last executing test programs: 8m56.92443931s ago: executing program 32 (id=1405): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7b3, &(0x7f00000007c0)="$eJzs3ctrXFUYAPDvTibPVhNB0LoKuDBQOjE1tgqCFRciWCjoum2YTEPNJFMyk9KEQFtEcONCcSHYjWurddetj61u/BtcSEu1abHiQiJ3Hu3kMWnaZjLV/H5wM+fcx5zzzbn33JN7LzMB7FrD6Z9MxL6I7jQ5WJ+fRH1GZCOO1Na7s7yUT6ckVlbe/SOprnN7eSkfTduk9tQzz0bEDx9G7M+sL7e8sDg9USwW5ur50crMmdHywuKB0zMTU4WpwuyhsfHxg4dfPnxo+2L98+fFvdc/eeuFb478/cEzVz7+MYkjsbe+rDmO7TIcw/XPpDv9CFd5c7sL67Ck0xXgoaSHZlftKI99MRhdm7Tk6ztaMwCgXc5HxAoAsMskzv8AsMs0rgPcXl7KN6ao3c+50NELEzvkxhsR0VeLv3F/s7YkW7tn90tf9T7owO2keo+kIYmIoW0ofzgiLl09fjmdok33IQE2cuFiRJwcGl7b/6c93NpnFh7Ui1tYZ3hNXv8HO+e7dPzzyvrxX0Smfvz3Vf+uHf/0bnDsPoz7H/+Za6uy3dtQaJN0/Pda07Ntd5rirxvqqueeqI75upNTp4uFtG97MiJGors3zY9tUsbIrX9utVrWPP67+en7X6Xlp6/31shcy/ZGf/M2kxOViUeL+p4bFyOey24Uf3K3/ZMW499jq97pZssy3n71oy9aLUvjT+NtTOvjb6+VLyN66um18Tckmz6fOFrdHUYbO8UGvv3184FW5Te3/6WraUlL+cb/Ajshbf+BDff/u/EPJc3Pa5YfvIyf+ge/b7VsdfzHL6flr46/uv+vku7/Pcl71XSj7c5NVCpzYxE9yTvr5x+8t20j31g/jX/k+Y2P/832/7QbOllPr9zn4cfs9d+/fvj42yuNfzJt/6QexH3b/8ETV+5Md7Uqf2vtP15NjdTnrO//suved6sVfKQPDwAAAAAAAAAAAAAAAAAAAAAAAAC2KBMReyPJ5O6mM5lcrvYb3k/HQKZYKlf2nyrNz05G9beyh5q+i3Gw6ftQx+rfh9/IH1yTfykinoqIz3r7q/lcvlSc7GTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBkT4vf/0/91ttio/6drCEA0BZ9na4AALDjnP8BYPdpcf7v2Xi2q/8A8H9QPf8n2U5XAwDYQa7/A8Du4/wPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAmx07ejSdVv5aXsqn+cmzC/PTpbMHJgvl6dzMfD6XL82dyU2VSlPFQi5fmmn5RhdqL8VS6cx4zM6fG60UypXR8sLiiZnS/GzlxOmZianCiUL36q2y7Y0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALamvLA4PVEsFuYkNk+cfyyqcbHebJ3+NCQei0RvRLSriOZeor8znRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf8C/AQAA///dZxuQ") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000ac0)="cc14b341", 0x4, 0xc804, &(0x7f0000000200)={0xa, 0x4e22, 0x487000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000380)={r5}, &(0x7f0000000400)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) socket$igmp6(0xa, 0x3, 0x3a) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x123400, 0x0) ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) 8m31.754094161s ago: executing program 3 (id=1631): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget(0x3, 0x2, 0x204) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x220, 0x11, 0x148, 0x220, 0x0, 0x348, 0x2a8, 0x2a8, 0x348, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0xfb, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x2, 0x400, 0x5, {0xb284}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @loopback, 0xff, 0x0, 'vlan0\x00', 'veth0\x00', {}, {}, 0x8, 0x0, 0x64}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x26, 0x1e, 0x0, 0x80000000, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x0, 0x10000}, 0x1322, 0xfffffffd, 0xb, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) socket$kcm(0x29, 0x7, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 8m31.441843656s ago: executing program 3 (id=1639): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) dup3(r0, 0xffffffffffffffff, 0x0) 8m31.392958646s ago: executing program 3 (id=1640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 8m31.270118588s ago: executing program 3 (id=1642): r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, r0, 0x0) setresgid(0xee00, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000700), 0x76, 0x1c9b81) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000140)=0x6) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xa010, 0x54416}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc005}, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 8m30.708939915s ago: executing program 3 (id=1649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000fbdbdf251c000000"], 0x2c}}, 0x40006) 8m29.571938441s ago: executing program 3 (id=1664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) 8m29.515124642s ago: executing program 33 (id=1664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) 7m12.316446711s ago: executing program 1 (id=2530): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x1800010, &(0x7f0000000200)={[{@debug}, {@nolazytime}, {@i_version}]}, 0xfd, 0x580, &(0x7f0000001500)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380), 0x0, 0x0, 0x1) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 7m11.401981743s ago: executing program 1 (id=2540): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="2ff385c8e37018ac47d3820d9b16a395f1bdd6d340ccc87c8e161792f79d4309cf0c3cbd272e6891fcf6546f8054e08ae44018b2bb9172b71d7407dc22b51f5957dbe1d045032b1788e7f943fdd8c67d13d0a3b72442a90214e32a3f183d7ce52f54164903435fa7a6f4ea9931771c1455dbd0205afc02fe6848ff1a9a9fa38bbb893214cfff2859f86d74d5d791776d2e5c41200d0f852f714ea6cbd0e486ac4f38a222e7f94f56d79d3b447160f1f14f0400000000000000cf50d87b0f39d1839a977111120a01700e9cfda921f5907c5543d28e18f8409186b98d40f06889647f5faa6b1ac77dd2c4000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 7m11.305134404s ago: executing program 1 (id=2544): r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4402}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x2, {0x0, 0x1, 0x4}, 0x1}, 0x18) mknodat$null(r0, &(0x7f0000000440)='./bus\x00', 0x1, 0x103) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) io_getevents(r8, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7m10.370395378s ago: executing program 1 (id=2547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 7m10.25489934s ago: executing program 1 (id=2549): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4294, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',obj_role=,hash,\x00'], 0x25, 0x34f, &(0x7f00000004c0)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==") r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7m10.19468831s ago: executing program 1 (id=2550): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6m55.14760732s ago: executing program 34 (id=2550): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6m1.867203295s ago: executing program 4 (id=3642): r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x2, {0x0, 0x1, 0x4}, 0x1}, 0x18) mknodat$null(r0, &(0x7f0000000440)='./bus\x00', 0x1, 0x103) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) io_getevents(r8, 0x0, 0x0, 0xffffffffffffffff, 0x0) 6m1.728977717s ago: executing program 4 (id=3646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) 6m1.659886607s ago: executing program 4 (id=3648): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x17, 0x2, 0x8, 0x5, 0x2c00, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d86}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd}, @alu={0x7, 0x0, 0xd, 0x9, 0x2, 0xfffffffffffffff4, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x8001, 0xdf, &(0x7f0000000700)=""/223, 0x737c402c7b7e5ede, 0x39, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[r1, r1, r1, r1], &(0x7f0000000480)=[{0x0, 0x3, 0x3, 0x3}, {0x2, 0x2, 0x0, 0xb}, {0x2, 0x1, 0x8, 0x8}, {0x5, 0x4, 0x9, 0x7}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast1}], 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d61"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x122, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x1e, 0x4, 0x0, 0x2e, 0x114, 0x64, 0x0, 0x1, 0x11, 0x0, @private=0xa010100, @broadcast, {[@generic={0x0, 0x5, "79a5cf"}, @noop, @timestamp={0x44, 0x1c, 0x94, 0x0, 0xd, [0x4, 0x2, 0x3, 0xcb88, 0x9, 0x9]}, @ssrr={0x89, 0x1f, 0x8b, [@broadcast, @private=0xa010102, @local, @broadcast, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x9, [{@rand_addr=0x64010102, 0x1ff}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0xf, 0xb0, [@remote, @local, @empty]}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "8b58a8418e321d6f53c302ce2024239834a8af278a03580a1efd17afad198954", "c74b9686816c6e889c4419e94dec224f7998f05da99dd1659852b48b46a5b4d6bba82746b7b538fe02e09e69391221f0", "600d6f337757e50f5c938b05f3bc53b3e930d04abbf5f1a21300a5c0", {"ad6d2c16d7ee500e8cbed285f896f6c5", "5bc31c7e334c3da6a9862e79f39ac73c"}}}}}}}, 0x0) 6m1.526902s ago: executing program 4 (id=3653): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) acct(&(0x7f00000001c0)='./file0\x00') r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) 6m1.177698734s ago: executing program 4 (id=3659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) 6m1.147811895s ago: executing program 4 (id=3660): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) execveat(r7, &(0x7f0000000380)='./file2\x00', &(0x7f0000000480)={[&(0x7f0000000400)='-+(\x00', &(0x7f0000000440)=')+(#@,(]!*\x00']}, &(0x7f00000005c0)={[&(0x7f00000004c0)='cgroup.type\x00', &(0x7f0000000500)='vfat\x00', &(0x7f0000000540)='GPL\x00', &(0x7f0000000580)='GPL\x00']}, 0x1000) r9 = openat$cgroup_procs(r8, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f00000042c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x800000001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) 5m46.095367545s ago: executing program 35 (id=3660): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) execveat(r7, &(0x7f0000000380)='./file2\x00', &(0x7f0000000480)={[&(0x7f0000000400)='-+(\x00', &(0x7f0000000440)=')+(#@,(]!*\x00']}, &(0x7f00000005c0)={[&(0x7f00000004c0)='cgroup.type\x00', &(0x7f0000000500)='vfat\x00', &(0x7f0000000540)='GPL\x00', &(0x7f0000000580)='GPL\x00']}, 0x1000) r9 = openat$cgroup_procs(r8, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8840) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f00000042c0)="$eJzs3E1rXFUYB/AnMWni1LyotdqCeNCNbi5NFm50EyQF6YDSNkIrCLfmxg65zoTcITAiVldu/RwiiOBOEHGjm2z8BoK7bFxWEK9kRtO0pMiAzC3h99vMwzznz5wzb3CGOffg9S8+3N6qsq28H9NTUzG9E5HupkgxHf/6NF557aefn7924+aVtXZ7/WpKl9eur7yaUlp84ft3P/7qxR/6Z9/5dvG7udhffu/g99Xf9s/vXzj46/rtTpU6Ver2+ilPt3q9fn6rLNJmp9rOUnq7LPKqSJ1uVewO+zMRcdjfKns7O4OUdzcXWju7RVWlvDtI28Ug9XupvztI+Qd5p5uyLEsLrWB8M0fVxpd367qOqOvZOBN1XdePRyvOxhOxEIuxFMvxZDwVT8e5eCbOx7PxXHzz69eDwwQAAAAAAAAAAAAAAAAAAADw/xn3/P+F4aimZw0AAAAAAAAAAAAAAAAAAACny7UbN6+stdvrV1Oajyg/39vY2xjdjvprW9GJMoq4FEvxZwxP/4+M6stvttcvpaHl+Ky880/+zo9zD+RXhpcTODG/Msqn4/m9jbloHc+vxlKcOzm/emJ+Pl5+6Vg+i6X45f3oRRmbcZi9l/9kJaU33mo/kL84HAcAAACnQZaOLN+//31s1M8e1h/lx/h94L799WH24kyr0bUTUQ0+2s7LstidWDEbEeOlZic8w0e1ODP5B50/uuf27B91XTf/JDRUPPyTMjf2+/lYMRURDa1r+j/GNP3NxCTce9GbngkAAAAAAAAAAADjmMQ/DZteIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//6HzOEw==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x800000001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) 3m41.311419448s ago: executing program 7 (id=5907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0xfffffffffffffdae) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) set_mempolicy(0x0, 0x0, 0x7) r4 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0) io_uring_enter(r4, 0x15f1, 0xff98, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) mount(0x0, 0x0, 0x0, 0x8, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x5, 0x1, 0x0, 0x101}]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xfff8, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8004) brk(0x20001000) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r8, 0xc0403d08, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) r10 = syz_clone3(&(0x7f0000000180)={0x2000000, &(0x7f0000000080), 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(r10, 0x0, &(0x7f0000000500)={0x764, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000540)='./bus/file0\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) 3m41.290663108s ago: executing program 7 (id=5908): r0 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./bus\x00', 0x20418, &(0x7f0000000200)=ANY=[@ANYBLOB="bc3f95ab48b028f042eda08f0b06d2cf61cdee19222135b81d"], 0xfd, 0x1e8, &(0x7f0000000c80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) close(r4) socket$igmp6(0xa, 0x3, 0x2) openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1-d\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r7, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$eJzs3c1uG+fVAOBDWY4VfYARfC2CwHWciZOFDTgySSUyhCwKlhrJk1AkMUMFNroogtgujMhJETdArS7SbNJ20UvoItveRO6h6K7XkH1XVTHDH/1Yol1bEQP3eQhzXs6cmffMkODRS3OGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABErb1Wrzdq0cm6W7eS47XX8t7mlOXj7X13YDKl34ha+S8WFuK14azXfrq3+NXy7nJcHD66GAvlZCF2/u/VV97/yfzceP0pCZ2Kh492Pv14e/vuF7NOZEY20m5W9LLN1kaaZEUvWV1ZqV+/uV4k61knLW4Xg3Qzaedpa9DLkyvtq0ljdXU5SZdu97a6G2utTjqeeeOdZr2+knyw1E9bedHrXv9gqWjfzDqdrLtRxZSLy5gbya8/zz/MBskgbW0myb3723eXn5RkGdR4mqDmk4Ka9Waz0Wg2Gyvvrb53o16fb9YX4sCM+iFxYJWkXp8fv2jjleFr+6mP9T7/eJaV+MHMlXd//3L0hMYfpj+zJ/PGDSdgblT/oxNZdGMrbkVy5K0da5FHLzaPWT7yXcTvq8b1dGq/Zf1eGNX/cZV/bW/xhfLu8sLo0aXj6v8xuZze7WE8ip34ND6O7diOu/HFzDM63dtGpNGNLIroRRab0armJKM5SazGSqxEPX4VN2M9ikhiPbLoRBpF3I4iBpFWr6h25JFGKwbRizySuBLtuBpJNGI1VmM5kkhjKW5HL7aiGxuxFq1qK/fifnXcl6fkOAlqPE1Qc0rQqJiXL7zK/GN/ENTr86NlR9X/G5P6/9eqPjx8+zSrFDN1Ztw4uTdveE674/ofu7v/3i3NOiMAAADgpNWqT99rl16aPF7POukvZ5wVAAAAcJKqrzJdLCdny9brUSvH//W9gJdmlxsAAABwMmpxafQpwGK8MWyNz4SqG/sDAADAi6H6//9L5WSxbM2NZg/H/2NzM0oOAAAAOBF/2rvG/k4ceY3dol8O/+cjovZ1/9bbtQetMq714MxwvTOHtzhYv1A7P9pINVmZHz1qpxdro6tfTi6C+f1ocu9J1/qv5fnZ501g75OMN+8Mp3cmS6peFtezTrrU7nXeb0SrdX5ukN4afPnZ/d9FlL3/ubt5vhb37m/fXfrk8+07VS5fl1v5+sHoirC1/yKX38brw5jXz8Vje7wTtbPViRijfheH/db37/9oX8a79PJT9PnNOOby4nC6eHD/F8o+G0vH7f1i7dxo/efa82/GwW9deWs4OSKL5pQsqmPR3H/8Dx2Lp8oi3joui/OTLJbHWezG+MqYB7NYfs4sAGbl3qQKHay7Zyf1/7G6+wzvcqdT3b+JK8OYKxeqN9b5C0fUlfqRdWX3zKEa++zV7W9xdRhzdRx8XI0t9/kvk34bVb/flit8e2y/RWd8QB78Jq7PPdp5534Ve/ezZnN5pf5uvf5eM85WuzGalJn+a+Fwpi+H2gPwP+1y9f3/ab+xc3TEmb3SXHs33iynP9s3qi5r0qTi/f/klIKl+CQ+j+24E9eqsw0i4o2j+13cdxrCtbg8SvboUevivl94uXb8qG5f7Phvl6eJHf68DAC8SC4/oQ5P6v/4t/jGEVUJHY7dr+0bdy/sjbtjNMI8VMunj47313IA4IeR5t/XFgd/rOXlg8bqaqM1uJkmea/9YZJnaxtpknUHad6+2epupEk/7w167V6nbHyUraVFUmz1+718kKz38qTfK7JbP4+skyajn34v0s1Wd5C1i34nbRVp0u51B632IFnLinbS3/pFJyu+2t3dLVcu+mk7W8/arUHW6yZFbytvp0tJUqTpKPBmmifZWtodZOtZ2ewm/Tw7F/nt5KNeZ2szTdbSop1n/UEvr7IZ95V118/lm9Vml2Z9sAHgR+Lho51PP97evvvF0Y2FOHZR1fjn9NWHjVnvIwBw0LQq/di3zwAAAAAAAAAAAAAAgJl4wvl/z96oHZozFxE/VF8vXGP3q1Ppa3yCx+yenTM/kgP+eOPbfXOSE9zyyxHxo9jBA41zjy+a8RsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzhPwEAAP//ONRIwg==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000607000/0x3000)=nil, 0x3000, 0xf) 3m39.805761809s ago: executing program 7 (id=5924): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(r3, &(0x7f0000000240)='./file0\x00', 0x20) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {0x0, 0x8}, @result}], 0x1c) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3m39.607916602s ago: executing program 7 (id=5930): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000013e67700"/28], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000480)=""/207, 0xcf, 0x0, &(0x7f0000000580)=""/194, 0xc2}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000040)=ANY=[], 0x3, 0x7ed, &(0x7f0000002880)="$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") mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1833084, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000180)={0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000002c0)=0x4000, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) 3m38.677791105s ago: executing program 7 (id=5947): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x4, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioprio_set$pid(0x2, r3, 0x6000) write$qrtrtun(r0, &(0x7f00000010c0)="8bc150704b12d63f860a0ead6791f71f2f31055390a7103312ceb9ac6bf9732856318ec3467bfb06e17dc759e51b052e3bdef25d5f0d7c3d95025700dcdb000a8cc6b944930247681778b83ec5cc9a29549575ffa6787eef2e3bf742d2f9e431075c35471defca023f6722707f91a6ae101486c67ca32b0a4e643f086934a7891afc9fa613ad79c2204c67f2b84494a6b37434ae2d60d9913a0a305a877679be5d078a18570dcdf4f6cc39d264f77a2f024fedc080a10692ad50c4f9e8c8a47f4dd9ba671a553e08481793a742e53e928bfc48097179b0d7fe0f4fd9b43633f67bf02a0d85af897bf3c33d78019e09eeade70a3c911d185b2801a5d5d2d7c8d0705f9de745d2674ee6c9adb445a64b324b7ca2220887508bbec83ef6ecdc30dc94d85b4df31b239da159e44090c55b51bcbaea2dae8362b7a7751223b51a473501e7871d889a2c300d4cf60a7f9997cf3382d8e9ae11f7f85c4806429d05692b3d923d26afdcf3941ed93507f7531565c340177e69ef19df6e4f3fe5ad9abfc2de766fca9c9a9688140c1cf2505314a3ff0cdf58342237e3a488090b8635fb31ca9fc8b7175b52c3b4f56c771e873ab9cffb87738fed18fd814b8cd0cb549bb281774f288e5bd5d82d1bb5e3ef4b8a10f54fa2d4c9752022cff87b2f372cd07ea3a4e709ed07e39efab106588895c448533fe4db19c445a37deb9560546c3988fb217627cfa78e403c8f40df5d28878a330f27bfd9606a9ad609adca2e8ada92a7bc81e8bab70fd1e9a4dbc50e89497b77dc967cc570c7f32ddaf7dabe93548cce1d715152b7f76addfda309ff4fbf2ce360d3c5eab65c18877ffec13235cb239184f324fc85517e036bf56dd39425995d43e5cecdc00f0562d786a0016a7b6b9652035df965f6fb5d36a82401b3c9faa1d1d4cfd719d82c8b6b0cf8ce515ea16ab950735b7b8a4e5b5dc6cfd7215f50c6409e6f30954a80feac373e7003b941150542a46259f05765a4bb0b627203acc6073dcccbb965233c6d231f1796d4a40d94f5b6814338406f36ea3473cbd284f3d8531569c6981ea92a0c8ece0254224fdd583ce8e7b93c6fb7bdfa57ce9b3bd7e9e1f7c8d63a3b90008828a701a7d563ee7641141868b3b169b1f0af6d1c668ff0c5f3626b8f0ee1387d90fb417fc56ba2ea1c2b4eecbbb76b53f879c7810274d95a036f6a131f6c82d275e1c7202f8c80471897520443e1343444687e6716a034a6fcab4c100f464161e24a0471ba71b990d8e9f15db15e461716665dbc3826817fb2e15b1c9d7170595d3f48e8cae228ee5d6a0349e57881768b926620912443a2fe855274e697619f64d4414d9de204664e4c2329695a33b42e9286687d822d83ac947c395fa7a58a69a62134e12336d1da6662417a2f595f74722b3ad4b0eced29d8b826ddc8794271696ffd9d23bb906a70bb894d1315a12a1609bc241dd750e72901e53b88fc87894ff3801cb3271170529eae675646e3787432129d2406c240b7343a38ac2d99e81c7fecc00b77f9b2fa450a89c0e8910625c089d205507d04e171f26aa74ccba764b3507d23ea0029aafdaa4faeac61309e6951543fb33f207902ecdb4d8ffe62cf43100ed2211c61b4bb1efab422076f6b947fe99608355649b1e48b8c5521d6aabbea8a5698d2d269d8c6f99b147a59adfe74cb2ab5eed913c61bd0657743a8c05d8ab11517679e84d7d178518ccf73f8fadaaae0c7d2340e5c298c40e0d4b5990ef1ffcf858b7c118a78979550c98b1c6f1cd5b2f705a9f43f8fcce53c522ec6d0cca48d016049a46307823a8f481a92c9bfc4ddc12bc100bb3c88fa4a54122ecf4ad229607cb3411a594bdf4307eafb529f4724f1f4dc29b7c1ebd47a65fb0e48d71f3219bc4383f075aa6f97610db3ee03df995e8c62799364b3b3cc76600979e3d8b05d8c65ec9aad62216547237600ee286605e1c900e4383b4f37d50831463eb542b5f45439e2b59e44fe7fadd0eca9a0fe98157fcd43ca003332b202b1eb5aea8b812461a5356d9bf7df4e9b9e2cbd5e63b09b413d7cf8337c6d8a5c21ce2e004c71ce852c180afd0599bcab2628742ae5bc1413eb95e717b9b36f1a776ab44b6371a0bc256c0e88d258f73b13554718814f376cd82e28ea08efae08d30539fefda15470ad3d25084e5cc8e595e662f0e73000e69c19499ee3daf31d5bdf67a1c8440f77e52a2496bcae79e698974cccffac0c10307b7900f06aadae0b2f33c27ef5cb5b3f6b32f14534efd826481c880c1f4295fcaacd3e23b108cb7cb18c279a2ac9fd1e03e177c955f68c69c59e00b00044b667d1d6355ea9ee9616f71ca25078753467ae4c8f8233af493b44e362bb04f6ac89731a62cbdee69b2dbcadb517f74b0fc5d7cc8ae8c439d8c33abe5f3b088505d3979f14e8c386b24eeeaae04864da463fe8cca6dfdd9e28c573226db38c92478818f3578c03fc8bef3736464c021dc8cf0a909c39c123daaff6534b5399c8e96d0af89addf42fa1f6fde09db05421a1459f28c3fe82485b0748d063b4eb7a6837c90e8a80920589421f9877084fce84be6d919b2bb34dec17368a47699b781ed30eb66576906412f58a961c528a291e9aa8120e50baf5ca1d2805e6ba849fbf9ace38182e9763b5a9f3edaa896d69e7f8032c08ce6bcb9b953b7569e8c6eccab95b8bdbc21d68255cb497c7612cb485d0c01db6796693e9e8b63e409344559feb299a210ae82ebe911263157b78487a9cff1d89f92ceb9a8a319b4614a45ac4a3298a80