last executing test programs: 8m37.073921857s ago: executing program 0 (id=9893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) 8m37.012860409s ago: executing program 0 (id=9896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000400)=0x491b) lseek(0xffffffffffffffff, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mptcp_subflow_get_send\x00', r1, 0x0, 0x7fd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m36.736995874s ago: executing program 0 (id=9900): unshare(0x4000000) r0 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="9cee7ba68ce731fca82de775768e8802dc1b812966eb306d9847a06c21b983aee891e3934766f1ebe180431c14edc2fb21fa63561868c37dbbf7903655569055d499b9a43adf7290c0dcc7b4665197b0c049ad23ac0a17792318c3890f61fbbff02c519712049155d4", 0x69, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r0, 0x89, 0xb5}, 0x0, &(0x7f0000000140)="ae2c55a49a84f3ee8d1a0448d8eec091c616a15636fd7356637985db937d660cc903a3c15f4d93f2cba66cc0be38384f72cbfe8d4100074516cea90728679d080e0ec1b20747b98eb5d8bb060101d9a0fac7a495c7232ec8d12b6a8fc7172ec66c9fda138b95f9fc77fd49d88dc5ad695cef643f27069e2b360f2f919b83b908fa23528db550335b3f", &(0x7f0000000200)="8674f882b653ec65d9e7666afbdaf0e4c71ec759deaef286cf8d0ca664d248030fbcb714bec4bd96996d5432cbd670d96b9c88d3fb7fd9e9780eac325bebd0dec71097c9634eefc42814154c1d8db55b6a4df517c28bde097af97bf1e1d7c0ac4806c9ef41457429cb3092eec7926cc83bcb9abead246090f881d1f25d8a4f79bbfa51a9b74e9f3b5e529573552153256a9f85eb3a320e8ac0079641da9095d4e623fa17103132323ef1f369e20b9081edb4c54164") r1 = socket$inet6(0xa, 0xa, 0x9) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f00000002c0)=0x7fffffff, 0x4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000300)={r0, 0xb8, 0x78}, &(0x7f0000000340)={'enc=', 'pkcs1', ' hash=', {'cbcmac(camellia)\x00'}}, &(0x7f00000003c0)="93a5b60911579b74f7a817965469a59bc6b2a7fd9f6cbc235660f84938297d407e2bc900fa7645f2ac4c68378cbcfc796ea045cde89187f8a944553d7bd8632d029a52b8a4e25e880f36375145af17bf30bfa1d62511f608f99268d92a97f8bc86cba5936f557ebace992a4752b3d31884337704284d80a279ccc21ac5063c70bd4e72100523266366586648ae25214a19a731a4976377325be94cef76235d7e51f48a527bda01150f71771174ddf4b400d0b763b91a4925", &(0x7f0000000480)=""/120) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @local}, 0x100, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)='vlan0\x00', 0xb, 0x3, 0x40}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000005c0)={r0, 0xbb, 0x57}, &(0x7f0000000600)={'enc=', 'raw', ' hash=', {'rmd160\x00'}}, &(0x7f0000000680)="36661556a44a661a6468d6cf8db81867c43fe8fda7b1d3f2ff6720b1d5328c4e3fddd047b405faca68526a38665df74113360cf1175a592314d31c55a99fcfcdddaddd4d9eded685590fc417f21974ae95fec8dcc33c2d182824045de39ff3dfd9595ae4a2b0be8c594eb0bb4b36896c709850eb8fb87c7d69b18a388c601b1fb0d5419d11c98a36ae5b76046639df0ed63eca11ec964209ccc2b78cfff659fe2bde0260280d5d00df503f220ba75803f094df77cf6667b36006e2", &(0x7f0000000740)=""/87) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000007c0)=' hash=', &(0x7f0000000800)) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000840)={r0, 0x57, 0x1000}, &(0x7f0000000880)={'enc=', 'raw', ' hash=', {'sha256-arm64-neon\x00'}}, &(0x7f0000000900)="db9c8e3a3906a2c31bc49e7ff098e589b26c0c69137d5e8fa2ce655e06bd7652c4402ab77f6647f678d6a07d714c435328890daeed69a407490d2d72abe6568b95cf1dbd18b93ce7b1e1011bd7dc72eb1d1d1ee7f0c845", &(0x7f0000000980)=""/4096) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x4, 0x36}, 0x18) r3 = syz_create_resource$binfmt(&(0x7f0000001a00)='./file0\x00') execveat$binfmt(r2, r3, &(0x7f0000001b00)={[&(0x7f0000001a40)='.+]{\x00', &(0x7f0000001a80)=')\xe2\x00', &(0x7f0000001ac0)='vlan0\x00']}, &(0x7f0000001c00)={[&(0x7f0000001b40)='pkcs1', &(0x7f0000001b80)='}}!%,\x00', &(0x7f0000001bc0)='rmd160\x00']}, 0x800) r4 = add_key$fscrypt_v1(&(0x7f0000001c40), &(0x7f0000001c80)={'fscrypt:', @auto=[0x61, 0x35, 0x62, 0x38, 0x36, 0x65, 0x64, 0x30, 0x63, 0xa, 0x37, 0x37, 0x38, 0x61, 0x33, 0x30]}, &(0x7f0000001cc0)={0x0, "d6cce15e9ed1ebc0d0c4cae937150512000020df3726356daba893665b030e28a6822045663d3440389160e72dd59f0234ff31c958f53bb87d3273afe9daeb41", 0x34}, 0x48, r0) keyctl$invalidate(0x15, r4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001d40)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x1, 0x3, 0x2, 0xca, 0x965}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001d80)={'wg1\x00'}) r5 = open(&(0x7f0000001dc0)='./file0\x00', 0x8000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r5, 0x0, 0x9b, 0x7c, &(0x7f0000001e00)="567efea3ef089d6f3445dae1ee297f909c23cce04ce574ef49e500b358498a00c51e7f1c94792b3087791204028835a78695e8656b01357b777e4cdb31c20d581961c7ecab8a2230b2613724186ad66b5d71ffef06df407cd916b81ca80c85cd3e1c567a183aa10c83ce88d21f8170bd73b1f0b25355e5495fdb888e02d2fbe6e19a081f1fd2c72672b82aefefa04ca1a5dd45bc786e689206ef3f", &(0x7f0000001ec0)=""/124, 0x5, 0x0, 0x53, 0x34, &(0x7f0000001f40)="c1e1e5c6107d421bda19330bd280a18671acc1d9213e0054c102920f5ea3264226e889b16f671c414f7e4f6226416d18556fe1047c4327c10462d700b0b73aaa1289a76a3b72fc063935e10b2622849f2bd950", &(0x7f0000001fc0)="5ed4221fb82a933bae230fabc31c2a56a4def40d964430d2cfcc8465a864c5214799b4cea842daa4ae54d34734c1f012634f12ac", 0x4, 0x0, 0xffffff7f}, 0x50) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = request_key(&(0x7f0000002080)='.dead\x00', &(0x7f00000020c0)={'syz', 0x0}, &(0x7f0000002100)='//$(\x00', r4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000002140)=0x3) keyctl$link(0x8, r0, r0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000002440)={{'\x00', 0x2}, {0x8}, 0x10, 0x0, 0x0, &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)="f86b62b24fe9a908ce18ac9c5c79e0de368ffce16f4d54a1aa5d717fdf3f37d587ea8ba27b13674de1592ec3088c579ebca5638504ee59143833e22644a919c41f6824809590e93eb94d4d880546666b92bf52dba6f0e42a05c38f641249ba860801093deb207ebec8b0ede965bc9aeca2c2e4b0a6ea4f84bdcf9faf77b2fbf372d0bc22dca36c490465213b8ad98797b0f97b9e2769fe995e36baf3539acd3185b2337a115c67085bf2083aeb168ae6ee8ad9347e47449a38ba886c5f5d60b75dc42b9b5dd941791e2a8a", 0xcb, 0x0, &(0x7f0000002300)={0x2, 0x130, {0x0, 0xc, 0x72, "59c80f078059395599dd5844c26a9ac10c1a9dd6bcc08f220ed100bb8a8b9c552c73fa5c351291cc3802e973a812960ef53bdb99d0d2a82a9f4a4569e74a31018a818417101cc0f9079c3ca91b86bc7b4c744fd7df5b91e9082afbc174e9af7ecbde645df82e5e5e9b4a9e21c063703d47ea", 0xb1, "b03236763337e7473b2823c28f66a77e1a9bae21698fd88395c892d32c6b3016d2e9a649ea50687521bb37bf3bb45074c8e9fa3aadf4229a9da613c44683dc803b0da7f22e74d2976b2586ae7fdf32886689735a0aff2f976fccc883c948238c12635f807e54a72243100b2a61874e589129f96d55584d9755fd14862df163d034e12254f2a9945232b8ea578899fbeee42f9789c6eb2b5782b0b2909225577520dc323e7fb419eda5a9bcc9edf3925c4c"}}, 0x13c}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000002640)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x54, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4048081) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000002680)) keyctl$search(0xa, r7, &(0x7f00000026c0)='syzkaller\x00', &(0x7f0000002700)={'syz', 0x1}, r0) mq_getsetattr(r5, &(0x7f0000002740)={0x4, 0xffffffffffff63e1, 0x9, 0xd}, &(0x7f0000002780)) 8m36.651884425s ago: executing program 0 (id=9901): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40000000000}, 0xfffffe10) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x49, 0x0, 0xfcd8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r7}, 0x18) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x221809, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'U+', 0x9}, 0x16, 0x1) 8m36.238727273s ago: executing program 0 (id=9905): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x1d, 0x2, 0x6) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 8m36.167585195s ago: executing program 1 (id=9908): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffffe, 0x111400) fsmount(r4, 0x0, 0x1) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x7}, 0x18) fsetxattr$trusted_overlay_nlink(r6, &(0x7f00000018c0), 0x0, 0x0, 0x3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN") r9 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e0"], 0x0}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) rename(0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 8m35.522758157s ago: executing program 1 (id=9914): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0400001e0400000004a958ef7509801a959473014f76065e4600000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000280)={0x8, &(0x7f0000000080)=[{0x7, 0x7f, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x200}, {0x1, 0x9, 0x2, 0x1}, {0x9, 0xff, 0x3, 0xffff}, {0x5, 0x1, 0x2, 0xa7}, {0x6, 0x2e, 0x0, 0x4}, {0x100, 0x1, 0x2, 0xffff8001}, {0x1ff, 0x1, 0xa3, 0x2d6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x7, 0x1}, 0xfffb, 0x4, &(0x7f00000002c0)="1f1594030794979c4923ba6fbd9bddb271af3881f07d942dd228b53bf345ec4aaa7f0875f68d25578523885700939dfef8666440965bb33f02daa33361dff0f7bcdc932e5476c8ada0cb8c5a55507a4bb41d702d636eff976d0a585be2d25ee9b79e0c04e68c105ad52f0000df8e", 0x6e, 0x45, 0xfffffffc, 0x0, 0xcdf2, 0x100, &(0x7f0000000380)="23b549a56cecbea7c348e74c534cbde2615b237a77c0756ca530a1a1e0f95e9f928c17e37c2fa4f4463b342e00"/57}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0xf, 0x2, 0x7, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="8996e12d173c18c34871d38308c8007642e8213dc2754c01ba4251abd45c96c924de53a7c88517c949392a7584af9f4b36dc162d4d46fe2d1d5802085c57bb3419507d7da69f2631eabca8289733cc1846f8d5993323a6e851d1e393e9727d09439f1cf68fcb848b576227d123591cb11fee320fd1b342b856b6bfca660784a0f83a128f484aa90d4a07d611a9df15cf97ecc992cab212ba92f31b470aecb0eee4e2e4ee572345da3e08b17ef9b10c7def5f9b7a993e4949cbfe6216d3f080ed7416a121fb238d8a9ef212b73d809a69913a3446f06b904f53f595a9babd1f84209b93fbdedeb21e112f7549", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 