25f47cc034291934f1d119ff17112d988ee6518c2bb361f3ccb993de11f3a7f7ee0dca23c6a7895d96095c71f0a53ce6a59e34d02ffcbdbf7857b950b2791c9d9a8d9411031461371e20c01d091b0070aefde03e64a86320c789bd70709072065df6272d64c006e52977cc15f2f92bc2209c06d8defa8734ad113570ad0cf3a6ad87147969028ab5e7eda54e0fcdc24e8e26c9004a5bb9b67888c30d53893b5b0c90662d1f2caf2abbc636bd85b8b3a3975e0f61331a5e4cbd98a2778776655097a5e3a7133c965c26661892dceccdf5c11cacb244cc88cef58da3c2a1b05364eb1c172edea64e8fabef89b7c96c3304b4034e7de26c4288b470aeb6d8d95e368ff5a62405cc1c087418ecfc72ce4ca650fa6e7866310132f665687ce9f0ac683385d44726611a486437800ae6c1478f73d10e0c5ed8d8eb5a8dd4e39520664f6c9edaea9034d87505372df05d919d9ca686951003f546d12d472611bcb4c31769f952a8f90936f2a3c7490dad5d0799d5b0b4698d3db400fe8db0369ae2b3613a9868fad276f6247f6dfbcd46729007299e11743757323872c2f15f89c68b7e53e0f6ec46f6e6e4a005a599ea358caf6fbd527b7f3c8576becffe29072f0ddc6c049361ffb8e9645fb0a5743ea3d5d850e8a1c13afa09c8ef3e7bd3d5ae091e9f3f1f60c5f41523aec2ad68aa0caaaf30386b24bc20249e37248b54bb66e6f5e31e7d5874c93f906ac1db626d889345e832734eecf23d9541d07f800906b2d1605ac40cd714cda1ef30978e34dd71c918745d54c47ce2dfa2ac7b675b82af794fe0d69efe8879a3cd47842403fb6e0ed442dd0afb1bd57065e95a9fb9c30fb3811346d9391d2a38b237464d22ea5d41fdcb858e6c6afd03bc47a56b015544f597afd47b11169b4a1a5b0fa0dbc7d958ff7f7888e790366e8c28cebe3653003a84bdaf1488a89e506942d00a6a8a473a7c341f6b84ba17ae6e6d86162a5c3bdaa586eab73b8611beee7ae5e12222f13e6862dd726c86fd867595214281224a836f65521ac3b5afe1a6848c8ba1a7fc8745684f69bc8faa8dac71dff0e1d557b73f96657a415b5ae0647dd2111d7f1a7e43f28fb062d315ed291d4952d8d2e92aebcbe9967b834e640b5a734c7cc70c73fe0d0d18d96fd3c33f8303394e88425cd53fa33c0b02fc8ecf3c5434d38e87538c8e5eb90b41112e246c0e5cfd5231edf47a76d2c71714498942e5cd6e067960bdff8bad1a4a5020ae1aa4303dcf5280d7d212abef86a3514b3c429c2c48d4c8d6a5ac2353e9f1e5d7ef4e94c1320735f7ca6a18cdb0053ba5ba291c4fd3ffb6b129cda309df89bb979f549cbf3d91b123ceed0864cbaccb75b76b336321e6118b69e067f4ff87104c9ea170d3d5943bc6c15dbfe962bb6cf4715267b51139641170e9996205fe22b4a7d416423d2640783c44865093645a93420bba267e84c7649211d4b6d6c209b052a6d9402b4b7672d7647f794c3765adce8187f6bebb3a139d8d1490854c3da2773e48fa85e5abb31d6dc30cfe838285dcfbad45e937828530545f5c2fa133a35a911fabba747a71f9e6c3823ad17bffffde7be590a81a2077c953c504bc561a08d2fed410e7d9bb820c62b1d7fc3f5145a8d90daf986af52536d728c266560db6a39e2edbc224a9ad449abbcd9dcf3d5c0342902f30db78c4d5652493306b24f049d2ef5f8770c9f7f306c034183be2eddc77871c7f9f7ca95d496351df69032b227c88b8177dc16fe5017e8039916b4c4f7d38ad3e83ab4f5a35401fd13795b32f98cac55bbe11c09572320056677594a24e90996792848797d9407841d2b82968360662493a5e4f594d5ad885b0749643c90c3159a3d95049c10666d2bcfacf1102ba41322aaf75b850da3076e2b23ef2dff0e71d2b13f2771a42a77c2ff465dddd72ad907728faba95baa71005a1856bae8eb638c86cf1ba49a69827fa893952a75edecb83d61a1e44d71368b7b08d454fc5e094d5e6c89ad5c2859b2bc2548ee761500c6d9a985131ea2551258251fb872cb62f4eb308664febccfbb23b3bb900a4c21d3555ffa7ac7c48dcc9ae1acdb7d958b0356055a51d511054c656971e1a46d9ad47718f553cd016b31a9555b74eb56d80fe236d9338eb70660180a9e110af4fd3265e055817f5455b76e1bedf6f6cca7c0ce7ef739f41cbbbfdf6ca21617c325a9b6161900ca4fd43c78a235cdb67ec83d4944eb74e3ce1e8c25f161717ae906d207537103333b1c3c72e5d36d623e3a5539b890f1a56c8632b8a9645450d173785676888d7bdb7021f720020044c076505093acf617c7ca0c058585eabd9da3cab9fd1712395ee0dc5c91ac149561a18df21633eaeda23411b3efed64fd5ab8c47e3449b97c4561820f8be01c4d0a8d291adeef7bd618b5904801361a741a120a14899dbe88abd48ebb209b7ae914", 0xfc0, 0x2, 0x8}, {&(0x7f0000000640)="73b91bebef43", 0x6, 0x1000, 0x3}, {&(0x7f0000000ac0)="bd1c744bebb035e845646e2ac9fd5938f6a4534794035de7683441e9e934fb4ed24186fcf6c505304e9598a5de601ab8fa1c724210b411abd2fd8b03cd4d5ee74b9bc0d0f31c9500f89ba38ea4626669531b35452782a3a023d25669c215aed237e060be9a2778a689b0894ea2d7b9a9834b844d9b408ef4116034a31ced736e2d6904a6a6eee4f40760c86c68b8472711ffb8c6884a25471810a89ebc1f05d7a699d92f2e37280a2b7c22504a1067d5cc0b257bb742a9019e05f8417c0cf726d87193452428aec7069120a9ae6e18bc64ccf3addda4093605bff12dcc0109", 0xdf, 0x239, 0x9}, {0x0, 0x0, 0x8, 0x58ce}], 0x2a0000) read(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0001"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2401c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x503, 0x0) 14.806108ms ago: executing program 9 (id=6683): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 0s ago: executing program 9 (id=6684): r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x3c}) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)) (async) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x1a, 0x8, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x6}}]}, 0x30}}, 0x4890) kernel console output (not intermixed with test programs): 04804][T16936] __se_sys_poll+0xdd/0x200 [ 230.904826][T16936] __x64_sys_poll+0x43/0x50 [ 230.904875][T16936] x64_sys_call+0x27d2/0x2ff0 [ 230.904895][T16936] do_syscall_64+0xd2/0x200 [ 230.904917][T16936] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 230.904935][T16936] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 230.904981][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.905002][T16936] RIP: 0033:0x7f36dffaebe9 [ 230.905015][T16936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.905029][T16936] RSP: 002b:00007f36dea0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 230.905044][T16936] RAX: ffffffffffffffda RBX: 00007f36e01d5fa0 RCX: 00007f36dffaebe9 [ 230.905054][T16936] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000200000b2c000 [ 230.905064][T16936] RBP: 00007f36dea0f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.905139][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.905151][T16936] R13: 00007f36e01d6038 R14: 00007f36e01d5fa0 R15: 00007fffac7f1f68 [ 230.905169][T16936] [ 231.133546][T16939] lo speed is unknown, defaulting to 1000 [ 231.266219][T16940] lo speed is unknown, defaulting to 1000 [ 231.622912][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5265'. [ 231.734287][T16950] netlink: 'syz.7.5268': attribute type 1 has an invalid length. [ 231.747985][T16950] 8021q: adding VLAN 0 to HW filter on device bond8 [ 231.762061][T16950] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 231.776507][T16950] bond8: (slave batadv4): making interface the new active one [ 231.785658][T16950] bond8: (slave batadv4): Enslaving as an active interface with an up link [ 231.808302][T16955] Driver unsupported XDP return value 0 on prog (id 3238) dev N/A, expect packet loss! [ 231.923719][T16959] lo speed is unknown, defaulting to 1000 [ 232.067071][T16966] lo speed is unknown, defaulting to 1000 [ 232.301277][T16979] lo speed is unknown, defaulting to 1000 [ 232.659292][T16981] netlink: 'syz.9.5279': attribute type 153 has an invalid length. [ 232.804606][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5281'. [ 232.815988][T16989] bridge0: entered promiscuous mode [ 232.822374][T16989] bridge0: port 3(macvlan0) entered blocking state [ 232.828909][T16989] bridge0: port 3(macvlan0) entered disabled state [ 232.835646][T16989] macvlan0: entered allmulticast mode [ 232.841179][T16989] bridge0: entered allmulticast mode [ 232.847456][T16989] macvlan0: left allmulticast mode [ 232.852654][T16989] bridge0: left allmulticast mode [ 232.858487][T16989] bridge0: left promiscuous mode [ 232.864160][T16990] random: crng reseeded on system resumption [ 232.880895][T16990] Restarting kernel threads ... [ 232.886231][T16990] Done restarting kernel threads. [ 232.935788][T16995] netlink: 'syz.7.5283': attribute type 1 has an invalid length. [ 232.949253][T16995] 8021q: adding VLAN 0 to HW filter on device bond9 [ 232.969216][T16998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.974816][T16995] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 232.977961][T16998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.995150][T16995] bond9: (slave batadv5): making interface the new active one [ 233.003791][T16995] bond9: (slave batadv5): Enslaving as an active interface with an up link [ 233.526015][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.536095][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.747311][T17026] random: crng reseeded on system resumption [ 233.759950][T17026] Restarting kernel threads ... [ 233.771449][T17026] Done restarting kernel threads. [ 233.816670][T17029] 9pnet_fd: Insufficient options for proto=fd [ 233.888763][T17029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.905534][T17029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.920696][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5298'. [ 233.928240][T17030] lo speed is unknown, defaulting to 1000 [ 234.297430][T17045] 9pnet_fd: Insufficient options for proto=fd [ 234.356128][T17046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.397899][T17046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.567279][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 234.567414][ T29] audit: type=1326 audit(1755636811.875:29498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.597552][ T29] audit: type=1326 audit(1755636811.875:29499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.621227][ T29] audit: type=1326 audit(1755636811.875:29500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.644900][ T29] audit: type=1326 audit(1755636811.875:29501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.668447][ T29] audit: type=1326 audit(1755636811.875:29502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.692080][ T29] audit: type=1326 audit(1755636811.875:29503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.715614][ T29] audit: type=1326 audit(1755636811.875:29504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.739236][ T29] audit: type=1326 audit(1755636811.875:29505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.762794][ T29] audit: type=1326 audit(1755636811.875:29506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.786380][ T29] audit: type=1326 audit(1755636811.875:29507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17054 comm="syz.1.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 234.975333][T17059] lo speed is unknown, defaulting to 1000 [ 234.978622][T17063] 9pnet_fd: Insufficient options for proto=fd [ 235.062566][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.073462][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.657008][T17078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.665614][T17078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.721116][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5319'. [ 235.732690][T17080] bridge0: entered promiscuous mode [ 235.739029][T17080] bridge0: port 3(macvlan2) entered blocking state [ 235.745754][T17080] bridge0: port 3(macvlan2) entered disabled state [ 235.752477][T17080] macvlan2: entered allmulticast mode [ 235.758033][T17080] bridge0: entered allmulticast mode [ 235.764066][T17080] macvlan2: left allmulticast mode [ 235.769226][T17080] bridge0: left allmulticast mode [ 235.772665][T17081] random: crng reseeded on system resumption [ 235.775320][T17080] bridge0: left promiscuous mode [ 235.791597][T17081] Restarting kernel threads ... [ 235.796603][T17081] Done restarting kernel threads. [ 235.866301][T17085] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17085 comm=syz.8.5321 [ 236.265470][T17094] lo speed is unknown, defaulting to 1000 [ 236.281405][T17108] 9pnet_fd: Insufficient options for proto=fd [ 236.304380][ T124] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.353403][ T124] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.405969][ T124] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.433697][T17094] chnl_net:caif_netlink_parms(): no params data found [ 236.478210][ T124] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.518248][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.525464][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.550993][T17094] bridge_slave_0: entered allmulticast mode [ 236.563509][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5339'. [ 236.572815][T17094] bridge_slave_0: entered promiscuous mode [ 236.602471][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.609763][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.620525][T17094] bridge_slave_1: entered allmulticast mode [ 236.627540][T17094] bridge_slave_1: entered promiscuous mode [ 236.646913][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.647037][T17143] random: crng reseeded on system resumption [ 236.657673][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.683586][T17094] team0: Port device team_slave_0 added [ 236.705098][T17094] team0: Port device team_slave_1 added [ 236.714857][T17143] Restarting kernel threads ... [ 236.722689][T17143] Done restarting kernel threads. [ 236.741949][T17149] 9pnet_fd: Insufficient options for proto=fd [ 236.749243][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.756299][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.782293][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.816186][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.823288][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.849711][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.876817][ T124] bridge_slave_1: left allmulticast mode [ 236.882642][ T124] bridge_slave_1: left promiscuous mode [ 236.888381][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.897611][ T124] bridge_slave_0: left allmulticast mode [ 236.903333][ T124] bridge_slave_0: left promiscuous mode [ 236.909114][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.927299][T17159] random: crng reseeded on system resumption [ 236.939210][T17161] netlink: 'syz.8.5348': attribute type 1 has an invalid length. [ 236.951778][T17159] Restarting