565f254351a6136ebcc86e72a081fac17930e6fcb33d1710e62a2eda2b77241cdeb4e6d06e03286423a8e0cb293db638560cb1cc7899d735de6181ea0c990ac3ceecc4d4c509e1decd78fb6d1fdaa6ef792c8fcdcdb35b444e4c955e1e3dd2a43088de692936481cd58371a68141c613233c3e2bb1b74a7e331c63ba1aa5854b4f9acec456cc81edb909579e8ae19689be6dcb77683ca3186b8af7024cc2921bfefec2c8cf562703870ff44cfdbfd68774f67df99c0be4d4da8953050042a210e2c188267bfcdd3eaef83ed1f4ddf1478a3b0401bca98197746e3ce4014ac10d2027149f191c79bc365e9f940b1e1be056f9c15507ae9a7035be0d44246a3d413a02f8674b16583671dda179c785a053d64deb8e09efa7c36f007ed54377b7596a67c6fdf3cfdf67895b5e96897707a64f8dfd21145266e4691a556a3f439f82163ca7df88254eee2d297147c2d924f38808c4870e83681ce7537dce05bfee8fb300dfddbc7794a4a82992d547eae4b281cfb1a4dd4ca3fca868caf9bf749953171fc82d63e8fd968151e532c4aa42be0c72757dbaaa18d58781f3c5a9837b747ded0fc27448da546c8c2c3da17486919d465aca10a0badcef02782b150c4957197980c0183482ed24a90e127292ddcdc32fada05c054346d9271612dfab4368d8ee4ef98c53c5d4229d8cd78d145912c715f232c71f023341d51e3a6343364a78b9ae6a48f45924dd9ea5064850720bac059e8da3c08041fc5da75ad4536063713f724843a0b708ef23864f96612d31bffe51afb4321072acdefb4ac02499118f7d4b8f337868e25cb194f1695dcd99af01d63210246c629388ee15704c5a7a52ad4b162e22f224e555c51e50ff8168bf9afc921ad3887acfd703bd4c6b07c267679f1fa805b1c7a58933f43776adef5fc8ec40c63a1ddcf7033bf1ccce6d11abd0463b869c88e54e82ee139f4f72f5a10cbbdd75d08c29a002eb4a7a7418b71a7cb0840059bc905f61a9f96ddc1f6d9357a5317763b3b60a876328b8f7de2d6891f4046ddef3fd4f31c5a1f3763401d6a465b6362f6b305e1aa0d99a202f57118adec189ee228a4335221bf93acaaa41f5b24a752dc934ad31a4a648eb6155cd352c198980ff2e3a3b2e9c38c69bea9e76402ff1c4382b772c088799586e4e59d49e6acb2def47d14b720668db04ef0b50d3523ecee89da06af6b95ba79e079ba7692248695add403401b69a11a030c83e3c5406d5e56125632b09950758ebcf8597f061fa3a12d62e6d8d355411564f6489b3720eea1ae1faf37238d7f8c32b07a7756614294a06694afecaf0c2f6196f5855beeeb96f38cb51f4d38ede25f580e977550a74355232d732355e279a86cb208dd0a45665f82a5a686d062f378c5c84081975f93408efba28d2fab6eb9fdd0fafae85b47a7e43f66e246febb1efe566daff1083d7bd8a57424d20b2cc9e6b55ef6143cb118dbb6137284391e423c1b5cb7ff81aedddbb43173926b924847bd5891fcdc6d856514d0e477c2e74d9ed6fcc82b7985ac90304959bf36a36644b066589ce61301def85d6499e257ca9baba1c4797f2c53c46703f0aceb24b0d39340ce3c9aa573be88fd609fa7411703b8680f5bdded585abb3c16ac33918ea20354c22726ce6f0d2792db1ce65a0d49bf4bd2bdaf046cc76ec5dd00570a8c50239b899d277bcd2f57eba4a256b14a465868677b1139ec5fdeaa1f354f69ec0f212044ade85430c56f0239d3c218e0225ebc893816cfcee2c1e92df1af68f00799d4b433752f13743e186f6400b62bce618954b376a02fd6d5696be97658cbdaac2dcaa8c3923d9a9d5d2b666d8cc494ef055491ed42a7236b4cf1447b0243cc9f22c2f32af257441e4fb0e175321b6797f426813ca160a1cf240857b7d04183fa3a6fcede8f77569dc9eb6cb4a7bc1420c8f54ac59a4663f0b7f10144966715c05304910cca0f6e1ecb82a6b2380803a53be8ce2f8e5926a84c89ca5e51387b06a78442ee955028d334d19d91192ec888b007912b93e3263d8e109b6be71f0a7ee328b137891b1c32f48046e0c0c4f2f258221f4b0b7f1d4ab18cbeb563353e0ba8c5c5d123802f0077fa84c40c62457e274ff85f05c727ae32577af9271f28bd95dd77d9c4ef6e29e566ad8de2296a8ee03606d81585a8141ac77b93625d2143bd78404a7a3ce4e6129259dbd5a0ca72117e71fc18c56b0dc0a30dd015e9769dcc1faa083cc54cd9f21d6437f3d81c0d20ca22867b7152f69b6f5c503f2ffc5282ec81d8e4859018b17b0702d6dea7f19a3b77fc5a682ccab2abf6897e8e716326ed31fbee65fc77733c3a1f96d282728842964fdaa5c39f826dee490a8fb56c3728b53bb4e36df79cc44cb19be00f77dec2fdd89b2590623cf40840f75ddf2ee15cfda42d62db83922802e32682babc335ca7ed9b5d721023916b7ba1a45843b084bcc4bec9f81aab4133ffcc66ed961af4a3a3297e4b5b27142e2652ae759a405e66b6ce02eeba795f4dd50670ce7490437c7c468c4e33f6f5bdb80a425d06088d6d72a544dd83c8cd1e3cdda8a589bb38897a26ca1b8ef557e1c3b7d4c1fac6cf66c63cee246d47a46516c038382327043669c72f872607e3cccd37fb61e0c1543f41a9efbf6b660f70027bfd8185b736533208bb5b09849af16fdea17ac5bc42ff1a39e4f579e62919735e137d76c7b8da74a301c13968b7b73c635361a5457b7d88a72eb4034073d310646217b992c855669c56a2920fe47c2d031fda49e79da17d4fe1b36a5da9a8bffd0b8ea8143c1287fa81539384a37ca95a4c530db0d46961ecf96c4d92da53a373b549843c8eb44b1de56244a4759f8528476d952a5dd339034251803cc4a537451b373591d17a0a99e4306cdb04bb34e410ffb1ad518b059752cf42b43de68e7d0d34a52827c878f1c28f8f10777271721bb44e5f7109bd0a45da83898a1bee35fd52f93abf1e6c9d5", 0x1000) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011", 0x5}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xb, 0x0, 0x88, 0x80}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x80) 3m38.217494301s ago: executing program 7 (id=5951): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m38.183494952s ago: executing program 36 (id=5951): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m6.684439492s ago: executing program 6 (id=6377): openat$null(0xffffffffffffff9c, 0x0, 0x201, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 3m6.663511422s ago: executing program 6 (id=6379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xfffffffffffffe56, 0x2, [@TCA_GRED_DPS={0xfdcf, 0x3, {0x10, 0x1, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040013}, 0x40400c0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff69ac93f687a841c6edcbcdffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast2=0xac1414aa}}}, 0x108) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x2d3, @local}, {0xa, 0x4e21, 0x0, @empty}, 0xffffffffffffffff, {[0x0, 0x1ff, 0x0, 0x0, 0x0, 0xe3, 0xc]}}, 0x5c) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000ac14141b0000000000000000000000004e230001020000000000000084000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fc01000000000000000000000000000000000000000000000300000000000000080000000000000009000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000200000000000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500009021aeebbb30aa540c591c209b0040000000060000000800000000000000c5ce772407e3cd52abaaf711b63ba298f70c34e5efdc6b4faf5e6a5206ccae17283bdb3869810a6dad951ab1f58ea282e046071e86733b37e73d64659a71e3179e72424e2f8a5598db2ddd75ae709da1db0c80fd758eb0172685548c735d145f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x8, 0x7, &(0x7f0000000400)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x6b, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x7ff}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x10001, '\x00', r1, r13, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x33, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 3m6.252146398s ago: executing program 6 (id=6381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xb00, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3m5.912531373s ago: executing program 6 (id=6382): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000200000002}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newtaction={0x30c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x2f8, 0x1, [@m_xt={0x2f4, 0x7, 0x0, 0x0, {{0x7}, {0x26c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x463}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x127, 0x6, {0xf2, 'mangle\x00', 0x8, 0x40, "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"}}, @TCA_IPT_TARG={0xbb, 0x6, {0x6, 'security\x00', 0x2, 0x9, "1d74de960a5bbd3da7b1afda5067015d280670a5fbd7fb5118adbad2ebe1146f82ae9d35cd94991c34ccb4e53fdfd6e7e80e905b83674021c6ec4d2b72b8a605afc8d123595ac4db6b9a47e043f2a62233f5913300cb5e057bec2a13942a53437a344199d4892f865ee440e4a654c061aed2b2c596bfa4c26d660ba4760f727c05b111ac55aef0ac09319d955c411db19b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x64, 0x6, "124ace02a1a95b2c2426161e95e7da88c622e5c20d8862b2e955fd22be35f2771c630749ddffc72fa804281e86720dc2dcf759386e69745732941f36f953ef0af5b451f91164fce143a66b11cda56c34407fd625c2e3ab808b80eb77fb7699c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x30c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01030000000000000000010000090800010012000000080003"], 0x30}}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe8011e0000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='devfreq_frequency\x00', r7, 0x0, 0x7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = syz_clone(0x80000, &(0x7f0000000100)="fcba9b14b56e2766ab1b8238abbf602d8a7fd22d5dda71576b8a00350f13650783c720389abe8303d4df4090ddf13ee88690443690603614bd79290b0649aa4367765b4c", 0x44, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)="5f006079716e3bc52050fbe736d547200e4bea081812eece2f2f4791afa557e18a5b0231ce964c290afa1cfd7935002d350baa56e7c7776bb29edc7e5d3735fe591474082dccba1cc837547eb3e763d020b0fad62fc3d24ea327fd5cc8d23f07ad03b2bea3e9e758ad70aac034fa58b6b053035184982942a8bb735c81238613a52cf700ba225b675d63bf73c09aee7ebab252c76dc89384831270b00ce48d47ccbc35dc8f5f19265e76270a016d7aabdb96b375f9ceaedb4ee532d0538616") prlimit64(r10, 0x7, 0x0, 0x0) 3m5.039751755s ago: executing program 6 (id=6396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 3m4.550379622s ago: executing program 6 (id=6403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000180), &(0x7f0000000580)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) open(&(0x7f0000000200)='./file1\x00', 0x1850c2, 0x108) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000000c0)=""/18, 0x12}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m4.496357223s ago: executing program 37 (id=6403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r1], 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000180), &(0x7f0000000580)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) open(&(0x7f0000000200)='./file1\x00', 0x1850c2, 0x108) sendmsg$rds(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000000c0)=""/18, 0x12}, 0x0, 0x79}}], 0x30, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.497012991s ago: executing program 9 (id=10427): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) pipe(0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x4ffe6, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, r4, 0x1, 0x0, @void}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 3.495952871s ago: executing program 9 (id=10428): ioprio_get$pid(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000480)={0x43, 0x3, 0x2, 0x3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100)={[{@errors_remount}, {@lazytime}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noblock_validity}, {@nodiscard}, {@mblk_io_submit}, {@acl}, {@noauto_da_alloc}], [], 0x3d}, 0x1, 0x533, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$key(0xf, 0x3, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=t']) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x18) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtclass={0x60, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0xb}, {0xe, 0x5}, {0x2, 0xd}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xf9, 0xc}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_RATE={0x6, 0x5, {0xc1, 0xc2}}]}, 0x60}}, 0x44040840) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 3.405405082s ago: executing program 9 (id=10431): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_open_dev$usbfs(&(0x7f0000000100), 0x71, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffff7ffffe9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f00000004c0)=[{r7}], 0x1, 0xffffffffffbffff8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x5, 0x7}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) 3.166366275s ago: executing program 8 (id=10441): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 3.083282587s ago: executing program 8 (id=10443): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) 3.040666957s ago: executing program 8 (id=10444): setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket(0x10, 0x3, 0x4) fchown(r2, 0x0, 0x0) 2.903870269s ago: executing program 8 (id=10446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 2.86440867s ago: executing program 8 (id=10448): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup2(r3, r3) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0x9, 0x1ec618, 0xa, 0x10}) ioctl$TIOCSTI(r1, 0x5412, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x7e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r0, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r9, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.77556636s ago: executing program 8 (id=10450): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x9, 0x80400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000740)={{r2, 0xfffffffffffffff8, 0x8, 0x0, 0x5, 0x7, 0x1, 0xa, 0x4, 0x2, 0x5, 0x6, 0x1000, 0x1, 0x9}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='jbd2_handle_extend\x00', r3, 0x0, 0x1}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.507975714s ago: executing program 9 (id=10452): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0x1d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000003c0)='bond0\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000005d0000000000000000000000180100042020782500000000f52020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000d00000095e1db55ba2d040039f3c87589faa825ffd855713c38a049f25251d457d7fd61", @ANYBLOB="fbbd954558be7611acbf27c66c9a8c187459d57d4e2e1a398599952260d0fc2e706497c8702975bfe4ac29762d5d9983c91f14c124334fd473b2cf5901c75b4dc3ce338abb9ae1641685a0ed8752afb4f6f96983223fd547c18a42d6d048932e5f52e598642d42de14093e6eb22a6d9dcbcf7e66280d63aa3da9b97e15369d024b82eb1d2bc72988ab1e9ef00f2e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000080), &(0x7f00000003c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x7}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', r9, 0x29, 0xf5, 0x6, 0x9, 0x5d, @mcast2, @mcast2, 0x8000, 0x7, 0x10000, 0xffff}}) r10 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 2.345630437s ago: executing program 9 (id=10454): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.298770828s ago: executing program 9 (id=10456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_open_dev$usbfs(&(0x7f0000000100), 0x71, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffff7ffffe9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f00000004c0)=[{r7}], 0x1, 0xffffffffffbffff8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x5, 0x7}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) dup2(r6, r7) tkill(r5, 0x13) 927.566576ms ago: executing program 5 (id=10490): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 887.168417ms ago: executing program 5 (id=10491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000fffffff395000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 870.499947ms ago: executing program 5 (id=10493): setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket(0x10, 0x3, 0x4) fchown(r2, 0x0, 0x0) 830.342768ms ago: executing program 5 (id=10494): ioprio_get$pid(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000480)={0x43, 0x3, 0x2, 0x3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100)={[{@errors_remount}, {@lazytime}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noblock_validity}, {@nodiscard}, {@mblk_io_submit}, {@acl}, {@noauto_da_alloc}], [], 0x3d}, 0x1, 0x533, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$key(0xf, 0x3, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=t']) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x18) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtclass={0x470, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0xb}, {0xe, 0x5}, {0x2, 0xd}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xf9, 0xc}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x480, 0x7, 0x8, 0x6, 0x0, 0x50000000, 0x31e, 0xfffffff7, 0x5c68, 0x9, 0x0, 0x1, 0xefa2, 0x478e, 0x4, 0xc, 0x5, 0x4000, 0x2, 0x6, 0x400, 0x6f7, 0x9, 0x8, 0x6, 0x1, 0x7, 0x90, 0x4, 0x9, 0x5, 0xa0c, 0x4, 0x0, 0x7, 0x0, 0x74, 0x81, 0x24dd, 0x8, 0x0, 0x5, 0x9, 0x5, 0x80, 0x74ba, 0xd, 0x8001, 0x1e, 0x5, 0xd, 0x10, 0xfff, 0x1, 0x800, 0xfffffffc, 0x0, 0x7fff, 0x9, 0xfffffffc, 0xfffffc01, 0x10000, 0xa1b4, 0x2, 0xa6, 0xffffff01, 0x2, 0x9, 0x6, 0x5, 0x8000, 0x1, 0x3, 0x5, 0xc4, 0x3, 0xda9, 0x6, 0x4, 0x0, 0x9, 0x10001, 0x800, 0x7838f8ae, 0x8, 0x80, 0x81, 0x4, 0x4, 0x80000000, 0xc, 0x40, 0x1, 0x8, 0x9, 0x1, 0x6, 0xd, 0x1, 0x8, 0xf8a, 0xffffff01, 0x88fe, 0x8, 0x2, 0xc8, 0x40, 0x3, 0x81, 0x3, 0x6, 0x6, 0xffffff80, 0xe85, 0x2, 0x1, 0x8, 0x4, 0x8, 0x0, 0xd, 0x10, 0x9b, 0xfff, 0x5, 0x9, 0x2, 0x8, 0xffffffff, 0x5, 0x9, 0x947f, 0x80000001, 0xffffff00, 0x80000000, 0x9e8, 0x1000, 0x8, 0x2, 0x9, 0x7, 0x0, 0x4, 0x6e0, 0x10000, 0x3, 0x7, 0x574, 0x9, 0x10, 0x9, 0xe, 0xa, 0x1, 0x8051, 0x6, 0xfffffffc, 0x7, 0x563e, 0x9, 0x7, 0xd6, 0x8, 0x4, 0x7, 0x9, 0x8, 0x5, 0xfff, 0x4, 0xe000, 0xe5, 0x8, 0x8, 0x8, 0x7, 0x2, 0xfdf, 0x4, 0x2d181101, 0x9, 0x8, 0x2000000, 0x7ff, 0x0, 0x9, 0x0, 0x10000, 0xd, 0x452, 0x38, 0x10001, 0x7, 0x0, 0x6, 0x13e, 0x2, 0x2, 0x5, 0xfffff001, 0x100, 0x8, 0x9, 0x7ff, 0x40, 0x2, 0x7, 0x5, 0x3, 0x7, 0x7, 0x8, 0x6, 0x7, 0xfffffffc, 0xfffffffd, 0x5, 0x7ff, 0x8, 0x401, 0xe911, 0x2, 0x1160, 0x4, 0x909, 0x3, 0x4, 0x10000, 0xf0cd, 0xeb24, 0x7, 0x7, 0xfffffff1, 0x5ca4, 0x1, 0xba, 0xa, 0x1ff, 0x1, 0x4915, 0x7, 0x7, 0x401, 0x7, 0x9, 0x9, 0x200, 0x5, 0xff, 0xe9, 0x7, 0x83, 0x100, 0x800, 0xba, 0x4]}]}}, @TCA_RATE={0x6, 0x5, {0xc1, 0xc2}}]}, 0x470}}, 0x44040840) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 739.730399ms ago: executing program 5 (id=10496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff8, 0x25, &(0x7f0000000040)={0x60, 0x1, 0x8001, 0x1}, 0x8, 0x6, 0xd0000, 0x0, 0x9e, 0x68e, 0x0}) 699.12452ms ago: executing program 5 (id=10497): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_open_dev$usbfs(&(0x7f0000000100), 0x71, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffff7ffffe9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f00000004c0)=[{r7}], 0x1, 0xffffffffffbffff8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x5, 0x7}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @empty}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) 371.104904ms ago: executing program 2 (id=10507): ioprio_get$pid(0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000480)={0x43, 0x3, 0x2, 0x3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100)={[{@errors_remount}, {@lazytime}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noblock_validity}, {@nodiscard}, {@mblk_io_submit}, {@acl}, {@noauto_da_alloc}], [], 0x3d}, 0x1, 0x533, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$key(0xf, 0x3, 0x2) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=t']) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x18) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtclass={0x470, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0xb}, {0xe, 0x5}, {0x2, 0xd}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xf9, 0xc}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x480, 0x7, 0x8, 0x6, 0x0, 0x50000000, 0x31e, 0xfffffff7, 0x5c68, 0x9, 0x0, 0x1, 0xefa2, 0x478e, 0x4, 0xc, 0x5, 0x4000, 0x2, 0x6, 0x400, 0x6f7, 0x9, 0x8, 0x6, 0x1, 0x7, 0x90, 0x4, 0x9, 0x5, 0xa0c, 0x4, 0x0, 0x7, 0x0, 0x74, 0x81, 0x24dd, 0x8, 0x0, 0x5, 0x9, 0x5, 0x80, 0x74ba, 0xd, 0x8001, 0x1e, 0x5, 0xd, 0x10, 0xfff, 0x1, 0x800, 0xfffffffc, 0x0, 0x7fff, 0x9, 0xfffffffc, 0xfffffc01, 0x10000, 0xa1b4, 0x2, 0xa6, 0xffffff01, 0x2, 0x9, 0x6, 0x5, 0x8000, 0x1, 0x3, 0x5, 0xc4, 0x3, 0xda9, 0x6, 0x4, 0x0, 0x9, 0x10001, 0x800, 0x7838f8ae, 0x8, 0x80, 0x81, 0x4, 0x4, 0x80000000, 0xc, 0x40, 0x1, 0x8, 0x9, 