8m35.015125236s ago: executing program 1 (id=9920): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mm_page_free\x00', r0, 0x0, 0x5}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000280)={0x8, &(0x7f0000000080)=[{0x7, 0x7f, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x200}, {0x1, 0x9, 0x2, 0x1}, {0x9, 0xff, 0x3, 0xffff}, {0x5, 0x1, 0x2, 0xa7}, {0x6, 0x2e, 0x0, 0x4}, {0x100, 0x1, 0x2, 0xffff8001}, {0x1ff, 0x1, 0xa3, 0x2d6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}, {0xf, 0x2, 0x7, 0x7}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="8996e12d173c18c34871d38308c8007642e8213dc2754c01ba4251abd45c96c924de53a7c88517c949392a7584af9f4b36dc162d4d46fe2d1d5802085c57bb3419507d7da69f2631eabca8289733cc1846f8d5993323a6e851d1e393e9727d09439f1cf68fcb848b576227d123591cb11fee320fd1b342b856b6bfca660784a0f83a128f484aa90d4a07d611a9df15cf97ecc992cab212ba92f31b470aecb0eee4e2e4ee572345da3e08b17ef9b10c7def5f9b7a993e4949cbfe6216d3f080ed7416a121fb238d8a9ef212b73d809a69913a3446f06b904f53f595a9babd1f84209b93fbdedeb21e112f7549", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) 8m34.605253634s ago: executing program 1 (id=9924): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@minixdf}, {@nodioread_nolock}, {@noquota}, {@usrjquota}, {@barrier}, {@nobh}]}, 0x1, 0x599, &(0x7f0000001280)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1, 0x4000}]}]}}}}}}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x202144, 0x4) r4 = socket$inet6(0xa, 0x80003, 0x6) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = getpid() getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r6 = syz_pidfd_open(r5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setns(r6, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) getpeername$qrtr(r6, &(0x7f0000000240), &(0x7f0000000280)=0xc) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 8m34.388970178s ago: executing program 1 (id=9925): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 8m33.586724923s ago: executing program 0 (id=9938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d36a80, 0x0, 0x0) 8m33.581365924s ago: executing program 32 (id=9938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d36a80, 0x0, 0x0) 8m32.562159973s ago: executing program 1 (id=9942): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1094a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, 0x0, 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 8m32.561920243s ago: executing program 33 (id=9942): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1094a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, 0x0, 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 7m2.915934231s ago: executing program 5 (id=11435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) 7m2.859371181s ago: executing program 5 (id=11436): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x2004204, &(0x7f0000000140)=ANY=[], 0x3, 0x33f, &(0x7f0000000d80)="$eJzs3M9rM0UYwPEnabpNUtvkIIqCdNCLXpY2ehaDtCANWNpGbIXCtt1oyJqUbKhExLYnr+Ldk+Ch9NhbQfsP9OJNL1685SJ4sIi8+7K/mp9N07zpm77t9wNlJzvzZGcyk/LMwqbx6fdflgq2XjBqEo0riYiIXIqkJSqhSHCMemVNWh3KO9P//P7G2sbmcjaXW1xVaim7/m5GKTU798tX3ySCZmdTcpHeavyd+evilYvXGk/WvyjaqmircqWmDLVd+bNmbFum2i3aJV2pFcs0bFMVy7ZZ9esrfn3Bquzt1ZVR3p1J7lVN21ZGua5KZl3VKqpWrSvjc6NYVrquq5mk4AbuhK4a2SGjd0bcG9yRajVrTIhIoqsmfzyWDgEAgLHqzP+jbko/VP4vs17+7zZu5v8nb57Xpj85nT1zY7caZ1qv/P+9P/z3asv/4yIyTP7/o9wi/+/OiB6X/PHq8Pk/7oc5retUpO2Vm/8ng++v5+izk3mvQP4PAAAAAAAAAAAAAAAAAAAAAMCL4NJxUo7jpMJj+Nd8hCB4jQfpuvmfEpG4O/sO8/+QrW1sStx7cM+dY+u7/fx+3j8GDc5FxBJT5iUl/3vrIeCWwyePlCstv1oHXvx/7nHCq8kWpOjFL0hK0p3xjrP0UW5xQfmC+KvHlJKt8RlJycu94zPt8W7/D/bzmrz9Vku8Lin5bUcqYsmut66b8d8uKPXhx7mO+IR/EQAAAAAAHgBdqUiwfU6373/9/buuK9W73v+VkWzBu03UvD8Q7t5b9tfzPffnsdTrsbEOHQAAAACAR8Ouf10yLMus9ikkpKsqIjdGDVqIDdZY6zgz2a/xRMsIB+2P5t3IEHnWcf004KfaVtCWX/Iu3lYVD0YwXH/C8Y9omgzrsPVMdJAFEOvs/Jx7Qt3y6kfBQK7OhLeNtGs+Z1npfp9on5UwOZrPxzKrr/7w87+j+l4Y1vun4Qq4ufHRsNeKd646rzB59/95AAAAADxvzaQ/PPNBa3VkLJ0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCRGdUvn/UrjHuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH3xNAAA///R3vF2") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x28200, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 7m2.658403535s ago: executing program 5 (id=11439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000400)=0x491b) lseek(0xffffffffffffffff, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mptcp_subflow_get_send\x00', r1, 0x0, 0x7fd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m2.305799862s ago: executing program 5 (id=11444): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r0, 0x0, 0x2, 0x0, 0x9}) 7m1.557640986s ago: executing program 5 (id=11448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) 7m0.946682848s ago: executing program 5 (id=11455): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee0, 0x400, 0x4, 0x8b7}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) 7m0.946454698s ago: executing program 34 (id=11455): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee0, 0x400, 0x4, 0x8b7}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) 6.426322758s ago: executing program 4 (id=17792): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) fcntl$setlease(r1, 0x400, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) fcntl$setlease(r1, 0x400, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r0) 5.964941317s ago: executing program 4 (id=17800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0x20b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x8000, 0x0, 0x7f, 0x7fffffff}, {0x8, 0x81, 0x7, 0x7}]}) 5.583252764s ago: executing program 4 (id=17804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket(0xf, 0x1, 0x0) r4 = syz_open_dev$sg(0x0, 0x4, 0x420000) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) unshare(0x64000600) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000020000000c0000000000000030871f426ead65118d290dc4cd9a3e765b11154eb8db", @ANYRES32, @ANYRESDEC=r6, @ANYRES8, @ANYRES32, @ANYBLOB="00000000000007000000000000fc4c00000010000000000000000000"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa1000000be000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r8, r7}, 0xc) 3.852779637s ago: executing program 4 (id=17813): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x4810) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.867103035s ago: executing program 4 (id=17822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf01010063"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 2.833208666s ago: executing program 4 (id=17823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x435) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x1) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r8, 0x4) flock(r8, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r10, 0x0, 0x79) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r12, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="84010000100013070000000000020000ac1e0101000000000000000000000000fe8000000000000000000000000000bb0043000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe807e260e00000000000000000000000000bb000004d332000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a0e01668f6055e7d67100000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4f971ed0989008ac5a7359e85015dbffc8b797bad1434909a751e3f1f30d3d64e4705b60fcc481f27caf13abdabf341fc"], 0x184}}, 0x0) 2.62003701s ago: executing program 2 (id=17824): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0x12, "101217fe0ef7f0200000ff490a0080002a00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x51, 0x7}}], 0x18}, 0x20004004) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close(r4) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r8, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r9, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close(0x3) 2.322423016s ago: executing program 7 (id=17827): io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syslog(0x9, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.246597767s ago: executing program 7 (id=17828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.230952088s ago: executing program 7 (id=17829): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) socketpair(0xb, 0x2, 0x190, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 2.182402338s ago: executing program 3 (id=17832): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) socket(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xfd}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 2.164688139s ago: executing program 7 (id=17833): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x4810) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.074475301s ago: executing program 3 (id=17835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x7, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0xe, [{0x6, 0x200, 0x800}, {0x5, 0x5, 0xf}, {0x4, 0x7fffffff, 0x1}, {0x8, 0xe, 0x3}, {0x8, 0x9, 0xc8}, {0xb, 0x5, 0x7}]}, @enum={0xc, 0x8, 0x0, 0x6, 0x4, [{0x0, 0x4}, {0xa, 0xf94}, {0x9, 0x4}, {0xb, 0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x9}, {0x9}]}, @enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x4, [{0xb, 0xe149, 0x9}, {0x5, 0x6, 0x9}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x3}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000002c0)=""/22, 