kernel threads ... [ 236.956894][T17159] Done restarting kernel threads. [ 237.034927][ T124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.044083][ T124] bond_slave_0: left promiscuous mode [ 237.052658][ T124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.053052][T17166] FAULT_INJECTION: forcing a failure. [ 237.053052][T17166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.074378][T17166] CPU: 1 UID: 0 PID: 17166 Comm: syz.3.5350 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.074408][T17166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.074420][T17166] Call Trace: [ 237.074427][T17166] [ 237.074434][T17166] __dump_stack+0x1d/0x30 [ 237.074453][T17166] dump_stack_lvl+0xe8/0x140 [ 237.074471][T17166] dump_stack+0x15/0x1b [ 237.074497][T17166] should_fail_ex+0x265/0x280 [ 237.074517][T17166] should_fail+0xb/0x20 [ 237.074534][T17166] should_fail_usercopy+0x1a/0x20 [ 237.074554][T17166] _copy_from_user+0x1c/0xb0 [ 237.074575][T17166] memdup_user+0x5e/0xd0 [ 237.074630][T17166] strndup_user+0x68/0xb0 [ 237.074653][T17166] __se_sys_mount+0x4d/0x2e0 [ 237.074674][T17166] ? fput+0x8f/0xc0 [ 237.074697][T17166] ? ksys_write+0x192/0x1a0 [ 237.074760][T17166] __x64_sys_mount+0x67/0x80 [ 237.074842][T17166] x64_sys_call+0x2b4d/0x2ff0 [ 237.074859][T17166] do_syscall_64+0xd2/0x200 [ 237.074880][T17166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 237.074968][T17166] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.074991][T17166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.075012][T17166] RIP: 0033:0x7f96f2c2ebe9 [ 237.075026][T17166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.075110][T17166] RSP: 002b:00007f96f168f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.075130][T17166] RAX: ffffffffffffffda RBX: 00007f96f2e55fa0 RCX: 00007f96f2c2ebe9 [ 237.075142][T17166] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 237.075154][T17166] RBP: 00007f96f168f090 R08: 0000200000000140 R09: 0000000000000000 [ 237.075164][T17166] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 237.075175][T17166] R13: 00007f96f2e56038 R14: 00007f96f2e55fa0 R15: 00007ffd24b8bcc8 [ 237.075191][T17166] [ 237.076015][ T124] bond_slave_1: left promiscuous mode [ 237.269689][ T124] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 237.277965][ T124] dummy0: left promiscuous mode [ 237.283483][ T124] bond0 (unregistering): Released all slaves [ 237.291839][ T124] bond1 (unregistering): Released all slaves [ 237.300512][ T124] bond2 (unregistering): (slave batadv0): Releasing active interface [ 237.309562][ T124] bond2 (unregistering): Released all slaves [ 237.317746][ T124] bond3 (unregistering): Released all slaves [ 237.326637][ T124] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 237.335451][ T124] bond4 (unregistering): Released all slaves [ 237.344360][ T124] bond5 (unregistering): (slave batadv2): Releasing backup interface [ 237.353194][ T124] bond5 (unregistering): Released all slaves [ 237.362421][ T124] bond6 (unregistering): Released all slaves [ 237.371314][ T124] bond7 (unregistering): (slave batadv3): Releasing active interface [ 237.381250][ T124] bond7 (unregistering): Released all slaves [ 237.390090][ T124] bond8 (unregistering): (slave batadv4): Releasing active interface [ 237.398870][ T124] bond8 (unregistering): Released all slaves [ 237.407513][ T124] bond9 (unregistering): (slave batadv5): Releasing active interface [ 237.416501][ T124] bond9 (unregistering): Released all slaves [ 237.437147][T17161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.453810][T17164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.465580][T17164] bond3: (slave batadv0): making interface the new active one [ 237.474992][T17164] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 237.493291][T17176] netlink: 'syz.9.5354': attribute type 153 has an invalid length. [ 237.517013][ T124] tipc: Left network mode [ 237.571591][T17094] hsr_slave_0: entered promiscuous mode [ 237.589905][T17094] hsr_slave_1: entered promiscuous mode [ 237.621241][ T124] hsr_slave_0: left promiscuous mode [ 237.636510][ T124] hsr_slave_1: left promiscuous mode [ 237.644868][ T124] veth1_macvtap: left promiscuous mode [ 237.652152][ T124] veth0_macvtap: left promiscuous mode [ 237.657901][ T124] veth1_vlan: left promiscuous mode [ 237.663419][ T124] veth0_vlan: left promiscuous mode [ 238.160785][ T124] team0 (unregistering): Port device team_slave_1 removed [ 238.172337][ T124] team0 (unregistering): Port device team_slave_0 removed [ 238.229706][T17196] lo speed is unknown, defaulting to 1000 [ 238.319052][T17202] lo speed is unknown, defaulting to 1000 [ 238.581561][T17213] netlink: 'syz.1.5365': attribute type 1 has an invalid length. [ 238.658179][T17213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.852007][T17227] netlink: 'syz.9.5371': attribute type 3 has an invalid length. [ 238.954498][T17094] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 238.965088][T17094] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 238.981409][T17094] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 238.993232][T17094] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 239.057997][T17094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.074538][T17094] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.083971][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.091061][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.139710][T17094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.150164][T17094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.163205][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.170365][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.215475][T17262] netlink: 'syz.1.5383': attribute type 1 has an invalid length. [ 239.228870][T17262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.268238][T17259] syzkaller0: entered promiscuous mode [ 239.273824][T17259] syzkaller0: entered allmulticast mode [ 239.437524][T17274] netlink: 'syz.9.5385': attribute type 3 has an invalid length. [ 239.478100][T17094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.645644][T17287] lo speed is unknown, defaulting to 1000 [ 239.702115][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 239.702194][ T29] audit: type=1400 audit(1755636816.995:29553): avc: denied { setopt } for pid=17305 comm="syz.8.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.728327][ T29] audit: type=1400 audit(1755636816.995:29554): avc: denied { sqpoll } for pid=17305 comm="syz.8.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 239.793149][T17094] veth0_vlan: entered promiscuous mode [ 239.805665][T17094] veth1_vlan: entered promiscuous mode [ 239.821384][ T29] audit: type=1400 audit(1755636817.135:29555): avc: denied { bind } for pid=17305 comm="syz.8.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.848350][T17306] netlink: 536 bytes leftover after parsing attributes in process `syz.8.5391'. [ 239.858702][T17094] veth0_macvtap: entered promiscuous mode [ 239.868018][T17094] veth1_macvtap: entered promiscuous mode [ 239.880601][T17094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.888874][ T29] audit: type=1400 audit(1755636817.155:29556): avc: denied { listen } for pid=17305 comm="syz.8.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.908708][ T29] audit: type=1400 audit(1755636817.185:29557): avc: denied { bind } for pid=17305 comm="syz.8.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 239.933693][T17094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.944879][ T3947] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.962183][T17325] 9pnet_fd: Insufficient options for proto=fd [ 239.968760][ T3947] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.971242][T17327] netlink: 'syz.1.5401': attribute type 1 has an invalid length. [ 239.990608][ T3947] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.015593][ T29] audit: type=1400 audit(1755636817.325:29558): avc: denied { mounton } for pid=17094 comm="syz-executor" path="/root/syzkaller.qxLArD/syz-tmp" dev="sda1" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 240.027513][T17327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.040269][ T29] audit: type=1400 audit(1755636817.325:29559): avc: denied { mount } for pid=17094 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.069187][ T29] audit: type=1400 audit(1755636817.325:29560): avc: denied { mount } for pid=17094 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 240.091321][ T29] audit: type=1400 audit(1755636817.325:29561): avc: denied { mounton } for pid=17094 comm="syz-executor" path="/root/syzkaller.qxLArD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 240.093125][ T3947] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.118416][ T29] audit: type=1400 audit(1755636817.325:29562): avc: denied { mounton } for pid=17094 comm="syz-executor" path="/root/syzkaller.qxLArD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=64037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 240.165910][T17327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5401'. [ 240.309609][T17357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5412'. [ 240.320514][T17359] random: crng reseeded on system resumption [ 240.380111][T17359] Restarting kernel threads ... [ 240.398773][T17359] Done restarting kernel threads. [ 240.519694][T17383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5425'. [ 240.686912][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5433'. [ 240.689752][T17396] lo speed is unknown, defaulting to 1000 [ 241.415025][T17428] random: crng reseeded on system resumption [ 241.427779][T17428] Restarting kernel threads ... [ 241.433035][T17428] Done restarting kernel threads. [ 241.594011][T17454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17454 comm=syz.8.5454 [ 241.644511][T17463] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5458'. [ 241.932199][T17490] syzkaller0: entered promiscuous mode [ 241.937672][T17490] syzkaller0: entered allmulticast mode [ 242.546764][T17505] netlink: 536 bytes leftover after parsing attributes in process `syz.9.5473'. [ 242.587441][T17513] netlink: 'syz.9.5477': attribute type 3 has an invalid length. [ 242.625767][T17517] netlink: 'syz.1.5478': attribute type 1 has an invalid length. [ 242.638573][T17517] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.647896][T17517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5478'. [ 242.714337][T17528] syzkaller0: entered promiscuous mode [ 242.719901][T17528] syzkaller0: entered allmulticast mode [ 242.761641][T17536] random: crng reseeded on system resumption [ 242.771654][T17536] Restarting kernel threads ... [ 242.776885][T17536] Done restarting kernel threads. [ 242.802646][T17538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5489'. [ 242.844191][T17541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.854070][T17541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.864157][T17541] syzkaller1: entered promiscuous mode [ 242.870528][T17541] syzkaller1: entered allmulticast mode [ 243.020686][T17546] lo speed is unknown, defaulting to 1000 [ 243.440627][T17552] netlink: 'syz.7.5495': attribute type 1 has an invalid length. [ 243.448730][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5495'. [ 243.510375][T17560] random: crng reseeded on system resumption [ 243.528961][T17560] Restarting kernel threads ... [ 243.534340][T17560] Done restarting kernel threads. [ 243.610338][T17572] syzkaller0: entered promiscuous mode [ 243.615835][T17572] syzkaller0: entered allmulticast mode [ 243.661727][T17586] 8021q: VLANs not supported on ip6gre0 [ 243.670724][T17588] 9pnet_fd: Insufficient options for proto=fd [ 243.696857][T17593] random: crng reseeded on system resumption [ 243.708671][T17593] Restarting kernel threads ... [ 243.714647][T17593] Done restarting kernel threads. [ 243.856861][T17614] 9pnet_fd: Insufficient options for proto=fd [ 243.884252][T17612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.895973][T17618] 8021q: VLANs not supported on ip6tnl0 [ 243.904224][T17612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.925615][T17622] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17622 comm=syz.7.5529 [ 243.941319][T17612] syzkaller1: entered promiscuous mode [ 243.946993][T17612] syzkaller1: entered allmulticast mode [ 244.033454][T17633] random: crng reseeded on system resumption [ 244.045703][T17633] Restarting kernel threads ... [ 244.050956][T17633] Done restarting kernel threads. [ 244.124570][T17634] lo speed is unknown, defaulting to 1000 [ 244.193684][T17636] lo speed is unknown, defaulting to 1000 [ 244.261896][T17636] chnl_net:caif_netlink_parms(): no params data found [ 244.285619][ T2293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.310346][T17636] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.317397][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.324796][T17636] bridge_slave_0: entered allmulticast mode [ 244.331737][T17636] bridge_slave_0: entered promiscuous mode [ 244.340566][ T2293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.351960][T17636] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.359048][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.366400][T17636] bridge_slave_1: entered allmulticast mode [ 244.372820][T17636] bridge_slave_1: entered promiscuous mode [ 244.389016][T17636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.399758][T17636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.411144][ T2293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.438718][T17636] team0: Port device team_slave_0 added [ 244.445457][T17636] team0: Port device team_slave_1 added [ 244.460087][T17636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.467024][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.493000][T17636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.505694][ T2293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.526554][T17636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.533759][T17636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.559718][T17636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.607690][T17636] hsr_slave_0: entered promiscuous mode [ 244.616460][T17636] hsr_slave_1: entered promiscuous mode [ 244.622566][T17636] debugfs: 'hsr0' already exists in 'hsr' [ 244.628395][T17636] Cannot create hsr debugfs directory [ 244.698243][ T2293] bridge_slave_1: left allmulticast mode [ 244.704138][ T2293] bridge_slave_1: left promiscuous mode [ 244.709834][ T2293] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.851762][ T2293] bridge_slave_0: left allmulticast mode [ 244.857424][ T2293] bridge_slave_0: left promiscuous mode [ 244.863172][ T2293] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.906687][T17659] 9pnet_fd: Insufficient options for proto=fd [ 245.121737][ T2293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.130924][ T2293] bond_slave_0: left promiscuous mode [ 245.137234][ T2293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.146099][ T2293] bond_slave_1: left promiscuous mode [ 245.152108][ T2293] bond0 (unregistering): Released all slaves [ 245.160615][ T2293] bond1 (unregistering): Released all slaves [ 245.168707][ T2293] bond2 (unregistering): Released all slaves [ 245.177087][ T2293] bond3 (unregistering): (slave batadv0): Releasing active interface [ 245.186556][ T2293] bond3 (unregistering): Released all slaves [ 245.195264][ T2293] bond4 (unregistering): (slave batadv1): Releasing active interface [ 245.204683][ T2293] bond4 (unregistering): Released all slaves [ 245.225791][T17656] lo speed is unknown, defaulting to 1000 [ 245.277444][ T2293] IPVS: stopping master sync thread 15876 ... [ 245.305877][ T2293] hsr_slave_0: left promiscuous mode [ 245.311983][ T2293] hsr_slave_1: left promiscuous mode [ 245.320445][ T2293] veth1_macvtap: left promiscuous mode [ 245.326033][ T2293] veth0_macvtap: left promiscuous mode [ 245.384333][ T2293] team0 (unregistering): Port device team_slave_1 removed [ 245.395586][ T2293] team0 (unregistering): Port device team_slave_0 removed [ 245.460648][T17674] __nla_validate_parse: 6 callbacks suppressed [ 245.460662][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5545'. [ 245.476295][T17674] 8021q: VLANs not supported on ip6tnl0 [ 245.498296][T17679] netlink: 536 bytes leftover after parsing attributes in process `syz.1.5547'. [ 245.518610][T17680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17680 comm=syz.7.5548 [ 245.591650][T17636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.592818][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 245.592855][ T29] audit: type=1326 audit(1755636822.905:29568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.628428][ T29] audit: type=1326 audit(1755636822.905:29569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.633169][T17636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.652075][ T29] audit: type=1326 audit(1755636822.905:29570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.652154][ T29] audit: type=1326 audit(1755636822.905:29571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.706367][ T29] audit: type=1326 audit(1755636822.905:29572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.730160][ T29] audit: type=1326 audit(1755636822.915:29573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.753911][ T29] audit: type=1326 audit(1755636822.915:29574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.778336][ T29] audit: type=1326 audit(1755636823.015:29575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.781216][T17636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.801965][ T29] audit: type=1326 audit(1755636823.015:29576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01e86ebe9 code=0x7ffc0000 [ 245.802071][ T29] audit: type=1326 audit(1755636823.025:29577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb01e86d550 code=0x7ffc0000 [ 245.861381][T17636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.906638][T17636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.917323][T17636] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.935079][T17636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.945487][T17636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.972253][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.979351][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.997387][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.004559][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.087385][T17636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.112506][T17715] lo speed is unknown, defaulting to 1000 [ 246.435961][T17636] veth0_vlan: entered promiscuous mode [ 246.447090][T17636] veth1_vlan: entered promiscuous mode [ 246.463332][T17636] veth0_macvtap: entered promiscuous mode [ 246.470871][T17636] veth1_macvtap: entered promiscuous mode [ 246.484096][T17636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.497719][T17636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.540371][ T3963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.551796][ T3963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.563097][ T3963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.575248][ T124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.606773][T17735] netlink: 'syz.3.5535': attribute type 153 has an invalid length. [ 246.803604][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5566'. [ 246.886977][T17747] netlink: 'syz.9.5567': attribute type 3 has an invalid length. [ 247.496944][T17773] syzkaller0: entered promiscuous mode [ 247.502470][T17773] syzkaller0: entered allmulticast mode [ 247.549254][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5583'. [ 247.559953][T17786] 8021q: VLANs not supported on sit0 [ 247.594198][T17792] netlink: 'syz.1.5586': attribute type 153 has an invalid length. [ 247.869137][T17807] syzkaller0: entered promiscuous mode [ 247.874769][T17807] syzkaller0: entered allmulticast mode [ 247.973966][T17812] netlink: 'syz.9.5593': attribute type 3 has an invalid length. [ 247.994380][T17810] lo speed is unknown, defaulting to 1000 [ 248.063494][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5595'. [ 248.073057][T17818] 8021q: VLANs not supported on sit0 [ 248.103971][T17822] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17822 comm=syz.9.5597 [ 248.392723][T17835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5603'. [ 248.472402][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.481428][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.854571][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5614'. [ 248.865341][T17858] 8021q: VLANs not supported on ip6gre0 [ 248.884116][T17860] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5615'. [ 248.962979][T17870] netlink: 'syz.9.5620': attribute type 1 has an invalid length. [ 248.976439][T17870] 8021q: adding VLAN 0 to HW filter on device bond9 [ 249.043195][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5625'. [ 249.203987][T17902] netlink: 'syz.8.5635': attribute type 1 has an invalid length. [ 249.210041][T17900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.222898][T17900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.233877][T17902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.266574][T17907] syzkaller0: entered promiscuous mode [ 249.272238][T17907] syzkaller0: entered allmulticast mode [ 249.309008][T17912] syzkaller0: entered promiscuous mode [ 249.314585][T17912] syzkaller0: entered allmulticast mode [ 249.385100][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5643'. [ 249.488276][T17941] netlink: 'syz.9.5649': attribute type 1 has an invalid length. [ 249.522918][T17941] 8021q: adding VLAN 0 to HW filter on device bond10 [ 249.702099][T17962] lo speed is unknown, defaulting to 1000 [ 250.075180][T17976] netlink: 'syz.1.5663': attribute type 153 has an invalid length. [ 250.089515][T17982] 8021q: VLANs not supported on ip6gre0 [ 250.133554][T17990] netlink: 'syz.7.5669': attribute type 3 has an invalid length. [ 250.157601][T17988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.171134][T17988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.494267][T18020] netlink: 'syz.3.5683': attribute type 3 has an invalid length. [ 250.704996][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 250.705011][ T29] audit: type=1326 audit(1755636828.015:29595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.735131][ T29] audit: type=1326 audit(1755636828.015:29596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.758988][ T29] audit: type=1326 audit(1755636828.025:29597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.782598][ T29] audit: type=1326 audit(1755636828.025:29598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.806277][ T29] audit: type=1326 audit(1755636828.025:29599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.829872][ T29] audit: type=1326 audit(1755636828.025:29600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.853450][ T29] audit: type=1326 audit(1755636828.025:29601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.877112][ T29] audit: type=1326 audit(1755636828.025:29602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 250.900751][ T29] audit: type=1326 audit(1755636828.025:29603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe10e6fd84a code=0x7ffc0000 [ 250.924251][ T29] audit: type=1326 audit(1755636828.025:29604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18032 comm="syz.9.5688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe10e7314a5 code=0x7ffc0000 [ 250.967332][T18036] lo speed is unknown, defaulting to 1000 [ 251.254931][T18044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.344311][T18044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.484458][T18063] netlink: 'syz.7.5699': attribute type 1 has an invalid length. [ 251.504858][T18063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.581986][T18076] __nla_validate_parse: 2 callbacks suppressed [ 251.581997][T18076] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5704'. [ 251.649006][T18080] syzkaller0: entered promiscuous mode [ 251.654583][T18080] syzkaller0: entered allmulticast mode [ 251.733135][T18088] netlink: 536 bytes leftover after parsing attributes in process `syz.9.5709'. [ 251.970151][T18110] lo speed is unknown, defaulting to 1000 [ 252.093517][T18111] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5717'. [ 252.276755][T18115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.300195][T18115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.315730][T18120] netlink: 'syz.1.5722': attribute type 3 has an invalid length. [ 252.355957][T18121] syzkaller0: entered promiscuous mode [ 252.361546][T18121] syzkaller0: entered allmulticast mode [ 252.391065][T18129] netlink: 536 bytes leftover after parsing attributes in process `syz.1.5725'. [ 252.456796][T18142] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5730'. [ 252.488272][T18141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.497556][T18141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.511416][T18141] syzkaller1: entered promiscuous mode [ 252.518006][T18141] syzkaller1: entered allmulticast mode [ 252.714348][T18168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5742'. [ 252.850623][T18181] netlink: 'syz.1.5748': attribute type 3 has an invalid length. [ 253.069356][T18201] lo speed is unknown, defaulting to 1000 [ 253.156492][T18205] random: crng reseeded on system resumption [ 253.188009][T18205] Restarting kernel threads ... [ 253.191281][T18207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.193232][T18205] Done restarting kernel threads. [ 253.205345][T18207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.472310][T18212] lo speed is unknown, defaulting to 1000 [ 253.596645][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5764'. [ 253.607554][T18223] 8021q: VLANs not supported on ip6gre0 [ 253.747960][T18234] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 253.933766][T18267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.943540][T18267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.098837][T18269] lo speed is unknown, defaulting to 1000 [ 254.385454][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5787'. [ 254.551596][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5793'. [ 254.561093][T18293] 8021q: VLANs not supported on sit0 [ 254.583487][T18297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18297 comm=syz.7.5795 [ 254.605867][T18299] netlink: 'syz.8.5796': attribute type 1 has an invalid length. [ 254.618699][T18301] netlink: 536 bytes leftover after parsing attributes in process `syz.1.5797'. [ 254.619779][T18299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.692406][T18310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.701740][T18310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.245184][T18322] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 255.420758][T18340] syzkaller0: entered promiscuous mode [ 255.426244][T18340] syzkaller0: entered allmulticast mode [ 255.464687][T18344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.475133][T18344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.573345][T18362] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18362 comm=syz.1.5823 [ 255.649031][T18366] 9pnet_fd: Insufficient