0x1, 0x6, 0xd, 0x1, 0x8, 0xf8a, 0xffffff01, 0x88fe, 0x8, 0x2, 0xc8, 0x40, 0x3, 0x81, 0x3, 0x6, 0x6, 0xffffff80, 0xe85, 0x2, 0x1, 0x8, 0x4, 0x8, 0x0, 0xd, 0x10, 0x9b, 0xfff, 0x5, 0x9, 0x2, 0x8, 0xffffffff, 0x5, 0x9, 0x947f, 0x80000001, 0xffffff00, 0x80000000, 0x9e8, 0x1000, 0x8, 0x2, 0x9, 0x7, 0x0, 0x4, 0x6e0, 0x10000, 0x3, 0x7, 0x574, 0x9, 0x10, 0x9, 0xe, 0xa, 0x1, 0x8051, 0x6, 0xfffffffc, 0x7, 0x563e, 0x9, 0x7, 0xd6, 0x8, 0x4, 0x7, 0x9, 0x8, 0x5, 0xfff, 0x4, 0xe000, 0xe5, 0x8, 0x8, 0x8, 0x7, 0x2, 0xfdf, 0x4, 0x2d181101, 0x9, 0x8, 0x2000000, 0x7ff, 0x0, 0x9, 0x0, 0x10000, 0xd, 0x452, 0x38, 0x10001, 0x7, 0x0, 0x6, 0x13e, 0x2, 0x2, 0x5, 0xfffff001, 0x100, 0x8, 0x9, 0x7ff, 0x40, 0x2, 0x7, 0x5, 0x3, 0x7, 0x7, 0x8, 0x6, 0x7, 0xfffffffc, 0xfffffffd, 0x5, 0x7ff, 0x8, 0x401, 0xe911, 0x2, 0x1160, 0x4, 0x909, 0x3, 0x4, 0x10000, 0xf0cd, 0xeb24, 0x7, 0x7, 0xfffffff1, 0x5ca4, 0x1, 0xba, 0xa, 0x1ff, 0x1, 0x4915, 0x7, 0x7, 0x401, 0x7, 0x9, 0x9, 0x200, 0x5, 0xff, 0xe9, 0x7, 0x83, 0x100, 0x800, 0xba, 0x4]}]}}, @TCA_RATE={0x6, 0x5, {0xc1, 0xc2}}]}, 0x470}}, 0x44040840) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 288.691326ms ago: executing program 2 (id=10508): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0x1d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000003c0)='bond0\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000005d0000000000000000000000180100042020782500000000f52020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000d00000095e1db55ba2d040039f3c87589faa825ffd855713c38a049f25251d457d7fd61", @ANYBLOB="fbbd954558be7611acbf27c66c9a8c187459d57d4e2e1a398599952260d0fc2e706497c8702975bfe4ac29762d5d9983c91f14c124334fd473b2cf5901c75b4dc3ce338abb9ae1641685a0ed8752afb4f6f96983223fd547c18a42d6d048932e5f52e598642d42de14093e6eb22a6d9dcbcf7e66280d63aa3da9b97e15369d024b82eb1d2bc72988ab1e9ef00f2e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000080), &(0x7f00000003c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x7}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', r9, 0x29, 0xf5, 0x6, 0x9, 0x5d, @mcast2, @mcast2, 0x8000, 0x7, 0x10000, 0xffff}}) r10 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES8=r11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 148.820787ms ago: executing program 0 (id=10512): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 144.764527ms ago: executing program 2 (id=10513): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) 107.741368ms ago: executing program 0 (id=10514): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 106.991278ms ago: executing program 2 (id=10515): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pS \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x20, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe34c}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5e560416}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @ldst={0x2, 0x2, 0x3, 0x6, 0xa, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query]}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x68, &(0x7f00000004c0)=""/104, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xb, 0x7fffffff, 0x81}, 0x10, 0x80d9, 0xffffffffffffffff, 0x3, &(0x7f0000000b40)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x3ff, 0x2, 0xe, 0x7}, {0x2, 0x5, 0xa, 0x9}, {0x1, 0x1, 0xd}], 0x10, 0x6, @void, @value}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 93.233998ms ago: executing program 0 (id=10516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000fffffff395000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 84.146088ms ago: executing program 2 (id=10517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x68100, 0x12a) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xa}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="518636aaec26fd4f1c330b978aaa99c10d26ce072c4d14d3b45e43ef8e763256f43972d80ac9ba5b61609faf7b91102d4ccc8a8c03cb85d0dd52075cb4429fbd509f5075f7b27068d1a583ac12e08e5e7778a8a5ac487618d4eb1b3e115ff62a07b240d0d501ca82bfd37b44876f4b2f537424ccda48baa59e8a68361b7b", 0x7e}, {&(0x7f00000004c0)="1e60b86749b934698815240ee12ae0ab5351c293ee8299edcf010a69aa6029e8d19db599f09cfa40f20a61e287d663b28ddcfaf58f948e4317462669640807e1664b816390b2ba49681b889209d36df07e4e512221bbfeaacd20aab10b460e60c5f8814ceea706754a60b6eb26413e5b5cb0eb7fbb92ff7aad18e23d9c4ff12f8a9f8b3a27f6d3426834ceef37", 0x8d}, {&(0x7f0000000580)="dd89d676d0a6d6412f29001a13efb3691e96fd296c05b9591536458c071848206bfef47be12610d207675ac0beb7bfa4ce0fd33037ffade92d5a08c0d0a112c5b51dddf39eb77b6814a9c850f14da3562904745efb84e2c49eddd9297ae512c215d4b18c3fee461420175ef41e2b97358d79c3cea8fe9c8581d39c3cce41c968801aaf44aef4eda759bd689d417f844d18e08978d4969c06f6e7f3a5b24ee10e3f2f3949c5bab3ba4340ba467610b4465aaa52ec87c078afe22e06c4fc90b32b01ff7e4e44aa", 0xc6}, {&(0x7f0000000680)="2fac3dacff8ef99ed74b04549faa081bf64c0b42f77ecfe5fafddfe7d599c7a96fd9db946fd26c120c37f08c0897dc4cef311719f2000217f4f31390acfb6845195eb6092d9b6be744dee945f95eb6151df59eaffd80aeb6e40c51a7d26b58d6f34f4b4061bad3e5739bbaa3d57921ad68b3386a23362324df2bc3fafa1ed9f4cd6cb457542f988331774ff398fc5f0904f1edd4af73ac3472eab35bc9253030c272cf3840088d6b", 0xa8}, {&(0x7f00000001c0)="469a4fa7b3cf92f0054b7864c0197d8f5479dbef8cde87dfdb8b9269b8f61162b417c5922b06cf492ba0f7fdf5be8cd2eeec6b882134f8529bdd55934f10053a144779863687c72991a664296a27849aa62c5f0318184a82f4461ed28bba67c80779141aeccd3e8e678caae24a606b3a87ee8d790a255ff7", 0x78}, {&(0x7f0000000900)="93ed7ce1158bd20a5260b2f72260490c01c6841b4caf227359961f21d4674e995783c54bf56483ceac6889771d19b93866ffa444a4d9715284779fe5541444c2aea97bece9e51b5ac19f63ecc30fe855a3f2b6db183daf9588c02f1cf2849aaa141bc340f7bf89fd88bac9ff16d022d2d6d9abc72e03d874c648629d1c7960235a9dc72b284d774d1a7368a3f2454a2969c0a2576d570e0e8f51", 0x9a}, {&(0x7f00000009c0)="47739349b58e01620949959f5880ed51478695eab019307fda3cf356c096cff720026a1c8856d0b10965fb5d7337aea06b67019c44295a5b9a9d947be65529dcf1a22df62d9843b2e0d6b55418c4beaf9eec3afe15bcf4206ed7556a800decdac3c2d4d83fd023f48361fdca12454d791f7ea6e459a72f9b", 0x78}, {&(0x7f0000000280)="f63f1162e6cc23f06fc7db1cdb5c69814d455e32ee1fa232edba14", 0x1b}], 0x9, &(0x7f0000000b80)=[{0xe0, 0x88, 0x9, "c717a773864da7909adc9deee0f38771664074f1991c50332c8e578f11b997d14bb84511fad659467ce3de78020f6930858032ce8e9c0a20bc4aa674323fbf5e9430a456286795fe9cb32c82874b74a79e962004ead0814fa7c72c3cac15b75a4f66f09be1c93083e0f8a021b6d2e093b6e26fd58fa8a48e35a0b5e500e34828ac2c9c45a5d890cd95ee1443720e6bd2be72e512f9bb1b5c3fc4a92dc857e52fb5c9324e6d21d3a22f1d7794a0859da755e74e3295a1e11de5ca4b47fcdad88578ccc388976ea3d01184f0bd"}, {0x38, 0x118, 0x7, "357a00605f78908a285bbc6c838fc62d1f8ac5722bfa480126e490d2b39e2bc4b20c7303"}, {0x18, 0x118, 0x2, "2759b9358424f6"}, {0x30, 0x109, 0x80000001, "7d6a45a4ccf1b8674db9c8de906bf93faad1f4ba80dd8807b144b45c375645ff"}], 0x160}, 0x800) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0x9, 0x1b, 0x1b7, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000000000000f6}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r4}) 63.407689ms ago: executing program 0 (id=10518): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x18, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000300)={0x84, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) 27.442959ms ago: executing program 0 (id=10519): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB]}, 0x78) 26.349489ms ago: executing program 2 (id=10520): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_free_percpu\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB="0000000000000000000015000000000000000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYRESDEC], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xfedd, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0xa32, 0x0, 0x47, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000380)={@broadcast, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@llc={0x4, {@snap={0x0, 0x1, "fc", "78c367", 0x19, "30e4101faf4a9d97a22376b5d0e4595429ce8d3d90f23e3ba5776ce6a9a8ceb9f243b367b33f907d780f4394d134f4d657ec4ad09123d6c135ce70b4861dd75436884e13d225d2519b2a2a16d21d29a570e0af92c1b6263d036352b07b29f3ab703942bce53796cd94fa3c0d560d4fe22373ebf1fcdaeeab8f6974af9dc38e5e4d3918cd5acf6e6d9306d85472005294"}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) 0s ago: executing program 0 (id=10521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff8, 0x25, &(0x7f0000000040)={0x60, 0x1, 0x8001, 0x1}, 0x8, 0x6, 0xd0000, 0x0, 0x9e, 0x68e, 0x0}) kernel console output (not intermixed with test programs): 81bcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 636.848988][T29971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.849044][T29971] R13: 0000000000000000 R14: 00007f481d8b5fa0 R15: 00007ffd68744c98 [ 636.849063][T29971] [ 637.122170][T29981] netlink: 'syz.2.8815': attribute type 13 has an invalid length. [ 637.122476][T29981] gretap0: refused to change device tx_queue_len [ 637.122490][T29981] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 637.452801][T29998] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 637.486470][T29998] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 637.600927][T30010] netlink: 'syz.9.8827': attribute type 13 has an invalid length. [ 637.619684][T30010] gretap0: refused to change device tx_queue_len [ 637.626159][T30010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 637.679441][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 637.679459][ T29] audit: type=1326 audit(2000262496.230:34796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30011 comm="syz.2.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa278cde929 code=0x7ffc0000 [ 637.741484][ T29] audit: type=1326 audit(2000262496.270:34797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30011 comm="syz.2.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fa278cde929 code=0x7ffc0000 [ 637.765811][ T29] audit: type=1326 audit(2000262496.270:34798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30011 comm="syz.2.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa278cde929 code=0x7ffc0000 [ 637.789657][ T29] audit: type=1326 audit(2000262496.270:34799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30011 comm="syz.2.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa278cde929 code=0x7ffc0000 [ 637.868457][ T29] audit: type=1326 audit(2000262496.420:34800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30016 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c06f8e929 code=0x7ffc0000 [ 637.892314][ T29] audit: type=1326 audit(2000262496.420:34801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30016 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f9c06f8e929 code=0x7ffc0000 [ 637.916287][ T29] audit: type=1326 audit(2000262496.420:34802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30016 comm="syz.9.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c06f8e929 code=0x7ffc0000 [ 637.966136][ T29] audit: type=1326 audit(2000262496.520:34803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30011 comm="syz.2.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa278cde929 code=0x7ffc0000 [ 637.989920][ T29] audit: type=1326 audit(2000262496.520:34804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30011 comm="syz.2.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa278cde929 code=0x7ffc0000 [ 638.104850][T30022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8830'. [ 638.120228][T30022] netlink: 'syz.2.8830': attribute type 27 has an invalid length. [ 638.134820][ T29] audit: type=1326 audit(2000262496.650:34805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30021 comm="syz.2.8830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa278cde929 code=0x7ffc0000 [ 638.256679][T30040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8840'. [ 638.484855][T30056] x_tables: ip_tables: osf match: only valid for protocol 6 [ 638.994026][T30068] delete_channel: no stack [ 639.072606][T30076] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8852'. [ 639.084071][T30076] netlink: 'syz.8.8852': attribute type 27 has an invalid length. [ 639.169142][T30079] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8854'. [ 639.189696][T30083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8856'. [ 639.367807][T30093] IPv4: Oversized IP packet from 127.202.26.0 [ 639.492962][T30104] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8865'. [ 639.525576][T30104] netlink: 'syz.8.8865': attribute type 27 has an invalid length. [ 639.937436][T30119] 9pnet: Could not find request transport: t [ 639.959912][T30124] xt_socket: unknown flags 0xc [ 640.139388][T30132] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8877'. [ 640.165550][T30132] netlink: 'syz.9.8877': attribute type 27 has an invalid length. [ 640.473019][T30147] delete_channel: no stack [ 640.761348][T30167] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 640.769049][T30167] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 641.033918][T30188] FAULT_INJECTION: forcing a failure. [ 641.033918][T30188] name failslab, interval 1, probability 0, space 0, times 0 [ 641.047549][T30188] CPU: 0 UID: 0 PID: 30188 Comm: syz.0.8903 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 641.047586][T30188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.047660][T30188] Call Trace: [ 641.047740][T30188] [ 641.047747][T30188] __dump_stack+0x1d/0x30 [ 641.047772][T30188] dump_stack_lvl+0xe8/0x140 [ 641.047804][T30188] dump_stack+0x15/0x1b [ 641.047837][T30188] should_fail_ex+0x265/0x280 [ 641.047875][T30188] ? legacy_init_fs_context+0x31/0x80 [ 641.047952][T30188] should_failslab+0x8c/0xb0 [ 641.048011][T30188] __kmalloc_cache_noprof+0x4c/0x320 [ 641.048050][T30188] legacy_init_fs_context+0x31/0x80 [ 641.048137][T30188] alloc_fs_context+0x3ec/0x4e0 [ 641.048172][T30188] fs_context_for_mount+0x22/0x30 [ 641.048242][T30188] do_new_mount+0xe9/0x680 [ 641.048292][T30188] path_mount+0x4a4/0xb20 [ 641.048315][T30188] ? user_path_at+0x109/0x130 [ 641.048353][T30188] __se_sys_mount+0x28f/0x2e0 [ 641.048452][T30188] ? fput+0x8f/0xc0 [ 641.048523][T30188] __x64_sys_mount+0x67/0x80 [ 641.048546][T30188] x64_sys_call+0xd36/0x2fb0 [ 641.048574][T30188] do_syscall_64+0xd2/0x200 [ 641.048601][T30188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 641.048676][T30188] ? clear_bhb_loop+0x40/0x90 [ 641.048704][T30188] ? clear_bhb_loop+0x40/0x90 [ 641.048733][T30188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.048760][T30188] RIP: 0033:0x7f13835be929 [ 641.048775][T30188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.048793][T30188] RSP: 002b:00007f1381c27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.048829][T30188] RAX: ffffffffffffffda RBX: 00007f13837e5fa0 RCX: 00007f13835be929 [ 641.048893][T30188] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 641.048909][T30188] RBP: 00007f1381c27090 R08: 0000200000000400 R09: 0000000000000000 [ 641.048925][T30188] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000001 [ 641.048940][T30188] R13: 0000000000000000 R14: 00007f13837e5fa0 R15: 00007ffd48081dc8 [ 641.048973][T30188] [ 641.302780][T30194] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8904'. [ 641.615031][T30216] 9pnet: Could not find request transport: t [ 641.624436][T30216] xt_socket: unknown flags 0xc [ 641.669052][T30223] set match dimension is over the limit! [ 641.937320][T30249] 9pnet: Could not find request transport: t [ 641.943948][T30249] xt_socket: unknown flags 0xc [ 641.953758][T30258] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8932'. [ 642.003190][T30262] set match dimension is over the limit! [ 642.149342][T30268] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 642.157849][T30268] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 642.218446][T30270] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8937'. [ 642.253893][T30270] netlink: 'syz.8.8937': attribute type 27 has an invalid length. [ 642.349138][T30255] Set syz1 is full, maxelem 65536 reached [ 642.509755][T30284] netlink: 'syz.9.8944': attribute type 27 has an invalid length. [ 642.592444][T30289] delete_channel: no stack [ 642.713429][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 642.713610][ T29] audit: type=1400 audit(2000262501.260:35400): avc: denied { unmount } for pid=23488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 642.804119][ T29] audit: type=1326 audit(2000262501.330:35401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.827983][ T29] audit: type=1326 audit(2000262501.330:35402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.851746][ T29] audit: type=1326 audit(2000262501.340:35403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.875361][ T29] audit: type=1326 audit(2000262501.340:35404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.899116][ T29] audit: type=1326 audit(2000262501.340:35405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.922803][ T29] audit: type=1326 audit(2000262501.340:35406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.946924][ T29] audit: type=1326 audit(2000262501.340:35407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.970649][ T29] audit: type=1326 audit(2000262501.340:35408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 642.994448][ T29] audit: type=1326 audit(2000262501.340:35409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30315 comm="syz.5.8960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481d68e929 code=0x7ffc0000 [ 643.022393][T30328] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 643.030103][T30328] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 643.194360][T30343] delete_channel: no stack [ 643.224456][T30351] netlink: 'syz.9.8974': attribute type 13 has an invalid length. [ 643.258856][T30356] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 643.267210][T30356] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 643.302091][T30358] set match dimension is over the limit! [ 643.402146][T30375] __nla_validate_parse: 6 callbacks suppressed [ 643.402162][T30375] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8985'. [ 643.494026][T30382] netlink: 'syz.5.8988': attribute type 13 has an invalid length. [ 643.560614][T30379] delete_channel: no stack [ 643.646364][T30397] delete_channel: no stack [ 643.713444][T28661] kernel write not supported for file /1115/oom_score_adj (pid: 28661 comm: kworker/1:7) [ 643.728243][T30405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8999'. [ 643.739144][T30405] netlink: 'syz.0.8999': attribute type 27 has an invalid length. [ 643.754234][T30408] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9000'. [ 644.034659][T30433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9011'. [ 644.046016][T30433] netlink: 'syz.2.9011': attribute type 27 has an invalid length. [ 644.076152][T30435] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 644.083728][T30435] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 644.095139][T30437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9013'. [ 644.396780][T30459] delete_channel: no stack [ 644.499230][T30472] 9pnet: Could not find request transport: t [ 644.512320][T30472] xt_socket: unknown flags 0xc [ 644.676846][T30495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9039'. [ 