0x123, 0x16, 0x0, 0xfffffffb}, 0x28) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x6, 0x5004) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) unshare(0x62040200) 1.672167868s ago: executing program 2 (id=17836): openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x1, 0x1, 0x2, 0xfffe}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, 0x6, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r10, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000", @ANYRES16=r7, @ANYBLOB="a183000000000000000005"], 0x124}}, 0x0) 1.424562943s ago: executing program 6 (id=17837): io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.412972963s ago: executing program 2 (id=17838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.384012023s ago: executing program 6 (id=17839): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1032, 0x20a}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (fail_nth: 1) 1.162496068s ago: executing program 2 (id=17840): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="b5ace4c70521b9b4"}}}}}, 0x0) 1.06515071s ago: executing program 3 (id=17841): r0 = timerfd_create(0x4, 0x80800) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0xfffffffffffffff9) fcntl$setsig(r0, 0xa, 0xc) syz_clone3(&(0x7f00000011c0)={0x200242080, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x28}, &(0x7f0000000100)=""/95, 0x5f, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7}, 0x58) fcntl$setown(r0, 0x8, r2) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) close_range(r1, r3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001740)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001840)=0x0) statx(0xffffffffffffff9c, &(0x7f0000001880)='./file0\x00', 0x800, 0x20, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0}, &(0x7f0000001a80)=0xc) getgroups(0x9, &(0x7f0000001ac0)=[0xee00, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r12 = syz_clone(0x40000, &(0x7f0000001b00)="edad31dd01d8ef8025622e8d2c44d4c790a84a22c9d2e87961870824b98955f0627d29139797bae36363bcbaadee03b66218d8bc746ad355f8a249f51bbd744c", 0x40, &(0x7f0000001b40), &(0x7f0000001b80), &(0x7f0000001bc0)="3c3070209f2ff160af1303290f6d7f1c7e497a0717cda3bd0a7eb59151aa5a6ed1b33dc581fff39b5aa6b155c27b619c7cbc12c8ebe366bcec50c72243295983a34b9e77bfab66d900ba6d4a3263a8fa8b8d7383702afd63c636530a7a88a08facdd14c37ffdf967a6b9a4a5dc6eaa1b9e4271414e19628728d74600cab170ed422260a9a6212a3e5f2345037bd01d60f7523b6492d2b76c79c87e0c4ceaa2d9a3b0f6e3f20b0ed1c42478cad06337b27e376c03be3bfb2787c695db04460b4de94ed7d0668f38db76135d9b855685a3") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$unix(r0, &(0x7f0000001d80)={&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001300)}, {&(0x7f0000001340)="1c0b7005235434631128e4763606364ba5f250743d8ca902866b5d47fd12c8e0f7e1c3f5a2c92824d4ee8baf9936bc9da0b428d904a69d3263d1fee708dce3e5f3a651a9ef716f07fdfdfbf55c3d73fb6320f021fda0fd0e24ed7303fa20bf79303aab33dd644b443802ba37c326abbab777e0db90a1f6745c028bf23a10e0c9cd1135b92b1128ea5d75e6f2500989437e4b3bdfdca2245975d464", 0x9b}, {&(0x7f0000001400)="4583546bd1c52faeb22d8f28ff091f06875953e43b882ef415bfa308c161d35cc224e17cdc6064b25f3ba1506de0d20c1edac15eea52d36b9c2cf23e9b179e257b95e9bf77b56824ee879d55024f75858b2171e74f92b9d01d58baf808c7fd663dde3e420012c9e6ec338f881069ff9e7d2b9e92c674b753baa9819c98a0be199180fac5bc38be42942d78de387f31f313a9e45ddeb400d0470a443825ce0e36331e9ffa2f34bad7c652a756b1844cb575fa640b9e334808857e65", 0xbb}, {&(0x7f00000014c0)="f1e418fccfbde87cd00a022dc96485fd03a96042254d2819d14176064639db75f7aa009fc762ed4c6313348f68dbbbce8dcd321b533a43939688bb", 0x3b}, {&(0x7f0000001500)="0bbbbd74a524c4f87ca6f36e44d2fe381c127b51e1814fe46ee4c77468d19ce6199b984129e04cc3d3cd15e38c438fe948de4d8bfdc608792209e65b3b2ac1ba509f93e53669fb2f8d0888cdb43d16c3073700bd6f6f6c3c2ed2f49712c58917282588bc66710bf984388a14d66b1afe8ea92d35bd39d62caae5cbfb45a8e8a80431c4e9df513c947f7e54aeaa693febcd7a827df691ffd108e11993088c56dd5f65ad2d03642a20f7da767fe2d3f4bd229f03ad308fd63303bf4d4b855f0e9939c45af1509105d511c1877c6b96a6490e2341282fbeef20312509790d889826ab830fcc8a5724e943cbe2fa654bf4d2e975ab", 0xf3}, {&(0x7f0000001600)="53ef3bf1f30146986066c2c4ab70b325c1a4e43305058fb813c8e967f931700844b5197a47f07c69bf713c17323acb12bbfa174c4813b8a0d3571dddc243fbe0572c9e646e0c58e9461bdc83ee2e55cad83d334e1a0e45999fa8aca0a91c29b4b4360e69aaad2729117bb0f3f24541c4db3e015e80a7c4a1ee8821472c1016ba564682b32d9fd37a74db5f6205ef5a9eb5b28d0f982b36e7f85688d73ee3c4a1", 0xa0}], 0x6, &(0x7f0000001d00)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r2, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, 0xee00}}}], 0x80, 0x40010}, 0x20000000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) write$qrtrtun(r13, &(0x7f0000001dc0)="de52aac5a70b01a1f084e1dd99fc74cffbbcaca1af6030142a8c553dffd3dcbd45c48eaae7e4d8816bf6358f", 0x2c) r15 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001e00), 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r15, 0x84, 0x4, &(0x7f0000001e40), &(0x7f0000001e80)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), r13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r13, &(0x7f00000020c0)={&(0x7f0000001f00), 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0x84, r17, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xdd}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xfffffffb}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x200}, @ETHTOOL_A_COALESCE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040001}, 0x4008000) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r13) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000002180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r15, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x28, r19, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r20}, @val={0xc, 0x99, {0x7, 0x49}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000d4}, 0x4008084) setgroups(0x2, &(0x7f00000022c0)=[0x0, r11]) 1.010484571s ago: executing program 6 (id=17842): ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.010007741s ago: executing program 6 (id=17843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000003700)='gid_map\x00') read(r1, &(0x7f0000003780)=""/159, 0x9f) socket$inet6(0xa, 0x3, 0xff) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x8, 0xfffffffffffffffb}}) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xfd}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 958.971262ms ago: executing program 3 (id=17844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) socket(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xfd}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 958.471272ms ago: executing program 3 (id=17845): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r7 = dup(0xffffffffffffffff) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x19) write$binfmt_aout(r7, 0x0, 0x808) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x28}], 0x1}, 0x0) sendto$inet_nvme_icreq_pdu(r7, &(0x7f0000000200)={{0x0, 0x8, 0x80, 0x3}, 0x0, 0x0, 0x2, 0x6}, 0x80, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 937.242502ms ago: executing program 6 (id=17846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{0x0, 0x2c}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, &(0x7f00000003c0)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000540)}}, 0xe) syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x11080, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x103, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x0, {[0x32, 0x5d7, 0x4, 0x1, 0x2, 0xfffffffe, 0xd, 0x5]}}, 0x5c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1}, 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 614.421448ms ago: executing program 2 (id=17847): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x43, 0x0, 0x0, 0x0, 0x0, 0x10100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffffffff, 0x6, 0xbcc, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t~0&<\t') 545.543889ms ago: executing program 2 (id=17848): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="b5ace4c70521b9b4"}}}}}, 0x0) 544.512109ms ago: executing program 7 (id=17849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 529.08115ms ago: executing program 7 (id=17850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x7, [@func={0x10, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0xe, [{0x6, 0x200, 0x800}, {0x5, 0x5, 0xf}, {0x4, 0x7fffffff, 0x1}, {0x8, 0xe, 0x3}, {0x8, 0x9, 0xc8}, {0xb, 0x5, 0x7}]}, @enum={0xc, 0x8, 0x0, 0x6, 0x4, [{0x0, 0x4}, {0xa, 0xf94}, {0x9, 0x4}, {0xb, 0x2}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x9}, {0x9}]}, @enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x4, [{0xb, 0xe149, 0x9}, {0x5, 0x6, 0x9}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x3}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f00000002c0)=""/22, 0x123, 0x16, 0x0, 0xfffffffb}, 0x28) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x6, 0x5004) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) unshare(0x62040200) 38.530669ms ago: executing program 6 (id=17851): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r2, r1, 0x26}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600", 0x34}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc001) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYRESOCT=r7], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') dup(r9) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 0s ago: executing program 3 (id=17852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000000)="448b7cff", 0x4}], 0x2) (fail_nth: 1) kernel console output (not intermixed with test programs): 314][ T29] audit: type=1326 audit(1757616896.035:311131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.2.