options for proto=fd [ 255.714081][T18366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.722541][T18366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.032112][T18370] syzkaller0: entered promiscuous mode [ 256.037610][T18370] syzkaller0: entered allmulticast mode [ 256.250413][T18394] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 256.361275][T18398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.372095][T18398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.398731][T18401] random: crng reseeded on system resumption [ 256.409582][T18401] Restarting kernel threads ... [ 256.415070][T18401] Done restarting kernel threads. [ 256.473808][T18407] 9pnet_fd: Insufficient options for proto=fd [ 256.541944][T18407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.550544][T18407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.913833][T18428] __nla_validate_parse: 6 callbacks suppressed [ 256.913848][T18428] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5854'. [ 256.941037][T18430] random: crng reseeded on system resumption [ 256.950484][T18430] Restarting kernel threads ... [ 256.955515][T18430] Done restarting kernel threads. [ 256.992666][T18434] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5857'. [ 257.013504][T18436] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5858'. [ 257.138164][T18451] syzkaller0: entered promiscuous mode [ 257.143736][T18451] syzkaller0: entered allmulticast mode [ 257.151091][T18455] random: crng reseeded on system resumption [ 257.157190][T18456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5866'. [ 257.170132][T18455] Restarting kernel threads ... [ 257.175196][T18455] Done restarting kernel threads. [ 257.226028][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5869'. [ 257.235088][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5869'. [ 257.269813][T18463] netlink: 'syz.3.5870': attribute type 153 has an invalid length. [ 257.296498][T18465] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5871'. [ 257.334923][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5874'. [ 257.392618][T18476] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 257.595966][T18487] lo speed is unknown, defaulting to 1000 [ 257.674438][T18487] chnl_net:caif_netlink_parms(): no params data found [ 257.718655][T18487] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.725795][T18487] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.736098][T18487] bridge_slave_0: entered allmulticast mode [ 257.742703][T18487] bridge_slave_0: entered promiscuous mode [ 257.749517][T18487] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.756711][T18487] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.764879][T18487] bridge_slave_1: entered allmulticast mode [ 257.771445][T18487] bridge_slave_1: entered promiscuous mode [ 257.787005][ T124] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.806097][T18487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.816664][T18487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.832239][ T124] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.849000][T18487] team0: Port device team_slave_0 added [ 257.855465][T18487] team0: Port device team_slave_1 added [ 257.869753][T18487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.876719][T18487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.902667][T18487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.919104][ T124] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.920166][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5881'. [ 257.938335][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5881'. [ 257.947891][T18487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.954975][T18487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.981043][T18487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.002838][ T124] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.021739][T18487] hsr_slave_0: entered promiscuous mode [ 258.027818][T18487] hsr_slave_1: entered promiscuous mode [ 258.033850][T18487] debugfs: 'hsr0' already exists in 'hsr' [ 258.039626][T18487] Cannot create hsr debugfs directory [ 258.084845][ T124] bridge_slave_1: left allmulticast mode [ 258.090570][ T124] bridge_slave_1: left promiscuous mode [ 258.096522][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.109342][ T124] bridge_slave_0: left allmulticast mode [ 258.115125][ T124] bridge_slave_0: left promiscuous mode [ 258.120854][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.140895][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 258.140908][ T29] audit: type=1326 audit(1755636835.455:29612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.188997][ T29] audit: type=1326 audit(1755636835.485:29613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.213066][ T29] audit: type=1326 audit(1755636835.485:29614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.236731][ T29] audit: type=1326 audit(1755636835.485:29615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.260286][ T29] audit: type=1326 audit(1755636835.485:29616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.283893][ T29] audit: type=1326 audit(1755636835.485:29617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.307466][ T29] audit: type=1326 audit(1755636835.485:29618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.331034][ T29] audit: type=1326 audit(1755636835.485:29619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe10e6fd550 code=0x7ffc0000 [ 258.354734][ T29] audit: type=1326 audit(1755636835.485:29620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10e6febe9 code=0x7ffc0000 [ 258.378355][ T29] audit: type=1326 audit(1755636835.485:29621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18515 comm="syz.9.5887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe10e6fd84a code=0x7ffc0000 [ 258.473455][ T124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.475083][T18524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.490547][T18524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.493696][ T124] bond_slave_0: left promiscuous mode [ 258.505080][ T124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.514124][ T124] bond_slave_1: left promiscuous mode [ 258.520367][ T124] bond0 (unregistering): Released all slaves [ 258.528436][ T124] bond1 (unregistering): Released all slaves [ 258.537316][ T124] bond2 (unregistering): Released all slaves [ 258.545613][ T124] bond3 (unregistering): (slave batadv0): Releasing active interface [ 258.554762][ T124] bond3 (unregistering): Released all slaves [ 258.563649][ T124] bond4 (unregistering): Released all slaves [ 258.571803][ T124] bond5 (unregistering): Released all slaves [ 258.649382][ T124] hsr_slave_0: left promiscuous mode [ 258.655154][ T124] hsr_slave_1: left promiscuous mode [ 258.666497][ T124] veth1_macvtap: left promiscuous mode [ 258.674478][ T124] veth0_macvtap: left promiscuous mode [ 258.683784][ T124] veth1_vlan: left promiscuous mode [ 258.689055][ T124] veth0_vlan: left promiscuous mode [ 258.763090][ T124] team0 (unregistering): Port device team_slave_1 removed [ 258.774244][ T124] team0 (unregistering): Port device team_slave_0 removed [ 258.814713][ T3362] infiniband syz1: ib_query_port failed (-19) [ 258.831651][T18539] syzkaller0: entered promiscuous mode [ 258.837124][T18539] syzkaller0: entered allmulticast mode [ 258.957528][T18545] syzkaller0: entered promiscuous mode [ 258.963318][T18545] syzkaller0: entered allmulticast mode [ 259.120396][T18560] netlink: 'syz.9.5904': attribute type 3 has an invalid length. [ 259.136035][T18487] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 259.148530][T18487] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 259.157410][T18487] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 259.168305][T18487] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 259.208811][T18487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.224698][T18487] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.239889][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.246992][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.261924][ T3942] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.269085][ T3942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.305557][T18571] lo speed is unknown, defaulting to 1000 [ 259.308775][T18487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.319214][T18575] netlink: 'syz.9.5907': attribute type 1 has an invalid length. [ 259.321824][T18487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.361089][T18575] 8021q: adding VLAN 0 to HW filter on device bond11 [ 259.442712][T18584] syzkaller0: entered promiscuous mode [ 259.448183][T18584] syzkaller0: entered allmulticast mode [ 259.467644][T18487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.554684][T18596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.566562][T18596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.603472][T18487] veth0_vlan: entered promiscuous mode [ 259.611752][T18487] veth1_vlan: entered promiscuous mode [ 259.626519][T18487] veth0_macvtap: entered promiscuous mode [ 259.633792][T18487] veth1_macvtap: entered promiscuous mode [ 259.644070][T18487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.655230][T18487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.665874][ T3971] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.675599][ T3971] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.686288][ T3971] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.695637][ T3971] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.786408][T18613] 8021q: VLANs not supported on sit0 [ 260.012135][T18626] syzkaller0: entered promiscuous mode [ 260.017652][T18626] syzkaller0: entered allmulticast mode [ 260.108686][T18639] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.165894][T18648] random: crng reseeded on system resumption [ 260.177337][T18648] Restarting kernel threads ... [ 260.182422][T18648] Done restarting kernel threads. [ 260.227442][T18652] syzkaller0: entered promiscuous mode [ 260.233004][T18652] syzkaller0: entered allmulticast mode [ 260.357235][T18655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.366124][T18655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.477568][T18657] lo speed is unknown, defaulting to 1000 [ 260.546914][T18657] chnl_net:caif_netlink_parms(): no params data found [ 260.584560][ T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.595829][T18657] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.603004][T18657] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.610758][T18657] bridge_slave_0: entered allmulticast mode [ 260.617385][T18657] bridge_slave_0: entered promiscuous mode [ 260.626388][ T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.638056][T18657] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.645256][T18657] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.652892][T18657] bridge_slave_1: entered allmulticast mode [ 260.659275][T18657] bridge_slave_1: entered promiscuous mode [ 260.678317][T18657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.690768][ T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.703665][T18657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.725185][T18657] team0: Port device team_slave_0 added [ 260.733804][ T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.745824][T18657] team0: Port device team_slave_1 added [ 260.763392][T18657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.770416][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.796442][T18657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.808517][T18657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.815593][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.841767][T18657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.878823][T18657] hsr_slave_0: entered promiscuous mode [ 260.885281][T18657] hsr_slave_1: entered promiscuous mode [ 260.891394][T18657] debugfs: 'hsr0' already exists in 'hsr' [ 260.897127][T18657] Cannot create hsr debugfs directory [ 260.921930][ T51] bridge_slave_1: left allmulticast mode [ 260.927642][ T51] bridge_slave_1: left promiscuous mode [ 260.933432][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.943518][ T51] bridge_slave_0: left allmulticast mode [ 260.949184][ T51] bridge_slave_0: left promiscuous mode [ 260.955032][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.118851][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.127825][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.135944][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.145233][ T51] bond_slave_0: left promiscuous mode [ 261.151977][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.160933][ T51] bond_slave_1: left promiscuous mode [ 261.166831][ T51] bond0 (unregistering): Released all slaves [ 261.175720][ T51] bond1 (unregistering): (slave batadv1): Releasing active interface [ 261.184916][ T51] bond1 (unregistering): Released all slaves [ 261.193599][ T51] bond2 (unregistering): (slave batadv2): Releasing active interface [ 261.202467][ T51] bond2 (unregistering): Released all slaves [ 261.211480][ T51] bond3 (unregistering): (slave batadv0): Releasing backup interface [ 261.220664][ T51] bond3 (unregistering): Released all slaves [ 261.229154][ T51] bond4 (unregistering): (slave batadv3): Releasing backup interface [ 261.238384][ T51] bond4 (unregistering): Released all slaves [ 261.246506][ T51] bond5 (unregistering): Released all slaves [ 261.254511][ T51] bond6 (unregistering): Released all slaves [ 261.263698][ T51] bond7 (unregistering): (slave batadv4): Releasing active interface [ 261.272498][ T51] bond7 (unregistering): Released all slaves [ 261.282302][ T51] bond8 (unregistering): (slave batadv5): Releasing active interface [ 261.291420][ T51] bond8 (unregistering): Released all slaves [ 261.299523][ T51] bond9 (unregistering): Released all slaves [ 261.307775][ T51] bond10 (unregistering): Released all slaves [ 261.316680][ T51] bond11 (unregistering): Released all slaves [ 261.406269][ T51] hsr_slave_0: left promiscuous mode [ 261.412330][ T51] hsr_slave_1: left promiscuous mode [ 261.421169][ T51] veth1_macvtap: left promiscuous mode [ 261.426733][ T51] veth0_macvtap: left promiscuous mode [ 261.432468][ T51] veth1_vlan: left promiscuous mode [ 261.437694][ T51] veth0_vlan: left promiscuous mode [ 261.508572][ T51] team0 (unregistering): Port device team_slave_1 removed [ 261.518211][ T51] team0 (unregistering): Port device team_slave_0 removed [ 261.544682][T18692] random: crng reseeded on system resumption [ 261.552107][ T4129] lo speed is unknown, defaulting to 1000 [ 261.557639][T18692] Restarting kernel threads ... [ 261.557833][ T4129] syz0: Port: 1 Link DOWN [ 261.566378][T18692] Done restarting kernel threads. [ 261.593924][T18694] random: crng reseeded on system resumption [ 261.603969][T18694] Restarting kernel threads ... [ 261.609039][T18694] Done restarting kernel threads. [ 261.641713][T18696] random: crng reseeded on system resumption [ 261.651354][T18696] Restarting kernel threads ... [ 261.656450][T18696] Done restarting kernel threads. [ 261.714760][T18706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.724161][T18706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.182929][T18717] netlink: 'syz.1.5952': attribute type 153 has an invalid length. [ 262.212586][T18657] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 262.221561][T18657] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 262.230063][T18657] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 262.238672][T18657] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 262.272466][T18657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.288804][T18657] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.301663][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.308807][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.320545][ T2293] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.327630][ T2293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.388389][T18657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.484753][T18657] veth0_vlan: entered promiscuous mode [ 262.494246][T18657] veth1_vlan: entered promiscuous mode [ 262.509607][T18657] veth0_macvtap: entered promiscuous mode [ 262.520433][T18657] veth1_macvtap: entered promiscuous mode [ 262.531199][T18657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.540039][T18657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.568052][ T3947] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.580666][ T3947] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.598160][ T3947] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.613831][ T3971] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.620636][T18752] __nla_validate_parse: 20 callbacks suppressed [ 262.620703][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5932'. [ 262.638165][T18752] 8021q: VLANs not supported on ip6gre0 [ 262.714023][T18754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.723653][T18754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.906384][T18763] netlink: 'syz.8.5961': attribute type 153 has an invalid length. [ 263.031444][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5963'. [ 263.033617][T18772] random: crng reseeded on system resumption [ 263.060482][T18772] Restarting kernel threads ... [ 263.067404][T18772] Done restarting kernel threads. [ 263.099379][T18774] random: crng reseeded on system resumption [ 263.110048][T18774] Restarting kernel threads ... [ 263.115174][T18774] Done restarting kernel threads. [ 263.146961][T18778] netlink: 'syz.3.5967': attribute type 153 has an invalid length. [ 263.487981][T18792] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18792 comm=syz.7.5972 [ 263.751503][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 263.751516][ T29] audit: type=1326 audit(1755636841.065:29685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.781800][ T29] audit: type=1326 audit(1755636841.065:29686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.805501][ T29] audit: type=1326 audit(1755636841.065:29687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.829215][ T29] audit: type=1326 audit(1755636841.065:29688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.853036][ T29] audit: type=1326 audit(1755636841.065:29689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.876734][ T29] audit: type=1326 audit(1755636841.065:29690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.900554][ T29] audit: type=1326 audit(1755636841.065:29691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.924430][ T29] audit: type=1326 audit(1755636841.145:29692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.948255][ T29] audit: type=1326 audit(1755636841.145:29693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 263.971968][ T29] audit: type=1326 audit(1755636841.145:29694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18793 comm="syz.8.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82acb2d550 code=0x7ffc0000 [ 264.165775][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5979'. [ 264.227743][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5980'. [ 264.236896][T18810] 8021q: VLANs not supported on ip6tnl0 [ 264.574878][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5994'. [ 264.585709][T18839] 8021q: VLANs not supported on ip6tnl0 [ 264.675874][T18846] netlink: 'syz.8.5997': attribute type 3 has an invalid length. [ 264.916180][T18870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6005'. [ 264.937885][T18870] 8021q: VLANs not supported on ip6tnl0 [ 265.072442][T18882] syzkaller0: entered promiscuous mode [ 265.077952][T18882] syzkaller0: entered allmulticast mode [ 265.340669][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6016'. [ 265.559259][T18896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.568385][T18896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.681132][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6021'. [ 265.681294][T18902] 8021q: VLANs not supported on ip6tnl0 [ 265.698762][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6022'. [ 265.804078][T18917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.811525][T18917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.822967][T18917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.830488][T18917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.020486][T18926] syzkaller0: entered promiscuous mode [ 266.026077][T18926] syzkaller0: entered allmulticast mode [ 266.165473][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6033'. [ 266.182467][T18931] 8021q: VLANs not supported on ip6tnl0 [ 266.353055][T18948] random: crng reseeded on system resumption [ 266.376773][T18948] Restarting kernel threads ... [ 266.395633][T18948] Done restarting kernel threads. [ 266.472291][T18957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.483026][T18957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.824620][T18985] syzkaller0: entered promiscuous mode [ 266.830149][T18985] syzkaller0: entered allmulticast mode [ 266.874865][T18991] random: crng reseeded on system resumption [ 266.886329][T18991] Restarting kernel threads ... [ 266.891833][T18991] Done restarting kernel threads. [ 267.314468][T19040] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 267.453451][T19056] FAULT_INJECTION: forcing a failure. [ 267.453451][T19056] name failslab, interval 1, probability 0, space 0, times 0 [ 267.466969][T19056] CPU: 1 UID: 0 PID: 19056 Comm: syz.9.6082 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.467055][T19056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.467146][T19056] Call Trace: [ 267.467152][T19056] [ 267.467159][T19056] __dump_stack+0x1d/0x30 [ 267.467180][T19056] dump_stack_lvl+0xe8/0x140 [ 267.467199][T19056] dump_stack+0x15/0x1b [ 267.467253][T19056] should_fail_ex+0x265/0x280 [ 267.467284][T19056] ? tcf_action_init_1+0x11e/0x4a0 [ 267.467308][T19056] should_failslab+0x8c/0xb0 [ 267.467332][T19056] __kmalloc_cache_noprof+0x4c/0x320 [ 267.467361][T19056] tcf_action_init_1+0x11e/0x4a0 [ 267.467400][T19056] tcf_action_init+0x267/0x6d0 [ 267.467447][T19056] tc_ctl_action+0x291/0x830 [ 267.467533][T19056] ? __pfx_tc_ctl_action+0x10/0x10 [ 267.467610][T19056] rtnetlink_rcv_msg+0x657/0x6d0 [ 267.467647][T19056] netlink_rcv_skb+0x123/0x220 [ 267.467766][T19056] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.467794][T19056] rtnetlink_rcv+0x1c/0x30 [ 267.467815][T19056] netlink_unicast+0x5bd/0x690 [ 267.467857][T19056] netlink_sendmsg+0x58b/0x6b0 [ 267.467896][T19056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.467916][T19056] __sock_sendmsg+0x142/0x180 [ 267.468012][T19056] ____sys_sendmsg+0x31e/0x4e0 [ 267.468035][T19056] ___sys_sendmsg+0x17b/0x1d0 [ 267.468067][T19056] __x64_sys_sendmsg+0xd4/0x160 [ 267.468120][T19056] x64_sys_call+0x191e/0x2ff0 [ 267.468140][T19056] do_syscall_64+0xd2/0x200 [ 267.468163][T19056] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.468186][T19056] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.468276][T19056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.468295][T19056] RIP: 0033:0x7f9b3704ebe9 [ 267.468310][T19056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.468326][T19056] RSP: 002b:00007f9b35ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.468488][T19056] RAX: ffffffffffffffda RBX: 00007f9b37275fa0 RCX: 00007f9b3704ebe9 [ 267.468534][T19056] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 267.468546][T19056] RBP: 00007f9b35ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.468558][T19056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.468570][T19056] R13: 00007f9b37276038 R14: 00007f9b37275fa0 R15: 00007fff128c1868 [ 267.468589][T19056] [ 267.473628][T19044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.715833][T19044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.937410][ T3971] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.021011][ T3971] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.081282][ T3971] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.149740][ T3971] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.162310][T19076] chnl_net:caif_netlink_parms(): no params data found [ 268.233343][T19076] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.240613][T19076] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.252563][T19076] bridge_slave_0: entered allmulticast mode [ 268.260331][T19076] bridge_slave_0: entered promiscuous mode [ 268.266985][T19076] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.274142][T19076] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.281445][T19076] bridge_slave_1: entered allmulticast mode [ 268.288074][T19076] bridge_slave_1: entered promiscuous mode [ 268.294822][ T3971] bridge_slave_1: left allmulticast mode [ 268.300556][ T3971] bridge_slave_1: left promiscuous mode [ 268.306381][ T3971] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.314736][ T3971] bridge_slave_0: left allmulticast mode [ 268.320422][ T3971] bridge_slave_0: left promiscuous mode [ 268.326112][ T3971] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.441800][ T3971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.452703][ T3971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.462857][ T3971] bond0 (unregistering): Released all slaves [ 268.472946][ T3971] bond1 (unregistering): Released all slaves [ 268.481304][ T3971] bond2 (unregistering): Released all slaves [ 268.489760][ T3971] bond3 (unregistering): Released all slaves [ 268.497787][ T3971] bond4 (unregistering): Released all slaves [ 268.505760][ T3971] bond5 (unregistering): Released all slaves [ 268.514821][ T3971] bond6 (unregistering): Released all slaves [ 268.523369][ T3971] bond7 (unregistering): Released all slaves [ 268.551950][T19076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.569240][T19076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.613111][ T3971] hsr_slave_0: left promiscuous mode [ 268.618763][ T3971] hsr_slave_1: left promiscuous mode [ 268.628272][ T3971] veth0_macvtap: left allmulticast mode [ 268.637551][ T3971] veth1_macvtap: left promiscuous mode [ 268.643120][ T3971] veth0_macvtap: left promiscuous mode [ 268.699847][ T3971] team0 (unregistering): Port device team_slave_1 removed [ 268.713126][ T3971] team0 (unregistering): Port device team_slave_0 removed [ 268.721169][ T51] smc: removing ib device syz! [ 268.779493][T19076] team0: Port device team_slave_0 added [ 268.796829][T19076] team0: Port device team_slave_1 added [ 268.867512][T19122] syzkaller0: entered promiscuous mode [ 268.873051][T19122] syzkaller0: entered allmulticast mode [ 268.892289][T19076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.899316][T19076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.925343][T19076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.940997][T19076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.948024][T19076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.974107][T19076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.025397][T19076] hsr_slave_0: entered promiscuous mode [ 269.031724][T19076] hsr_slave_1: entered promiscuous mode [ 269.037922][T19076] debugfs: 'hsr0' already exists in 'hsr' [ 269.043705][T19076] Cannot create hsr debugfs directory [ 