644.686038][T30495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9039'. [ 644.695101][T30495] netlink: 204 bytes leftover after parsing attributes in process `syz.5.9039'. [ 644.724271][T30497] delete_channel: no stack [ 644.825567][T30507] 9pnet: Could not find request transport: t [ 644.837274][T30507] xt_socket: unknown flags 0xc [ 644.880594][T30518] block device autoloading is deprecated and will be removed. [ 645.047906][T30532] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 645.057987][T30533] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9054'. [ 645.060156][T30532] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 645.066987][T30533] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9054'. [ 645.122856][T30534] delete_channel: no stack [ 645.189940][T30544] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 645.197979][T30544] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 645.256933][T30548] set match dimension is over the limit! [ 645.323710][T30557] netlink: 'syz.2.9067': attribute type 13 has an invalid length. [ 645.491166][T30576] 9pnet: Could not find request transport: t [ 645.498111][T30576] xt_socket: unknown flags 0xc [ 645.554169][T30583] netlink: 'syz.5.9079': attribute type 13 has an invalid length. [ 645.808579][T30608] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 645.817761][T30608] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 645.851321][T30612] netlink: 'syz.2.9092': attribute type 13 has an invalid length. [ 645.881105][T30609] delete_channel: no stack [ 646.068079][T30626] delete_channel: no stack [ 646.073562][T30628] block device autoloading is deprecated and will be removed. [ 646.294381][T30639] FAULT_INJECTION: forcing a failure. [ 646.294381][T30639] name failslab, interval 1, probability 0, space 0, times 0 [ 646.307150][T30639] CPU: 1 UID: 0 PID: 30639 Comm: syz.0.9105 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 646.307186][T30639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.307200][T30639] Call Trace: [ 646.307222][T30639] [ 646.307229][T30639] __dump_stack+0x1d/0x30 [ 646.307250][T30639] dump_stack_lvl+0xe8/0x140 [ 646.307296][T30639] dump_stack+0x15/0x1b [ 646.307394][T30639] should_fail_ex+0x265/0x280 [ 646.307510][T30639] should_failslab+0x8c/0xb0 [ 646.307540][T30639] kmem_cache_alloc_noprof+0x50/0x310 [ 646.307567][T30639] ? prepare_kernel_cred+0x3d/0x680 [ 646.307589][T30639] ? __list_add_valid_or_report+0x38/0xe0 [ 646.307694][T30639] prepare_kernel_cred+0x3d/0x680 [ 646.307721][T30639] ? _request_firmware+0x431/0xbb0 [ 646.307755][T30639] _request_firmware+0x446/0xbb0 [ 646.307832][T30639] ? avc_has_perm_noaudit+0x1b1/0x200 [ 646.307872][T30639] ? __rcu_read_unlock+0x4f/0x70 [ 646.307904][T30639] request_firmware+0x36/0x50 [ 646.307945][T30639] devlink_compat_flash_update+0xb2/0x1b0 [ 646.308008][T30639] dev_ethtool+0x148b/0x1650 [ 646.308089][T30639] ? full_name_hash+0x92/0xe0 [ 646.308129][T30639] dev_ioctl+0x2e0/0x960 [ 646.308207][T30639] sock_do_ioctl+0x197/0x220 [ 646.308246][T30639] sock_ioctl+0x41b/0x610 [ 646.308298][T30639] ? __pfx_sock_ioctl+0x10/0x10 [ 646.308327][T30639] __se_sys_ioctl+0xce/0x140 [ 646.308368][T30639] __x64_sys_ioctl+0x43/0x50 [ 646.308408][T30639] x64_sys_call+0x19a8/0x2fb0 [ 646.308525][T30639] do_syscall_64+0xd2/0x200 [ 646.308543][T30639] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 646.308581][T30639] ? clear_bhb_loop+0x40/0x90 [ 646.308661][T30639] ? clear_bhb_loop+0x40/0x90 [ 646.308682][T30639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.308701][T30639] RIP: 0033:0x7f13835be929 [ 646.308715][T30639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.308731][T30639] RSP: 002b:00007f1381c27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.308754][T30639] RAX: ffffffffffffffda RBX: 00007f13837e5fa0 RCX: 00007f13835be929 [ 646.308778][T30639] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 646.308789][T30639] RBP: 00007f1381c27090 R08: 0000000000000000 R09: 0000000000000000 [ 646.308800][T30639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.308811][T30639] R13: 0000000000000000 R14: 00007f13837e5fa0 R15: 00007ffd48081dc8 [ 646.308830][T30639] [ 646.588060][T30646] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 646.596137][T30646] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 646.628422][T30648] loop0: detected capacity change from 0 to 512 [ 646.638577][T30648] EXT4-fs: Ignoring removed orlov option [ 646.655990][T30648] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 646.669298][T30648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 646.685809][T30648] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.9109: corrupted in-inode xattr: e_value size too large [ 646.701567][T30651] delete_channel: no stack [ 646.702225][T30648] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.9109: couldn't read orphan inode 15 (err -117) [ 646.720094][T30648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.752368][T23748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.859554][T30667] loop0: detected capacity change from 0 to 512 [ 646.884883][T30667] EXT4-fs: Ignoring removed bh option [ 646.893517][T30667] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 647.103033][T30679] 9pnet: Could not find request transport: t [ 647.116935][T30673] xt_socket: unknown flags 0xc [ 647.193567][T30685] set match dimension is over the limit! [ 647.472845][T30722] netlink: 'syz.5.9139': attribute type 27 has an invalid length. [ 647.689348][T30744] netlink: 'syz.9.9151': attribute type 27 has an invalid length. [ 647.717871][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 647.717884][ T29] audit: type=1326 audit(2000262506.270:36717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.762686][ T29] audit: type=1326 audit(2000262506.300:36718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.786496][ T29] audit: type=1326 audit(2000262506.300:36719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.810131][ T29] audit: type=1326 audit(2000262506.300:36720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.834085][ T29] audit: type=1326 audit(2000262506.300:36721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.857881][ T29] audit: type=1326 audit(2000262506.300:36722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.881782][ T29] audit: type=1326 audit(2000262506.300:36723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.892002][T30749] delete_channel: no stack [ 647.905447][ T29] audit: type=1326 audit(2000262506.300:36724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.905496][ T29] audit: type=1326 audit(2000262506.300:36725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 647.905570][ T29] audit: type=1326 audit(2000262506.300:36726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30747 comm="syz.8.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672b88e929 code=0x7ffc0000 [ 648.350450][T25216] syz_tun (unregistering): left allmulticast mode [ 648.471536][ T3365] kernel write not supported for file /1264/oom_score_adj (pid: 3365 comm: kworker/0:3) [ 648.583930][T30798] delete_channel: no stack [ 648.588936][T30804] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 648.588958][T30804] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 648.666280][T30812] __nla_validate_parse: 21 callbacks suppressed [ 648.666304][T30812] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9178'. [ 648.712207][T30786] lo speed is unknown, defaulting to 1000 [ 648.722434][ T3365] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 648.730059][ T3365] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 648.736748][T30786] xfrm0 speed is unknown, defaulting to 1000 [ 648.738409][ T3365] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 648.756196][T30818] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 648.778827][T30818] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 648.796046][ T3365] hid-generic 0000:0004:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 648.849042][ T37] smc: removing ib device syz1 [ 649.020105][T30826] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9185'. [ 649.032320][ T340] bond0 (unregistering): Released all slaves [ 649.058141][T30830] loop0: detected capacity change from 0 to 512 [ 649.064985][ T340] bond1 (unregistering): Released all slaves [ 649.073797][T30831] netlink: 'syz.8.9185': attribute type 27 has an invalid length. [ 649.092028][ T340] bond2 (unregistering): Released all slaves [ 649.100291][T30830] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 649.116689][ T340] bond3 (unregistering): Released all slaves [ 649.135486][ T340] bond4 (unregistering): Released all slaves [ 649.143974][T30830] EXT4-fs (loop0): 1 truncate cleaned up [ 649.163520][T30830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.190257][T30833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9188'. [ 649.249983][T23748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.383500][T30841] set match dimension is over the limit! [ 649.405820][ T340] tipc: Left network mode [ 649.421757][ T340] hsr_slave_0: left promiscuous mode [ 649.473550][ T340] pim6reg (unregistering): left allmulticast mode [ 649.514968][T30857] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 649.522471][T30857] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 649.712948][T30786] chnl_net:caif_netlink_parms(): no params data found [ 650.195540][T30786] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.202667][T30786] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.232621][T30786] bridge_slave_0: entered allmulticast mode [ 650.242747][T30786] bridge_slave_0: entered promiscuous mode [ 650.252045][T30786] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.259327][T30786] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.269319][T30786] bridge_slave_1: entered allmulticast mode [ 650.277370][T30786] bridge_slave_1: entered promiscuous mode [ 650.319533][T30786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.346502][T30786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.368785][ T340] IPVS: stop unused estimator thread 0... [ 650.436045][T30910] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 650.446607][T30786] team0: Port device team_slave_0 added [ 650.464142][T30910] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 650.477241][T30786] team0: Port device team_slave_1 added [ 650.621752][T30786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.628881][T30786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.654940][T30786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.787528][T30786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.794638][T30786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.820769][T30786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.839179][T21617] kernel write not supported for file /1238/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 650.933297][T30931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9226'. [ 650.942444][T30931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9226'. [ 650.951569][T30931] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9226'. [ 650.971395][T30786] hsr_slave_0: entered promiscuous mode [ 650.980352][T30786] hsr_slave_1: entered promiscuous mode [ 650.992537][T30786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.014879][T30786] Cannot create hsr debugfs directory [ 651.113393][T30944] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9233'. [ 651.136008][T30944] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 651.145638][T30944] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 651.221462][T30949] hub 4-0:1.0: USB hub found [ 651.265440][T30949] hub 4-0:1.0: 8 ports detected [ 651.594905][T30955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9235'. [ 651.606854][T30955] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.616352][T30955] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.625091][T30955] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.633874][T30955] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.644927][T30955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9235'. [ 651.717688][T30786] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 651.731138][T30786] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 651.740375][T21617] kernel write not supported for file /1239/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 651.758667][T30966] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 651.759062][T30786] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 651.768663][T30966] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 651.801330][T30786] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 651.969430][T30983] lo speed is unknown, defaulting to 1000 [ 651.989446][T30786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.005543][T30987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5124 sclass=netlink_audit_socket pid=30987 comm=syz.2.9245 [ 652.032436][T30786] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.068352][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.075544][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.112824][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.120078][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.315565][T31001] set match dimension is over the limit! [ 652.456584][T31018] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 652.471678][T31016] block device autoloading is deprecated and will be removed. [ 652.477881][T30786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.494610][T31018] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 652.756042][ T29] kauditd_printk_skb: 1418 callbacks suppressed [ 652.756062][ T29] audit: type=1400 audit(2000262511.300:38145): avc: denied { module_request } for pid=30786 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 652.798515][ T29] audit: type=1400 audit(2000262511.340:38146): avc: denied { map_create } for pid=31040 comm="syz.5.9265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 652.818638][ T29] audit: type=1400 audit(2000262511.340:38147): avc: denied { bpf } for pid=31040 comm="syz.5.9265" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 652.839564][ T29] audit: type=1400 audit(2000262511.340:38148): avc: denied { map_read map_write } for pid=31040 comm="syz.5.9265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 652.860551][ T29] audit: type=1400 audit(2000262511.340:38149): avc: denied { prog_load } for pid=31038 comm="syz.8.9264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 652.879831][ T29] audit: type=1400 audit(2000262511.340:38150): avc: denied { prog_load } for pid=31040 comm="syz.5.9265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 652.899889][ T29] audit: type=1400 audit(2000262511.350:38151): avc: denied { bpf } for pid=31040 comm="syz.5.9265" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 652.920677][ T29] audit: type=1400 audit(2000262511.350:38152): avc: denied { perfmon } for pid=31040 comm="syz.5.9265" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 652.942420][ T29] audit: type=1400 audit(2000262511.350:38153): avc: denied { prog_run } for pid=31040 comm="syz.5.9265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 652.974925][ T29] audit: type=1400 audit(2000262511.370:38154): avc: denied { sys_module } for pid=30786 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 653.120953][T31051] loop0: detected capacity change from 0 to 512 [ 653.142758][T31051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 653.173239][T30786] veth0_vlan: entered promiscuous mode [ 653.187699][T30786] veth1_vlan: entered promiscuous mode [ 653.189470][T31051] EXT4-fs (loop0): 1 truncate cleaned up [ 653.206417][T31051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.229311][T30786] veth0_macvtap: entered promiscuous mode [ 653.257711][T30786] veth1_macvtap: entered promiscuous mode [ 653.267907][T23748] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.283882][T30786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.316444][T30786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.330151][T30786] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.339084][T30786] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.348028][T30786] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.357018][T30786] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.650831][T31092] FAULT_INJECTION: forcing a failure. [ 653.650831][T31092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.664808][T31092] CPU: 0 UID: 0 PID: 31092 Comm: syz.8.9282 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 653.664841][T31092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.664857][T31092] Call Trace: [ 653.664873][T31092] [ 653.664893][T31092] __dump_stack+0x1d/0x30 [ 653.664914][T31092] dump_stack_lvl+0xe8/0x140 [ 653.664933][T31092] dump_stack+0x15/0x1b [ 653.664952][T31092] should_fail_ex+0x265/0x280 [ 653.665065][T31092] should_fail+0xb/0x20 [ 653.665105][T31092] should_fail_usercopy+0x1a/0x20 [ 653.665131][T31092] _copy_from_user+0x1c/0xb0 [ 653.665178][T31092] io_submit_one+0x52/0x11d0 [ 653.665231][T31092] __se_sys_io_submit+0xfb/0x280 [ 653.665257][T31092] __x64_sys_io_submit+0x43/0x50 [ 653.665277][T31092] x64_sys_call+0xfc4/0x2fb0 [ 653.665323][T31092] do_syscall_64+0xd2/0x200 [ 653.665350][T31092] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 653.665433][T31092] ? clear_bhb_loop+0x40/0x90 [ 653.665521][T31092] ? clear_bhb_loop+0x40/0x90 [ 653.665547][T31092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.665569][T31092] RIP: 0033:0x7f672b88e929 [ 653.665584][T31092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.665603][T31092] RSP: 002b:00007f6729ef7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 653.665705][T31092] RAX: ffffffffffffffda RBX: 00007f672bab5fa0 RCX: 00007f672b88e929 [ 653.665721][T31092] RDX: 0000200000002340 RSI: 0000000000000001 RDI: 00007f672ba8f000 [ 653.665738][T31092] RBP: 00007f6729ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 653.665754][T31092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.665769][T31092] R13: 0000000000000000 R14: 00007f672bab5fa0 R15: 00007ffe783150b8 [ 653.665876][T31092] [ 653.984027][ T3365] kernel write not supported for file /12/oom_score_adj (pid: 3365 comm: kworker/0:3) [ 654.128488][T31122] 9pnet: Could not find request transport: t [ 654.140572][T31122] xt_socket: unknown flags 0xc [ 654.233741][T31138] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 654.243565][T31138] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 654.426826][T21449] kernel write not supported for file /1350/oom_score_adj (pid: 21449 comm: kworker/1:3) [ 654.608407][T31161] set match dimension is over the limit! [ 654.621044][T31158] 9pnet: Could not find request transport: t [ 654.639618][T31158] xt_socket: unknown flags 0xc [ 654.667138][T31171] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 654.675663][T31171] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 654.724841][T31170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9314'. [ 654.743279][T31170] netlink: 'syz.0.9314': attribute type 27 