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1536.682705][ T29] audit: type=1326 audit(1757616896.035:311132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.2.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1536.706450][ T29] audit: type=1326 audit(1757616896.065:311133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.2.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1536.730418][ T29] audit: type=1326 audit(1757616896.065:311134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.2.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1536.732102][T24227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.754579][ T29] audit: type=1326 audit(1757616896.065:311135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm="syz.2.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1536.754616][ T29] audit: type=1326 audit(1757616896.065:311136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24214 comm=",&#^%" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1536.808637][T24227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.854484][T18538] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1536.892933][T24231] SELinux: ebitmap: truncated map [ 1536.898411][T24231] SELinux: failed to load policy [ 1536.905849][T18538] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1537.662402][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16932'. [ 1537.671988][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16932'. [ 1537.746988][T24267] lo speed is unknown, defaulting to 1000 [ 1537.839770][T24269] lo speed is unknown, defaulting to 1000 [ 1537.956929][T24269] lo speed is unknown, defaulting to 1000 [ 1537.999006][T24267] lo speed is unknown, defaulting to 1000 [ 1538.405536][T24283] random: crng reseeded on system resumption [ 1538.596831][T24292] SELinux: ebitmap: truncated map [ 1538.604532][T24292] SELinux: failed to load policy [ 1539.311417][T24317] lo speed is unknown, defaulting to 1000 [ 1539.330998][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16955'. [ 1539.345647][T24319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16955'. [ 1539.357858][T24317] lo speed is unknown, defaulting to 1000 [ 1539.385773][T24324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16958'. [ 1539.399147][T24324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16958'. [ 1539.565950][T24339] SELinux: ebitmap: truncated map [ 1539.571849][T24339] SELinux: failed to load policy [ 1540.390277][T24380] sd 0:0:1:0: device reset [ 1540.498076][T24394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.507073][T24394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.517315][T23841] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1540.526150][T23841] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1540.584383][T24397] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1540.594266][T24397] SELinux: failed to load policy [ 1540.713983][T24412] sd 0:0:1:0: device reset [ 1540.737362][T24414] __nla_validate_parse: 4 callbacks suppressed [ 1540.737391][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16994'. [ 1540.755192][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16994'. [ 1541.045530][T24423] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1541.056868][T24423] SELinux: failed to load policy [ 1541.288750][T24429] lo speed is unknown, defaulting to 1000 [ 1541.343606][T24429] lo speed is unknown, defaulting to 1000 [ 1541.347695][T24442] sd 0:0:1:0: device reset [ 1541.349846][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17003'. [ 1541.357229][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17005'. [ 1541.385628][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17005'. [ 1541.496496][T24449] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1541.522862][T24449] SELinux: failed to load policy [ 1541.725281][T24463] loop2: detected capacity change from 0 to 512 [ 1541.741737][T24463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.754562][T24463] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.780949][T24463] lo speed is unknown, defaulting to 1000 [ 1541.793050][T24470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=777 sclass=netlink_route_socket pid=24470 comm=syz.7.17003 [ 1541.817194][T24470] lo speed is unknown, defaulting to 1000 [ 1541.817256][T24463] lo speed is unknown, defaulting to 1000 [ 1541.854983][T24470] lo speed is unknown, defaulting to 1000 [ 1542.014922][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 1542.014942][ T29] audit: type=1326 audit(1757616901.525:311245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.6.17016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1542.045624][ T29] audit: type=1326 audit(1757616901.565:311246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.6.17016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1542.204508][ T29] audit: type=1326 audit(1757616901.685:311247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.6.17016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f66c5e2ada9 code=0x7ffc0000 [ 1542.228872][ T29] audit: type=1326 audit(1757616901.705:311248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.6.17016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1542.252994][ T29] audit: type=1326 audit(1757616901.705:311249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24475 comm="syz.6.17016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1542.388989][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17018'. [ 1542.399020][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17018'. [ 1542.399412][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.781516][T24494] siw: device registration error -23 [ 1542.823808][T24495] lo speed is unknown, defaulting to 1000 [ 1542.905520][ T29] audit: type=1326 audit(1757616902.415:311250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.4.17023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1542.929697][ T29] audit: type=1326 audit(1757616902.415:311251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.4.17023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1543.044562][ T29] audit: type=1326 audit(1757616902.465:311252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.4.17023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1543.068873][ T29] audit: type=1326 audit(1757616902.465:311253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.4.17023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1543.093165][ T29] audit: type=1326 audit(1757616902.465:311254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24498 comm="syz.4.17023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1543.120172][T24495] lo speed is unknown, defaulting to 1000 [ 1543.441999][T24509] loop6: detected capacity change from 0 to 512 [ 1543.524308][T24509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1543.537039][T24509] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1543.559938][T24509] lo speed is unknown, defaulting to 1000 [ 1543.594274][T24509] lo speed is unknown, defaulting to 1000 [ 1543.685886][T24522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17030'. [ 1543.791952][T24529] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17034'. [ 1543.824312][T24524] lo speed is unknown, defaulting to 1000 [ 1543.860329][T24524] lo speed is unknown, defaulting to 1000 [ 1544.066046][T24542] siw: device registration error -23 [ 1544.784393][T24544] lo speed is unknown, defaulting to 1000 [ 1544.812644][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.925401][T24544] lo speed is unknown, defaulting to 1000 [ 1545.066776][T24550] sd 0:0:1:0: device reset [ 1545.237245][T24560] lo speed is unknown, defaulting to 1000 [ 1545.283210][T24560] lo speed is unknown, defaulting to 1000 [ 1545.362980][T24574] loop2: detected capacity change from 0 to 512 [ 1545.392429][T24574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1545.405169][T24574] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.428860][T24574] lo speed is unknown, defaulting to 1000 [ 1545.462387][T24574] lo speed is unknown, defaulting to 1000 [ 1545.526170][T24585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17051'. [ 1546.302845][T24593] siw: device registration error -23 [ 1546.403359][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.685585][T24606] SELinux: ebitmap: truncated map [ 1546.691097][T24606] SELinux: failed to load policy [ 1546.699337][T24613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.727924][T24613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.742775][T24617] netlink: 'syz.3.17065': attribute type 27 has an invalid length. [ 1546.752408][T17970] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1546.768223][T17970] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1546.825369][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17068'. [ 1546.835436][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17068'. [ 1546.956744][T24628] loop6: detected capacity change from 0 to 512 [ 1546.967769][T24628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.980572][T24628] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.005023][T24628] lo speed is unknown, defaulting to 1000 [ 1547.011465][T24630] lo speed is unknown, defaulting to 1000 [ 