269.639786][T19076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.648775][T19076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.669210][T19076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.701485][T19076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.793053][T19162] netlink: 'syz.7.6111': attribute type 153 has an invalid length. [ 269.814615][T19164] __nla_validate_parse: 6 callbacks suppressed [ 269.814631][T19164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6112'. [ 269.847236][T19076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.866383][T19076] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.965789][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.972893][ T3963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.041038][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.048243][ T3963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.065706][T19076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.076316][T19076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.134968][T19170] syzkaller0: entered promiscuous mode [ 270.140526][T19170] syzkaller0: entered allmulticast mode [ 270.243032][T19176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.252491][T19176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.285372][T19076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.423963][T19076] veth0_vlan: entered promiscuous mode [ 270.441426][T19076] veth1_vlan: entered promiscuous mode [ 270.469083][T19076] veth0_macvtap: entered promiscuous mode [ 270.501923][T19076] veth1_macvtap: entered promiscuous mode [ 270.514139][T19076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.525409][T19076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.538840][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.547733][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.562289][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.586767][T19195] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 270.587645][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.639269][T19200] netlink: 'syz.7.6120': attribute type 3 has an invalid length. [ 270.653402][T19202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6121'. [ 270.691464][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6122'. [ 270.793080][T19224] netlink: 'syz.7.6130': attribute type 153 has an invalid length. [ 270.818340][T19230] netlink: 'syz.1.6133': attribute type 3 has an invalid length. [ 270.901857][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6137'. [ 271.007038][T19261] netlink: 'syz.1.6145': attribute type 3 has an invalid length. [ 271.101678][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6155'. [ 271.139260][T19289] netlink: 536 bytes leftover after parsing attributes in process `syz.3.6157'. [ 271.220958][T19304] netlink: 'syz.1.6164': attribute type 3 has an invalid length. [ 271.290400][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6168'. [ 271.302514][T19315] 8021q: VLANs not supported on ip6tnl0 [ 271.351779][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6173'. [ 271.542096][T19344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.562511][T19344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.620147][T19350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6183'. [ 271.629665][T19350] 8021q: VLANs not supported on ip6tnl0 [ 271.650940][T19353] random: crng reseeded on system resumption [ 271.651780][T19354] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6185'. [ 271.660664][T19353] Restarting kernel threads ... [ 271.671079][T19353] Done restarting kernel threads. [ 271.701357][T19356] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 271.983574][T19370] netlink: 'syz.8.6191': attribute type 3 has an invalid length. [ 271.994981][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 271.994994][ T29] audit: type=1400 audit(1755636849.305:29748): avc: denied { create } for pid=19369 comm="syz.8.6191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.022769][ T29] audit: type=1400 audit(1755636849.315:29749): avc: denied { write } for pid=19369 comm="syz.8.6191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.043091][ T29] audit: type=1400 audit(1755636849.315:29750): avc: denied { nlmsg_write } for pid=19369 comm="syz.8.6191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.064324][ T29] audit: type=1400 audit(1755636849.355:29751): avc: denied { ioctl } for pid=19369 comm="syz.8.6191" path="socket:[74101]" dev="sockfs" ino=74101 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.138685][T19381] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19381 comm=syz.8.6194 [ 272.180618][T19384] netlink: 'syz.9.6195': attribute type 153 has an invalid length. [ 272.205465][T19386] random: crng reseeded on system resumption [ 272.214984][T19386] Restarting kernel threads ... [ 272.221157][T19386] Done restarting kernel threads. [ 272.666316][T19414] 8021q: VLANs not supported on ip6tnl0 [ 272.738218][T19418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.745653][T19418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.753133][T19418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.760625][T19418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.982051][ T29] audit: type=1107 audit(1755636850.295:29752): pid=19420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 273.014796][T19423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.023882][T19423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.121127][ T29] audit: type=1400 audit(1755636850.435:29753): avc: denied { wake_alarm } for pid=19430 comm="syz.9.6213" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 273.192752][T19433] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.417956][T19443] netlink: 'syz.1.6217': attribute type 3 has an invalid length. [ 273.460161][ T29] audit: type=1400 audit(1755636850.775:29754): avc: denied { setcheckreqprot } for pid=19450 comm="syz.1.6221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.536562][T19447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.555242][T19447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.567614][T19457] netlink: 'syz.1.6224': attribute type 3 has an invalid length. [ 273.663755][T19479] 8021q: VLANs not supported on ip6tnl0 [ 273.908924][ T29] audit: type=1107 audit(1755636851.215:29755): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 274.063030][T19531] random: crng reseeded on system resumption [ 274.072705][T19531] Restarting kernel threads ... [ 274.077825][T19531] Done restarting kernel threads. [ 274.107480][T19534] random: crng reseeded on system resumption [ 274.119343][T19534] Restarting kernel threads ... [ 274.124686][T19534] Done restarting kernel threads. [ 274.226203][T19551] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 274.534672][T19562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.547068][T19562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.609302][T19566] pim6reg: entered allmulticast mode [ 274.684244][ T29] audit: type=1400 audit(1755636851.995:29756): avc: denied { bind } for pid=19565 comm="syz.1.6270" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.685640][T19566] pim6reg: left allmulticast mode [ 274.705614][ T29] audit: type=1400 audit(1755636851.995:29757): avc: denied { create } for pid=19565 comm="syz.1.6270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 274.812019][T19570] FAULT_INJECTION: forcing a failure. [ 274.812019][T19570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.825206][T19570] CPU: 0 UID: 0 PID: 19570 Comm: syz.1.6272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.825296][T19570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.825309][T19570] Call Trace: [ 274.825314][T19570] [ 274.825322][T19570] __dump_stack+0x1d/0x30 [ 274.825370][T19570] dump_stack_lvl+0xe8/0x140 [ 274.825436][T19570] dump_stack+0x15/0x1b [ 274.825449][T19570] should_fail_ex+0x265/0x280 [ 274.825538][T19570] should_fail+0xb/0x20 [ 274.825629][T19570] should_fail_usercopy+0x1a/0x20 [ 274.825652][T19570] _copy_to_user+0x20/0xa0 [ 274.825719][T19570] simple_read_from_buffer+0xb5/0x130 [ 274.825770][T19570] proc_fail_nth_read+0x10e/0x150 [ 274.825790][T19570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.825810][T19570] vfs_read+0x1a8/0x770 [ 274.825826][T19570] ? __rcu_read_unlock+0x4f/0x70 [ 274.825848][T19570] ? __fget_files+0x184/0x1c0 [ 274.825915][T19570] ksys_read+0xda/0x1a0 [ 274.825960][T19570] __x64_sys_read+0x40/0x50 [ 274.825981][T19570] x64_sys_call+0x27bc/0x2ff0 [ 274.826001][T19570] do_syscall_64+0xd2/0x200 [ 274.826049][T19570] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.826149][T19570] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 274.826262][T19570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.826280][T19570] RIP: 0033:0x7f015c32d5fc [ 274.826293][T19570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.826373][T19570] RSP: 002b:00007f015ad8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.826390][T19570] RAX: ffffffffffffffda RBX: 00007f015c555fa0 RCX: 00007f015c32d5fc [ 274.826401][T19570] RDX: 000000000000000f RSI: 00007f015ad8f0a0 RDI: 0000000000000008 [ 274.826411][T19570] RBP: 00007f015ad8f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.826423][T19570] R10: 0000000000002040 R11: 0000000000000246 R12: 0000000000000001 [ 274.826433][T19570] R13: 00007f015c556038 R14: 00007f015c555fa0 R15: 00007fffff973588 [ 274.826487][T19570] [ 275.053180][T19574] syzkaller0: entered promiscuous mode [ 275.058717][T19574] syzkaller0: entered allmulticast mode [ 275.083950][T19578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.093101][T19578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.258596][T19591] FAULT_INJECTION: forcing a failure. [ 275.258596][T19591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.271825][T19591] CPU: 0 UID: 0 PID: 19591 Comm: syz.8.6282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 275.271849][T19591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.271859][T19591] Call Trace: [ 275.271864][T19591] [ 275.271870][T19591] __dump_stack+0x1d/0x30 [ 275.271889][T19591] dump_stack_lvl+0xe8/0x140 [ 275.271911][T19591] dump_stack+0x15/0x1b [ 275.271924][T19591] should_fail_ex+0x265/0x280 [ 275.272016][T19591] should_fail+0xb/0x20 [ 275.272031][T19591] should_fail_usercopy+0x1a/0x20 [ 275.272049][T19591] _copy_to_user+0x20/0xa0 [ 275.272071][T19591] copy_siginfo_to_user+0x22/0xb0 [ 275.272168][T19591] x64_setup_rt_frame+0x2b5/0x580 [ 275.272188][T19591] arch_do_signal_or_restart+0x27c/0x480 [ 275.272211][T19591] exit_to_user_mode_loop+0x7a/0x100 [ 275.272340][T19591] do_syscall_64+0x1d6/0x200 [ 275.272392][T19591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 275.272432][T19591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 275.272453][T19591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.272471][T19591] RIP: 0033:0x7f82acb2ebe7 [ 275.272486][T19591] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 275.272502][T19591] RSP: 002b:00007f82ab597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.272519][T19591] RAX: 0000000000000000 RBX: 00007f82acd55fa0 RCX: 00007f82acb2ebe9 [ 275.272555][T19591] RDX: 0000000000001001 RSI: 00002000000019c0 RDI: 0000000000000003 [ 275.272567][T19591] RBP: 00007f82ab597090 R08: 0000000000000000 R09: 0000000000000000 [ 275.272577][T19591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.272587][T19591] R13: 00007f82acd56038 R14: 00007f82acd55fa0 R15: 00007fff97ef9528 [ 275.272601][T19591] [ 275.860629][T19606] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 276.049488][T19617] syzkaller0: entered promiscuous mode [ 276.055163][T19617] syzkaller0: entered allmulticast mode [ 276.087278][T19621] __nla_validate_parse: 9 callbacks suppressed [ 276.087292][T19621] netlink: 536 bytes leftover after parsing attributes in process `syz.1.6294'. [ 276.198197][T19629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6298'. [ 276.211659][T19635] validate_nla: 4 callbacks suppressed [ 276.211674][T19635] netlink: 'syz.3.6301': attribute type 3 has an invalid length. [ 276.222438][T19638] random: crng reseeded on system resumption [ 276.250441][T19638] Restarting kernel threads ... [ 276.259442][T19638] Done restarting kernel threads. [ 276.293626][T19644] netlink: 'syz.7.6305': attribute type 153 has an invalid length. [ 276.488509][T19669] syzkaller0: entered promiscuous mode [ 276.494142][T19669] syzkaller0: entered allmulticast mode [ 276.503051][T19671] netlink: 'syz.1.6314': attribute type 3 has an invalid length. [ 276.534593][T19673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6315'. [ 276.569470][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6317'. [ 276.621406][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6318'. [ 276.719007][T19700] netlink: 536 bytes leftover after parsing attributes in process `syz.8.6327'. [ 276.764228][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6330'. [ 276.771130][T19704] syzkaller0: entered promiscuous mode [ 276.778653][T19704] syzkaller0: entered allmulticast mode [ 276.954702][T19725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6339'. [ 276.963885][T19725] 8021q: VLANs not supported on ip6tnl0 [ 277.037234][T19729] netlink: 'syz.1.6341': attribute type 3 has an invalid length. [ 277.222931][T19749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19749 comm=syz.3.6347 [ 277.315249][T19758] netlink: 536 bytes leftover after parsing attributes in process `syz.7.6351'. [ 