has an invalid length. [ 654.891403][T31184] 9pnet: Could not find request transport: t [ 654.915062][T31184] xt_socket: unknown flags 0xc [ 655.082337][T31205] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9330'. [ 655.101717][T31205] netlink: 'syz.9.9330': attribute type 27 has an invalid length. [ 655.319831][T31233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9343'. [ 655.418071][T31242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9348'. [ 655.466714][T31241] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9346'. [ 655.501363][T31241] netlink: 'syz.9.9346': attribute type 27 has an invalid length. [ 655.826709][T31272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9362'. [ 655.834200][T21617] kernel write not supported for file /1302/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 655.981272][T31281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9366'. [ 656.021663][T31281] netlink: 'syz.2.9366': attribute type 27 has an invalid length. [ 656.457858][T21617] kernel write not supported for file /1319/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 656.504710][T31307] xt_socket: unknown flags 0xc [ 656.827767][T31303] 9pnet: Could not find request transport: t [ 656.999481][T31322] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9381'. [ 657.218838][T31334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9387'. [ 657.251235][T31334] netlink: 'syz.2.9387': attribute type 27 has an invalid length. [ 657.288533][T31342] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 657.308580][T31342] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 657.317299][T31346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9392'. [ 657.625652][T31371] FAULT_INJECTION: forcing a failure. [ 657.625652][T31371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.638826][T31371] CPU: 1 UID: 0 PID: 31371 Comm: syz.0.9404 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 657.638860][T31371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 657.638875][T31371] Call Trace: [ 657.638883][T31371] [ 657.638891][T31371] __dump_stack+0x1d/0x30 [ 657.638943][T31371] dump_stack_lvl+0xe8/0x140 [ 657.638973][T31371] dump_stack+0x15/0x1b [ 657.638993][T31371] should_fail_ex+0x265/0x280 [ 657.639026][T31371] should_fail+0xb/0x20 [ 657.639112][T31371] should_fail_usercopy+0x1a/0x20 [ 657.639131][T31371] _copy_from_iter+0xcf/0xe40 [ 657.639171][T31371] ? __build_skb_around+0x1a0/0x200 [ 657.639214][T31371] ? __alloc_skb+0x223/0x320 [ 657.639312][T31371] netlink_sendmsg+0x471/0x6b0 [ 657.639340][T31371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.639380][T31371] __sock_sendmsg+0x142/0x180 [ 657.639409][T31371] ____sys_sendmsg+0x31e/0x4e0 [ 657.639455][T31371] ___sys_sendmsg+0x17b/0x1d0 [ 657.639492][T31371] __x64_sys_sendmsg+0xd4/0x160 [ 657.639518][T31371] x64_sys_call+0x2999/0x2fb0 [ 657.639543][T31371] do_syscall_64+0xd2/0x200 [ 657.639620][T31371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 657.639648][T31371] ? clear_bhb_loop+0x40/0x90 [ 657.639669][T31371] ? clear_bhb_loop+0x40/0x90 [ 657.639738][T31371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.639835][T31371] RIP: 0033:0x7f13835be929 [ 657.639852][T31371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.639875][T31371] RSP: 002b:00007f1381c27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.639897][T31371] RAX: ffffffffffffffda RBX: 00007f13837e5fa0 RCX: 00007f13835be929 [ 657.639910][T31371] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 657.639921][T31371] RBP: 00007f1381c27090 R08: 0000000000000000 R09: 0000000000000000 [ 657.639934][T31371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.639977][T31371] R13: 0000000000000000 R14: 00007f13837e5fa0 R15: 00007ffd48081dc8 [ 657.640002][T31371] [ 657.862273][ T29] kauditd_printk_skb: 2161 callbacks suppressed [ 657.862287][ T29] audit: type=1400 audit(2000262516.410:40316): avc: denied { prog_load } for pid=31372 comm="syz.9.9405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 657.888532][ T29] audit: type=1400 audit(2000262516.410:40317): avc: denied { bpf } for pid=31372 comm="syz.9.9405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 657.888788][T31375] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 657.909984][ T29] audit: type=1400 audit(2000262516.410:40318): avc: denied { perfmon } for pid=31372 comm="syz.9.9405" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 657.967668][T31375] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 658.020313][ T29] audit: type=1400 audit(2000262516.420:40319): avc: denied { prog_load } for pid=31374 comm="syz.2.9406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.040237][ T29] audit: type=1400 audit(2000262516.420:40320): avc: denied { bpf } for pid=31374 comm="syz.2.9406" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 658.061225][ T29] audit: type=1400 audit(2000262516.420:40321): avc: denied { perfmon } for pid=31374 comm="syz.2.9406" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 658.082543][ T29] audit: type=1400 audit(2000262516.420:40322): avc: denied { write } for pid=31374 comm="syz.2.9406" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 658.106706][ T29] audit: type=1400 audit(2000262516.420:40323): avc: denied { write } for pid=31374 comm="syz.2.9406" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 658.131519][ T29] audit: type=1400 audit(2000262516.490:40324): avc: denied { map_create } for pid=31372 comm="syz.9.9405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.151549][ T29] audit: type=1400 audit(2000262516.490:40325): avc: denied { prog_load } for pid=31372 comm="syz.9.9405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 658.405127][T21617] kernel write not supported for file /1330/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 658.417433][T31402] netlink: 'syz.2.9413': attribute type 280 has an invalid length. [ 658.770794][T31439] 9pnet: Could not find request transport: t [ 658.781479][T31439] xt_socket: unknown flags 0xc [ 658.858862][T21617] kernel write not supported for file /87/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 658.971550][T31460] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 658.980467][T31460] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 659.078801][T31471] set match dimension is over the limit! [ 659.166379][T28671] kernel write not supported for file /1358/oom_score_adj (pid: 28671 comm: kworker/1:9) [ 659.376404][T31493] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 659.390386][T31493] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 659.444025][T31499] set match dimension is over the limit! [ 659.514866][T21617] kernel write not supported for file /1367/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 659.751699][T31529] __nla_validate_parse: 6 callbacks suppressed [ 659.751715][T31529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9465'. [ 659.775535][T31531] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 659.795541][T31531] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 659.974221][T31538] set match dimension is over the limit! [ 660.013439][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.063279][T28671] kernel write not supported for file /1430/oom_score_adj (pid: 28671 comm: kworker/1:9) [ 660.074005][T31544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9471'. [ 660.106544][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.199144][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.266509][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.352556][T31567] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 660.361022][T31567] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 660.487943][T31570] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9481'. [ 660.540567][T31577] netlink: 'syz.5.9481': attribute type 27 has an invalid length. [ 660.563176][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.573423][T21617] kernel write not supported for file /1380/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 660.587755][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.614642][ T51] bond0 (unregistering): Released all slaves [ 660.623725][ T51] bond1 (unregistering): Released all slaves [ 660.632886][ T51] bond2 (unregistering): Released all slaves [ 660.642852][ T51] bond3 (unregistering): Released all slaves [ 660.668056][T31534] lo speed is unknown, defaulting to 1000 [ 660.728116][ T51] tipc: Left network mode [ 660.791666][T31590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9487'. [ 660.810193][ T51] hsr_slave_0: left promiscuous mode [ 660.820084][ T51] hsr_slave_1: left promiscuous mode [ 660.840931][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.854989][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.890125][ T51] pim6reg (unregistering): left allmulticast mode [ 660.967025][T31601] set match dimension is over the limit! [ 661.017441][ T51] team0 (unregistering): Port device team_slave_1 removed [ 661.040830][T31605] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9493'. [ 661.050125][ T51] team0 (unregistering): Port device team_slave_0 removed [ 661.103006][T31610] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9496'. [ 661.133453][T31610] netlink: 'syz.9.9496': attribute type 27 has an invalid length. [ 661.195468][T31620] tmpfs: Unknown parameter '18446744073709551615' [ 661.279906][T31534] chnl_net:caif_netlink_parms(): no params data found [ 661.412473][ T51] IPVS: stop unused estimator thread 0... [ 661.421591][T31534] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.429207][T31534] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.478641][T31534] bridge_slave_0: entered allmulticast mode [ 661.498708][T31534] bridge_slave_0: entered promiscuous mode [ 661.537377][T31534] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.544840][T31534] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.569757][T31534] bridge_slave_1: entered allmulticast mode [ 661.597184][T31534] bridge_slave_1: entered promiscuous mode [ 661.630170][T31638] set match dimension is over the limit! [ 661.708013][T31534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.733865][T31641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9506'. [ 661.760139][T31534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.872050][T31534] team0: Port device team_slave_0 added [ 661.908316][T31534] team0: Port device team_slave_1 added [ 661.980168][T31534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.987565][T31534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.013618][T31534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.098711][T31534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.105882][T31534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.131905][T31534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.211876][T31648] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9509'. [ 662.242169][T31534] hsr_slave_0: entered promiscuous mode [ 662.248601][T31534] hsr_slave_1: entered promiscuous mode [ 662.254781][T31534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.262477][T31534] Cannot create hsr debugfs directory [ 662.388069][T31653] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9510'. [ 662.420223][T31653] netlink: 'syz.9.9510': attribute type 27 has an invalid length. [ 662.572490][T31666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9516'. [ 662.706118][T31665] xt_connbytes: Forcing CT accounting to be enabled [ 662.732987][T31665] set match dimension is over the limit! [ 663.010125][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 663.010141][ T29] audit: type=1400 audit(2000262521.560:41631): avc: denied { create } for pid=31534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 663.064286][T31534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 663.085793][ T29] audit: type=1400 audit(2000262521.610:41632): avc: denied { write } for pid=31534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 663.107272][ T29] audit: type=1400 audit(2000262521.610:41633): avc: denied { read } for pid=31534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 663.128158][ T29] audit: type=1400 audit(2000262521.610:41634): avc: denied { map_create } for pid=31671 comm="syz.5.9517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 663.148116][ T29] audit: type=1400 audit(2000262521.610:41635): avc: denied { prog_load } for pid=31671 comm="syz.5.9517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 663.167528][ T29] audit: type=1400 audit(2000262521.610:41636): avc: denied { bpf } for pid=31671 comm="syz.5.9517" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 663.189180][ T29] audit: type=1400 audit(2000262521.610:41637): avc: denied { map_create } for pid=31671 comm="syz.5.9517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 663.208289][T31675] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 663.208572][ T29] audit: type=1400 audit(2000262521.620:41638): avc: denied { map_read map_write } for pid=31671 comm="syz.5.9517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 663.217577][T31675] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 663.236702][ T29] audit: type=1400 audit(2000262521.630:41639): avc: denied { prog_load } for pid=31671 comm="syz.5.9517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 663.263788][ T29] audit: type=1400 audit(2000262521.630:41640): avc: denied { bpf } for pid=31671 comm="syz.5.9517" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 663.337501][T31534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.366991][T31534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.389587][T31534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 663.422999][T31686] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 663.431495][T31686] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 663.577528][T31694] netlink: 'syz.5.9524': attribute type 27 has an invalid length. [ 663.621948][T31669] Set syz1 is full, maxelem 65536 reached [ 663.697553][T31534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.737119][T31534] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.793668][T10777] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.800980][T10777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.841438][T10777] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.848664][T10777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.015869][T31726] set match dimension is over the limit! [ 664.090208][T31534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.108396][T31732] netlink: 'syz.5.9537': attribute type 27 has an invalid length. [ 664.157397][T31738] xt_socket: unknown flags 0xc [ 664.192925][T31733] 9pnet: Could not find request transport: t [ 664.382042][T31534] veth0_vlan: entered promiscuous mode [ 664.424935][T31534] veth1_vlan: entered promiscuous mode [ 664.497191][T31534] veth0_macvtap: entered promiscuous mode [ 664.510932][T31762] set match dimension is over the limit! [ 664.539408][T31534] veth1_macvtap: entered promiscuous mode [ 664.598484][T31534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.616810][T31534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.632738][T31534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.641914][T31534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.650906][T31534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.659911][T31534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.755773][T31770] __nla_validate_parse: 4 callbacks suppressed [ 664.755790][T31770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9550'. [ 664.805151][T31770] netlink: 'syz.2.9550': attribute type 27 has an invalid length. [ 665.097634][ T3389] IPVS: starting estimator thread 0... [ 665.188305][T31787] IPVS: using max 2592 ests per chain, 129600 per kthread [ 665.225953][T31791] FAULT_INJECTION: forcing a failure. [ 665.225953][T31791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.239256][T31791] CPU: 1 UID: 0 PID: 31791 Comm: syz.9.9556 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 665.239300][T31791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 665.239316][T31791] Call Trace: [ 665.239323][T31791] [ 665.239329][T31791] __dump_stack+0x1d/0x30 [ 665.239349][T31791] dump_stack_lvl+0xe8/0x140 [ 665.239431][T31791] dump_stack+0x15/0x1b [ 665.239449][T31791] should_fail_ex+0x265/0x280 [ 665.239489][T31791] should_fail+0xb/0x20 [ 665.239553][T31791] should_fail_usercopy+0x1a/0x20 [ 665.239635][T31791] strncpy_from_user+0x25/0x230 [ 665.239664][T31791] ? kmem_cache_alloc_noprof+0x186/0x310 [ 665.239700][T31791] ? getname_flags+0x80/0x3b0 [ 665.239725][T31791] getname_flags+0xae/0x3b0 [ 665.239759][T31791] __se_sys_move_mount+0x16d/0x440 [ 665.239791][T31791] __x64_sys_move_mount+0x67/0x80 [ 665.239818][T31791] x64_sys_call+0x1f00/0x2fb0 [ 665.239842][T31791] do_syscall_64+0xd2/0x200 [ 665.239867][T31791] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 665.239972][T31791] ? clear_bhb_loop+0x40/0x90 [ 665.240000][T31791] ? clear_bhb_loop+0x40/0x90 [ 665.240028][T31791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.240054][T31791] RIP: 0033:0x7f95b08ee929 [ 665.240072][T31791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.240175][T31791] RSP: 002b:00007f95aef57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 665.240197][T31791] RAX: ffffffffffffffda RBX: 00007f95b0b15fa0 RCX: 00007f95b08ee929 [ 665.240213][T31791] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: ffffffffffffffff [ 665.240229][T31791] RBP: 00007f95aef57090 R08: 0000000000000000 R09: 0000000000000000 [ 665.240244][T31791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.240258][T31791] R13: 0000000000000000 R14: 00007f95b0b15fa0 R15: 00007ffeefefad28 [ 665.240283][T31791] [ 665.502161][T31797] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9557'. [ 665.639767][T31784] lo speed is unknown, defaulting to 1000 [ 665.713165][T31807] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9562'. [ 665.758603][ T51] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.799310][ T51] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.920934][ T51] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.933459][T31824] set match dimension is over the limit! [ 665.991580][T31821] 9pnet: Could not find request transport: t [ 666.026797][T31827] xt_socket: unknown flags 0xc [ 666.491343][T31784] chnl_net:caif_netlink_parms(): no params data found [ 666.522895][ T51] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.577317][T31838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9570'. [ 666.620150][T31784] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.627431][T31784] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.644468][T31784] bridge_slave_0: entered allmulticast mode [ 666.656242][T31784] bridge_slave_0: entered promiscuous mode [ 666.680950][T31784] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.688223][T31784] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.738061][T31784] bridge_slave_1: entered allmulticast mode [ 666.750248][T31784] bridge_slave_1: entered promiscuous mode [ 666.810846][T31784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.948102][ T51] bond0 (unregistering): Released all slaves [ 666.961249][T31848] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9574'. [ 666.977128][T31784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.003752][ T51] tipc: Left network mode [ 667.020796][ T51] hsr_slave_0: left promiscuous mode [ 667.028824][ T51] hsr_slave_1: left promiscuous mode [ 667.043137][ T51] veth1_vlan: left promiscuous mode [ 667.054166][ T51] veth0_vlan: left promiscuous mode [ 667.095543][T31862] xt_connbytes: Forcing CT accounting to be enabled [ 667.170076][T31862] set match dimension is over the limit! [ 667.209629][T31864] 9pnet: Could not find request transport: t [ 667.216403][T31868] xt_socket: unknown flags 0xc [ 667.230205][ T51] pim6reg (unregistering): left allmulticast mode [ 667.280674][T31869] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9580'. [ 667.446309][T31784] team0: Port device team_slave_0 added [ 667.454990][T31784] team0: Port device team_slave_1 added [ 667.587372][T31784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.594531][T31784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.620800][T31784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.695671][T31784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.702676][T31784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.728716][T31784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.758897][T31883] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 667.789937][T31883] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 667.822917][T31860] Set syz1 is full, maxelem 65536 reached [ 667.836348][T31885] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 667.859248][T31885] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 667.883835][T31784] hsr_slave_0: entered promiscuous mode [ 667.890517][T31784] hsr_slave_1: entered promiscuous mode [ 668.024860][ T29] kauditd_printk_skb: 1221 callbacks suppressed [ 668.024879][ T29] audit: type=1400 audit(2000262526.580:42862): avc: denied { create } for pid=31890 comm="syz.8.9589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 668.055344][ T51] IPVS: stop unused estimator thread 0... [ 668.071664][ T29] audit: type=1326 audit(2000262526.580:42863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.095634][ T29] audit: type=1326 audit(2000262526.580:42864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.119431][ T29] audit: type=1326 audit(2000262526.610:42865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.143054][ T29] audit: type=1326 audit(2000262526.610:42866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.166695][ T29] audit: type=1326 audit(2000262526.610:42867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.190306][ T29] audit: type=1326 audit(2000262526.610:42868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.213925][ T29] audit: type=1326 audit(2000262526.610:42869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.237501][ T29] audit: type=1326 audit(2000262526.610:42870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31875 comm="syz.9.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95b08ee929 code=0x7ffc0000 [ 668.261046][ T29] audit: type=1400 audit(2000262526.610:42871): avc: denied { create } for pid=31875 comm="syz.9.9583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 668.350354][T31900] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9592'. [ 668.408744][T31904] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9594'. [ 668.488017][T31784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.501771][T31784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.520781][T31912] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 668.524380][T31784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.528605][T31912] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 668.548396][T31784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.659203][T31784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.707979][T31784] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.728957][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.736104][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.759644][T10777] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.766798][T10777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.854790][T31931] 9pnet: Could not find request transport: t [ 668.861779][T31931] xt_socket: unknown flags 0xc [ 669.070451][T31784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.086662][T31949] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 669.094742][T31949] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 669.149075][T31953] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9610'. [ 669.197831][T31957] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9613'. [ 669.382681][T31967] 9pnet: Could not find request transport: t [ 669.406575][T31976] xt_socket: unknown flags 0xc [ 669.410131][T31784] veth0_vlan: entered promiscuous mode [ 669.474837][T31784] veth1_vlan: entered promiscuous mode [ 669.558219][T31984] ªªªªªª: renamed from vlan0 [ 669.592903][T31784] veth0_macvtap: entered promiscuous mode [ 669.612990][T31984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=31984 comm=syz.8.9622 [ 669.628446][T31784] veth1_macvtap: entered promiscuous mode [ 669.650851][T31784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.671402][T31784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.698909][T31784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.707722][T31784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.716573][T31784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.725371][T31784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.871498][T32002] __nla_validate_parse: 2 callbacks suppressed [ 669.871513][T32002] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9627'. [ 670.198632][T32016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.239291][T32016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.340357][T32013] 9pnet: Could not find request transport: t [ 670.341047][T32027] xt_socket: unknown flags 0xc [ 670.470486][T32033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9634'. [ 670.568152][T32017] lo speed is unknown, defaulting to 1000 [ 670.613359][ T1577] dummy0: left allmulticast mode [ 670.618786][ T1577] bridge0: port 3(dummy0) entered disabled state [ 670.649247][ T1577] bridge_slave_1: left allmulticast mode [ 670.655170][ T1577] bridge_slave_1: left promiscuous mode [ 670.660963][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.678466][T32046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9638'. [ 670.696819][ T1577] bridge_slave_0: left allmulticast mode [ 670.702542][ T1577] bridge_slave_0: left promiscuous mode [ 670.708473][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.936326][ T1577] bond1 (unregistering): Released all slaves [ 670.945918][ T1577] bond2 (unregistering): Released all slaves [ 670.958114][T32048] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9639'. [ 671.000830][ T1577] tipc: Left network mode [ 671.042076][ T1577] pim6reg (unregistering): left allmulticast mode [ 671.156793][ T1577] team0 (unregistering): Port device team_slave_1 removed [ 671.178180][T32080] xt_connbytes: Forcing CT accounting to be enabled [ 671.196984][ T1577] team0 (unregistering): Port device team_slave_0 removed [ 671.250600][T32080] set match dimension is over the limit! [ 671.553213][T32017] chnl_net:caif_netlink_parms(): no params data found [ 671.703671][T32072] Set syz1 is full, maxelem 65536 reached [ 671.756243][T32096] netlink: 'syz.9.9654': attribute type 27 has an invalid length. [ 671.770819][ T1577] IPVS: stop unused estimator thread 0... [ 671.782242][T32017] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.789640][T32017] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.811628][T32098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=32098 comm=syz.9.9654 [ 671.840915][T32017] bridge_slave_0: entered allmulticast mode [ 671.853512][T32102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9655'. [ 671.866806][T32017] bridge_slave_0: entered promiscuous mode [ 671.901578][T32096] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.908819][T32096] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.959824][T32096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.972763][T32096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.007778][T32096] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.016990][T32096] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.026254][T32096] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.035462][T32096] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.055784][T32098] tipc: Enabling of bearer rejected, failed to enable media [ 672.068306][T32017] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.075704][T32017] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.093061][T32017] bridge_slave_1: entered allmulticast mode [ 672.106244][T32017] bridge_slave_1: entered promiscuous mode [ 672.174494][T32017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.197829][T32017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.217140][T32115] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 672.247180][T32115] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 672.257494][T32017] team0: Port device team_slave_0 added [ 672.265378][T32017] team0: Port device team_slave_1 added [ 672.336996][T32017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.344170][T32017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.370294][T32017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.432688][T32017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.439825][T32017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.465942][T32017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.576468][T32130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.608445][T32017] hsr_slave_0: entered promiscuous mode [ 672.616799][T32017] hsr_slave_1: entered promiscuous mode [ 672.623342][T32017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.631309][T32017] Cannot create hsr debugfs directory [ 672.631820][T32132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9668'. [ 672.668939][T32130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.695826][T32137] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9670'. [ 672.759587][T32130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.809715][T32142] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 672.818695][T32142] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 672.827209][T32130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.919126][T32130] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.920947][T32146] 9pnet: Could not find request transport: t [ 672.946108][T32146] xt_socket: unknown flags 0xc [ 672.948491][T32130] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.983082][T32130] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.017564][T32130] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.041181][ T29] kauditd_printk_skb: 1528 callbacks suppressed [ 673.041200][ T29] audit: type=1400 audit(2000262531.590:44400): avc: denied { map_create } for pid=32152 comm="syz.9.9677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 673.097077][ T29] audit: type=1400 audit(2000262531.620:44401): avc: denied { prog_load } for pid=32152 comm="syz.9.9677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 673.116455][ T29] audit: type=1400 audit(2000262531.620:44402): avc: denied { bpf } for pid=32152 comm="syz.9.9677" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.137427][ T29] audit: type=1400 audit(2000262531.620:44403): avc: denied { perfmon } for pid=32152 comm="syz.9.9677" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.158532][ T29] audit: type=1400 audit(2000262531.640:44404): avc: denied { allowed } for pid=32152 comm="syz.9.9677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 673.178092][ T29] audit: type=1400 audit(2000262531.640:44405): avc: denied { create } for pid=32152 comm="syz.9.9677" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 673.199634][ T29] audit: type=1400 audit(2000262531.640:44406): avc: denied { map } for pid=32152 comm="syz.9.9677" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=123267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 673.224217][ T29] audit: type=1400 audit(2000262531.640:44407): avc: denied { read write } for pid=32152 comm="syz.9.9677" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=123267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 673.250557][ T29] audit: type=1400 audit(2000262531.670:44408): avc: denied { map_create } for pid=32155 comm="syz.5.9678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 673.269970][ T29] audit: type=1400 audit(2000262531.670:44409): avc: denied { perfmon } for pid=32155 comm="syz.5.9678" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 673.357313][T32017] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 673.376250][T32017] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 673.384350][T32162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9681'. [ 673.401157][T32017] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 673.410859][T32166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9683'. [ 673.426026][T32017] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 673.482662][T32174] netlink: 14528 bytes leftover after parsing attributes in process `syz.9.9684'. [ 673.535668][T32017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.550216][T32017] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.581246][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.588402][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.617428][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.624628][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.634196][T21449] IPVS: starting estimator thread 0... [ 673.725371][T32189] IPVS: using max 2352 ests per chain, 117600 per kthread [ 673.888897][T32017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.420450][T32017] veth0_vlan: entered promiscuous mode [ 674.458351][T32017] veth1_vlan: entered promiscuous mode [ 674.499451][T32254] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 674.507885][T32254] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 674.509208][T32017] veth0_macvtap: entered promiscuous mode [ 674.531273][T32017] veth1_macvtap: entered promiscuous mode [ 674.553072][T32017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.577057][T32017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.589153][T32017] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.598031][T32017] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.606831][T32017] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.615701][T32017] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.682989][T32262] block device autoloading is deprecated and will be removed. [ 674.920518][T32273] __nla_validate_parse: 3 callbacks suppressed [ 674.920536][T32273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9717'. [ 674.936008][T32273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9717'. [ 674.973394][T32273] netlink: 204 bytes leftover after parsing attributes in process `syz.0.9717'. [ 675.125049][T32280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9720'. [ 675.157684][T32285] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9722'. [ 675.405498][T32289] 9pnet: Could not find request transport: t [ 675.420569][T32299] xt_socket: unknown flags 0xc [ 675.587819][T32305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9730'. [ 675.591082][T32314] xt_connbytes: Forcing CT accounting to be enabled [ 675.597257][T32305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9730'. [ 675.630179][T32314] set match dimension is over the limit! [ 675.683401][T32305] netlink: 204 bytes leftover after parsing attributes in process `syz.0.9730'. [ 675.843918][T32296] lo speed is unknown, defaulting to 1000 [ 676.021744][T32335] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 676.060227][T32296] chnl_net:caif_netlink_parms(): no params data found [ 676.070359][T32335] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 676.147984][T32308] Set syz1 is full, maxelem 65536 reached [ 676.175181][T32339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9738'. [ 676.235770][T32296] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.242973][T32296] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.265809][T32296] bridge_slave_0: entered allmulticast mode [ 676.275683][T32296] bridge_slave_0: entered promiscuous mode [ 676.294432][T32296] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.301613][T32296] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.309235][T32296] bridge_slave_1: entered allmulticast mode [ 676.320226][T32296] bridge_slave_1: entered promiscuous mode [ 676.356443][T32344] 9pnet: Could not find request transport: t [ 676.364255][T32296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.376542][T32296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.376961][T32357] xt_socket: unknown flags 0xc [ 676.419940][T32296] team0: Port device team_slave_0 added [ 676.434824][T32296] team0: Port device team_slave_1 added [ 676.438968][T32356] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9745'. [ 676.485159][T32296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.492341][T32296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.518402][T32296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.527383][T32362] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 676.539138][T32362] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 676.600959][T32296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.608113][T32296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.634171][T32296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.696930][T32296] hsr_slave_0: entered promiscuous mode [ 676.700145][T32370] set match dimension is over the limit! [ 676.707394][T32296] hsr_slave_1: entered promiscuous mode [ 676.714777][T32296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.737161][T32296] Cannot create hsr debugfs directory [ 676.883840][T32296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.894307][T32296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.953007][T32296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.963465][T32296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.049127][T32296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.059702][T32296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.075011][T32395] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 677.082525][T32395] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 677.197871][T32296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.208313][T32296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.256586][T32408] set match dimension is over the limit! [ 677.332533][T32296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 677.343943][T32296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 677.357125][T32296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 