last executing test programs: 6m26.179988358s ago: executing program 32 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) io_submit(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000005c0), &(0x7f0000000400)=r6}, 0x27) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 4m12.596502983s ago: executing program 33 (id=3406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x89e0, 0xfffffffffffffffe) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=ANY=[@ANYBLOB="021a080000000000000000"], 0xb, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) 1m11.477779186s ago: executing program 1 (id=6557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xffffffffffffffff) 1m11.457000848s ago: executing program 1 (id=6558): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000200), 0x0, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x4}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 1m11.297630114s ago: executing program 1 (id=6566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1m11.246351269s ago: executing program 1 (id=6567): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x9d0, 0x2000000000ee57, 0x800000000001008, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r1], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) syz_clone(0x11, 0x0, 0x500, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000300), &(0x7f0000000440)=r7}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r10, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) 1m10.966024987s ago: executing program 1 (id=6570): r0 = getpgrp(0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0x87) perf_event_open(0x0, r0, 0x8, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x62000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x4, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000000100)='-1\x00', 0x2) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) pselect6(0x40, &(0x7f0000000240)={0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x1, 0xfffffffffefffffc, 0x8}, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(r3, 0x0, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='dots,nocase,dots,dmask=000000000000000003,dots,dots,dots,quiet,dots,nocase,showexec,dots,dots,nodots,nodots,nodots,dos1xfloppy,errors=continue,nodots,check=normal,check=strict,dots,\x00'], 0xfd, 0x1cf, &(0x7f0000000440)="$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") 1m10.330893929s ago: executing program 1 (id=6577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x94) gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x10000, 0x80000000, 0x6, 0x8, r1, 0x9, '\x00', r2, r3, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500804}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44011) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000440)="b9fffe3476d5698cff9e14f008002f", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.302945182s ago: executing program 34 (id=6577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x94) gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x10000, 0x80000000, 0x6, 0x8, r1, 0x9, '\x00', r2, r3, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500804}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44011) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000440)="b9fffe3476d5698cff9e14f008002f", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 47.126083643s ago: executing program 6 (id=6889): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x80082) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000008c0)={0xa0, 0x0, 0xf20, 0xc, 0x0, 0xb, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="00c0dce9ecc9c199ec00850000006d00000085000000500b049c2cd5bfaa07f87de0f2afd1c6f8efcd00000095bdc12cbda0c9e25a5213b776f6973daf768d"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000001ac0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000000340)='G', 0x1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x11e0}}], 0x2, 0x54) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r6, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x2}) io_uring_enter(r7, 0x847b7, 0x0, 0xe, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d0012"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x9}, 0x3a) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 46.315489543s ago: executing program 6 (id=6892): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r2, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r6, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r6, 0x1000) ftruncate(r6, 0x4000003) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7bfd}, 0x94) 43.844752597s ago: executing program 0 (id=6928): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x800, 0xfffffffc) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x20000000) 43.31380071s ago: executing program 6 (id=6938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_virt_wifi\x00', &(0x7f0000000480)=@ethtool_coalesce={0xe, 0x9, 0xf, 0x4, 0xd5, 0x819, 0x101, 0xd, 0x8, 0x0, 0x1, 0x100, 0xebfa, 0xc3e9, 0x100001, 0x98, 0x7, 0x3d2, 0x2, 0xffffff7f, 0x5, 0x5, 0x2}}) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) getsockname(r5, &(0x7f0000000140)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000040)=0x80) 42.618160768s ago: executing program 0 (id=6939): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000200), 0x0, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x4}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 42.29333863s ago: executing program 7 (id=6942): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x3c, 0x0, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xc3, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 42.214875458s ago: executing program 7 (id=6943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x80000}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x11123, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10797b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 42.077839872s ago: executing program 0 (id=6946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r1, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001f00)=[0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000001f80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f0000002000), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffe]}, 0x0, 0x0, 0x8) sendmmsg$inet6(r1, &(0x7f0000003a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3ff}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000380)="76ae1b0c73263e557d2416cd840546b8a7089daadf23f80ce29f846dd4e5ae4f1cc393629901a3effd7634a9b346a8e86cad6b54cc554daddc141f5eef80fde314d0a56875f71ff0d5", 0x49}], 0x1, &(0x7f00000001c0)=[@rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x0, 0xc5, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local]}}}], 0x38}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0x4, @local, 0x1ff}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000480)="37a0e29354f13b156230acd7b4ea99f7003d1028a0778b2328542a04b1240dfd854f0c3a32849b0beb3441a82bf4983f7a7b828bff2a1d07b3246cfced3a6d911dd6a56556392691c717b9c78712af3724e0113a6f3cec96badd2bdd1e7cce6667d39915995714bd6fa500dbe76efd3b828e684084ec65b3c3a4e53cb92f3976e51b82b9611fdebf240f64f8a799ba5a3701ac0c4e82ae7977a2a393795cfd117e44b4b4786a193be53acdf3e974ae9b68", 0xb1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9583}, 0x1c, 0x0}}, {{&(0x7f00000026c0)={0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}, 0x1c, &(0x7f0000003800)=[{0x0}], 0x1}}], 0x4, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000b8000000000000003448e6731ec365db984c7c80bc4d03a3249552cf6e825aaaaac2fd7f20563b9add3336e4ddf93695b509acb0ecd7587db2280b963f8fa5eafc0d4d66c2aef7871d79b6a17b01ca891d9f9219fdb15f68f617a6f012ba1a9cf24dbb2ec8b8db6b09d6d258d9fb4f6b6fd32ea3f29b35b7504f4c3ab332ef874c0a9677febad1be7b9a7659a28bea393e5a44225aa26e07f1f4ac47b9c324e9e8d6b19e0175e6ceacfc3aa4af4bc1fdb4f2cdd0bcba8d08f1fde6454703fb770a", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) setfsgid(0xee00) r6 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r3, &(0x7f0000000b80)='schedstat\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r6, &(0x7f00000000c0)='pagemap\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 41.955463544s ago: executing program 7 (id=6947): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') getdents(r0, &(0x7f00000001c0)=""/35, 0x23) 41.817101507s ago: executing program 7 (id=6949): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCSETS(r0, 0x5402, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x10c) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r5, &(0x7f0000000100)=[{0x0}, {0x0}, {&(0x7f0000000080)=""/20, 0x14}], 0x3) 41.581687221s ago: executing program 2 (id=6950): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="bfdc0000000600000000000000000000dce6a68e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000007000000010001000900000001"], 0x50) 41.478385941s ago: executing program 2 (id=6951): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000200), 0x0, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 41.332811145s ago: executing program 7 (id=6952): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="f6e2ca1615d9a2eb6272a1327133057e5d7ddea361453508c10bdf99014f5dd1069c04aace18af34df5b57427b202a8ae05196368e7216f884232c7dc5d34cc31cbb8361c8b5429f96330e62d887f87cf693904ccb2ee3d302b789aaabf7e40a6464e12be2d5c928793b076673ddd0589a8c3eec7401110dce52fb4277e60f1d6f141065fa206a0bb1214017bb47ae48a6f44d417f8708c7588cf15c15480762eb9788156434f180f8bf11af1a6f90adf9b03a130a4a9cab4303cbf63ed394b3f1d548e405f491b4ea115cf7088a4eaff9334cd407528f0b54ff696d3556a4cc599723a6ef"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) syz_io_uring_setup(0x3b51, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8003, 0xdd}, &(0x7f0000000040), &(0x7f0000000ac0)) 41.331640585s ago: executing program 2 (id=6953): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x3c, 0x0, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xc3, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 41.196463939s ago: executing program 0 (id=6954): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000200), 0x0, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 41.178880831s ago: executing program 2 (id=6955): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000004c0)={@loopback, 0x77, r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, &(0x7f00000009c0), &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x96, 0x9, 0x10, @loopback, @private2, 0x20, 0x7800, 0x7ff, 0x78d}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)=""/4096, 0xed, 0x1000, 0x1, 0x8}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', r6, r7, 0x2, 0x5, 0x1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c000000100001040200"/20, @ANYRES32=0x0, @ANYBLOB="00200000040004001800128008000100767469000c00028008000500e00000011400030069705f76746930000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x13) r10 = syz_io_uring_setup(0x108, &(0x7f0000000400)={0x0, 0x5841, 0x400, 0x0, 0x8b}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x8, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000880)={0xffffff78, 0xaeb, 0x10e57, 0x4, 0xf6, "3ce69208000000f6000200", 0x4, 0x1ff}) 41.054224583s ago: executing program 6 (id=6957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 40.936736814s ago: executing program 6 (id=6958): accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x80a03, 0x7, 0x43a1bd76, 0x2, 0x400009, 0x7, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 40.916474726s ago: executing program 2 (id=6959): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)}], 0x1}}], 0x2, 0x4004040) 40.758020732s ago: executing program 6 (id=6960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x5d6c}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x21) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="48d1bde13bd4f155103b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c77ed0f6e6f3df3bc20e48af16c19f1172a30d59243d6d472cd4cb5a96413a734623b3ab58a8d9101993c25ac74081dacf5ea819d40d67507db361eebe6d8ac08661bbae24144f51b7f508f4947135c46283222e581d9990d5a6b9dd727484726ebcaa59725dc5b7ac3c73f5c1afdedd2", @ANYRESHEX=r8, @ANYBLOB=',k']) syz_emit_ethernet(0xfc5, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000ffff27bd7000fadb7f0000000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002000128009000100626f6e640000000010000280040008800800070005000000"], 0x40}, 0x1, 0x0, 0x0, 0x40060880}, 0x240408c0) fstatfs(r3, &(0x7f0000000640)=""/215) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00008080", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf250b0000000800020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8a080}, 0x800) io_uring_setup(0x2a6c, &(0x7f0000000040)={0x0, 0x9184, 0x8000, 0x1, 0x2ec}) io_uring_setup(0x5a85, &(0x7f0000000780)={0x0, 0x7475, 0x2, 0x3, 0xc6}) r10 = socket$packet(0x11, 0x3, 0x300) close(r10) 40.726534815s ago: executing program 0 (id=6961): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x94, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x58, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xef}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x500}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 40.719058866s ago: executing program 35 (id=6960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x5d6c}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x21) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="48d1bde13bd4f155103b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c77ed0f6e6f3df3bc20e48af16c19f1172a30d59243d6d472cd4cb5a96413a734623b3ab58a8d9101993c25ac74081dacf5ea819d40d67507db361eebe6d8ac08661bbae24144f51b7f508f4947135c46283222e581d9990d5a6b9dd727484726ebcaa59725dc5b7ac3c73f5c1afdedd2", @ANYRESHEX=r8, @ANYBLOB=',k']) syz_emit_ethernet(0xfc5, &(0x7f00000013c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa10080046000fb70000000000849078ac1414bbac14140e01000000dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa2d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3000000000000"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000ffff27bd7000fadb7f0000000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605002000128009000100626f6e640000000010000280040008800800070005000000"], 0x40}, 0x1, 0x0, 0x0, 0x40060880}, 0x240408c0) fstatfs(r3, &(0x7f0000000640)=""/215) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00008080", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf250b0000000800020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8a080}, 0x800) io_uring_setup(0x2a6c, &(0x7f0000000040)={0x0, 0x9184, 0x8000, 0x1, 0x2ec}) io_uring_setup(0x5a85, &(0x7f0000000780)={0x0, 0x7475, 0x2, 0x3, 0xc6}) r10 = socket$packet(0x11, 0x3, 0x300) close(r10) 40.716238376s ago: executing program 2 (id=6963): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000200), 0x0, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 40.68349189s ago: executing program 0 (id=6964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r7) mprotect(&(0x7f000072a000/0x1000)=nil, 0x1000, 0x1000000) readlink(0x0, &(0x7f0000000300)=""/207, 0xcf) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000009) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 40.68209763s ago: executing program 36 (id=6963): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xf, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x0, 0x9, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000200), 0x0, 0x0, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, r8, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) 40.638101314s ago: executing program 37 (id=6964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r7) mprotect(&(0x7f000072a000/0x1000)=nil, 0x1000, 0x1000000) readlink(0x0, &(0x7f0000000300)=""/207, 0xcf) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000009) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0xe0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 38.989254377s ago: executing program 7 (id=6967): r0 = socket$inet(0x2, 0x3, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='rpcgss_createauth\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x46, 0x8e, 0x3}, {0xc, 0x8f, 0x3f00}, {0xc}}]}, 0x54}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x8976) 38.988719567s ago: executing program 38 (id=6967): r0 = socket$inet(0x2, 0x3, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='rpcgss_createauth\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x46, 0x8e, 0x3}, {0xc, 0x8f, 0x3f00}, {0xc}}]}, 0x54}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x8976) 2.757207637s