277.359934][T19764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.367518][T19764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.375665][T19764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.383175][T19764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.687378][T19770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.695860][T19770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.705531][ T29] kauditd_printk_skb: 5142 callbacks suppressed [ 277.705590][ T29] audit: type=1400 audit(1755636855.015:34900): avc: denied { mount } for pid=19769 comm="syz.8.6355" name="/" dev="ramfs" ino=75054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 277.735854][T19770] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6355'. [ 278.049527][T19772] random: crng reseeded on system resumption [ 278.061668][T19772] Restarting kernel threads ... [ 278.066793][T19772] Done restarting kernel threads. [ 278.097570][T19776] FAULT_INJECTION: forcing a failure. [ 278.097570][T19776] name failslab, interval 1, probability 0, space 0, times 0 [ 278.110311][T19776] CPU: 0 UID: 0 PID: 19776 Comm: syz.9.6358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 278.110334][T19776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.110382][T19776] Call Trace: [ 278.110425][T19776] [ 278.110432][T19776] __dump_stack+0x1d/0x30 [ 278.110450][T19776] dump_stack_lvl+0xe8/0x140 [ 278.110465][T19776] dump_stack+0x15/0x1b [ 278.110479][T19776] should_fail_ex+0x265/0x280 [ 278.110500][T19776] should_failslab+0x8c/0xb0 [ 278.110603][T19776] kmem_cache_alloc_node_noprof+0x57/0x320 [ 278.110689][T19776] ? __alloc_skb+0x101/0x320 [ 278.110714][T19776] __alloc_skb+0x101/0x320 [ 278.110737][T19776] netlink_alloc_large_skb+0xba/0xf0 [ 278.110852][T19776] netlink_sendmsg+0x3cf/0x6b0 [ 278.110874][T19776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.110894][T19776] __sock_sendmsg+0x142/0x180 [ 278.111000][T19776] ____sys_sendmsg+0x31e/0x4e0 [ 278.111023][T19776] ___sys_sendmsg+0x17b/0x1d0 [ 278.111055][T19776] __x64_sys_sendmsg+0xd4/0x160 [ 278.111079][T19776] x64_sys_call+0x191e/0x2ff0 [ 278.111151][T19776] do_syscall_64+0xd2/0x200 [ 278.111175][T19776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 278.111194][T19776] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.111213][T19776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.111311][T19776] RIP: 0033:0x7f9b3704ebe9 [ 278.111326][T19776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.111342][T19776] RSP: 002b:00007f9b35ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.111359][T19776] RAX: ffffffffffffffda RBX: 00007f9b37275fa0 RCX: 00007f9b3704ebe9 [ 278.111371][T19776] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 278.111381][T19776] RBP: 00007f9b35ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 278.111391][T19776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.111416][T19776] R13: 00007f9b37276038 R14: 00007f9b37275fa0 R15: 00007fff128c1868 [ 278.111430][T19776] [ 278.557832][ T29] audit: type=1326 audit(1755636855.865:34901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.8.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 278.592388][ T29] audit: type=1326 audit(1755636855.865:34902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.8.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 278.616342][ T29] audit: type=1326 audit(1755636855.865:34903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.8.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 278.640098][ T29] audit: type=1326 audit(1755636855.865:34904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.8.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 278.663791][ T29] audit: type=1326 audit(1755636855.865:34905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19809 comm="syz.8.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 278.723621][ T29] audit: type=1107 audit(1755636856.035:34906): pid=19813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 279.070231][ T29] audit: type=1400 audit(1755636856.385:34907): avc: denied { setopt } for pid=19835 comm="syz.1.6379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 279.349548][ T29] audit: type=1107 audit(1755636856.635:34908): pid=19849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 279.364161][T19853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.411790][ T29] audit: type=1326 audit(1755636856.715:34909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19854 comm="syz.9.6387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3704ebe9 code=0x7ffc0000 [ 279.441317][T19853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.664077][T19878] netlink: 'syz.1.6395': attribute type 3 has an invalid length. [ 280.232175][T19901] block device autoloading is deprecated and will be removed. [ 280.239901][T17094] block device autoloading is deprecated and will be removed. [ 280.378051][T19916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.385589][T19916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.394337][T19916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.401867][T19916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.675923][T19927] netlink: 'syz.3.6414': attribute type 3 has an invalid length. [ 280.958176][T19943] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.961823][T19942] random: crng reseeded on system resumption [ 280.980197][T19945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19945 comm=syz.3.6421 [ 280.980236][T19942] Restarting kernel threads ... [ 280.980689][T19942] Done restarting kernel threads. [ 281.900062][T19973] netlink: 'syz.3.6429': attribute type 3 has an invalid length. [ 282.093978][T19982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.136729][T19988] random: crng reseeded on system resumption [ 282.147668][T19982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.162424][T19988] Restarting kernel threads ... [ 282.172958][T19988] Done restarting kernel threads. [ 282.217369][T19982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.284382][T19982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.337852][T20006] netlink: 'syz.7.6442': attribute type 3 has an invalid length. [ 282.366523][ T3971] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.386740][ T3971] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.398046][ T3971] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.406595][ T3971] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.550185][T20025] netlink: 'syz.1.6449': attribute type 13 has an invalid length. [ 282.563929][T20025] gretap0: refused to change device tx_queue_len [ 282.578639][T20025] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.661136][T20025] __nla_validate_parse: 7 callbacks suppressed [ 282.661151][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 282.683479][T20025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=20025 comm=syz.1.6449 [ 282.723692][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 282.723707][ T29] audit: type=1400 audit(1755636860.035:35066): avc: denied { write } for pid=20024 comm="syz.1.6449" name="file0" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 282.799377][T20035] usb usb1: usbfs: process 20035 (syz.1.6451) did not claim interface 0 before use [ 282.821073][T20035] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 282.823275][ T29] audit: type=1400 audit(1755636860.085:35067): avc: denied { unlink } for pid=19076 comm="syz-executor" name="file0" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 282.948734][T20044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.959547][T20044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.257557][T20058] netlink: 'syz.3.6461': attribute type 153 has an invalid length. [ 283.342229][ T29] audit: type=1400 audit(1755636860.655:35068): avc: denied { watch } for pid=20060 comm="syz.9.6462" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 283.478190][ T29] audit: type=1107 audit(1755636860.785:35069): pid=20066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 283.638978][T20077] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6468'. [ 283.779036][T20086] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6473'. [ 283.789709][T20086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=20086 comm=syz.9.6473 [ 283.805234][T20086] netem: change failed [ 283.950980][T20090] netlink: 'syz.9.6475': attribute type 153 has an invalid length. [ 283.996312][ T29] audit: type=1107 audit(1755636861.305:35070): pid=20093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 284.047506][ T29] audit: type=1400 audit(1755636861.355:35071): avc: denied { ioctl } for pid=20097 comm="syz.1.6478" path="socket:[76803]" dev="sockfs" ino=76803 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 284.193895][T20120] block device autoloading is deprecated and will be removed. [ 284.213668][ T29] audit: type=1400 audit(1755636861.525:35072): avc: denied { read write } for pid=20118 comm="syz.1.6485" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 284.237485][ T29] audit: type=1400 audit(1755636861.525:35073): avc: denied { open } for pid=20118 comm="syz.1.6485" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 284.279007][ T29] audit: type=1107 audit(1755636861.585:35074): pid=20122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 284.306032][ T29] audit: type=1326 audit(1755636861.615:35075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20124 comm="syz.1.6488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015c32ebe9 code=0x7ffc0000 [ 284.412999][T20130] FAULT_INJECTION: forcing a failure. [ 284.412999][T20130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.426090][T20130] CPU: 1 UID: 0 PID: 20130 Comm: syz.3.6489 Not tainted syzkaller #0 PREEMPT(voluntary) [ 284.426159][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.426212][T20130] Call Trace: [ 284.426219][T20130] [ 284.426285][T20130] __dump_stack+0x1d/0x30 [ 284.426298][T20130] dump_stack_lvl+0xe8/0x140 [ 284.426309][T20130] dump_stack+0x15/0x1b [ 284.426318][T20130] should_fail_ex+0x265/0x280 [ 284.426331][T20130] should_fail+0xb/0x20 [ 284.426396][T20130] should_fail_usercopy+0x1a/0x20 [ 284.426414][T20130] _copy_to_user+0x20/0xa0 [ 284.426430][T20130] simple_read_from_buffer+0xb5/0x130 [ 284.426516][T20130] proc_fail_nth_read+0x10e/0x150 [ 284.426537][T20130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.426557][T20130] vfs_read+0x1a8/0x770 [ 284.426576][T20130] ? __rcu_read_unlock+0x4f/0x70 [ 284.426639][T20130] ? __fget_files+0x184/0x1c0 [ 284.426669][T20130] ksys_read+0xda/0x1a0 [ 284.426681][T20130] __x64_sys_read+0x40/0x50 [ 284.426774][T20130] x64_sys_call+0x27bc/0x2ff0 [ 284.426792][T20130] do_syscall_64+0xd2/0x200 [ 284.426883][T20130] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.426938][T20130] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 284.426951][T20130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.426987][T20130] RIP: 0033:0x7f8a4bbad5fc [ 284.426996][T20130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.427032][T20130] RSP: 002b:00007f8a4a617030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.427045][T20130] RAX: ffffffffffffffda RBX: 00007f8a4bdd5fa0 RCX: 00007f8a4bbad5fc [ 284.427053][T20130] RDX: 000000000000000f RSI: 00007f8a4a6170a0 RDI: 0000000000000005 [ 284.427059][T20130] RBP: 00007f8a4a617090 R08: 0000000000000000 R09: 0000000000000000 [ 284.427066][T20130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.427073][T20130] R13: 00007f8a4bdd6038 R14: 00007f8a4bdd5fa0 R15: 00007fffb349da78 [ 284.427121][T20130] [ 284.651988][T20132] netlink: 'syz.3.6490': attribute type 153 has an invalid length. [ 284.684336][T20136] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.716845][T20145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20145 comm=syz.1.6495 [ 284.733259][T20136] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.792615][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6497'. [ 284.801911][T20151] 8021q: VLANs not supported on ip6tnl0 [ 284.814146][T20136] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.872678][T20136] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.946840][ T3963] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.960715][ T3963] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.968988][ T3963] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.981269][ T3963] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.024009][T20168] FAULT_INJECTION: forcing a failure. [ 285.024009][T20168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.037093][T20168] CPU: 1 UID: 0 PID: 20168 Comm: syz.7.6503 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.037118][T20168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.037127][T20168] Call Trace: [ 285.037134][T20168] [ 285.037141][T20168] __dump_stack+0x1d/0x30 [ 285.037162][T20168] dump_stack_lvl+0xe8/0x140 [ 285.037240][T20168] dump_stack+0x15/0x1b [ 285.037256][T20168] should_fail_ex+0x265/0x280 [ 285.037274][T20168] should_fail+0xb/0x20 [ 285.037291][T20168] should_fail_usercopy+0x1a/0x20 [ 285.037312][T20168] _copy_from_user+0x1c/0xb0 [ 285.037409][T20168] btf_get_info_by_fd+0x7f/0x460 [ 285.037428][T20168] bpf_obj_get_info_by_fd+0x753/0x1e30 [ 285.037452][T20168] ? _parse_integer+0x27/0x40 [ 285.037527][T20168] ? kstrtoull+0x111/0x140 [ 285.037543][T20168] ? kstrtouint+0x76/0xc0 [ 285.037558][T20168] ? kstrtouint_from_user+0x9f/0xf0 [ 285.037576][T20168] ? 