677.369583][T32296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 677.445981][T32431] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 677.453635][T32431] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 677.531651][T32296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.547068][T32296] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.582150][T32296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 677.592896][T32296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.618673][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.625982][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.648281][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.655494][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.753649][T32444] set match dimension is over the limit! [ 677.850721][T32296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.885310][T32461] xt_socket: unknown flags 0xc [ 677.893362][T32451] 9pnet: Could not find request transport: t [ 678.069572][ T29] kauditd_printk_skb: 1957 callbacks suppressed [ 678.069589][ T29] audit: type=1400 audit(2000262536.620:46367): avc: denied { module_request } for pid=32296 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 678.107813][ T29] audit: type=1400 audit(2000262536.660:46368): avc: denied { prog_load } for pid=32477 comm="syz.0.9789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 678.127185][ T29] audit: type=1400 audit(2000262536.660:46369): avc: denied { bpf } for pid=32477 comm="syz.0.9789" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.147920][ T29] audit: type=1400 audit(2000262536.660:46370): avc: denied { perfmon } for pid=32477 comm="syz.0.9789" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.170114][ T29] audit: type=1400 audit(2000262536.660:46371): avc: denied { prog_load } for pid=32473 comm="syz.2.9788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 678.189438][ T29] audit: type=1400 audit(2000262536.660:46372): avc: denied { bpf } for pid=32473 comm="syz.2.9788" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.210297][ T29] audit: type=1400 audit(2000262536.680:46373): avc: denied { prog_load } for pid=32473 comm="syz.2.9788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 678.230314][ T29] audit: type=1400 audit(2000262536.680:46374): avc: denied { bpf } for pid=32473 comm="syz.2.9788" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.251237][ T29] audit: type=1400 audit(2000262536.680:46375): avc: denied { perfmon } for pid=32473 comm="syz.2.9788" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 678.272489][ T29] audit: type=1400 audit(2000262536.680:46376): avc: denied { create } for pid=32473 comm="syz.2.9788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 678.286665][T32296] veth0_vlan: entered promiscuous mode [ 678.296575][T32479] 9pnet_fd: Insufficient options for proto=fd [ 678.327153][T32296] veth1_vlan: entered promiscuous mode [ 678.340788][T32296] veth0_macvtap: entered promiscuous mode [ 678.353485][T32296] veth1_macvtap: entered promiscuous mode [ 678.429104][T32296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.448466][T32296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.461586][T32296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.470512][T32296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.479414][T32296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.488391][T32296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.552556][T28654] IPVS: starting estimator thread 0... [ 678.644321][T32503] IPVS: using max 2112 ests per chain, 105600 per kthread [ 678.683757][T32514] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 678.684166][T32512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.691604][T32514] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 678.710448][T32512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.016345][T32539] xt_connbytes: Forcing CT accounting to be enabled [ 679.168658][T32539] set match dimension is over the limit! [ 679.323019][T32535] Set syz1 is full, maxelem 65536 reached [ 679.526728][ T12] bridge_slave_1: left allmulticast mode [ 679.532598][ T12] bridge_slave_1: left promiscuous mode [ 679.538465][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.578853][ T12] bridge_slave_0: left allmulticast mode [ 679.584648][ T12] bridge_slave_0: left promiscuous mode [ 679.590414][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.746792][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.758307][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.768075][ T12] bond0 (unregistering): Released all slaves [ 679.776897][ T12] bond1 (unregistering): Released all slaves [ 679.786094][ T12] bond2 (unregistering): Released all slaves [ 679.819457][ T12] tipc: Left network mode [ 679.844529][ T12] hsr_slave_0: left promiscuous mode [ 679.859820][ T12] hsr_slave_1: left promiscuous mode [ 679.869572][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.877147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.892683][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.900268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.929007][T32569] 9pnet: Could not find request transport: t [ 679.935521][ T12] veth1_macvtap: left promiscuous mode [ 679.942099][ T12] veth0_macvtap: left promiscuous mode [ 679.949864][T32569] xt_socket: unknown flags 0xc [ 679.950664][T32573] __nla_validate_parse: 16 callbacks suppressed [ 679.950682][T32573] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9823'. [ 679.956649][ T12] veth1_vlan: left promiscuous mode [ 679.986806][ T12] veth0_vlan: left promiscuous mode [ 680.078807][ T12] pim6reg (unregistering): left allmulticast mode [ 680.140903][ T12] team0 (unregistering): Port device team_slave_1 removed [ 680.145866][T32583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9829'. [ 680.157164][T32583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9829'. [ 680.166617][T32583] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9829'. [ 680.167804][ T12] team0 (unregistering): Port device team_slave_0 removed [ 680.350242][T32592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9833'. [ 680.392994][T32600] lo speed is unknown, defaulting to 1000 [ 680.449185][T32601] 9pnet: Could not find request transport: t [ 680.466373][T32606] xt_socket: unknown flags 0xc [ 680.516988][ T12] IPVS: stop unused estimator thread 0... [ 680.660566][T32609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9842'. [ 680.669607][T32609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9842'. [ 680.682903][T32622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9846'. [ 680.703822][T32609] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9842'. [ 680.799756][ T3365] IPVS: starting estimator thread 0... [ 680.894210][T32629] IPVS: using max 2544 ests per chain, 127200 per kthread [ 680.914597][T32633] set match dimension is over the limit! [ 681.093676][T32643] 9pnet: Could not find request transport: t [ 681.114030][T32643] xt_socket: unknown flags 0xc [ 681.322996][T32662] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 681.338417][T32662] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 681.617188][T32669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9865'. [ 681.820339][T32683] 9pnet: Could not find request transport: t [ 681.827703][T32690] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 681.835885][T32690] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 681.864909][T32683] xt_socket: unknown flags 0xc [ 682.298441][T32724] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 682.299858][T32721] 9pnet: Could not find request transport: t [ 682.306008][T32724] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 682.317439][T32721] xt_socket: unknown flags 0xc [ 682.571583][T32742] set match dimension is over the limit! [ 682.658334][T32751] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 682.674468][T32751] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 682.773314][T32753] 9pnet: Could not find request transport: t [ 682.781335][T32753] xt_socket: unknown flags 0xc [ 682.998856][ T308] set match dimension is over the limit! [ 683.023806][ T311] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 683.038706][ T311] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 683.074340][ T29] kauditd_printk_skb: 2121 callbacks suppressed [ 683.074355][ T29] audit: type=1400 audit(2000262541.630:48498): avc: denied { perfmon } for pid=315 comm="syz.2.9916" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.101743][ T29] audit: type=1400 audit(2000262541.630:48499): avc: denied { tracepoint } for pid=315 comm="syz.2.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 683.128387][ T29] audit: type=1400 audit(2000262541.680:48500): avc: denied { perfmon } for pid=315 comm="syz.2.9916" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.169677][ T29] audit: type=1400 audit(2000262541.680:48501): avc: denied { prog_load } for pid=312 comm="syz.9.9917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.189031][ T29] audit: type=1400 audit(2000262541.680:48502): avc: denied { bpf } for pid=312 comm="syz.9.9917" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 683.209700][ T29] audit: type=1400 audit(2000262541.680:48503): avc: denied { prog_run } for pid=312 comm="syz.9.9917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.228758][ T29] audit: type=1400 audit(2000262541.700:48504): avc: denied { create } for pid=317 comm="syz.8.9918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 683.248358][ T29] audit: type=1400 audit(2000262541.700:48505): avc: denied { setopt } for pid=317 comm="syz.8.9918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 683.267939][ T29] audit: type=1400 audit(2000262541.710:48506): avc: denied { create } for pid=315 comm="syz.2.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 683.288728][ T29] audit: type=1400 audit(2000262541.710:48507): avc: denied { map_create } for pid=317 comm="syz.8.9918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 683.334162][ T318] 9pnet: Could not find request transport: t [ 683.341447][ T318] xt_socket: unknown flags 0xc [ 683.652818][ T346] block device autoloading is deprecated and will be removed. [ 683.942557][ T364] loop0: detected capacity change from 0 to 512 [ 683.967220][ T364] EXT4-fs: Ignoring removed mblk_io_submit option [ 683.982508][ T364] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 684.005939][ T364] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 684.024406][ T364] EXT4-fs (loop0): orphan cleanup on readonly fs [ 684.040027][ T364] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.9935: Bad quota inum: 1, type: 2 [ 684.052255][ T364] EXT4-fs (loop0): Remounting filesystem read-only [ 684.058849][ T364] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 684.076033][ T364] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 684.092542][ T364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 684.165357][ T364] xt_socket: unknown flags 0xc [ 684.212915][T31534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.546160][ T411] 9pnet: Could not find request transport: t [ 684.560202][ T411] xt_socket: unknown flags 0xc [ 684.571560][T21617] kernel write not supported for file /191/oom_score_adj (pid: 21617 comm: kworker/0:0) [ 684.736466][ T430] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 684.746699][ T430] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 684.936551][ T446] 9pnet: Could not find request transport: t [ 684.944015][ T446] xt_socket: unknown flags 0xc [ 684.999279][ T3365] kernel write not supported for file /107/oom_score_adj (pid: 3365 comm: kworker/0:3) [ 685.065468][ T464] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 685.072981][ T464] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 685.243274][ T469] set match dimension is over the limit! [ 685.295340][ T479] 9pnet: Could not find request transport: t [ 685.313830][ T487] xt_socket: unknown flags 0xc [ 685.448180][ T499] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 685.456846][ T499] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 685.465280][ T500] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 685.473516][ T500] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 685.559774][ T506] __nla_validate_parse: 10 callbacks suppressed [ 685.559790][ T506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9998'. [ 685.591921][ T506] netlink: 'syz.2.9998': attribute type 27 has an invalid length. [ 685.617278][ T517] block device autoloading is deprecated and will be removed. [ 685.716446][ T519] 9pnet: Could not find request transport: t [ 685.726105][ T519] xt_socket: unknown flags 0xc [ 685.808318][ T532] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 685.816060][ T532] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 685.957024][ T543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10013'. [ 685.980196][ T543] netlink: 'syz.0.10013': attribute type 27 has an invalid length. [ 686.053787][ T549] set match dimension is over the limit! [ 686.157639][ T563] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 686.168228][ T563] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 686.729527][ T587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10028'. [ 686.753984][ T589] set match dimension is over the limit! [ 686.834262][ T597] block device autoloading is deprecated and will be removed. [ 687.111997][ T616] set match dimension is over the limit! [ 687.211142][ T628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10047'. [ 687.403462][ T638] block device autoloading is deprecated and will be removed. [ 687.683987][ T652] set match dimension is over the limit! [ 687.737724][ T658] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10061'. [ 687.789133][T28671] IPVS: starting estimator thread 0... [ 687.884495][ T662] IPVS: using max 2448 ests per chain, 122400 per kthread [ 688.136570][ T29] kauditd_printk_skb: 2109 callbacks suppressed [ 688.136585][ T29] audit: type=1400 audit(2000262546.690:50617): avc: denied { prog_load } for pid=673 comm="syz.5.10065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 688.162173][ T29] audit: type=1400 audit(2000262546.690:50618): avc: denied { bpf } for pid=673 comm="syz.5.10065" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 688.182858][ T29] audit: type=1400 audit(2000262546.690:50619): avc: denied { perfmon } for pid=673 comm="syz.5.10065" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 688.273993][ T674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10065'. [ 688.294022][ T29] audit: type=1400 audit(2000262546.760:50620): avc: denied { read write } for pid=31534 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 688.301558][ T674] netlink: 'syz.5.10065': attribute type 27 has an invalid length. [ 688.317634][ T29] audit: type=1400 audit(2000262546.760:50621): avc: denied { open } for pid=31534 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 688.348967][ T29] audit: type=1400 audit(2000262546.760:50622): avc: denied { ioctl } for pid=31534 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1745 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 688.373953][ T29] audit: type=1400 audit(2000262546.770:50623): avc: denied { create } for pid=673 comm="syz.5.10065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 688.393534][ T29] audit: type=1400 audit(2000262546.770:50624): avc: denied { ioctl } for pid=673 comm="syz.5.10065" path="socket:[127887]" dev="sockfs" ino=127887 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 688.412076][ T683] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.418411][ T29] audit: type=1400 audit(2000262546.790:50625): avc: denied { prog_load } for pid=673 comm="syz.5.10065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 688.780395][ T709] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 688.798703][ T709] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 688.892617][ T715] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10083'. [ 688.902671][ T715] netlink: 'syz.9.10083': attribute type 27 has an invalid length. [ 688.978786][ T720] xt_socket: unknown flags 0xc [ 688.986591][ T712] 9pnet: Could not find request transport: t [ 689.048219][ T726] block device autoloading is deprecated and will be removed. [ 689.099861][ T732] block device autoloading is deprecated and will be removed. [ 689.153799][ T736] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10093'. [ 689.202992][ T738] set match dimension is over the limit! [ 689.947411][ T754] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10099'. [ 689.991372][ T754] netlink: 'syz.9.10099': attribute type 27 has an invalid length. [ 690.290025][ T774] set match dimension is over the limit! [ 690.297522][ T777] block device autoloading is deprecated and will be removed. [ 690.406727][ T782] block device autoloading is deprecated and will be removed. [ 690.493383][ T788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10112'. [ 690.509287][ T788] netlink: 'syz.2.10112': attribute type 27 has an invalid length. [ 690.633234][ T792] 9pnet: Could not find request transport: t [ 690.645300][ T792] xt_socket: unknown flags 0xc [ 691.009547][ T819] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10123'. [ 691.420069][ T856] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10142'. [ 691.576872][ T867] set match dimension is over the limit! [ 691.682814][ T880] block device autoloading is deprecated and will be removed. [ 692.091244][ T894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10158'. [ 692.386622][ T909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10163'. [ 692.430012][ T911] Set syz1 is full, maxelem 65536 reached [ 692.466208][ T908] 9pnet: Could not find request transport: t [ 692.476467][ T911] set match dimension is over the limit! [ 692.486193][ T908] xt_socket: unknown flags 0xc [ 692.616010][ T923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10173'. [ 692.630505][ T930] block device autoloading is deprecated and will be removed. [ 692.642945][ T925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10171'. [ 692.669885][ T923] netlink: 'syz.5.10173': attribute type 27 has an invalid length. [ 692.673065][ T925] netlink: 'syz.0.10171': attribute type 27 has an invalid length. [ 692.766437][ T934] block device autoloading is deprecated and will be removed. [ 693.105378][ T958] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 693.135482][ T958] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 693.153812][ T29] kauditd_printk_skb: 2096 callbacks suppressed [ 693.153828][ T29] audit: type=1400 audit(2000262551.700:52720): avc: denied { create } for pid=957 comm="syz.5.10188" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 693.210040][ T29] audit: type=1400 audit(2000262551.700:52721): avc: denied { mounton } for pid=957 comm="syz.5.10188" path="/98/file0" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 693.233247][ T29] audit: type=1400 audit(2000262551.700:52722): avc: denied { mount } for pid=957 comm="syz.5.10188" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 693.255557][ T29] audit: type=1400 audit(2000262551.710:52723): avc: denied { write } for pid=957 comm="syz.5.10188" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 693.276400][ T29] audit: type=1400 audit(2000262551.710:52724): avc: denied { open } for pid=957 comm="syz.5.10188" path="/98/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 693.298633][ T29] audit: type=1400 audit(2000262551.710:52725): avc: denied { unmount } for pid=32296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 693.319118][ T29] audit: type=1400 audit(2000262551.750:52726): avc: denied { prog_load } for pid=940 comm="syz.9.10181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 693.338405][ T29] audit: type=1400 audit(2000262551.750:52727): avc: denied { bpf } for pid=940 comm="syz.9.10181" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 693.359086][ T29] audit: type=1400 audit(2000262551.750:52728): avc: denied { perfmon } for pid=940 comm="syz.9.10181" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 693.380092][ T29] audit: type=1400 audit(2000262551.750:52729): avc: denied { prog_run } for pid=940 comm="syz.9.10181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 693.566425][ T972] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.643395][ T972] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.721170][ T984] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10200'. [ 693.736858][ T972] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.766906][ T984] netlink: 'syz.9.10200': attribute type 27 has an invalid length. [ 693.812548][ T986] set match dimension is over the limit! [ 693.845208][ T972] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.956470][ T972] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.973659][ T972] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.998235][ T972] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.010262][ T994] 9pnet: Could not find request transport: t [ 694.020634][ T972] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.029853][ T1000] xt_socket: unknown flags 0xc [ 694.148212][ T1008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10208'. [ 694.429849][ T1027] 9pnet: Could not find request transport: t [ 694.437748][ T1027] xt_socket: unknown flags 0xc [ 694.459260][ T1026] set match dimension is over the limit! [ 694.545268][ T1034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.570748][ T1040] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10222'. [ 694.608554][ T1034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.667431][ T1034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.679142][ T1044] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10223'. [ 694.695832][ T1044] netlink: 'syz.8.10223': attribute type 27 has an invalid length. [ 694.745528][ T1034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.803891][ T1034] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.826412][ T1034] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.854121][ T1034] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.875188][ T1034] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.894537][ T1054] block device autoloading is deprecated and will be removed. [ 695.062739][ T1060] 9pnet: Could not find request transport: t [ 695.070816][ T1060] xt_socket: unknown flags 0xc [ 695.448297][ T1091] set match dimension is over the limit! [ 695.627707][ T1100] block device autoloading is deprecated and will be removed. [ 695.745676][ T1103] netlink: 'syz.2.10250': attribute type 27 has an invalid length. [ 695.981176][ T1118] set match dimension is over the limit! [ 696.096477][ T1127] 9pnet: Could not find request transport: t [ 696.104411][ T1127] xt_socket: unknown flags 0xc [ 696.353412][ T1149] __nla_validate_parse: 3 callbacks suppressed [ 696.353426][ T1149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10271'. [ 696.623223][ T1159] 9pnet: Could not find request transport: t [ 696.639464][ T1159] xt_socket: unknown flags 0xc [ 696.706799][ T1167] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 696.720405][ T1167] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 696.762178][ T1171] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.805770][ T1171] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.855871][ T1171] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.905561][ T1171] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.985472][ T1171] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.020170][ T1171] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.040112][ T1181] set match dimension is over the limit! [ 697.047411][ T1171] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.079224][ T1171] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.221340][ T1190] set match dimension is over the limit! [ 697.302322][ T1197] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 697.315441][ T1197] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 697.349132][ T1196] 9pnet: Could not find request transport: t [ 697.367977][ T1196] xt_socket: unknown flags 0xc [ 697.475516][ T1209] block device autoloading is deprecated and will be removed. [ 697.609741][ T1213] set match dimension is over the limit! [ 697.900217][ T1229] set match dimension is over the limit! [ 697.945112][ T1234] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10307'. [ 698.016405][ T1236] 9pnet: Could not find request transport: t [ 698.024383][ T1236] xt_socket: unknown flags 0xc [ 698.114289][ T1250] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 698.123775][ T1250] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 698.136505][ T1246] set match dimension is over the limit! [ 698.167188][ T29] kauditd_printk_skb: 2402 callbacks suppressed [ 698.167205][ T29] audit: type=1326 audit(2000262556.720:55132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.5.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9233cfe929 code=0x7ffc0000 [ 698.234956][ T29] audit: type=1326 audit(2000262556.750:55133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.5.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9233cfe929 code=0x7ffc0000 [ 698.258638][ T29] audit: type=1400 audit(2000262556.750:55134): avc: denied { prog_load } for pid=1251 comm="syz.5.10315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.278094][ T29] audit: type=1400 audit(2000262556.750:55135): avc: denied { bpf } for pid=1251 comm="syz.5.10315" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.298977][ T29] audit: type=1400 audit(2000262556.750:55136): avc: denied { perfmon } for pid=1251 comm="syz.5.10315" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.320167][ T29] audit: type=1400 audit(2000262556.750:55137): avc: denied { prog_run } for pid=1251 comm="syz.5.10315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.339645][ T29] audit: type=1326 audit(2000262556.750:55138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.5.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9233cfe929 code=0x7ffc0000 [ 698.363300][ T29] audit: type=1326 audit(2000262556.750:55139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.5.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9233cfe929 code=0x7ffc0000 [ 698.386842][ T29] audit: type=1326 audit(2000262556.750:55140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.5.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9233cfe929 code=0x7ffc0000 [ 698.410627][ T29] audit: type=1326 audit(2000262556.750:55141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.5.10315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9233cfe929 code=0x7ffc0000 [ 698.580676][ T1283] xt_socket: unknown flags 0xc [ 698.588265][ T1273] 9pnet: Could not find request transport: t [ 698.647625][ T1292] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 698.662194][ T1292] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 698.742096][ T1299] set match dimension is over the limit! [ 698.764334][ T1303] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.826515][ T1303] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.851869][ T1307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10333'. [ 698.876711][ T1303] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.926569][ T1303] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.993315][ T1303] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.017878][ T1303] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.030386][ T1303] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.047945][ T1303] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.323922][ T1322] 9pnet: Could not find request transport: t [ 699.336026][ T1331] block device autoloading is deprecated and will be removed. [ 699.337377][ T1322] xt_socket: unknown flags 0xc [ 699.437677][ T1335] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10345'. [ 699.511544][ T1339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.520214][ T1339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.613687][ T1346] set match dimension is over the limit! [ 699.678862][ T1349] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.725403][ T1349] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.787112][ T1349] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.836058][ T1349] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.933785][ T1364] 9pnet: Could not find request transport: t [ 699.942099][ T1364] xt_socket: unknown flags 0xc [ 700.065070][ T1373] block device autoloading is deprecated and will be removed. [ 700.222621][ T1383] set match dimension is over the limit! [ 700.347162][ T1389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10369'. [ 700.542514][ T1399] set match dimension is over the limit! [ 700.626184][ T1405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.644497][ T1404] set match dimension is over the limit! [ 700.664255][ T1405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.748930][ T1410] block device autoloading is deprecated and will be removed. [ 700.821573][ T1412] set match dimension is over the limit! [ 701.101706][ T1349] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.113313][ T1349] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.125917][ T1349] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.139847][ T1349] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.148365][ T1423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10382'. [ 701.190364][ T1425] block device autoloading is deprecated and will be removed. [ 701.337280][ T1431] set match dimension is over the limit! [ 701.381417][ T1440] loop0: detected capacity change from 0 to 512 [ 701.390051][ T1440] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 701.417459][ T1440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10390'. [ 701.795880][ T1453] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10396'. [ 701.946986][ T1464] set match dimension is over the limit! [ 702.055042][ T1478] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 702.073773][ T1478] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 702.162155][ T1484] block device autoloading is deprecated and will be removed. [ 702.230116][ T1489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10413'. [ 702.388111][ T1497] set match dimension is over the limit! [ 702.424375][ T1503] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.476330][ T1503] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.477967][ T1508] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 702.493861][ T1508] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 702.526775][ T1503] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.566037][ T1503] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.847520][ T1519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10426'. [ 702.920088][ T1523] 9pnet: Could not find request transport: t [ 702.928029][ T1523] xt_socket: unknown flags 0xc [ 702.996118][ T1535] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 703.013315][ T1535] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 703.092006][ T1503] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.108938][ T1503] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.123374][ T1503] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.136500][ T1503] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.205001][ T29] kauditd_printk_skb: 2082 callbacks suppressed [ 703.205103][ T29] audit: type=1400 audit(2000262561.760:57224): avc: denied { prog_load } for pid=1542 comm="syz.2.10436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.244475][ T29] audit: type=1400 audit(2000262561.760:57225): avc: denied { bpf } for pid=1542 comm="syz.2.10436" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.265446][ T29] audit: type=1400 audit(2000262561.760:57226): avc: denied { perfmon } for pid=1542 comm="syz.2.10436" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 703.286873][ T29] audit: type=1400 audit(2000262561.760:57227): avc: denied { prog_load } for pid=1557 comm="syz.0.10440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 703.306262][ T29] audit: type=1326 audit(2000262561.770:57228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.0.10440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7732e929 code=0x7ffc0000 [ 703.330238][ T29] audit: type=1326 audit(2000262561.770:57229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.0.10440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb7732e929 code=0x7ffc0000 [ 703.353951][ T29] audit: type=1326 audit(2000262561.770:57230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.0.10440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7732e929 code=0x7ffc0000 [ 703.377868][ T29] audit: type=1326 audit(2000262561.770:57231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.0.10440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fcb7732e929 code=0x7ffc0000 [ 703.401569][ T29] audit: type=1326 audit(2000262561.770:57232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.0.10440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7732e929 code=0x7ffc0000 [ 703.425294][ T29] audit: type=1326 audit(2000262561.770:57233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.0.10440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fcb7732e929 code=0x7ffc0000 [ 703.475716][ T1570] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 703.483239][ T1570] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 703.577741][ T1581] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.617234][ T1581] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.676482][ T1581] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.737670][ T1581] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.014768][ T1591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10453'. [ 704.127348][ T1601] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 704.135196][ T1601] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 704.208862][ T1606] block device autoloading is deprecated and will be removed. [ 704.756566][ T1622] 9pnet: Could not find request transport: t [ 704.764843][ T1622] xt_socket: unknown flags 0xc [ 704.856123][ T1627] set match dimension is over the limit! [ 704.918118][ T1632] block device autoloading is deprecated and will be removed. [ 705.146139][ T1648] loop0: detected capacity change from 0 to 512 [ 705.153879][ T1648] EXT4-fs: Ignoring removed mblk_io_submit option [ 705.160957][ T1648] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 705.174440][ T1648] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 705.182601][ T1648] EXT4-fs (loop0): orphan cleanup on readonly fs [ 705.192524][ T1648] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.10480: Bad quota inum: 1, type: 2 [ 705.206431][ T1648] EXT4-fs (loop0): Remounting filesystem read-only [ 705.213003][ T1648] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 705.229452][ T1648] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 705.236899][ T1648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 705.259083][ T1655] set match dimension is over the limit! [ 705.267227][ T1648] xt_socket: unknown flags 0xc [ 705.297850][T31534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.320819][ T1658] block device autoloading is deprecated and will be removed. [ 705.330959][ T1660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10483'. [ 705.520603][ T1676] loop0: detected capacity change from 0 to 512 [ 705.529272][ T1676] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 705.543468][ T1676] EXT4-fs (loop0): 1 truncate cleaned up [ 705.551119][ T1676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.590391][ T1682] 9pnet: Could not find request transport: t [ 705.597352][ T1682] xt_socket: unknown flags 0xc [ 705.597881][T31534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.644707][ T1687] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 705.652293][ T1687] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 706.048378][ T1711] 9pnet: Could not find request transport: t [ 706.055524][ T1711] xt_socket: unknown flags 0xc [ 706.132325][ T1716] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 706.140059][ T1716] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 706.397953][ T1741] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 706.408944][ T1737] set match dimension is over the limit! [ 706.414767][ T1741] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 706.427918][ T1739] ================================================================== [ 706.436065][ T1739] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 706.442870][ T1739] [ 706.445203][ T1739] write to 0xffff888103fb51b0 of 8 bytes by task 1737 on cpu 0: [ 706.452859][ T1739] vms_clear_ptes+0x18f/0x2d0 [ 706.457554][ T1739] vms_complete_munmap_vmas+0x159/0x440 [ 706.463114][ T1739] do_vmi_align_munmap+0x383/0x3d0 [ 706.468244][ T1739] do_vmi_munmap+0x1db/0x220 [ 706.472852][ T1739] __vm_munmap+0x1a1/0x280 [ 706.477283][ T1739] __x64_sys_munmap+0x36/0x50 [ 706.481972][ T1739] x64_sys_call+0xa65/0x2fb0 [ 706.486585][ T1739] do_syscall_64+0xd2/0x200 [ 706.491100][ T1739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.497013][ T1739] [ 706.499362][ T1739] read to 0xffff888103fb51b0 of 8 bytes by task 1739 on cpu 1: [ 706.506915][ T1739] getrusage+0xa52/0xbb0 [ 706.511169][ T1739] io_sq_thread+0x5dd/0x1110 [ 706.515777][ T1739] ret_from_fork+0xda/0x150 [ 706.520293][ T1739] ret_from_fork_asm+0x1a/0x30 [ 706.525072][ T1739] [ 706.527405][ T1739] value changed: 0x00000000000014ea -> 0x00000000000016b4 [ 706.534513][ T1739] [ 706.536843][ T1739] Reported by Kernel Concurrency Sanitizer on: [ 706.543002][ T1739] CPU: 1 UID: 0 PID: 1739 Comm: iou-sqp-1737 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 706.553879][ T1739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 706.564063][ T1739] ================================================================== [ 707.419051][ T1581] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.430317][ T1581] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.441855][ T1581] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.452984][ T1581] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0