ago: executing program 5 (id=7618): io_uring_setup(0x6c34, 0x0) eventfd2(0x6, 0x80800) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000280)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000086}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x8020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r8, &(0x7f0000000040)=""/190, 0xbe) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000500)=0x0) fchown(r2, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r11 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r11) 2.286831354s ago: executing program 5 (id=7633): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 2.22364485s ago: executing program 5 (id=7635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f00000000c0)=[{0x3, 0x8003, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000880)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x69, "5e68ef03eb534f4ec7d13297f297d99ffa8f23c790cf34217b356da23ee9128d32498df4b3a72b6eb72824c9fe901096cf8ecf855940ef7172b4e7c7bd7ce6f77a327172e851702c501b54ae43d4f18b5d1e8f986e9b91a359af2f746f3fb109b3682500306dd03c27"}, &(0x7f0000000340)=0x71) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) memfd_create(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r8, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r11, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="2f0602020000000095b3af83ab09b2b4000000000062eb4d0002000000000000000100"/56], 0x38) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={r3, @in={{0x2, 0x4e21, @broadcast}}, [0x8000, 0x8, 0x9, 0x9, 0x3, 0x2, 0x9, 0x800, 0x7, 0x85, 0x6, 0x7, 0x100000000, 0x7, 0x7]}, &(0x7f0000000480)=0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f54908655dd4dae3000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000130000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.185887154s ago: executing program 9 (id=7639): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @local, 0x3, 0x9, 0x0, 0x400, 0x9, 0x4}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='rxrpc_call\x00', r1, 0x0, 0x3fc}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000100100000100000014e200000000000010"], 0x28}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.166475966s ago: executing program 9 (id=7641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.116957691s ago: executing program 9 (id=7643): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 2.101932482s ago: executing program 8 (id=7644): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 2.070386685s ago: executing program 8 (id=7645): io_uring_setup(0x6c34, 0x0) eventfd2(0x6, 0x80800) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000280)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000086}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x8020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r8, &(0x7f0000000040)=""/190, 0xbe) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000500)=0x0) fchown(r2, r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r10 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r10) 2.059384116s ago: executing program 9 (id=7647): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x80082) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000008c0)={0xa0, 0x0, 0xf20, 0xc, 0x0, 0xb, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="00c0dce9ecc9c199ec00850000006d00000085000000500b049c2cd5bfaa07f87de0f2afd1c6f8efcd00000095bdc12cbda0c9e25a5213b776f6973daf768d"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001ac0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000000340)='G', 0x1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x11e0}}], 0x2, 0x54) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x847b7, 0x0, 0xe, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d0012"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x9}, 0x3a) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000002c0)) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) 2.043533818s ago: executing program 3 (id=7648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 1.989029653s ago: executing program 3 (id=7651): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x80000cc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x4afa}, 0x8) 1.781645954s ago: executing program 8 (id=7654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.486158793s ago: executing program 4 (id=7657): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 1.484855013s ago: executing program 8 (id=7658): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 1.467330205s ago: executing program 4 (id=7659): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 1.464625685s ago: executing program 8 (id=7660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x2000000000000223, &(0x7f0000001d80)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c80", @ANYRES16=r4, @ANYRESHEX=r1], 0x44}}, 0x2000800) syz_emit_ethernet(0xd2, &(0x7f0000000240)={@random="d1e5972a0c0e", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7fdc330d86f6d14ebac7fd3a980b62ea257ce73c619679c3195c7170a1cb9297", "8d92d07579b92fe16c750669ebdf44fda23a5461ab5bf73afba8302fbebb4125ceed41c376697534845a56ff4b75319b", "27285dc4b2b3a61605c67c5a5b667257115d9a1699e399ee30d6f710", {"72450b1abc3ccbb2f94aa945b5f326b1", "8bdfec2d3f7001003980d2c3bbdbdf2c"}}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$qrtrtun(r6, &(0x7f0000000900)="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", 0x45c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x18) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x20000184) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r11}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r11}, 0x38) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x90, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 1.447882527s ago: executing program 4 (id=7661): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xf}}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) fallocate(r0, 0x0, 0xbf5, 0x2000402) ftruncate(r3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0xc, r0, 0x20, 0x0, 0xdac2, 0xfffefffffe000000}) 1.344453907s ago: executing program 5 (id=7662): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r11 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.142179467s ago: executing program 9 (id=7663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000500)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000feda412a6af8c15e31ebcb03151868000000100013daa4c546692ce30264cc88ea2891a5bb5700d19db68e653f9161634c6d6ab0c96a8580aa4e8ea2dda3b354d48aa105435ba73947cdf7e03b32d4c7859720282b539aaa32061cf3a534d01ce329093ce9386fe7380ac45f1cb57bf129c45bcb46a2ef0db37e0100a74f46765c5658fb9d7e284d0c05bff47af4d458d74ee9ac2be06c5213d98870698d54789920f2897fe62cd762294ad3f914cad1562253532e19b68a299108c3c4eb88ee4cd03829661fe6a313c8b7b622c0f6d7d4625a4630e4c3a7c109d94a150f946f6626cb03a57d9c6ab721ad6954011e4bffb039218ca2f6a8b9306c29c5c05c"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x7, 0x2b0, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.131349298s ago: executing program 4 (id=7664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.11168603s ago: executing program 9 (id=7665): io_uring_setup(0x6c34, 0x0) eventfd2(0x6, 0x80800) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000280)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000086}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x8020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) read(r8, &(0x7f0000000040)=""/190, 0xbe) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000500)=0x0) fchown(r2, r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r10 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r10) 1.066260594s ago: executing program 3 (id=7666): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 1.064020165s ago: executing program 3 (id=7667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 183.981682ms ago: executing program 3 (id=7668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 126.824897ms ago: executing program 4 (id=7669): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xf}}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) fallocate(r0, 0x0, 0xbf5, 0x2000402) ftruncate(r3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0xc, r0, 0x20, 0x0, 0xdac2, 0xfffefffffe000000}) 125.995507ms ago: executing program 8 (id=7670): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 62.173904ms ago: executing program 5 (id=7671): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 34.395757ms ago: executing program 5 (id=7672): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000600), 0x1ff, 0x80082) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000008c0)={0xa0, 0x0, 0xf20, 0xc, 0x0, 0xb, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="00c0dce9ecc9c199ec00850000006d00000085000000500b049c2cd5bfaa07f87de0f2afd1c6f8efcd00000095bdc12cbda0c9e25a5213b776f6973daf768d"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001ac0)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000000340)='G', 0x1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x11e0}}], 0x2, 0x54) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r7, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x2}) io_uring_enter(r8, 0x847b7, 0x0, 0xe, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d0012"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x9}, 0x3a) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000002c0)) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) 33.827867ms ago: executing program 3 (id=7673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000500)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001380)=@deltaction={0x188, 0x31, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x3ffe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3cf5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x188}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x7, 0x2b0, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 0s ago: executing program 4 (id=7674): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@min_batch_time={'min_batch_time', 0x3d, 0xf}}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) fallocate(r0, 0x0, 0xbf5, 0x2000402) ftruncate(r3, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0xc, r0, 0x20, 0x0, 0xdac2, 0xfffefffffe000000}) kernel console output (not intermixed with test programs): greatest stack depth: 7496 bytes left [ 391.657040][T21945] netlink: 332 bytes leftover after parsing attributes in process `syz.6.6760'. [ 391.666903][T21945] netlink: 'syz.6.6760': attribute type 9 has an invalid length. [ 391.674852][T21945] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6760'. [ 391.728817][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6762'. [ 391.740125][T21950] vhci_hcd: invalid port number 85 [ 391.745311][T21950] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 391.853450][T21957] vhci_hcd: invalid port number 85 [ 391.858657][T21957] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 391.921712][T21960] netlink: 'syz.6.6766': attribute type 1 has an invalid length. [ 392.109392][T21984] netlink: 'syz.0.6776': attribute type 1 has an invalid length. [ 392.249583][T21984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.354626][T22008] vhci_hcd: invalid port number 85 [ 392.359849][T22008] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 392.901174][T22036] netlink: 'syz.7.6791': attribute type 1 has an invalid length. [ 392.933910][T22036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.959906][T22036] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 392.986915][T22036] bond1: (slave batadv1): making interface the new active one [ 392.997955][T22036] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 393.014119][T22036] bond1 (unregistering): (slave batadv1): Releasing active interface [ 393.023685][T22036] bond1 (unregistering): Released all slaves [ 393.125069][T22048] vhci_hcd: invalid port number 85 [ 393.130290][T22048] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 393.361953][T22064] netlink: 'syz.2.6801': attribute type 21 has an invalid length. [ 393.400662][T22068] netlink: 'syz.6.6802': attribute type 3 has an invalid length. [ 393.428527][T22064] netlink: 'syz.2.6801': attribute type 6 has an invalid length. [ 393.628754][T20823] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 393.636566][T20823] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 393.796808][ T29] kauditd_printk_skb: 851 callbacks suppressed [ 393.796826][ T29] audit: type=1400 audit(1760485815.487:30981): avc: denied { create } for pid=22085 comm="syz.6.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 393.848598][ T29] audit: type=1400 audit(1760485815.518:30982): avc: denied { write } for pid=22085 comm="syz.6.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 393.868505][ T29] audit: type=1400 audit(1760485815.518:30983): avc: denied { write } for pid=22085 comm="syz.6.6807" lport=43754 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 394.291471][T22107] __nla_validate_parse: 15 callbacks suppressed [ 394.291490][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6815'. [ 394.411622][T22109] netlink: 'syz.3.6816': attribute type 3 has an invalid length. [ 394.419455][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6816'. [ 394.440548][T22110] hub 9-0:1.0: USB hub found [ 394.445419][T22110] hub 9-0:1.0: 8 ports detected [ 394.493538][ T29] audit: type=1326 audit(1760485816.221:30984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.3.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 394.773729][ T29] audit: type=1326 audit(1760485816.295:30985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.3.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 394.797504][ T29] audit: type=1326 audit(1760485816.295:30986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.3.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 394.821247][ T29] audit: type=1326 audit(1760485816.295:30987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.3.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 394.844903][ T29] audit: type=1326 audit(1760485816.295:30988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.3.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 394.868488][ T29] audit: type=1326 audit(1760485816.295:30989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.3.