1547.035602][T24628] lo speed is unknown, defaulting to 1000 [ 1547.074495][T24630] lo speed is unknown, defaulting to 1000 [ 1547.711787][T24639] lo speed is unknown, defaulting to 1000 [ 1547.747179][T24639] lo speed is unknown, defaulting to 1000 [ 1547.812232][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.873172][T24652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17072'. [ 1548.301045][T24660] lo speed is unknown, defaulting to 1000 [ 1548.359725][T24660] lo speed is unknown, defaulting to 1000 [ 1548.446734][T24671] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17081'. [ 1548.475457][T24675] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17083'. [ 1548.657661][T24683] lo speed is unknown, defaulting to 1000 [ 1548.690369][T24683] lo speed is unknown, defaulting to 1000 [ 1548.771766][T24685] loop2: detected capacity change from 0 to 512 [ 1548.781155][T24685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.793680][T24685] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1548.814300][T24685] lo speed is unknown, defaulting to 1000 [ 1548.844767][T24685] lo speed is unknown, defaulting to 1000 [ 1548.919798][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.973996][T24694] lo speed is unknown, defaulting to 1000 [ 1549.019815][T24694] lo speed is unknown, defaulting to 1000 [ 1549.313964][T24709] sd 0:0:1:0: device reset [ 1549.355889][T24711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17095'. [ 1549.379058][T24713] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17096'. [ 1549.497796][T24716] loop2: detected capacity change from 0 to 512 [ 1549.511144][T24716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1549.523962][T24716] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1549.545936][T24716] lo speed is unknown, defaulting to 1000 [ 1549.581518][T24716] lo speed is unknown, defaulting to 1000 [ 1549.647406][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.657471][T24730] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17097'. [ 1549.913069][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1549.913086][ T29] audit: type=1326 audit(1757616909.425:311312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.4.17104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1549.949760][ T29] audit: type=1326 audit(1757616909.425:311313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.4.17104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1549.979341][ T29] audit: type=1326 audit(1757616909.495:311314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.4.17104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1550.066933][ T29] audit: type=1326 audit(1757616909.575:311315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.4.17104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2392abada9 code=0x7ffc0000 [ 1550.090890][ T29] audit: type=1326 audit(1757616909.575:311316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.4.17104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1550.115000][ T29] audit: type=1326 audit(1757616909.575:311317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24740 comm="syz.4.17104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1550.118616][T24739] lo speed is unknown, defaulting to 1000 [ 1550.167860][T24753] sd 0:0:1:0: device reset [ 1550.201867][T24755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17109'. [ 1550.322630][T24759] loop6: detected capacity change from 0 to 512 [ 1550.344447][T24759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1550.357236][T24759] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1550.382271][T24759] lo speed is unknown, defaulting to 1000 [ 1550.401794][T24739] lo speed is unknown, defaulting to 1000 [ 1550.422786][T24759] lo speed is unknown, defaulting to 1000 [ 1550.511242][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.571232][T24773] lo speed is unknown, defaulting to 1000 [ 1550.601463][T24773] lo speed is unknown, defaulting to 1000 [ 1550.682385][T24778] lo speed is unknown, defaulting to 1000 [ 1550.719624][T24778] lo speed is unknown, defaulting to 1000 [ 1550.761868][ T29] audit: type=1326 audit(1757616910.275:311318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51fb0eba9 code=0x7ffc0000 [ 1550.785899][ T29] audit: type=1326 audit(1757616910.275:311319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51fb0eba9 code=0x7ffc0000 [ 1550.811844][ T29] audit: type=1326 audit(1757616910.295:311320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe51fb0eba9 code=0x7ffc0000 [ 1550.836222][ T29] audit: type=1326 audit(1757616910.295:311321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24783 comm="syz.3.17118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51fb0eba9 code=0x7ffc0000 [ 1550.852154][T24788] sd 0:0:1:0: device reset [ 1551.008171][T24791] random: crng reseeded on system resumption [ 1551.091688][T24795] lo speed is unknown, defaulting to 1000 [ 1551.124896][T24797] lo speed is unknown, defaulting to 1000 [ 1551.127905][T24795] lo speed is unknown, defaulting to 1000 [ 1551.177255][T24797] lo speed is unknown, defaulting to 1000 [ 1551.315538][T24797] chnl_net:caif_netlink_parms(): no params data found [ 1551.348950][T24818] lo speed is unknown, defaulting to 1000 [ 1551.380203][T24797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.387412][T24797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.394887][T24797] bridge_slave_0: entered allmulticast mode [ 1551.401918][T24797] bridge_slave_0: entered promiscuous mode [ 1551.409440][T24797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.416525][T24797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.424049][T24797] bridge_slave_1: entered allmulticast mode [ 1551.431174][T24797] bridge_slave_1: entered promiscuous mode [ 1551.439332][T24828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17125'. [ 1551.513850][T24818] lo speed is unknown, defaulting to 1000 [ 1551.531378][T24797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.718876][T24797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.762590][T24831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.807736][T24831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.820435][T23841] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1551.828888][T23841] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1551.830293][T24797] team0: Port device team_slave_0 added [ 1551.833787][T24797] team0: Port device team_slave_1 added [ 1551.871587][T24797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1551.878602][T24797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1551.878668][T24797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.882475][T24797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.882490][T24797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1551.882570][T24797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1551.914582][T24797] hsr_slave_0: entered promiscuous mode [ 1551.915396][T24797] hsr_slave_1: entered promiscuous mode [ 1551.915997][T24797] debugfs: 'hsr0' already exists in 'hsr' [ 1551.916015][T24797] Cannot create hsr debugfs directory [ 1552.086964][T24844] lo speed is unknown, defaulting to 1000 [ 1552.132535][T24844] lo speed is unknown, defaulting to 1000 [ 1552.249805][T24853] random: crng reseeded on system resumption [ 1552.477349][T24797] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1552.488698][T24797] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1552.497809][T24797] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1552.507109][T24797] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1552.562233][T24797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.584853][T24797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.596688][T16764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.603939][T16764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.618140][T21978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.625271][T21978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.739146][T24797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.931030][T24797] veth0_vlan: entered promiscuous mode [ 1552.939431][T24905] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17148'. [ 1552.982711][T24797] veth1_vlan: entered promiscuous mode [ 1553.057323][T24797] veth0_macvtap: entered promiscuous mode [ 1553.080495][T24797] veth1_macvtap: entered promiscuous mode [ 1553.099877][T24797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.117092][T24797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.136026][T12611] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.154363][T12611] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.177535][T12611] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.227531][T12611] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.739567][T24950] netlink: 'syz.3.17169': attribute type 27 has an invalid length. [ 1553.776355][T24947] lo speed is unknown, defaulting to 1000 [ 1553.833285][T24947] lo speed is unknown, defaulting to 1000 [ 1553.894438][T24956] lo speed is unknown, defaulting to 1000 [ 1553.953690][T24956] lo speed is unknown, defaulting to 1000 [ 1554.256853][T24964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17172'. [ 1554.826364][T24991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17178'. [ 1555.104365][T24996] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.194077][T24999] lo speed is unknown, defaulting to 1000 [ 1555.254205][T24999] lo speed is unknown, defaulting