0xffffffff81000000 [ 285.037589][T20168] ? __rcu_read_unlock+0x4f/0x70 [ 285.037608][T20168] ? get_pid_task+0x96/0xd0 [ 285.037657][T20168] ? selinux_bpf+0xaa/0xc0 [ 285.037688][T20168] __sys_bpf+0x508/0x7b0 [ 285.037719][T20168] __x64_sys_bpf+0x41/0x50 [ 285.037792][T20168] x64_sys_call+0x2aea/0x2ff0 [ 285.037813][T20168] do_syscall_64+0xd2/0x200 [ 285.037895][T20168] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 285.037913][T20168] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 285.037950][T20168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.038009][T20168] RIP: 0033:0x7f096625ebe9 [ 285.038024][T20168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.038041][T20168] RSP: 002b:00007f0964cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.038060][T20168] RAX: ffffffffffffffda RBX: 00007f0966485fa0 RCX: 00007f096625ebe9 [ 285.038072][T20168] RDX: 0000000000000010 RSI: 00002000000010c0 RDI: 000000000000000f [ 285.038087][T20168] RBP: 00007f0964cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 285.038097][T20168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.038184][T20168] R13: 00007f0966486038 R14: 00007f0966485fa0 R15: 00007ffff7dcfd28 [ 285.038203][T20168] [ 285.275193][T20174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20174 comm=syz.8.6506 [ 285.380177][T20184] syzkaller0: entered promiscuous mode [ 285.385840][T20184] syzkaller0: entered allmulticast mode [ 285.658363][T20203] netlink: 176 bytes leftover after parsing attributes in process `syz.7.6519'. [ 285.712674][T20208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.715651][T20209] syzkaller0: entered promiscuous mode [ 285.723748][T20208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.726572][T20209] syzkaller0: entered allmulticast mode [ 285.864305][T20226] netlink: 'syz.1.6529': attribute type 3 has an invalid length. [ 286.182305][T20237] syzkaller0: entered promiscuous mode [ 286.187802][T20237] syzkaller0: entered allmulticast mode [ 286.359865][T20253] netlink: 'syz.9.6542': attribute type 3 has an invalid length. [ 286.422246][T20264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.431798][T20264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.479267][T20270] syzkaller0: entered promiscuous mode [ 286.484925][T20270] syzkaller0: entered allmulticast mode [ 286.736628][T20283] netlink: 'syz.1.6555': attribute type 3 has an invalid length. [ 286.788820][T20294] netlink: 536 bytes leftover after parsing attributes in process `syz.1.6559'. [ 286.967313][T20318] FAULT_INJECTION: forcing a failure. [ 286.967313][T20318] name failslab, interval 1, probability 0, space 0, times 0 [ 286.980158][T20318] CPU: 1 UID: 0 PID: 20318 Comm: syz.9.6570 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.980186][T20318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.980197][T20318] Call Trace: [ 286.980203][T20318] [ 286.980211][T20318] __dump_stack+0x1d/0x30 [ 286.980232][T20318] dump_stack_lvl+0xe8/0x140 [ 286.980249][T20318] dump_stack+0x15/0x1b [ 286.980271][T20318] should_fail_ex+0x265/0x280 [ 286.980299][T20318] should_failslab+0x8c/0xb0 [ 286.980322][T20318] kmem_cache_alloc_node_noprof+0x57/0x320 [ 286.980395][T20318] ? __alloc_skb+0x101/0x320 [ 286.980425][T20318] __alloc_skb+0x101/0x320 [ 286.980454][T20318] netlink_alloc_large_skb+0xba/0xf0 [ 286.980517][T20318] netlink_sendmsg+0x3cf/0x6b0 [ 286.980538][T20318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.980556][T20318] __sock_sendmsg+0x142/0x180 [ 286.980577][T20318] ____sys_sendmsg+0x31e/0x4e0 [ 286.980606][T20318] ___sys_sendmsg+0x17b/0x1d0 [ 286.980636][T20318] __x64_sys_sendmsg+0xd4/0x160 [ 286.980660][T20318] x64_sys_call+0x191e/0x2ff0 [ 286.980727][T20318] do_syscall_64+0xd2/0x200 [ 286.980753][T20318] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.980774][T20318] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 286.980798][T20318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.980819][T20318] RIP: 0033:0x7f9b3704ebe9 [ 286.980835][T20318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.980895][T20318] RSP: 002b:00007f9b35ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.980913][T20318] RAX: ffffffffffffffda RBX: 00007f9b37275fa0 RCX: 00007f9b3704ebe9 [ 286.980924][T20318] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 286.980954][T20318] RBP: 00007f9b35ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.980965][T20318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.980977][T20318] R13: 00007f9b37276038 R14: 00007f9b37275fa0 R15: 00007fff128c1868 [ 286.980994][T20318] [ 287.197608][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6572'. [ 287.207188][T20324] 8021q: VLANs not supported on ip6tnl0 [ 287.223279][T20326] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 287.254724][T20333] netlink: 'syz.9.6576': attribute type 3 has an invalid length. [ 287.290787][T20335] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.298189][T20335] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.382960][ T3942] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.399114][ T3942] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.417524][ T3942] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.428797][ T3942] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.433823][T20341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.447964][T20341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.472197][T20345] syzkaller0: entered promiscuous mode [ 287.477685][T20345] syzkaller0: entered allmulticast mode [ 287.828212][T20351] random: crng reseeded on system resumption [ 287.838018][T20351] Restarting kernel threads ... [ 287.842319][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6585'. [ 287.843246][T20351] Done restarting kernel threads. [ 287.853885][T20353] 8021q: VLANs not supported on ip6tnl0 [ 287.864814][T20351] loop7: detected capacity change from 0 to 1024 [ 287.871894][T20351] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 287.883081][T20351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 287.891313][T20351] System zones: 0-1, 3-36 [ 287.895902][T20351] EXT4-fs (loop7): orphan cleanup on readonly fs [ 287.896874][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 287.897045][ T29] audit: type=1326 audit(1755636865.205:35113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 287.933114][T20351] EXT4-fs (loop7): 1 orphan inode deleted [ 287.934119][ T29] audit: type=1326 audit(1755636865.245:35114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 287.939626][T20351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.962673][ T29] audit: type=1326 audit(1755636865.245:35115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 287.999040][ T29] audit: type=1326 audit(1755636865.245:35116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 288.022806][ T29] audit: type=1326 audit(1755636865.245:35117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 288.034379][T20360] netlink: 'syz.9.6589': attribute type 13 has an invalid length. [ 288.046736][ T29] audit: type=1326 audit(1755636865.245:35118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 288.078289][ T29] audit: type=1326 audit(1755636865.245:35119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 288.102077][ T29] audit: type=1326 audit(1755636865.245:35120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 288.125899][ T29] audit: type=1326 audit(1755636865.245:35121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82acb2ebe9 code=0x7ffc0000 [ 288.149695][ T29] audit: type=1326 audit(1755636865.245:35122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20357 comm="syz.8.6587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82acb2d550 code=0x7ffc0000 [ 288.173629][T20360] gretap0: refused to change device tx_queue_len [ 288.173825][T17094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.180630][T20360] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 288.217557][T20363] loop7: detected capacity change from 0 to 512 [ 288.232099][T20363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.245530][T20363] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.280876][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6589'. [ 288.290588][T20361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=20361 comm=syz.9.6589 [ 288.331704][T17094] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.767613][T20382] netlink: 'syz.8.6595': attribute type 3 has an invalid length. [ 288.801891][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6596'. [ 288.811295][T20386] 8021q: VLANs not supported on ip6tnl0 [ 288.829047][ T1043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1043 comm=kworker/1:2 [ 288.842748][T20388] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 288.981834][T20394] netlink: 536 bytes leftover after parsing attributes in process `syz.8.6600'. [ 289.004111][T20396] random: crng reseeded on system resumption [ 289.013305][T20396] Restarting kernel threads ... [ 289.018374][T20396] Done restarting kernel threads. [ 289.094715][T20400] netlink: 'syz.3.6603': attribute type 13 has an invalid length. [ 289.112740][T20400] gretap0: refused to change device tx_queue_len [ 289.120339][T20400] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 289.196830][T20408] netlink: 'syz.3.6607': attribute type 153 has an invalid length. [ 289.216019][T20412] netlink: 'syz.8.6609': attribute type 13 has an invalid length. [ 289.228237][T20412] gretap0: refused to change device tx_queue_len [ 289.235373][T20412] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 289.301357][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6609'. [ 289.387066][T20426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.394733][T20426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.402492][T20426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.410139][T20426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.240181][T20453] netlink: 536 bytes leftover after parsing attributes in process `syz.9.6626'. [ 290.379326][T20468] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6631'. [ 290.395908][T20471] netlink: 'syz.1.6633': attribute type 3 has an invalid length. [ 290.448567][T20484] netlink: 536 bytes leftover after parsing attributes in process `syz.9.6638'. [ 290.486704][T20488] syzkaller0: entered promiscuous mode [ 290.492420][T20488] syzkaller0: entered allmulticast mode [ 290.710370][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6647'. [ 290.754834][T20512] netlink: 'syz.7.6651': attribute type 3 has an invalid length. [ 290.767298][T20514] netlink: 'syz.1.6652': attribute type 3 has an invalid length. [ 290.815890][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.830238][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.922796][T20529] netlink: 'syz.7.6657': attribute type 13 has an invalid length. [ 290.933533][T20529] gretap0: refused to change device tx_queue_len [ 290.940587][T20529] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.032898][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6659'. [ 291.195311][T20548] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.651218][T20560] gretap0: refused to change device tx_queue_len [ 291.658463][T20560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.731727][T20562] gretap0: refused to change device tx_queue_len [ 291.738658][T20562] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.762051][T20562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=20562 comm=syz.9.6671 [ 291.831447][T20566] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.838842][T20566] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.905097][T20576] random: crng reseeded on system resumption [ 291.915617][T20576] Restarting kernel threads ... [ 291.920805][T20576] Done restarting kernel threads. [ 291.928989][ T3942] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.963265][ T3942] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.976820][ T3942] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.992001][T20580] random: crng reseeded on system resumption [ 291.996180][ T3942] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.004913][T20580] Restarting kernel threads ... [ 292.018570][T20580] Done restarting kernel threads. [ 292.077056][T20594] ================================================================== [ 292.085145][T20594] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 292.091902][T20594] [ 292.094208][T20594] write to 0xffff888104216910 of 8 bytes by task 20591 on cpu 1: [ 292.101915][T20594] call_rcu+0x44/0x3f0 [ 292.106012][T20594] mas_wmb_replace+0xc6a/0x14a0 [ 292.110852][T20594] mas_wr_store_entry+0x1773/0x2b50 [ 292.116040][T20594] mas_store_prealloc+0x74d/0x9e0 [ 292.121089][T20594] vma_iter_store_new+0x1c5/0x200 [ 292.126099][T20594] vma_complete+0x125/0x580 [ 292.130596][T20594] __split_vma+0x5d9/0x650 [ 292.135032][T20594] vma_modify+0x3f2/0xc80 [ 292.139353][T20594] vma_modify_flags+0x101/0x130 [ 292.144308][T20594] mprotect_fixup+0x2cc/0x570 [ 292.148966][T20594] do_mprotect_pkey+0x6d6/0x980 [ 292.153800][T20594] __x64_sys_mprotect+0x48/0x60 [ 292.158637][T20594] x64_sys_call+0x274e/0x2ff0 [ 292.163294][T20594] do_syscall_64+0xd2/0x200 [ 292.167871][T20594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.173762][T20594] [ 292.176069][T20594] read to 0xffff888104216910 of 8 bytes by task 20594 on cpu 0: [ 292.183675][T20594] mas_state_walk+0x2f5/0x650 [ 292.188335][T20594] mas_walk+0x60/0x150 [ 292.192382][T20594] lock_vma_under_rcu+0x8d/0x160 [ 292.197303][T20594] do_user_addr_fault+0x233/0x1090 [ 292.202399][T20594] exc_page_fault+0x62/0xa0 [ 292.206885][T20594] asm_exc_page_fault+0x26/0x30 [ 292.211722][T20594] [ 292.214034][T20594] value changed: 0x00007f9b36ebffff -> 0xffffffff85645c50 [ 292.221291][T20594] [ 292.223601][T20594] Reported by Kernel Concurrency Sanitizer on: [ 292.229744][T20594] CPU: 0 UID: 0 PID: 20594 Comm: syz.9.6684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.239531][T20594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.249592][T20594] ==================================================================