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 394.892117][ T29] audit: type=1326 audit(1760485816.295:30990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.3.6816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 395.107198][T22123] netlink: 'syz.7.6821': attribute type 21 has an invalid length. [ 395.123776][T22123] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6821'. [ 395.132992][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6821'. [ 395.169171][T22123] netlink: 'syz.7.6821': attribute type 6 has an invalid length. [ 395.393374][T22138] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6827'. [ 395.402587][T22138] netlink: 'syz.2.6827': attribute type 9 has an invalid length. [ 395.410378][T22138] netlink: 160 bytes leftover after parsing attributes in process `syz.2.6827'. [ 395.445895][T22148] 9pnet_fd: Insufficient options for proto=fd [ 395.460311][T22148] netlink: 'syz.0.6830': attribute type 9 has an invalid length. [ 395.468142][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6830'. [ 395.481059][T22148] veth0_to_bond: entered promiscuous mode [ 395.486976][T22148] macvlan0: entered promiscuous mode [ 395.492456][T22148] macvlan0: entered allmulticast mode [ 395.497873][T22148] veth0_to_bond: entered allmulticast mode [ 395.504294][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.511894][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.519393][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.526800][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.534289][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.541822][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.549315][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.556801][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.564227][ T3422] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 395.574237][ T3422] hid-generic 0003:0003:0000.0039: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 395.593777][T22153] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.653319][T22153] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.720380][T22153] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.768029][T22153] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.829086][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.841089][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.867286][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.877665][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.099743][T22179] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6837'. [ 396.536937][T22186] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6843'. [ 396.549922][T22186] netlink: 'syz.3.6843': attribute type 9 has an invalid length. [ 396.557716][T22186] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6843'. [ 396.746780][T22192] vhci_hcd: invalid port number 85 [ 396.752016][T22192] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 396.765226][T22194] FAULT_INJECTION: forcing a failure. [ 396.765226][T22194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.778469][T22194] CPU: 1 UID: 0 PID: 22194 Comm: syz.2.6846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 396.778501][T22194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 396.778635][T22194] Call Trace: [ 396.778643][T22194] [ 396.778653][T22194] __dump_stack+0x1d/0x30 [ 396.778678][T22194] dump_stack_lvl+0xe8/0x140 [ 396.778697][T22194] dump_stack+0x15/0x1b [ 396.778787][T22194] should_fail_ex+0x265/0x280 [ 396.778822][T22194] should_fail+0xb/0x20 [ 396.778868][T22194] should_fail_usercopy+0x1a/0x20 [ 396.778896][T22194] _copy_to_user+0x20/0xa0 [ 396.778929][T22194] simple_read_from_buffer+0xb5/0x130 [ 396.778978][T22194] proc_fail_nth_read+0x10e/0x150 [ 396.779056][T22194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.779101][T22194] vfs_read+0x1a8/0x770 [ 396.779130][T22194] ? __rcu_read_unlock+0x4f/0x70 [ 396.779191][T22194] ? __fget_files+0x184/0x1c0 [ 396.779263][T22194] ksys_read+0xda/0x1a0 [ 396.779288][T22194] __x64_sys_read+0x40/0x50 [ 396.779311][T22194] x64_sys_call+0x27c0/0x3000 [ 396.779339][T22194] do_syscall_64+0xd2/0x200 [ 396.779394][T22194] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 396.779427][T22194] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 396.779458][T22194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.779486][T22194] RIP: 0033:0x7fddafc3d8dc [ 396.779505][T22194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 396.779594][T22194] RSP: 002b:00007fddae6a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.779617][T22194] RAX: ffffffffffffffda RBX: 00007fddafe95fa0 RCX: 00007fddafc3d8dc [ 396.779630][T22194] RDX: 000000000000000f RSI: 00007fddae6a70a0 RDI: 0000000000000006 [ 396.779713][T22194] RBP: 00007fddae6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 396.779731][T22194] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001 [ 396.779748][T22194] R13: 00007fddafe96038 R14: 00007fddafe95fa0 R15: 00007fff1692f798 [ 396.779773][T22194] [ 397.063936][T22210] 9pnet_fd: Insufficient options for proto=fd [ 397.076343][T22210] bond0: Removing last arp target with arp_interval on [ 397.083898][T22210] bond0: entered allmulticast mode [ 397.089257][T22210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.125061][T22214] netlink: 'syz.3.6854': attribute type 21 has an invalid length. [ 397.149108][T22214] netlink: 'syz.3.6854': attribute type 6 has an invalid length. [ 397.658901][T22237] vhci_hcd: invalid port number 85 [ 397.664191][T22237] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 397.901031][T22246] FAULT_INJECTION: forcing a failure. [ 397.901031][T22246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.914398][T22246] CPU: 0 UID: 0 PID: 22246 Comm: syz.7.6864 Not tainted syzkaller #0 PREEMPT(voluntary) [ 397.914436][T22246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.914454][T22246] Call Trace: [ 397.914462][T22246] [ 397.914469][T22246] __dump_stack+0x1d/0x30 [ 397.914491][T22246] dump_stack_lvl+0xe8/0x140 [ 397.914551][T22246] dump_stack+0x15/0x1b [ 397.914573][T22246] should_fail_ex+0x265/0x280 [ 397.914619][T22246] should_fail_alloc_page+0xf2/0x100 [ 397.914710][T22246] __alloc_frozen_pages_noprof+0xff/0x360 [ 397.914766][T22246] alloc_pages_mpol+0xb3/0x260 [ 397.914823][T22246] alloc_pages_noprof+0x90/0x130 [ 397.914844][T22246] get_free_pages_noprof+0xc/0x40 [ 397.914885][T22246] selinux_genfs_get_sid+0x33/0x180 [ 397.914965][T22246] inode_doinit_with_dentry+0x5fe/0x7a0 [ 397.914993][T22246] selinux_d_instantiate+0x27/0x40 [ 397.915100][T22246] security_d_instantiate+0x7a/0xa0 [ 397.915144][T22246] d_instantiate+0x3f/0x80 [ 397.915182][T22246] __debugfs_create_file+0x1c1/0x330 [ 397.915217][T22246] debugfs_create_file_full+0x3f/0x60 [ 397.915345][T22246] ? __pfx_vti6_dev_setup+0x10/0x10 [ 397.915370][T22246] ref_tracker_dir_debugfs+0x100/0x1e0 [ 397.915478][T22246] alloc_netdev_mqs+0x1a7/0xa50 [ 397.915515][T22246] ? sized_strscpy+0x121/0x1a0 [ 397.915551][T22246] vti6_locate+0x357/0x440 [ 397.915655][T22246] vti6_siocdevprivate+0x579/0x8e0 [ 397.915774][T22246] dev_ifsioc+0x8f8/0xaa0 [ 397.915812][T22246] dev_ioctl+0x78d/0x960 [ 397.915843][T22246] sock_ioctl+0x593/0x610 [ 397.915887][T22246] ? __pfx_sock_ioctl+0x10/0x10 [ 397.915977][T22246] __se_sys_ioctl+0xce/0x140 [ 397.916003][T22246] __x64_sys_ioctl+0x43/0x50 [ 397.916028][T22246] x64_sys_call+0x1816/0x3000 [ 397.916184][T22246] do_syscall_64+0xd2/0x200 [ 397.916209][T22246] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 397.916245][T22246] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 397.916267][T22246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.916370][T22246] RIP: 0033:0x7fa4e06feec9 [ 397.916388][T22246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.916459][T22246] RSP: 002b:00007fa4df15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.916485][T22246] RAX: ffffffffffffffda RBX: 00007fa4e0955fa0 RCX: 00007fa4e06feec9 [ 397.916503][T22246] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 397.916520][T22246] RBP: 00007fa4df15f090 R08: 0000000000000000 R09: 0000000000000000 [ 397.916602][T22246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.916619][T22246] R13: 00007fa4e0956038 R14: 00007fa4e0955fa0 R15: 00007ffe73235a18 [ 397.916644][T22246] [ 398.289574][T22266] vhci_hcd: invalid port number 85 [ 398.294804][T22266] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 398.338500][T22271] netlink: 'syz.6.6875': attribute type 21 has an invalid length. [ 398.348218][T22271] netlink: 'syz.6.6875': attribute type 6 has an invalid length. [ 398.442524][T22278] SELinux: failed to load policy [ 398.513171][T22287] futex_wake_op: syz.0.6880 tries to shift op by -1; fix this program [ 398.596000][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 398.596015][ T29] audit: type=1326 audit(1760485820.526:31386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22281 comm="syz.7.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa4e06feec9 code=0x7ffc0000 [ 398.634446][ T29] audit: type=1326 audit(1760485820.568:31387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22279 comm="syz.7.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e06feec9 code=0x7ffc0000 [ 398.658172][ T29] audit: type=1326 audit(1760485820.568:31388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22279 comm="syz.7.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e06feec9 code=0x7ffc0000 [ 398.825769][T22308] vhci_hcd: invalid port number 12 [ 398.951786][T22312] vhci_hcd: invalid port number 85 [ 398.956960][T22312] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 398.966109][ T29] audit: type=1326 audit(1760485820.914:31389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 398.991887][ T29] audit: type=1326 audit(1760485820.945:31390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 399.015698][ T29] audit: type=1326 audit(1760485820.945:31391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 399.039569][ T29] audit: type=1326 audit(1760485820.945:31392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 399.063589][ T29] audit: type=1326 audit(1760485820.945:31393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 399.063637][ T29] audit: type=1326 audit(1760485820.945:31394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 399.091258][T22313] hub 9-0:1.0: USB hub found [ 399.110758][ T29] audit: type=1326 audit(1760485820.945:31395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz.3.6890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 399.115406][T22313] hub 9-0:1.0: 8 ports detected [ 399.472658][T22308] __nla_validate_parse: 18 callbacks suppressed [ 399.472674][T22308] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6889'. [ 399.673924][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6891'. [ 399.683992][T22319] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.702620][T22323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6893'. [ 399.778340][T22319] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.819846][T22333] netlink: 'syz.3.6897': attribute type 21 has an invalid length. [ 399.828001][T22333] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6897'. [ 399.837073][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6897'. [ 399.873104][T22319] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.896074][T22333] netlink: 'syz.3.6897': attribute type 6 has an invalid length. [ 399.947337][T22319] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.003023][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.020641][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.045645][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.060874][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.227774][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.234342][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.241345][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.251078][T22357] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 400.268016][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.276321][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.285162][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.292816][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.301047][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.308901][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.315593][T22357] geneve0 speed is unknown, defaulting to 1000 [ 400.631721][T22371] netlink: 'syz.7.6909': attribute type 1 has an invalid length. [ 400.639647][T22371] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6909'. [ 400.705678][T22373] hub 9-0:1.0: USB hub found [ 400.710394][T22373] hub 9-0:1.0: 8 ports detected [ 401.113800][T22378] netlink: 'syz.3.6911': attribute type 21 has an invalid length. [ 401.123143][T22378] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6911'. [ 401.132415][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6911'. [ 401.142589][T22378] netlink: 'syz.3.6911': attribute type 6 has an invalid length. [ 401.169172][T22383] netlink: 'syz.3.6913': attribute type 13 has an invalid length. [ 401.328330][T22389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22389 comm=syz.7.6915 [ 401.412174][T22400] hub 9-0:1.0: USB hub found [ 401.417326][T22400] hub 9-0:1.0: 8 ports detected [ 401.817722][T22399] geneve0 speed is unknown, defaulting to 1000 [ 402.004456][T22416] netlink: 'syz.7.6924': attribute type 13 has an invalid length. [ 402.048755][T22418] netlink: 'syz.2.6925': attribute type 21 has an invalid length. [ 402.056827][T22418] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6925'. [ 402.065982][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6925'. [ 402.091948][T22418] netlink: 'syz.2.6925': attribute type 6 has an invalid length. [ 402.141080][T22425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.149765][T22425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.173356][T22425] bond0: entered promiscuous mode [ 402.178482][T22425] bond_slave_0: entered promiscuous mode [ 402.184317][T22425] bond_slave_1: entered promiscuous mode [ 402.190995][T22425] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 402.200158][T22425] bond0: left promiscuous mode [ 402.204993][T22425] bond_slave_0: left promiscuous mode [ 402.210513][T22425] bond_slave_1: left promiscuous mode [ 402.252860][T22432] netlink: 'syz.7.6931': attribute type 1 has an invalid length. [ 402.601065][T22447] hub 9-0:1.0: USB hub found [ 402.606044][T22447] hub 9-0:1.0: 8 ports detected [ 403.213430][T22453] hub 9-0:1.0: USB hub found [ 403.218135][T22453] hub 9-0:1.0: 8 ports detected [ 403.416949][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 403.416968][ T29] audit: type=1400 audit(1760485825.586:31576): avc: denied { append } for pid=22454 comm="syz.0.6939" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 403.457176][T22455] vhci_hcd: invalid port number 85 [ 403.462328][T22455] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 403.501013][T22458] SELinux: Context system_u:object is not valid (left unmapped). [ 403.543394][ T29] audit: type=1400 audit(1760485825.670:31577): avc: denied { mac_admin } for pid=22456 comm="syz.2.6940" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 403.564884][ T29] audit: type=1400 audit(1760485825.680:31578): avc: denied { relabelto } for pid=22456 comm="syz.2.6940" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 403.590915][ T29] audit: type=1400 audit(1760485825.680:31579): avc: denied { associate } for pid=22456 comm="syz.2.6940" name="cgroup.procs" dev="cgroup" ino=102 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 403.617816][ T29] audit: type=1400 audit(1760485825.701:31580): avc: denied { cpu } for pid=22454 comm="syz.0.6939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 403.637476][ T29] audit: type=1326 audit(1760485825.712:31581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.0.6939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdab2beec9 code=0x7ffc0000 [ 403.661151][ T29] audit: type=1326 audit(1760485825.712:31582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.0.6939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdab2beec9 code=0x7ffc0000 [ 403.684908][ T29] audit: type=1326 audit(1760485825.712:31583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.0.6939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdab2beec9 code=0x7ffc0000 [ 403.708628][ T29] audit: type=1326 audit(1760485825.722:31584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.0.6939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcdab2beec9 code=0x7ffc0000 [ 403.732336][ T29] audit: type=1326 audit(1760485825.722:31585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22454 comm="syz.0.6939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdab2beec9 code=0x7ffc0000 [ 403.881841][T22473] xt_CT: No such helper "pptp" [ 404.176056][T12972] hid_parser_main: 9 callbacks suppressed [ 404.176079][T12972] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 404.201503][T12972] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.525657][T22495] __nla_validate_parse: 5 callbacks suppressed [ 404.525688][T22495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6951'. [ 404.564829][T22495] vhci_hcd: invalid port number 85 [ 404.570171][T22495] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 404.817019][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6954'. [ 404.890904][T22506] hub 9-0:1.0: USB hub found [ 404.895763][T22506] hub 9-0:1.0: 8 ports detected [ 404.956048][T22505] vhci_hcd: invalid port number 85 [ 404.961354][T22505] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 405.103184][ T421] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.184163][ T421] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.284516][ T421] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.342684][ T421] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.426004][ T421] bridge_slave_1: left allmulticast mode [ 405.431760][ T421] bridge_slave_1: left promiscuous mode [ 405.437482][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.445474][ T421] bridge_slave_0: left allmulticast mode [ 405.451235][ T421] bridge_slave_0: left promiscuous mode [ 405.456981][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.523440][ T421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.533346][ T421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.542934][ T421] bond0 (unregistering): Released all slaves [ 405.579699][ T421] tipc: Disabling bearer [ 405.584768][ T421] tipc: Left network mode [ 405.606050][ T421] hsr_slave_0: left promiscuous mode [ 405.611887][ T421] hsr_slave_1: left promiscuous mode [ 405.617555][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.624986][ T421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.632507][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.640062][ T421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.650503][ T421] veth1_macvtap: left promiscuous mode [ 405.656093][ T421] veth0_macvtap: left promiscuous mode [ 405.703803][ T421] team0 (unregistering): Port device team_slave_1 removed [ 405.714505][ T421] team0 (unregistering): Port device team_slave_0 removed [ 405.877432][T22547] geneve0 speed is unknown, defaulting to 1000 [ 405.929170][T22547] chnl_net:caif_netlink_parms(): no params data found [ 405.965411][T22547] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.972555][T22547] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.979764][T22547] bridge_slave_0: entered allmulticast mode [ 405.986262][T22547] bridge_slave_0: entered promiscuous mode [ 405.993266][T22547] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.000374][T22547] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.007797][T22547] bridge_slave_1: entered allmulticast mode [ 406.014220][T22547] bridge_slave_1: entered promiscuous mode [ 406.033146][T22547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.043735][T22547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.063682][T22547] team0: Port device team_slave_0 added [ 406.070280][T22547] team0: Port device team_slave_1 added [ 406.086251][T22547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.093321][T22547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.119380][T22547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.131373][T22547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.138319][T22547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.164296][T22547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.180957][ T421] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.204743][T22547] hsr_slave_0: entered promiscuous mode [ 406.210841][T22547] hsr_slave_1: entered promiscuous mode [ 406.216732][T22547] debugfs: 'hsr0' already exists in 'hsr' [ 406.222456][T22547] Cannot create hsr debugfs directory [ 406.248108][ T421] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.295125][ T421] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.314762][T22547] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 406.324043][T22547] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 406.332572][T22547] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 406.343349][ T421] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.354975][T22547] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 406.370621][T22547] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.377684][T22547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.384981][T22547] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.392051][T22547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.425490][ T421] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.436928][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.444924][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.462229][T22547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.470376][ T421] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.486675][T22547] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.496127][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.503243][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.515544][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.522661][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.532905][ T421] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.581181][ T421] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.596881][T22547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.700710][T22547] veth0_vlan: entered promiscuous mode [ 406.708610][T22547] veth1_vlan: entered promiscuous mode [ 406.724374][T22547] veth0_macvtap: entered promiscuous mode [ 406.733834][T22547] veth1_macvtap: entered promiscuous mode [ 406.744778][T22547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.755843][T22547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.766632][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.775422][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.786771][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.797222][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.832767][ T421] bridge_slave_1: left allmulticast mode [ 406.838508][ T421] bridge_slave_1: left promiscuous mode [ 406.844217][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.852010][ T421] bridge_slave_0: left allmulticast mode [ 406.857758][ T421] bridge_slave_0: left promiscuous mode [ 406.863452][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.872395][ T421] bridge_slave_1: left allmulticast mode [ 406.878110][ T421] bridge_slave_1: left promiscuous mode [ 406.883839][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.891860][ T421] bridge_slave_0: left allmulticast mode [ 406.897581][ T421] bridge_slave_0: left promiscuous mode [ 406.903256][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.911929][ T421] bridge_slave_1: left allmulticast mode [ 406.917570][ T421] bridge_slave_1: left promiscuous mode [ 406.923300][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.931208][ T421] bridge_slave_0: left allmulticast mode [ 406.936891][ T421] bridge_slave_0: left promiscuous mode [ 406.942640][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.095079][ T421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.105121][ T421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.116592][ T421] bond0 (unregistering): Released all slaves [ 407.247308][ T421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.257359][ T421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.266876][ T421] bond0 (unregistering): Released all slaves [ 407.275322][ T421] bond1 (unregistering): Released all slaves [ 407.324139][ T421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.333468][ T421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.342838][ T421] bond0 (unregistering): Released all slaves [ 407.443237][T22587] geneve0 speed is unknown, defaulting to 1000 [ 407.470432][ T421] hsr_slave_0: left promiscuous mode [ 407.476175][ T421] hsr_slave_1: left promiscuous mode [ 407.481758][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.489205][ T421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.496908][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.504363][ T421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.513054][ T421] hsr_slave_0: left promiscuous mode [ 407.518840][ T421] hsr_slave_1: left promiscuous mode [ 407.524494][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.531963][ T421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.539444][ T421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.546845][ T421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.554944][ T421] hsr_slave_0: left promiscuous mode [ 407.560595][ T421] hsr_slave_1: left promiscuous mode [ 407.566160][ T421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.574240][ T421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.586574][ T421] veth1_macvtap: left promiscuous mode [ 407.592201][ T421] veth0_macvtap: left promiscuous mode [ 407.598087][ T421] veth0_to_bond: left allmulticast mode [ 407.603725][ T421] veth0_to_bond: left promiscuous mode [ 407.609428][ T421] veth1_macvtap: left promiscuous mode [ 407.615003][ T421] veth0_macvtap: left promiscuous mode [ 407.688796][ T421] team0 (unregistering): Port device team_slave_1 removed [ 407.700096][ T421] team0 (unregistering): Port device team_slave_0 removed [ 407.747634][ T421] team0 (unregistering): Port device team_slave_1 removed [ 407.758012][ T421] team0 (unregistering): Port device team_slave_0 removed [ 407.804372][ T421] team0 (unregistering): Port device team_slave_1 removed [ 407.814108][ T421] team0 (unregistering): Port device team_slave_0 removed [ 407.951868][T22587] chnl_net:caif_netlink_parms(): no params data found [ 408.015793][T22587] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.023098][T22587] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.030881][T22587] bridge_slave_0: entered allmulticast mode [ 408.037610][T22587] bridge_slave_0: entered promiscuous mode [ 408.044659][T22587] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.051828][T22587] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.059391][T22587] bridge_slave_1: entered allmulticast mode [ 408.066233][T22587] bridge_slave_1: entered promiscuous mode [ 408.120222][T22624] nfs4: Bad value for 'source' [ 408.120925][T22587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.125748][T22625] nfs4: Bad value for 'source' [ 408.144722][T22587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.150171][T22624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22624 comm=syz.9.6971 [ 408.186380][T22587] team0: Port device team_slave_0 added [ 408.194431][T22587] team0: Port device team_slave_1 added [ 408.215157][T22602] geneve0 speed is unknown, defaulting to 1000 [ 408.221880][T22587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.228893][T22587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.255048][T22587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.266607][T22587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.273577][T22587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.299642][T22587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.315723][T22605] geneve0 speed is unknown, defaulting to 1000 [ 408.362026][T22587] hsr_slave_0: entered promiscuous mode [ 408.368318][T22587] hsr_slave_1: entered promiscuous mode [ 408.374409][T22587] debugfs: 'hsr0' already exists in 'hsr' [ 408.380235][T22587] Cannot create hsr debugfs directory [ 408.395281][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 408.395298][ T29] audit: type=1400 audit(1760485830.814:31793): avc: denied { read } for pid=22632 comm="syz.9.6973" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 408.424496][ T29] audit: type=1400 audit(1760485830.814:31794): avc: denied { open } for pid=22632 comm="syz.9.6973" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 408.582540][ T29] audit: type=1400 audit(1760485831.013:31795): avc: denied { create } for pid=22637 comm="syz.3.6974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.603658][ T29] audit: type=1400 audit(1760485831.034:31796): avc: denied { write } for pid=22637 comm="syz.3.6974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.683522][T22602] chnl_net:caif_netlink_parms(): no params data found [ 408.694520][ T421] IPVS: stop unused estimator thread 0... [ 408.763650][ T29] audit: type=1400 audit(1760485831.202:31797): avc: denied { setopt } for pid=22644 comm="syz.3.6975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.786619][ T29] audit: type=1400 audit(1760485831.223:31798): avc: denied { bind } for pid=22644 comm="syz.3.6975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.797133][T22605] chnl_net:caif_netlink_parms(): no params data found [ 408.806543][ T29] audit: type=1400 audit(1760485831.223:31799): avc: denied { name_bind } for pid=22644 comm="syz.3.6975" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 408.835378][ T29] audit: type=1400 audit(1760485831.223:31800): avc: denied { node_bind } for pid=22644 comm="syz.3.6975" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 408.857533][ T29] audit: type=1400 audit(1760485831.223:31801): avc: denied { write } for pid=22644 comm="syz.3.6975" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.879266][ T29] audit: type=1400 audit(1760485831.223:31802): avc: denied { connect } for pid=22644 comm="syz.3.6975" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.951624][T22602] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.958740][T22602] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.967070][T22602] bridge_slave_0: entered allmulticast mode [ 408.973826][T22602] bridge_slave_0: entered promiscuous mode [ 408.986854][T22602] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.994086][T22602] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.001447][T22602] bridge_slave_1: entered allmulticast mode [ 409.008383][T22602] bridge_slave_1: entered promiscuous mode [ 409.018946][ T3407] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 409.027256][ T3407] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 409.053960][T22602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.065253][T22605] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.072343][T22605] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.080370][T22605] bridge_slave_0: entered allmulticast mode [ 409.087150][T22605] bridge_slave_0: entered promiscuous mode [ 409.095760][T22602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.118280][T22602] team0: Port device team_slave_0 added [ 409.126830][T22602] team0: Port device team_slave_1 added [ 409.132801][T22605] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.139881][T22605] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.147371][T22605] bridge_slave_1: entered allmulticast mode [ 409.154026][T22605] bridge_slave_1: entered promiscuous mode [ 409.174760][T22602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.181789][T22602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.207759][T22602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.228789][T22602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.235809][T22602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.261845][T22602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.276325][T22605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.298309][T22605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.315492][T22602] hsr_slave_0: entered promiscuous mode [ 409.321911][T22602] hsr_slave_1: entered promiscuous mode [ 409.327718][T22602] debugfs: 'hsr0' already exists in 'hsr' [ 409.333518][T22602] Cannot create hsr debugfs directory [ 409.356244][T22605] team0: Port device team_slave_0 added [ 409.366954][T22605] team0: Port device team_slave_1 added [ 409.382074][T22587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.402451][T22587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.412148][T22605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.419183][T22605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.445146][T22605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.455983][T22587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.465300][T22587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.479901][T22605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.486921][T22605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.493309][ T3407] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 409.512960][T22605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.521309][ T3407] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 409.612947][T22605] hsr_slave_0: entered promiscuous mode [ 409.620133][T22605] hsr_slave_1: entered promiscuous mode [ 409.626219][T22605] debugfs: 'hsr0' already exists in 'hsr' [ 409.632280][T22605] Cannot create hsr debugfs directory [ 409.659803][T22587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.674161][T22587] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.699853][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.706997][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.733763][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.740876][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.780910][T22680] vhci_hcd: invalid port number 12 [ 409.805404][T22587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.815904][T22587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.838595][T22680] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6983'. [ 409.902461][T22587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.962673][T22690] netlink: 332 bytes leftover after parsing attributes in process `syz.9.6984'. [ 409.966775][T22602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 409.981265][T22602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 409.994163][T22602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 410.003566][T22605] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 410.012864][T22602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 410.023217][T22605] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 410.034685][T22605] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 410.045088][T22605] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 