to 1000 [ 1555.360195][T24997] lo speed is unknown, defaulting to 1000 [ 1555.442601][T24997] lo speed is unknown, defaulting to 1000 [ 1555.531737][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 1555.531755][ T29] audit: type=1326 audit(1757616915.045:311423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.562349][ T29] audit: type=1326 audit(1757616915.045:311424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.672250][T25003] SELinux: ebitmap: truncated map [ 1555.672311][ T29] audit: type=1326 audit(1757616915.045:311425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.701219][ T29] audit: type=1326 audit(1757616915.045:311426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.725089][ T29] audit: type=1326 audit(1757616915.045:311427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.748945][ T29] audit: type=1326 audit(1757616915.045:311428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.760459][T25003] SELinux: failed to load policy [ 1555.772800][ T29] audit: type=1326 audit(1757616915.045:311429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.802008][ T29] audit: type=1326 audit(1757616915.045:311430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.825787][ T29] audit: type=1326 audit(1757616915.045:311431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.849653][ T29] audit: type=1326 audit(1757616915.075:311432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25004 comm="syz.6.17187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1555.906623][T25008] random: crng reseeded on system resumption [ 1556.105205][T25019] lo speed is unknown, defaulting to 1000 [ 1556.143045][T25019] lo speed is unknown, defaulting to 1000 [ 1556.232875][T25027] netlink: 'syz.6.17197': attribute type 27 has an invalid length. [ 1556.575578][T25035] lo speed is unknown, defaulting to 1000 [ 1556.605627][T25035] lo speed is unknown, defaulting to 1000 [ 1556.653039][T25037] SELinux: ebitmap: truncated map [ 1556.659493][T25037] SELinux: failed to load policy [ 1556.737883][T25043] random: crng reseeded on system resumption [ 1557.080327][T25054] lo speed is unknown, defaulting to 1000 [ 1557.145677][T25054] lo speed is unknown, defaulting to 1000 [ 1557.563346][T25051] lo speed is unknown, defaulting to 1000 [ 1557.609088][T25051] lo speed is unknown, defaulting to 1000 [ 1557.771433][T25067] SELinux: ebitmap: truncated map [ 1557.777018][T25067] SELinux: failed to load policy [ 1558.086547][T25075] random: crng reseeded on system resumption [ 1558.286424][T25082] random: crng reseeded on system resumption [ 1558.383586][T25086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17218'. [ 1558.491332][T25089] lo speed is unknown, defaulting to 1000 [ 1558.551072][T25089] lo speed is unknown, defaulting to 1000 [ 1558.929112][T25092] random: crng reseeded on system resumption [ 1559.002550][T25095] lo speed is unknown, defaulting to 1000 [ 1559.043683][T25095] lo speed is unknown, defaulting to 1000 [ 1559.142268][T25105] netlink: 'syz.3.17225': attribute type 27 has an invalid length. [ 1559.160094][T25103] SELinux: ebitmap: truncated map [ 1559.166936][T25103] SELinux: failed to load policy [ 1559.247129][T25110] hugetlbfs: Unknown parameter '' [ 1559.632290][T24996] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.692053][T24996] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.743174][T25112] random: crng reseeded on system resumption [ 1559.842332][T24996] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.863231][T25118] random: crng reseeded on system resumption [ 1559.931235][ T7768] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.945100][ T7768] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.963463][ T7768] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.972223][ T7768] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.988730][T25126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.988941][T25126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.991381][T13534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1559.997156][T13534] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1560.044749][T25130] random: crng reseeded on system resumption [ 1560.154029][T25136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17235'. [ 1560.328280][T25135] SELinux: ebitmap: truncated map [ 1560.335343][T25135] SELinux: failed to load policy [ 1560.360585][T25125] lo speed is unknown, defaulting to 1000 [ 1560.470665][T25152] lo speed is unknown, defaulting to 1000 [ 1560.838644][T25153] lo speed is unknown, defaulting to 1000 [ 1560.924187][T25152] lo speed is unknown, defaulting to 1000 [ 1560.952257][T25125] lo speed is unknown, defaulting to 1000 [ 1560.990179][T25156] random: crng reseeded on system resumption [ 1561.071588][T25153] lo speed is unknown, defaulting to 1000 [ 1561.255292][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17248'. [ 1561.278807][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17248'. [ 1561.312527][T25168] random: crng reseeded on system resumption [ 1561.382015][T25172] siw: device registration error -23 [ 1561.391498][T25175] netlink: 'syz.2.17249': attribute type 27 has an invalid length. [ 1561.467089][T25177] SELinux: ebitmap: truncated map [ 1561.476523][T25177] SELinux: failed to load policy [ 1561.506298][T25183] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17252'. [ 1561.720452][T25196] lo speed is unknown, defaulting to 1000 [ 1561.740081][T25194] random: crng reseeded on system resumption [ 1561.802535][T25196] lo speed is unknown, defaulting to 1000 [ 1562.395004][T25214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.403936][T25214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.414023][T17970] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1562.429726][T17970] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1562.471208][T25219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17264'. [ 1562.518873][T25227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17268'. [ 1562.528228][T25227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17268'. [ 1562.791733][T25245] lo speed is unknown, defaulting to 1000 [ 1562.830506][T25245] lo speed is unknown, defaulting to 1000 [ 1563.190890][T25261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17282'. [ 1563.199920][T25259] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17281'. [ 1563.535556][T25273] loop6: detected capacity change from 0 to 512 [ 1563.555640][T25273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1563.568579][T25273] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.592087][T25273] lo speed is unknown, defaulting to 1000 [ 1563.621585][T25273] lo speed is unknown, defaulting to 1000 [ 1563.653074][T25289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.661895][T25289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.672481][T18538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1563.680560][T18538] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1564.205388][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.324529][T25301] __nla_validate_parse: 1 callbacks suppressed [ 1564.324549][T25301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17294'. [ 1564.344632][T25301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17294'. [ 1564.528642][T25310] random: crng reseeded on system resumption [ 1564.835762][T25318] sd 0:0:1:0: device reset [ 1564.996527][T25324] lo speed is unknown, defaulting to 1000 [ 1565.077136][T25324] lo speed is unknown, defaulting to 1000 [ 1565.326142][T25330] sd 0:0:1:0: device reset [ 1565.424311][T25343] hugetlbfs: Unknown parameter '' [ 1565.475811][T25342] SELinux: ebitmap: truncated map [ 1565.477962][T25346] sd 0:0:1:0: device reset [ 1565.482884][T25342] SELinux: failed to load policy [ 1565.528312][T25354] random: crng reseeded on system resumption [ 1565.544353][T25352] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17315'. [ 1565.567914][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17317'. [ 1565.577468][T25356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17317'. [ 1565.613921][T25358] random: crng reseeded on system resumption [ 1565.738911][T25369] sd 0:0:1:0: device reset [ 1565.828864][T25376] random: crng reseeded on system resumption [ 1565.838670][T25371] SELinux: ebitmap: truncated map [ 1565.846387][T25371] SELinux: failed to load policy [ 1566.412378][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17330'. [ 1566.422701][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17330'. [ 1566.433154][T25386] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.468617][T25394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17331'. [ 1566.482465][T25396] random: crng reseeded on system resumption [ 1566.561103][T25386] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.641680][T25404] SELinux: ebitmap: truncated map [ 1566.642458][T25386] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.647230][T25404] SELinux: failed to load policy [ 1566.664528][T25402] lo speed is unknown, defaulting to 1000 [ 1566.697446][T25402] lo speed is unknown, defaulting to 1000 [ 1566.748018][T25386] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.761896][T25417] random: crng reseeded on system resumption [ 1566.795970][T25402] chnl_net:caif_netlink_parms(): no params data found [ 1566.870456][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17342'. [ 1566.879932][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17342'. [ 