410.121187][T22602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.140552][T22602] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.151159][T22605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.161586][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.168702][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.181970][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.189312][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.206889][T22605] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.231285][T22587] veth0_vlan: entered promiscuous mode [ 410.233487][T12972] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 410.240145][T22587] veth1_vlan: entered promiscuous mode [ 410.250283][T12972] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 410.259181][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.267028][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.281193][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.288344][ T5330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.307540][T22587] veth0_macvtap: entered promiscuous mode [ 410.325152][T22587] veth1_macvtap: entered promiscuous mode [ 410.345319][T22587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.364495][T22587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.388279][T22602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.401757][ T5330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.426275][ T5330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.454375][ T5330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.475575][ T5330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.497562][T22605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.624663][T22747] loop4: detected capacity change from 0 to 512 [ 410.701148][T22747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.711906][T22602] veth0_vlan: entered promiscuous mode [ 410.721853][T22747] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.726392][T22605] veth0_vlan: entered promiscuous mode [ 410.735831][T22747] netlink: 47 bytes leftover after parsing attributes in process `syz.4.6987'. [ 410.753354][T22602] veth1_vlan: entered promiscuous mode [ 410.773270][T22605] veth1_vlan: entered promiscuous mode [ 410.783294][T22764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6989'. [ 410.803837][T22602] veth0_macvtap: entered promiscuous mode [ 410.829551][ C0] vcan0: j1939_session_tx_dat: 0xffff88811ac5d800: queue data error: -100 [ 410.838947][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 410.845420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.853282][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.857331][T22770] validate_nla: 1 callbacks suppressed [ 410.857351][T22770] netlink: 'syz.9.6991': attribute type 13 has an invalid length. [ 410.861159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.882513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.890410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.898249][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.906122][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.914045][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.921897][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.929720][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.937584][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.945501][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.953347][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.961166][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.968981][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.976807][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 410.984672][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 410.992601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.000485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.008310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.016132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.023969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.031841][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.039693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.047550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.055398][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.063217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.071035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.078876][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.086711][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.094636][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.102440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.110348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.118199][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.126028][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.133861][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.141699][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.149506][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.157352][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.165182][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.173007][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.180824][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.188679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.196482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.204335][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.212152][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.219997][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.227833][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.235654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.243475][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.251318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.259155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.266992][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.274835][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.282659][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 411.290481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 411.305212][T22602] veth1_macvtap: entered promiscuous mode [ 411.318514][T22602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.329517][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.333694][T22602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.368043][ T421] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.377193][T22605] veth0_macvtap: entered promiscuous mode [ 411.389191][ T421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.399693][ T421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.409699][ T421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.422464][T22605] veth1_macvtap: entered promiscuous mode [ 411.423622][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6994'. [ 411.451059][T22605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.472200][T22605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.489560][ T5330] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.510421][ T5330] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.511959][T22782] netlink: 'syz.9.6995': attribute type 2 has an invalid length. [ 411.546580][ T5336] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.558914][ T5336] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.581995][T22788] loop4: detected capacity change from 0 to 512 [ 411.588844][T22788] EXT4-fs: Ignoring removed bh option [ 411.594286][T22781] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6995'. [ 411.610456][T22790] netlink: 'syz.8.6962': attribute type 1 has an invalid length. [ 411.618306][T22790] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6962'. [ 411.647560][T22788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.699229][T22794] geneve0 speed is unknown, defaulting to 1000 [ 411.710634][T22788] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.826266][T22809] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7003'. [ 411.902259][T22809] netlink: 'syz.8.7003': attribute type 27 has an invalid length. [ 411.910141][T22809] netlink: 'syz.8.7003': attribute type 3 has an invalid length. [ 411.917938][T22809] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7003'. [ 411.944189][T22815] netlink: 'syz.5.7007': attribute type 13 has an invalid length. [ 411.950787][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.023576][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7008'. [ 412.043679][T22817] bridge_slave_1: left allmulticast mode [ 412.049483][T22817] bridge_slave_1: left promiscuous mode [ 412.055431][T22817] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.076036][T22817] bridge_slave_0: left allmulticast mode [ 412.081740][T22817] bridge_slave_0: left promiscuous mode [ 412.087565][T22817] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.184818][T22828] vhci_hcd: invalid port number 85 [ 412.190041][T22828] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 412.368405][T22848] netlink: 'syz.9.7019': attribute type 6 has an invalid length. [ 412.384736][T22848] hsr_slave_0: left promiscuous mode [ 412.390909][T22848] hsr_slave_1: left promiscuous mode [ 412.509569][T22851] FAULT_INJECTION: forcing a failure. [ 412.509569][T22851] name failslab, interval 1, probability 0, space 0, times 0 [ 412.522778][T22851] CPU: 0 UID: 0 PID: 22851 Comm: syz.9.7020 Not tainted syzkaller #0 PREEMPT(voluntary) [ 412.522819][T22851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.522832][T22851] Call Trace: [ 412.522837][T22851] [ 412.522844][T22851] __dump_stack+0x1d/0x30 [ 412.522864][T22851] dump_stack_lvl+0xe8/0x140 [ 412.522917][T22851] dump_stack+0x15/0x1b [ 412.522932][T22851] should_fail_ex+0x265/0x280 [ 412.522965][T22851] should_failslab+0x8c/0xb0 [ 412.523031][T22851] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 412.523058][T22851] ? __alloc_skb+0x101/0x320 [ 412.523090][T22851] __alloc_skb+0x101/0x320 [ 412.523119][T22851] netlink_alloc_large_skb+0xbf/0xf0 [ 412.523199][T22851] netlink_sendmsg+0x3cf/0x6b0 [ 412.523228][T22851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.523256][T22851] __sock_sendmsg+0x145/0x180 [ 412.523296][T22851] ____sys_sendmsg+0x31e/0x4e0 [ 412.523385][T22851] ___sys_sendmsg+0x17b/0x1d0 [ 412.523425][T22851] __x64_sys_sendmsg+0xd4/0x160 [ 412.523522][T22851] x64_sys_call+0x191e/0x3000 [ 412.523542][T22851] do_syscall_64+0xd2/0x200 [ 412.523564][T22851] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 412.523590][T22851] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 412.523681][T22851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.523708][T22851] RIP: 0033:0x7f43f5c8eec9 [ 412.523722][T22851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.523739][T22851] RSP: 002b:00007f43f46ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.523756][T22851] RAX: ffffffffffffffda RBX: 00007f43f5ee5fa0 RCX: 00007f43f5c8eec9 [ 412.523768][T22851] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 412.523792][T22851] RBP: 00007f43f46ef090 R08: 0000000000000000 R09: 0000000000000000 [ 412.523803][T22851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.523814][T22851] R13: 00007f43f5ee6038 R14: 00007f43f5ee5fa0 R15: 00007ffe1eb06078 [ 412.523832][T22851] [ 412.781570][T22858] vhci_hcd: invalid port number 85 [ 412.786778][T22858] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 413.055084][T22872] FAULT_INJECTION: forcing a failure. [ 413.055084][T22872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.068326][T22872] CPU: 0 UID: 0 PID: 22872 Comm: syz.4.7028 Not tainted syzkaller #0 PREEMPT(voluntary) [ 413.068361][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.068377][T22872] Call Trace: [ 413.068383][T22872] [ 413.068390][T22872] __dump_stack+0x1d/0x30 [ 413.068412][T22872] dump_stack_lvl+0xe8/0x140 [ 413.068456][T22872] dump_stack+0x15/0x1b [ 413.068474][T22872] should_fail_ex+0x265/0x280 [ 413.068519][T22872] should_fail+0xb/0x20 [ 413.068573][T22872] should_fail_usercopy+0x1a/0x20 [ 413.068602][T22872] _copy_to_user+0x20/0xa0 [ 413.068671][T22872] simple_read_from_buffer+0xb5/0x130 [ 413.068697][T22872] proc_fail_nth_read+0x10e/0x150 [ 413.068739][T22872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.068791][T22872] vfs_read+0x1a8/0x770 [ 413.068820][T22872] ? __rcu_read_unlock+0x4f/0x70 [ 413.068850][T22872] ? __fget_files+0x184/0x1c0 [ 413.068879][T22872] ksys_read+0xda/0x1a0 [ 413.068903][T22872] __x64_sys_read+0x40/0x50 [ 413.069001][T22872] x64_sys_call+0x27c0/0x3000 [ 413.069026][T22872] do_syscall_64+0xd2/0x200 [ 413.069094][T22872] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 413.069118][T22872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.069149][T22872] RIP: 0033:0x7f47d832d8dc [ 413.069168][T22872] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.069192][T22872] RSP: 002b:00007f47d6d97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.069266][T22872] RAX: ffffffffffffffda RBX: 00007f47d8585fa0 RCX: 00007f47d832d8dc [ 413.069283][T22872] RDX: 000000000000000f RSI: 00007f47d6d970a0 RDI: 000000000000000a [ 413.069299][T22872] RBP: 00007f47d6d97090 R08: 0000000000000000 R09: 0000000000000000 [ 413.069312][T22872] R10: 0000000000040001 R11: 0000000000000246 R12: 0000000000000001 [ 413.069325][T22872] R13: 00007f47d8586038 R14: 00007f47d8585fa0 R15: 00007ffc8bb85d98 [ 413.069349][T22872] [ 413.275390][T22875] ref_ctr_offset mismatch. inode: 0x3b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 413.354214][T22887] vhci_hcd: invalid port number 85 [ 413.359458][T22887] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 413.378364][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 413.378378][ T29] audit: type=1326 audit(1760485836.042:32007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.386604][T22889] netlink: 'syz.4.7035': attribute type 13 has an invalid length. [ 413.411419][ T29] audit: type=1326 audit(1760485836.084:32008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.439916][ T29] audit: type=1326 audit(1760485836.084:32009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.463616][ T29] audit: type=1326 audit(1760485836.084:32010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.487313][ T29] audit: type=1326 audit(1760485836.084:32011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.511090][ T29] audit: type=1326 audit(1760485836.084:32012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.534882][ T29] audit: type=1326 audit(1760485836.084:32013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.558722][ T29] audit: type=1326 audit(1760485836.084:32014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.582352][ T29] audit: type=1326 audit(1760485836.084:32015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.606061][ T29] audit: type=1326 audit(1760485836.084:32016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22886 comm="syz.3.7034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 413.695252][T22896] vhci_hcd: invalid port number 85 [ 413.700441][T22896] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 413.938928][T22908] hub 9-0:1.0: USB hub found [ 413.943815][T22908] hub 9-0:1.0: 8 ports detected [ 414.005494][T22913] geneve0 speed is unknown, defaulting to 1000 [ 414.188595][T22921] hub 9-0:1.0: USB hub found [ 414.193505][T22921] hub 9-0:1.0: 8 ports detected [ 414.751557][T22942] vhci_hcd: invalid port number 12 [ 414.777077][T22943] 9pnet: Could not find request transport: r [ 414.786363][T22942] __nla_validate_parse: 12 callbacks suppressed [ 414.786380][T22942] netlink: 288 bytes leftover after parsing attributes in process `syz.5.7053'. [ 414.807029][T22947] netlink: 'syz.9.7049': attribute type 6 has an invalid length. [ 414.832695][T22949] vhci_hcd: invalid port number 12 [ 414.857239][T22949] netlink: 288 bytes leftover after parsing attributes in process `syz.9.7055'. [ 414.878330][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7056'. [ 414.900023][T22952] vhci_hcd: invalid port number 85 [ 414.905220][T22952] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 415.140871][T22962] loop4: detected capacity change from 0 to 512 [ 415.152167][T22962] EXT4-fs: Ignoring removed bh option [ 415.184813][T22962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.206570][T22962] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 415.246199][T22967] netlink: 'syz.3.7061': attribute type 1 has an invalid length. [ 415.254018][T22967] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7061'. [ 415.276847][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.321048][T22971] loop4: detected capacity change from 0 to 1024 [ 415.333270][T22971] EXT4-fs: inline encryption not supported [ 415.339323][T22971] EXT4-fs: Ignoring removed nobh option [ 415.345268][T22971] EXT4-fs: Ignoring removed bh option [ 415.362618][T22971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.418340][T22971] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 415.428870][T22971] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 415.456658][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.500294][T22977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.528692][T22979] vhci_hcd: invalid port number 12 [ 415.551370][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7067'. [ 415.562561][T22979] netlink: 288 bytes leftover after parsing attributes in process `syz.3.7066'. [ 415.590257][T22977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.603278][T22981] vhci_hcd: invalid port number 85 [ 415.608544][T22981] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 415.670577][T22977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.688713][T22997] netlink: 'syz.8.7072': attribute type 3 has an invalid length. [ 415.744017][T22977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.754798][T23004] ref_ctr_offset mismatch. inode: 0xcf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 415.807556][ T1790] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.818993][ T1790] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.835363][ T1790] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.852532][ T1790] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.928070][T23007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23007 comm=syz.9.7076 [ 415.981599][T23011] vhci_hcd: invalid port number 12 [ 416.011925][T23011] netlink: 288 bytes leftover after parsing attributes in process `syz.9.7078'. [ 416.464338][T23019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7081'. [ 416.474841][T23019] vhci_hcd: invalid port number 85 [ 416.480008][T23019] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 416.525356][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7082'. [ 416.535330][T23022] vhci_hcd: invalid port number 85 [ 416.540482][T23022] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 416.714127][T23033] ref_ctr_offset mismatch. inode: 0x356 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 416.799762][ T10] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 416.828998][ T10] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 416.943590][T23040] 9p: Unknown access argument ¿: -22 [ 417.157448][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7100'. [ 417.179736][T23063] vhci_hcd: invalid port number 85 [ 417.184990][T23063] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 417.276887][T23071] netlink: 'syz.5.7102': attribute type 6 has an invalid length. [ 417.401508][T23081] sg_write: data in/out 209/42 bytes for SCSI command 0x0-- guessing data in; [ 417.401508][T23081] program syz.8.7105 not setting count and/or reply_len properly [ 417.492866][T23093] netlink: 'syz.8.7111': attribute type 1 has an invalid length. [ 417.507382][ T3420] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 417.515294][ T3420] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 417.624721][T23100] tmpfs: Bad value for 'mpol' [ 417.779031][T23118] vlan0: entered allmulticast mode [ 417.784350][T23118] dummy0: entered allmulticast mode [ 417.967969][T23129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 418.136397][T23139] netlink: 'syz.5.7129': attribute type 13 has an invalid length. [ 418.470986][T23148] tmpfs: Bad value for 'mpol' [ 418.485083][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 418.485102][ T29] audit: type=1400 audit(1760485841.385:32428): avc: denied { mounton } for pid=23147 comm="syz.4.7131" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 418.880204][ T29] audit: type=1326 audit(1760485841.815:32429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.8.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 418.906572][T23161] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 418.914334][T23161] audit: out of memory in audit_log_start [ 418.948606][ T29] audit: type=1326 audit(1760485841.847:32430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.8.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 418.972262][ T29] audit: type=1326 audit(1760485841.847:32431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.8.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 418.995875][ T29] audit: type=1326 audit(1760485841.847:32432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.8.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 419.019502][ T29] audit: type=1326 audit(1760485841.847:32433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.8.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 419.043097][ T29] audit: type=1326 audit(1760485841.847:32434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.8.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 419.066578][ T29] audit: type=1326 audit(1760485841.847:32435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23160 comm="syz.8.7136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 419.329674][T23172] netlink: 'syz.4.7140': attribute type 13 has an invalid length. [ 419.646302][T23187] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.706317][T23187] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.752412][T23195] __nla_validate_parse: 7 callbacks suppressed [ 419.752427][T23195] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7149'. [ 419.777777][T23195] netlink: 'syz.3.7149': attribute type 9 has an invalid length. [ 419.785640][T23195] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7149'. [ 419.796515][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7150'. [ 419.806828][T23187] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.849674][T23187] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.082956][ T1790] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.091466][ T1790] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.108824][ T1790] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.117489][ T1790] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.487444][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7156'. [ 420.497576][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7157'. [ 420.508138][T23214] vhci_hcd: invalid port number 85 [ 420.513330][T23214] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 420.520697][T23212] vhci_hcd: invalid port number 85 [ 420.525876][T23212] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 420.720183][T23221] netlink: 'syz.8.7160': attribute type 1 has an invalid length. [ 420.728014][T23221] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7160'. [ 420.791772][T23229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7163'. [ 421.012604][T23241] netlink: 'syz.5.7166': attribute type 13 has an invalid length. [ 421.103190][T23244] hub 9-0:1.0: USB hub found [ 421.108200][T23244] hub 9-0:1.0: 8 ports detected [ 421.492146][T23256] netlink: 'syz.3.7173': attribute type 1 has an invalid length. [ 421.499991][T23256] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7173'. [ 421.557184][T23264] ref_ctr_offset mismatch. inode: 0xc8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 421.575396][T23266] netlink: 'syz.3.7177': attribute type 13 has an invalid length. [ 421.669507][T23277] netlink: 'syz.8.7182': attribute type 3 has an invalid length. [ 421.682341][T23275] netlink: 332 bytes leftover after parsing attributes in process `syz.5.7181'. [ 421.691672][T23275] netlink: 'syz.5.7181': attribute type 9 has an invalid length. [ 421.699520][T23275] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7181'. [ 421.733673][T23281] ref_ctr_offset mismatch. inode: 0xff offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 421.747176][ T3420] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 421.755616][ T3420] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.938114][T23294] ref_ctr_offset mismatch. inode: 0x105 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 421.988220][T23300] tmpfs: Bad value for 'mpol' [ 422.257783][T23329] hub 9-0:1.0: USB hub found [ 422.262657][T23329] hub 9-0:1.0: 8 ports detected [ 422.307494][T23334] netlink: 'syz.8.7207': attribute type 1 has an invalid length. [ 422.364172][T23336] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 422.375524][T23338] netlink: 'syz.8.7209': attribute type 6 has an invalid length. [ 422.566414][T23346] netlink: 'syz.4.7212': attribute type 1 has an invalid length. [ 422.647921][T23350] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.687298][T23350] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.735830][T23350] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.782833][T23350] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.833104][T20823] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 422.842054][T20823] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 423.065112][T23362] netlink: 'syz.5.7218': attribute type 9 has an invalid length. [ 423.383709][T20823] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 423.406380][T20823] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 423.874369][T23415] ref_ctr_offset mismatch. inode: 0x163 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 424.060994][T20823] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 424.069395][T20823] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.136365][T23426] hub 9-0:1.0: USB hub found [ 424.141284][T23426] hub 9-0:1.0: 8 ports detected [ 425.074171][ T421] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.089931][ T421] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.099891][ T421] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.108173][ T421] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.167629][T23442] __nla_validate_parse: 16 callbacks suppressed [ 425.167648][T23442] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7252'. [ 425.212254][T23447] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7254'. [ 425.224466][T23447] vhci_hcd: invalid port number 85 [ 425.229713][T23447] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 425.366335][T23454] hub 9-0:1.0: USB hub found [ 425.371053][T23454] hub 9-0:1.0: 8 ports detected [ 425.389936][ T3420] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 425.397777][ T3420] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 425.532635][T23467] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7262'. [ 425.541947][T23467] validate_nla: 6 callbacks suppressed [ 425.542043][T23467] netlink: 'syz.4.7262': attribute type 9 has an invalid length. [ 425.555426][T23467] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7262'. [ 425.564498][T23467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7262'. [ 425.690142][T23485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7270'. [ 425.700264][T23485] vhci_hcd: invalid port number 85 [ 425.705600][T23485] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 425.759618][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 425.759639][ T29] audit: type=1326 audit(1760485849.038:32538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.789592][ T29] audit: type=1326 audit(1760485849.038:32539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.813276][ T29] audit: type=1326 audit(1760485849.038:32540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.837225][ T29] audit: type=1326 audit(1760485849.038:32541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.861141][ T29] audit: type=1326 audit(1760485849.038:32542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.885450][ T29] audit: type=1326 audit(1760485849.038:32543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.909150][ T29] audit: type=1326 audit(1760485849.038:32544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.932920][ T29] audit: type=1326 audit(1760485849.038:32545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.956602][ T29] audit: type=1326 audit(1760485849.038:32546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 425.980519][ T29] audit: type=1326 audit(1760485849.038:32547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23484 comm="syz.3.7270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 426.026602][T23490] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.099406][T23490] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.110573][T23507] FAULT_INJECTION: forcing a failure. [ 426.110573][T23507] name failslab, interval 1, probability 0, space 0, times 0 [ 426.123387][T23507] CPU: 1 UID: 0 PID: 23507 Comm: syz.4.7279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 426.123415][T23507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 426.123430][T23507] Call Trace: [ 426.123439][T23507] [ 426.123448][T23507] __dump_stack+0x1d/0x30 [ 426.123476][T23507] dump_stack_lvl+0xe8/0x140 [ 426.123503][T23507] dump_stack+0x15/0x1b [ 426.123521][T23507] should_fail_ex+0x265/0x280 [ 426.123601][T23507] should_failslab+0x8c/0xb0 [ 426.123628][T23507] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 426.123664][T23507] ? __alloc_skb+0x101/0x320 [ 426.123698][T23507] __alloc_skb+0x101/0x320 [ 426.123779][T23507] netlink_alloc_large_skb+0xbf/0xf0 [ 426.123858][T23507] netlink_sendmsg+0x3cf/0x6b0 [ 426.123899][T23507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.123939][T23507] __sock_sendmsg+0x145/0x180 [ 426.123963][T23507] ____sys_sendmsg+0x31e/0x4e0 [ 426.124059][T23507] ___sys_sendmsg+0x17b/0x1d0 [ 426.124108][T23507] __x64_sys_sendmsg+0xd4/0x160 [ 426.124201][T23507] x64_sys_call+0x191e/0x3000 [ 426.124226][T23507] do_syscall_64+0xd2/0x200 [ 426.124310][T23507] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 426.124348][T23507] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 426.124383][T23507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.124412][T23507] RIP: 0033:0x7f47d832eec9 [ 426.124459][T23507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.124483][T23507] RSP: 002b:00007f47d6d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.124506][T23507] RAX: ffffffffffffffda RBX: 00007f47d8585fa0 RCX: 00007f47d832eec9 [ 426.124519][T23507] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 426.124531][T23507] RBP: 00007f47d6d97090 R08: 0000000000000000 R09: 0000000000000000 [ 426.124593][T23507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.124610][T23507] R13: 00007f47d8586038 R14: 00007f47d8585fa0 R15: 00007ffc8bb85d98 [ 426.124636][T23507] [ 426.268194][T23511] netlink: 'syz.9.7280': attribute type 13 has an invalid length. [ 426.342342][T23514] ref_ctr_offset mismatch. inode: 0xb9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 426.365706][T23490] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.413597][T23490] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.434362][T23518] loop4: detected capacity change from 0 to 512 [ 426.449453][T23518] EXT4-fs (loop4): too many log groups per flexible block group [ 426.457270][T23518] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 426.464216][T23518] EXT4-fs (loop4): mount failed [ 426.476501][ T5330] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.495761][ T5330] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.504299][ T5330] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.512819][ T5330] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.548910][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7284'. [ 426.610859][T23528] vhci_hcd: invalid port number 12 [ 426.625022][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7287'. [ 426.644541][T23528] netlink: 288 bytes leftover after parsing attributes in process `syz.3.7286'. [ 426.712896][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7291'. [ 426.723087][T23541] vhci_hcd: invalid port number 85 [ 426.728324][T23541] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 426.826533][T23547] ref_ctr_offset mismatch. inode: 0xee offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 426.910536][T23548] loop4: detected capacity change from 0 to 512 [ 426.925786][T23548] EXT4-fs (loop4): too many log groups per flexible block group [ 426.933710][T23548] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 426.940643][T23548] EXT4-fs (loop4): mount failed [ 427.196356][T23559] vhci_hcd: invalid port number 12 [ 427.646838][T23565] hub 9-0:1.0: USB hub found [ 427.651610][T23565] hub 9-0:1.0: 8 ports detected [ 428.026844][T23576] loop4: detected capacity change from 0 to 512 [ 428.033541][T23576] EXT4-fs: Ignoring removed bh option [ 428.050850][T23576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.064812][T23576] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.091428][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.108667][T23582] netlink: 'syz.4.7305': attribute type 13 has an invalid length. [ 428.226220][T23591] netlink: 'syz.9.7309': attribute type 3 has an invalid length. [ 428.265963][T23595] vhci_hcd: invalid port number 85 [ 428.271289][T23595] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 428.321499][T23600] netlink: 'syz.9.7313': attribute type 1 has an invalid length. [ 428.534143][T23613] netlink: 'syz.3.7318': attribute type 1 has an invalid length. [ 428.563315][T20823] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 428.578389][T20823] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.844337][T23628] netlink: 'syz.3.7324': attribute type 1 has an invalid length. [ 429.082847][T23640] netlink: 'syz.8.7328': attribute type 9 has an invalid length. [ 429.121706][T23644] loop4: detected capacity change from 0 to 512 [ 429.146917][T23644] EXT4-fs: Ignoring removed bh option [ 429.176021][T23644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.213004][T23644] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.249214][T23642] team0: left allmulticast mode [ 429.256623][T23642] bridge0: port 1(team0) entered disabled state [ 429.304511][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.561440][T23642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 429.646495][T23654] loop4: detected capacity change from 0 to 512 [ 429.667890][T23656] netlink: 'syz.5.7334': attribute type 3 has an invalid length. [ 429.693615][T23658] netlink: 'syz.8.7335': attribute type 3 has an invalid length. [ 429.708289][T23654] EXT4-fs: Ignoring removed bh option [ 429.745779][T23654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.778502][T23660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.804455][T23654] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.857433][T23660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.894508][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.934060][T23660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.997009][T23676] __nla_validate_parse: 10 callbacks suppressed [ 429.997023][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7341'. [ 430.019585][T23660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.110603][ T5336] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.134060][ T5336] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.173422][ T5336] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.187558][ T5336] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.742878][T23685] hub 9-0:1.0: USB hub found [ 430.747710][T23685] hub 9-0:1.0: 8 ports detected [ 430.910997][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7343'. [ 431.103832][T23693] validate_nla: 1 callbacks suppressed [ 431.103850][T23693] netlink: 'syz.4.7345': attribute type 6 has an invalid length. [ 431.229348][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7343'. [ 431.320885][T23704] loop4: detected capacity change from 0 to 512 [ 431.335867][T23704] EXT4-fs: Ignoring removed bh option [ 431.352008][T23704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.384576][T23704] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.396894][T23711] netlink: 'syz.8.7352': attribute type 6 has an invalid length. [ 431.481332][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.511345][T23716] netlink: 'syz.4.7354': attribute type 1 has an invalid length. [ 431.519234][T23716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7354'. [ 431.574979][T23720] loop4: detected capacity change from 0 to 1024 [ 431.582080][T23720] EXT4-fs: inline encryption not supported [ 431.588631][T23720] EXT4-fs: Ignoring removed nobh option [ 431.594261][T23720] EXT4-fs: Ignoring removed bh option [ 431.618683][T23720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.655997][T23720] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 431.903524][T23720] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 431.932909][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7359'. [ 431.984173][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.100429][T23739] loop4: detected capacity change from 0 to 512 [ 432.116812][T23739] EXT4-fs: Ignoring removed bh option [ 432.193417][T23739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.226130][T23739] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.305898][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7368'. [ 432.310564][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.345437][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 432.345454][ T29] audit: type=1326 audit(1760485855.946:32625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.375259][ T29] audit: type=1326 audit(1760485855.946:32626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.398953][ T29] audit: type=1326 audit(1760485855.946:32627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.422663][ T29] audit: type=1326 audit(1760485855.946:32628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.446261][ T29] audit: type=1326 audit(1760485855.946:32629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.469929][ T29] audit: type=1326 audit(1760485855.946:32630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.506545][ T29] audit: type=1326 audit(1760485856.019:32631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.530280][ T29] audit: type=1326 audit(1760485856.019:32632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.553988][ T29] audit: type=1326 audit(1760485856.040:32633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.577649][ T29] audit: type=1326 audit(1760485856.040:32634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23750 comm="syz.4.7367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d832eec9 code=0x7ffc0000 [ 432.612754][T23751] loop4: detected capacity change from 0 to 512 [ 432.614704][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7369'. [ 432.641864][T23751] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 432.663788][T23753] vhci_hcd: invalid port number 85 [ 432.669017][T23753] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 432.688323][T23751] EXT4-fs (loop4): mount failed [ 432.714066][T23765] ref_ctr_offset mismatch. inode: 0x4a4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 432.956752][T23777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7377'. [ 433.039296][T23785] 9pnet_fd: Insufficient options for proto=fd [ 433.066778][T23788] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.099546][T23790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7383'. [ 433.128051][T23788] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.182447][T23788] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.199701][T23793] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7384'. [ 433.232947][T23788] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.249733][T23796] netlink: 'syz.4.7385': attribute type 1 has an invalid length. [ 433.292976][T23798] loop4: detected capacity change from 0 to 1024 [ 433.299744][T23798] EXT4-fs: inline encryption not supported [ 433.305666][T23798] EXT4-fs: Ignoring removed nobh option [ 433.311313][T23798] EXT4-fs: Ignoring removed bh option [ 433.328455][T23798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.348144][T23798] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 433.361537][T23798] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 433.382179][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.435419][T23802] FAULT_INJECTION: forcing a failure. [ 433.435419][T23802] name failslab, interval 1, probability 0, space 0, times 0 [ 433.448102][T23802] CPU: 1 UID: 0 PID: 23802 Comm: syz.5.7388 Not tainted syzkaller #0 PREEMPT(voluntary) [ 433.448195][T23802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 433.448213][T23802] Call Trace: [ 433.448221][T23802] [ 433.448230][T23802] __dump_stack+0x1d/0x30 [ 433.448251][T23802] dump_stack_lvl+0xe8/0x140 [ 433.448271][T23802] dump_stack+0x15/0x1b [ 433.448291][T23802] should_fail_ex+0x265/0x280 [ 433.448407][T23802] should_failslab+0x8c/0xb0 [ 433.448482][T23802] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 433.448522][T23802] ? __alloc_skb+0x101/0x320 [ 433.448566][T23802] __alloc_skb+0x101/0x320 [ 433.448596][T23802] ? audit_log_start+0x342/0x720 [ 433.448630][T23802] audit_log_start+0x3a0/0x720 [ 433.448722][T23802] ? kstrtouint+0x76/0xc0 [ 433.448765][T23802] audit_seccomp+0x48/0x100 [ 433.448805][T23802] ? __seccomp_filter+0x82d/0x1250 [ 433.448832][T23802] __seccomp_filter+0x83e/0x1250 [ 433.448896][T23802] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 433.448934][T23802] ? vfs_write+0x7e8/0x960 [ 433.449028][T23802] __secure_computing+0x82/0x150 [ 433.449062][T23802] syscall_trace_enter+0xcf/0x1e0 [ 433.449099][T23802] do_syscall_64+0xac/0x200 [ 433.449175][T23802] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 433.449218][T23802] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 433.449247][T23802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.449346][T23802] RIP: 0033:0x7ff09f17eec9 [ 433.449365][T23802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.449388][T23802] RSP: 002b:00007ff09dbdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 433.449504][T23802] RAX: ffffffffffffffda RBX: 00007ff09f3d5fa0 RCX: 00007ff09f17eec9 [ 433.449517][T23802] RDX: 000000000000004e RSI: 00002000000002c0 RDI: 0000000000000005 [ 433.449582][T23802] RBP: 00007ff09dbdf090 R08: 0000000000000000 R09: 0000000000000000 [ 433.449601][T23802] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 433.449617][T23802] R13: 00007ff09f3d6038 R14: 00007ff09f3d5fa0 R15: 00007ffe5c2a5f68 [ 433.449643][T23802] [ 433.762599][T23813] vhci_hcd: invalid port number 12 [ 433.817959][T23815] netlink: 'syz.5.7393': attribute type 3 has an invalid length. [ 433.855407][T23817] bridge2: entered allmulticast mode [ 433.867334][T23817] team0: Port device bridge2 added [ 434.075450][T23832] xt_policy: neither incoming nor outgoing policy selected [ 434.949071][T23858] hub 9-0:1.0: USB hub found [ 434.953806][T23858] hub 9-0:1.0: 8 ports detected [ 435.077191][T23862] loop4: detected capacity change from 0 to 512 [ 435.086322][T23862] EXT4-fs: Ignoring removed bh option [ 435.142038][T23862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.199329][T23862] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.289191][T23869] netlink: 'syz.5.7413': attribute type 1 has an invalid length. [ 435.297126][T23869] __nla_validate_parse: 5 callbacks suppressed [ 435.297157][T23869] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7413'. [ 435.314776][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.343866][T23873] netlink: 'syz.5.7415': attribute type 13 has an invalid length. [ 435.352989][T23875] vhci_hcd: invalid port number 12 [ 435.392296][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7418'. [ 435.407271][ T1790] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.420107][ T266] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.432578][ T266] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.446016][ T266] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.500756][T23884] netlink: 'syz.5.7420': attribute type 6 has an invalid length. [ 435.566379][T23892] FAULT_INJECTION: forcing a failure. [ 435.566379][T23892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.579642][T23892] CPU: 1 UID: 0 PID: 23892 Comm: syz.8.7424 Not tainted syzkaller #0 PREEMPT(voluntary) [ 435.579689][T23892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.579706][T23892] Call Trace: [ 435.579716][T23892] [ 435.579726][T23892] __dump_stack+0x1d/0x30 [ 435.579832][T23892] dump_stack_lvl+0xe8/0x140 [ 435.579859][T23892] dump_stack+0x15/0x1b [ 435.579880][T23892] should_fail_ex+0x265/0x280 [ 435.579915][T23892] should_fail+0xb/0x20 [ 435.580064][T23892] should_fail_usercopy+0x1a/0x20 [ 435.580094][T23892] strncpy_from_user+0x25/0x230 [ 435.580132][T23892] ? kmem_cache_alloc_noprof+0x242/0x480 [ 435.580200][T23892] ? getname_flags+0x80/0x3b0 [ 435.580241][T23892] getname_flags+0xae/0x3b0 [ 435.580280][T23892] __x64_sys_renameat2+0x5f/0x90 [ 435.580320][T23892] x64_sys_call+0x3f9/0x3000 [ 435.580410][T23892] do_syscall_64+0xd2/0x200 [ 435.580444][T23892] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 435.580483][T23892] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 435.580537][T23892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.580579][T23892] RIP: 0033:0x7fd38d4feec9 [ 435.580600][T23892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.580624][T23892] RSP: 002b:00007fd38bf5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 435.580656][T23892] RAX: ffffffffffffffda RBX: 00007fd38d755fa0 RCX: 00007fd38d4feec9 [ 435.580674][T23892] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 435.580692][T23892] RBP: 00007fd38bf5f090 R08: 0000000000000000 R09: 0000000000000000 [ 435.580709][T23892] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 435.580760][T23892] R13: 00007fd38d756038 R14: 00007fd38d755fa0 R15: 00007ffecddab8b8 [ 435.580786][T23892] [ 435.826188][T23909] netlink: 'syz.8.7431': attribute type 6 has an invalid length. [ 435.875537][T23917] vhci_hcd: invalid port number 12 [ 435.901100][T23921] netlink: 'syz.8.7436': attribute type 1 has an invalid length. [ 435.908928][T23921] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7436'. [ 435.946177][T23929] netlink: 'syz.3.7440': attribute type 13 has an invalid length. [ 435.988079][T23935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7442'. [ 436.083327][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7447'. [ 436.291528][T23950] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7447'. [ 436.581462][T23954] netlink: 'syz.4.7450': attribute type 1 has an invalid length. [ 436.589321][T23954] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7450'. [ 436.715874][T23960] netlink: 'syz.4.7453': attribute type 13 has an invalid length. [ 436.815670][T23970] netlink: 'syz.5.7458': attribute type 3 has an invalid length. [ 436.929750][T23978] netlink: 'syz.8.7461': attribute type 6 has an invalid length. [ 437.024790][T23981] netlink: 'syz.8.7462': attribute type 1 has an invalid length. [ 437.032649][T23981] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7462'. [ 437.101943][T23986] netlink: 'syz.3.7465': attribute type 13 has an invalid length. [ 437.124129][T23987] hub 9-0:1.0: USB hub found [ 437.128988][T23987] hub 9-0:1.0: 8 ports detected [ 437.254352][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 437.254370][ T29] audit: type=1400 audit(1760485861.111:32734): avc: denied { read } for pid=23989 comm="syz.3.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 437.616017][T24005] loop4: detected capacity change from 0 to 512 [ 437.618097][T24006] netlink: 'syz.8.7472': attribute type 6 has an invalid length. [ 437.630670][T24005] EXT4-fs: Ignoring removed bh option [ 437.659309][T24014] netlink: 'syz.8.7476': attribute type 13 has an invalid length. [ 437.663436][T24005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.684636][T24015] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7475'. [ 437.698497][T24005] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.789727][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.802715][T24024] netlink: 332 bytes leftover after parsing attributes in process `syz.9.7480'. [ 437.849388][T24033] ref_ctr_offset mismatch. inode: 0x1d2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 437.885620][ T29] audit: type=1326 audit(1760485861.772:32735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24039 comm="syz.8.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 437.913009][T24041] loop4: detected capacity change from 0 to 512 [ 437.920192][ T29] audit: type=1326 audit(1760485861.772:32736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24039 comm="syz.8.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 437.943891][ T29] audit: type=1326 audit(1760485861.772:32737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24039 comm="syz.8.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 437.967506][ T29] audit: type=1326 audit(1760485861.772:32738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24039 comm="syz.8.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 437.991691][ T29] audit: type=1326 audit(1760485861.772:32739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24039 comm="syz.8.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 438.015420][ T29] audit: type=1326 audit(1760485861.772:32740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24039 comm="syz.8.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 438.023178][T24041] EXT4-fs (loop4): too many log groups per flexible block group [ 438.039388][ T29] audit: type=1326 audit(1760485861.772:32741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24039 comm="syz.8.7488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38d4feec9 code=0x7ffc0000 [ 438.048605][T24041] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 438.078385][T24041] EXT4-fs (loop4): mount failed [ 438.156868][T24063] loop4: detected capacity change from 0 to 512 [ 438.163671][T24063] EXT4-fs: Ignoring removed bh option [ 438.191327][T24063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.204343][T24063] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.277645][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.296299][T24074] hub 9-0:1.0: USB hub found [ 438.301105][T24074] hub 9-0:1.0: 8 ports detected [ 438.326248][T24073] 9pnet_fd: Insufficient options for proto=fd [ 438.438272][T24079] vhci_hcd: invalid port number 85 [ 438.443554][T24079] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 438.699490][T24094] loop4: detected capacity change from 0 to 512 [ 438.706078][T24094] EXT4-fs: Ignoring removed bh option [ 438.729336][T24094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.742217][T24094] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.765056][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.905175][T24115] ref_ctr_offset mismatch. inode: 0x262 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 438.924619][T24120] vhci_hcd: invalid port number 85 [ 438.929846][T24120] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 438.972385][ T29] audit: type=1326 audit(1760485862.906:32742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.5.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09f17eec9 code=0x7ffc0000 [ 438.996122][ T29] audit: type=1326 audit(1760485862.906:32743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.5.7517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff09f17eec9 code=0x7ffc0000 [ 439.027210][T24125] loop4: detected capacity change from 0 to 1024 [ 439.057852][T24125] EXT4-fs: inline encryption not supported [ 439.065560][T24125] EXT4-fs: Ignoring removed nobh option [ 439.071390][T24125] EXT4-fs: Ignoring removed bh option [ 439.088853][T24130] vhci_hcd: invalid port number 85 [ 439.094109][T24130] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 439.102849][T24125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.122419][T24125] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 439.138464][T24125] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 439.165670][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.256277][T24151] 9pnet_fd: Insufficient options for proto=fd [ 439.350955][T24164] vhci_hcd: invalid port number 85 [ 439.356194][T24164] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 439.389413][T24176] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.443289][T24176] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.467392][T24185] loop4: detected capacity change from 0 to 1024 [ 439.475053][T24185] EXT4-fs: inline encryption not supported [ 439.481593][T24185] EXT4-fs: Ignoring removed nobh option [ 439.487277][T24185] EXT4-fs: Ignoring removed bh option [ 439.494507][T24176] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.508896][T24185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.528240][T24185] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 439.538130][T24185] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 439.548246][T24176] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.556963][T24192] 9pnet_fd: Insufficient options for proto=fd [ 439.574408][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.601216][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.619483][T24198] loop4: detected capacity change from 0 to 256 [ 439.626597][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.639271][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.648131][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.739018][T24213] vhci_hcd: invalid port number 85 [ 439.744188][T24213] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 439.756789][T24215] loop4: detected capacity change from 0 to 512 [ 439.763448][T24215] EXT4-fs: Ignoring removed bh option [ 439.786059][T24215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.799299][T24215] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.830698][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.902671][T24246] validate_nla: 16 callbacks suppressed [ 440.902690][T24246] netlink: 'syz.5.7572': attribute type 13 has an invalid length. [ 440.941874][T24248] __nla_validate_parse: 32 callbacks suppressed [ 440.941925][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7573'. [ 441.028822][T24248] vhci_hcd: invalid port number 85 [ 441.034046][T24248] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 441.141046][T24259] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7578'. [ 441.160475][T24259] netlink: 'syz.3.7578': attribute type 9 has an invalid length. [ 441.168336][T24259] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7578'. [ 441.177503][T24259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7578'. [ 441.193951][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7580'. [ 441.206050][T24263] vhci_hcd: invalid port number 85 [ 441.211186][T24263] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 441.226313][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7581'. [ 441.238587][T24266] vhci_hcd: invalid port number 85 [ 441.243751][T24266] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 441.342367][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7583'. [ 441.427677][T24276] netlink: 'syz.5.7585': attribute type 13 has an invalid length. [ 441.478658][T24281] netlink: 'syz.5.7587': attribute type 3 has an invalid length. [ 441.549157][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7583'. [ 442.327769][T24296] vhci_hcd: invalid port number 12 [ 442.355357][T24298] netlink: 332 bytes leftover after parsing attributes in process `syz.8.7593'. [ 442.391776][T24298] netlink: 'syz.8.7593': attribute type 9 has an invalid length. [ 442.399672][T24298] netlink: 108 bytes leftover after parsing attributes in process `syz.8.7593'. [ 442.411811][T24302] vhci_hcd: invalid port number 85 [ 442.417041][T24302] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 442.589476][T24307] netlink: 'syz.3.7597': attribute type 13 has an invalid length. [ 442.666743][T24309] netlink: 'syz.3.7598': attribute type 9 has an invalid length. [ 442.674752][T24313] vhci_hcd: invalid port number 85 [ 442.679936][T24313] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 442.693221][T24316] vhci_hcd: invalid port number 12 [ 442.862939][T24328] netlink: 'syz.9.7606': attribute type 3 has an invalid length. [ 442.892964][T24332] netlink: 'syz.9.7608': attribute type 13 has an invalid length. [ 442.947189][T24341] netlink: 'syz.9.7611': attribute type 9 has an invalid length. [ 443.043993][T24346] vhci_hcd: invalid port number 85 [ 443.049532][T24346] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 443.188788][T24356] loop4: detected capacity change from 0 to 256 [ 443.259351][T24360] loop4: detected capacity change from 0 to 256 [ 443.428956][T24379] vhci_hcd: invalid port number 85 [ 443.434306][T24379] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 443.473258][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 443.473277][ T29] audit: type=1326 audit(1760485867.641:32958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.504714][ T29] audit: type=1326 audit(1760485867.641:32959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.528684][ T29] audit: type=1326 audit(1760485867.641:32960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.552326][ T29] audit: type=1326 audit(1760485867.641:32961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.576019][ T29] audit: type=1326 audit(1760485867.641:32962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.599600][ T29] audit: type=1326 audit(1760485867.641:32963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.623209][ T29] audit: type=1326 audit(1760485867.672:32964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.662098][ T29] audit: type=1326 audit(1760485867.672:32965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.685878][ T29] audit: type=1326 audit(1760485867.672:32966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.709496][ T29] audit: type=1326 audit(1760485867.672:32967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24384 comm="syz.3.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a1e6eec9 code=0x7ffc0000 [ 443.932635][T24424] vhci_hcd: invalid port number 12 [ 443.975665][T24430] vhci_hcd: invalid port number 85 [ 443.980871][T24430] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 444.160879][T24438] block device autoloading is deprecated and will be removed. [ 444.176033][T24438] FAULT_INJECTION: forcing a failure. [ 444.176033][T24438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.189234][T24438] CPU: 0 UID: 0 PID: 24438 Comm: syz.4.7653 Not tainted syzkaller #0 PREEMPT(voluntary) [ 444.189272][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.189289][T24438] Call Trace: [ 444.189297][T24438] [ 444.189356][T24438] __dump_stack+0x1d/0x30 [ 444.189383][T24438] dump_stack_lvl+0xe8/0x140 [ 444.189488][T24438] dump_stack+0x15/0x1b [ 444.189614][T24438] should_fail_ex+0x265/0x280 [ 444.189706][T24438] should_fail+0xb/0x20 [ 444.189764][T24438] should_fail_usercopy+0x1a/0x20 [ 444.189786][T24438] _copy_to_user+0x20/0xa0 [ 444.189840][T24438] simple_read_from_buffer+0xb5/0x130 [ 444.189870][T24438] proc_fail_nth_read+0x10e/0x150 [ 444.189910][T24438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.189949][T24438] vfs_read+0x1a8/0x770 [ 444.190040][T24438] ? __rcu_read_unlock+0x4f/0x70 [ 444.190074][T24438] ? __fget_files+0x184/0x1c0 [ 444.190123][T24438] ksys_read+0xda/0x1a0 [ 444.190147][T24438] __x64_sys_read+0x40/0x50 [ 444.190177][T24438] x64_sys_call+0x27c0/0x3000 [ 444.190208][T24438] do_syscall_64+0xd2/0x200 [ 444.190232][T24438] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 444.190298][T24438] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 444.190325][T24438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.190366][T24438] RIP: 0033:0x7f47d832d8dc [ 444.190383][T24438] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 444.190412][T24438] RSP: 002b:00007f47d6d97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.190433][T24438] RAX: ffffffffffffffda RBX: 00007f47d8585fa0 RCX: 00007f47d832d8dc [ 444.190524][T24438] RDX: 000000000000000f RSI: 00007f47d6d970a0 RDI: 0000000000000007 [ 444.190541][T24438] RBP: 00007f47d6d97090 R08: 0000000000000000 R09: 0000000000000000 [ 444.190558][T24438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.190591][T24438] R13: 00007f47d8586038 R14: 00007f47d8585fa0 R15: 00007ffc8bb85d98 [ 444.190626][T24438] [ 444.421798][T24444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 444.456072][T24446] loop4: detected capacity change from 0 to 512 [ 444.473309][T24446] EXT4-fs (loop4): too many log groups per flexible block group [ 444.481229][T24446] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 444.488123][T24446] EXT4-fs (loop4): mount failed [ 444.537105][T24459] loop4: detected capacity change from 0 to 512 [ 444.543952][T24459] EXT4-fs: Ignoring removed bh option [ 444.602820][T24459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.619485][T24459] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.869759][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.863773][T24484] loop8: detected capacity change from 0 to 512 [ 445.874630][T24485] loop4: detected capacity change from 0 to 512 [ 445.882607][T24485] EXT4-fs: Ignoring removed bh option [ 445.892469][T24485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.905466][T24485] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.926990][T24484] EXT4-fs (loop8): too many log groups per flexible block group [ 445.934888][T24484] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 445.943255][T24494] vhci_hcd: invalid port number 12 [ 445.948501][T24484] EXT4-fs (loop8): mount failed [ 445.948605][T24494] ================================================================== [ 445.948636][T24494] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 445.948680][T24494] [ 445.948688][T24494] write to 0xffffffff86887c78 of 8 bytes by task 24484 on cpu 1: [ 445.948710][T24494] data_alloc+0x274/0x2e0 [ 445.948746][T24494] prb_reserve+0x807/0xaf0 [ 445.948762][T24494] vprintk_store+0x56d/0x860 [ 445.948790][T24494] vprintk_emit+0x10d/0x580 [ 445.948816][T24494] vprintk_default+0x26/0x30 [ 445.948843][T24494] vprintk+0x1d/0x30 [ 445.948877][T24494] _printk+0x79/0xa0 [ 445.948907][T24494] __ext4_msg+0x18f/0x1a0 [ 445.948926][T24494] ext4_fill_super+0x2b4c/0x3810 [ 445.948945][T24494] get_tree_bdev_flags+0x291/0x300 [ 445.948973][T24494] get_tree_bdev+0x1f/0x30 [ 445.949000][T24494] ext4_get_tree+0x1c/0x30 [ 445.949021][T24494] vfs_get_tree+0x57/0x1d0 [ 445.949048][T24494] do_new_mount+0x24d/0x660 [ 445.949076][T24494] path_mount+0x4a5/0xb70 [ 445.949101][T24494] __se_sys_mount+0x28c/0x2e0 [ 445.949125][T24494] __x64_sys_mount+0x67/0x80 [ 445.949146][T24494] x64_sys_call+0x2b51/0x3000 [ 445.949167][T24494] do_syscall_64+0xd2/0x200 [ 445.949192][T24494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.949220][T24494] [ 445.949228][T24494] read to 0xffffffff86887c78 of 16 bytes by task 24494 on cpu 0: [ 445.949250][T24494] _prb_read_valid+0x1bc/0x920 [ 445.949274][T24494] prb_read_valid+0x3c/0x60 [ 445.949295][T24494] printk_get_next_message+0xc8/0x510 [ 445.949319][T24494] console_flush_all+0x290/0x6a0 [ 445.949343][T24494] console_unlock+0xa1/0x2e0 [ 445.949368][T24494] vprintk_emit+0x3b5/0x580 [ 445.949394][T24494] vprintk_default+0x26/0x30 [ 445.949417][T24494] vprintk+0x1d/0x30 [ 445.949445][T24494] _printk+0x79/0xa0 [ 445.949475][T24494] vhci_hub_control+0x64b/0xe80 [ 445.949511][T24494] usb_hcd_submit_urb+0xc0f/0x1200 [ 445.949536][T24494] usb_submit_urb+0xace/0xc20 [ 445.949562][T24494] usbfs_start_wait_urb+0x95/0x1c0 [ 445.949592][T24494] do_proc_control+0x628/0x8b0 [ 445.949620][T24494] proc_control+0x71/0xa0 [ 445.949642][T24494] usbdev_ioctl+0x93c/0x1700 [ 445.949665][T24494] __se_sys_ioctl+0xce/0x140 [ 445.949682][T24494] __x64_sys_ioctl+0x43/0x50 [ 445.949699][T24494] x64_sys_call+0x1816/0x3000 [ 445.949721][T24494] do_syscall_64+0xd2/0x200 [ 445.949745][T24494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.949773][T24494] [ 445.949777][T24494] Reported by Kernel Concurrency Sanitizer on: [ 445.949790][T24494] CPU: 0 UID: 0 PID: 24494 Comm: syz.5.7672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 445.949817][T24494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.949831][T24494] ================================================================== [ 446.033821][T24496] validate_nla: 9 callbacks suppressed [ 446.033843][T24496] netlink: 'syz.3.7673': attribute type 3 has an invalid length. [ 446.066600][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.118100][T24494] __nla_validate_parse: 33 callbacks suppressed [ 446.118185][T24494] netlink: 288 bytes leftover after parsing attributes in process `syz.5.7672'. [ 446.143208][T24499] loop4: detected capacity change from 0 to 512 [ 446.262411][T24499] EXT4-fs: Ignoring removed bh option [ 446.282625][T24499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.295553][T24499] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.322560][T22587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.621998][ T12] dvmrp1 (unregistering): left allmulticast mode [ 446.634601][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.644393][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.653705][ T12] .` (unregistering): Released all slaves [ 446.661829][ T12] bond1 (unregistering): Released all slaves [ 446.709866][ T12] hsr_slave_0: left promiscuous mode [ 446.715708][ T12] hsr_slave_1: left promiscuous mode [ 446.723725][ T12] veth1_macvtap: left promiscuous mode [ 446.729239][ T12] veth0_macvtap: left promiscuous mode [ 446.734881][ T12] veth1_vlan: left promiscuous mode [ 446.741911][ T12] veth0_vlan: left promiscuous mode [ 446.849651][ T12] team0 (unregistering): Port device team_slave_1 removed [ 446.859007][ T12] team0 (unregistering): Port device team_slave_0 removed