1566.896886][T25402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.904433][T25402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.912402][T25402] bridge_slave_0: entered allmulticast mode [ 1566.919683][T25402] bridge_slave_0: entered promiscuous mode [ 1566.927545][T25402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.934914][T25402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.943556][T25402] bridge_slave_1: entered allmulticast mode [ 1566.950841][T25402] bridge_slave_1: entered promiscuous mode [ 1566.962433][ T498] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.988070][T25402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.019105][T25402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.028374][T16704] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.054479][T16704] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.067715][T25402] team0: Port device team_slave_0 added [ 1567.075278][T25402] team0: Port device team_slave_1 added [ 1567.085781][T16704] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.117067][T25444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.117257][T25444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.119861][T18538] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 1567.120435][T18538] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1567.121364][T25402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.121376][T25402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.121482][T25402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.122237][T25402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.122250][T25402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.122330][T25402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.293098][T25402] hsr_slave_0: entered promiscuous mode [ 1567.293733][T25402] hsr_slave_1: entered promiscuous mode [ 1567.294037][T25402] debugfs: 'hsr0' already exists in 'hsr' [ 1567.294051][T25402] Cannot create hsr debugfs directory [ 1567.351304][T25450] random: crng reseeded on system resumption [ 1567.395771][T25456] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.516913][T25456] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.549846][T25462] loop4: detected capacity change from 0 to 512 [ 1567.561064][T25462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1567.573792][T25462] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1567.594612][T25462] lo speed is unknown, defaulting to 1000 [ 1567.618864][T25456] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.631098][T25462] lo speed is unknown, defaulting to 1000 [ 1567.697473][T17526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.697616][T25456] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.833969][T25402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1567.845798][T25402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1567.855768][T25402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1567.872703][T25402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1567.901876][T25484] sd 0:0:1:0: device reset [ 1568.043398][T25488] SELinux: ebitmap: truncated map [ 1568.049885][T25488] SELinux: failed to load policy [ 1568.309735][T25402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.327500][T25402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.383651][T25402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1568.394209][T25402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1568.454353][T12611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.461468][T12611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.474169][T25497] loop2: detected capacity change from 0 to 512 [ 1568.481023][T12611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.488227][T12611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.505856][T25497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1568.518673][T25497] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1568.537842][T25510] netlink: 'syz.6.17368': attribute type 27 has an invalid length. [ 1568.543492][T25497] lo speed is unknown, defaulting to 1000 [ 1568.582061][T25497] lo speed is unknown, defaulting to 1000 [ 1568.587964][T25402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.670868][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.708323][T25402] veth0_vlan: entered promiscuous mode [ 1568.719989][T25402] veth1_vlan: entered promiscuous mode [ 1568.726299][T25524] sd 0:0:1:0: device reset [ 1568.746223][T25402] veth0_macvtap: entered promiscuous mode [ 1568.755632][T25402] veth1_macvtap: entered promiscuous mode [ 1568.772326][T25402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.783737][T25402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.820131][T16722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.829184][T16722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.838409][T16722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.852997][T16710] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.867347][T25526] SELinux: ebitmap: truncated map [ 1568.875234][T25526] SELinux: failed to load policy [ 1568.947848][T25540] lo speed is unknown, defaulting to 1000 [ 1569.015876][T25538] random: crng reseeded on system resumption [ 1569.053516][T25540] lo speed is unknown, defaulting to 1000 [ 1569.103109][T25546] syz_tun: entered allmulticast mode [ 1569.199986][T25548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=777 sclass=netlink_route_socket pid=25548 comm=syz.4.17375 [ 1569.222123][T25548] lo speed is unknown, defaulting to 1000 [ 1569.258143][T25548] lo speed is unknown, defaulting to 1000 [ 1569.363350][T25549] lo speed is unknown, defaulting to 1000 [ 1569.424728][T25549] lo speed is unknown, defaulting to 1000 [ 1569.993637][T25556] __nla_validate_parse: 9 callbacks suppressed [ 1569.993669][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17380'. [ 1570.029954][T25561] sd 0:0:1:0: device reset [ 1570.031002][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17384'. [ 1570.063056][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17384'. [ 1570.131787][T25564] SELinux: ebitmap: truncated map [ 1570.146189][T25564] SELinux: failed to load policy [ 1570.152008][T25571] hugetlbfs: Unknown parameter '' [ 1571.380675][T25581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17391'. [ 1571.434411][T25586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17392'. [ 1571.466253][T25588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17393'. [ 1571.550018][T25594] sd 0:0:1:0: device reset [ 1571.595100][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17397'. [ 1571.621592][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17397'. [ 1571.632085][T25581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=777 sclass=netlink_route_socket pid=25581 comm=syz.4.17391 [ 1571.691438][T25581] lo speed is unknown, defaulting to 1000 [ 1571.703202][T25605] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17399'. [ 1571.719147][T25599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.743656][T25599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.787131][T18538] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1571.811722][T18538] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1571.830032][T25581] lo speed is unknown, defaulting to 1000 [ 1572.136328][T25611] hugetlbfs: Unknown parameter '' [ 1572.990591][T12611] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.028165][T12611] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.047355][T12611] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.056177][T12611] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.114642][T25626] sd 0:0:1:0: device reset [ 1573.122927][T25625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17406'. [ 1573.161831][T25632] syz_tun: entered allmulticast mode [ 1573.406123][T25638] lo speed is unknown, defaulting to 1000 [ 1573.466068][T25638] lo speed is unknown, defaulting to 1000 [ 1573.884800][T25648] hugetlbfs: Unknown parameter '' [ 1573.978399][T25646] lo speed is unknown, defaulting to 1000 [ 1574.017303][T25646] lo speed is unknown, defaulting to 1000 [ 1574.127689][T25661] sd 0:0:1:0: device reset [ 1574.177574][T25664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.193000][T25664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.203575][T18538] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1574.234189][T18538] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1574.505203][T25670] lo speed is unknown, defaulting to 1000 [ 1574.545431][T25670] lo speed is unknown, defaulting to 1000 [ 1574.744819][T25681] hugetlbfs: Unknown parameter '' [ 1575.501543][T25683] __nla_validate_parse: 11 callbacks suppressed [ 1575.501588][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17428'. [ 1575.517158][T25683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17428'. [ 1575.569139][T25691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17430'. [ 1575.583343][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17432'. [ 1575.593322][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17432'. [ 1575.617993][T25697] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17434'. [ 1575.661486][T25699] random: crng reseeded on system resumption [ 1575.680984][T25703] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17437'. [ 1575.737186][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1575.737205][ T29] audit: type=1326 audit(1757616935.215:311477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.768979][ T29] audit: type=1326 audit(1757616935.215:311478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.793074][ T29] audit: type=1326 audit(1757616935.215:311479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.807143][T25712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.817493][ T29] audit: type=1326 audit(1757616935.225:311480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.827870][T25712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.850075][ T29] audit: type=1326 audit(1757616935.225:311481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.882601][ T29] audit: type=1326 audit(1757616935.225:311482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.885857][T18538] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1575.907299][ T29] audit: type=1326 audit(1757616935.225:311483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.907380][ T29] audit: type=1326 audit(1757616935.225:311484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.917614][T18538] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1575.938906][ T29] audit: type=1326 audit(1757616935.225:311485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1575.938940][ T29] audit: type=1326 audit(1757616935.225:311486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25704 comm="syz.7.17439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90abc8eba9 code=0x7ffc0000 [ 1576.023240][T25708] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.094195][T25708] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.136839][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17444'. [ 1576.191604][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17446'. [ 1576.204446][T25727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17447'. [ 1576.217825][T25708] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.286652][T25708] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.302164][T25728] loop2: detected capacity change from 0 to 512 [ 1576.327239][T25728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.327322][T25728] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1576.343630][T25728] lo speed is unknown, defaulting to 1000 [ 1576.377700][T25728] lo speed is unknown, defaulting to 1000 [ 1576.588306][T25746] SELinux: ebitmap: truncated map [ 1576.594974][T25746] SELinux: failed to load policy [ 1576.615131][T25743] loop4: detected capacity change from 0 to 512 [ 1576.625288][T25750] sd 0:0:1:0: device reset [ 1576.638768][T25743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.651553][T25743] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1576.676032][T25743] lo speed is unknown, defaulting to 1000 [ 1576.710957][T25743] lo speed is unknown, defaulting to 1000 [ 1576.812781][T17526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.022629][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.190859][T25773] siw: device registration error -23 [ 1577.789534][T25775] siw: device registration error -23 [ 1578.059107][T25779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.127245][T25780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.136522][T25780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.148792][T18538] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1578.198773][T18538] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1578.220768][T25779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.243939][T25786] sd 0:0:1:0: device reset [ 1578.297590][T25779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.322362][T25790] random: crng reseeded on system resumption [ 1578.405220][T25779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.465856][T16722] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.477564][T16722] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.494727][T16722] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.513419][T16722] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.676422][T25805] random: crng reseeded on system resumption [ 1578.898387][T25815] siw: device registration error -23 [ 1579.436200][T16704] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.450437][T16704] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.458702][T16704] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.468716][T16704] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.485516][T25827] lo speed is unknown, defaulting to 1000 [ 1579.538344][T25827] lo speed is unknown, defaulting to 1000 [ 1579.802023][T25838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.833190][T25838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.884958][T17970] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1579.917651][T17970] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1580.234227][T25831] lo speed is unknown, defaulting to 1000 [ 1580.269991][T25831] lo speed is unknown, defaulting to 1000 [ 1580.544139][T25865] __nla_validate_parse: 13 callbacks suppressed [ 1580.544157][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17497'. [ 1580.642621][T25867] random: crng reseeded on system resumption [ 1580.787836][T25872] random: crng reseeded on system resumption [ 1580.873003][T25877] lo speed is unknown, defaulting to 1000 [ 1580.883317][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1580.883336][ T29] audit: type=1326 audit(1757616940.395:311529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1580.883437][ T29] audit: type=1326 audit(1757616940.395:311530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1580.884121][ T29] audit: type=1326 audit(1757616940.395:311531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1580.932964][T25877] lo speed is unknown, defaulting to 1000 [ 1580.943668][ T29] audit: type=1326 audit(1757616940.395:311532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1580.943775][ T29] audit: type=1326 audit(1757616940.395:311533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1581.022678][ T29] audit: type=1326 audit(1757616940.515:311534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1581.046946][ T29] audit: type=1326 audit(1757616940.515:311535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1581.071193][ T29] audit: type=1326 audit(1757616940.515:311536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1581.095441][ T29] audit: type=1326 audit(1757616940.515:311537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1581.145028][ T29] audit: type=1326 audit(1757616940.585:311538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25882 comm="syz.6.17505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c5e8eba9 code=0x7ffc0000 [ 1581.177787][T25890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17508'. [ 1581.265366][T25894] lo speed is unknown, defaulting to 1000 [ 1581.269220][T25896] random: crng reseeded on system resumption [ 1581.318407][T25894] lo speed is unknown, defaulting to 1000 [ 1581.591251][T25915] siw: device registration error -23 [ 1582.300233][T25919] lo speed is unknown, defaulting to 1000 [ 1582.368823][T25919] lo speed is unknown, defaulting to 1000 [ 1582.468181][T25923] random: crng reseeded on system resumption [ 1582.572073][T25926] loop2: detected capacity change from 0 to 512 [ 1582.605406][T25926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1582.618027][T25926] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1582.642817][T25926] lo speed is unknown, defaulting to 1000 [ 1582.679048][T25926] lo speed is unknown, defaulting to 1000 [ 1582.786000][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.818288][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17524'. [ 1582.854009][T25940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17524'. [ 1582.929903][T25942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17525'. [ 1583.017778][T25949] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17528'. [ 1583.043650][T25951] netlink: 'syz.6.17529': attribute type 27 has an invalid length. [ 1583.217672][T25954] lo speed is unknown, defaulting to 1000 [ 1583.258824][T25954] lo speed is unknown, defaulting to 1000 [ 1583.765406][T25965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17533'. [ 1583.839640][T25967] random: crng reseeded on system resumption [ 1583.976505][T25973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17536'. [ 1584.237008][T25995] netlink: 'syz.2.17545': attribute type 27 has an invalid length. [ 1584.524395][T26004] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.581656][T26000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.630613][T26000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.675664][T26004] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.703252][T18541] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1584.730468][T18541] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1584.747392][T26002] lo speed is unknown, defaulting to 1000 [ 1584.782418][T26004] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.843587][T26004] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.859410][T26002] lo speed is unknown, defaulting to 1000 [ 1584.900321][T16764] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.912699][ T498] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.931126][ T498] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.931257][T26011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1584.931424][T26011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.940042][ T498] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.980890][T17970] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1584.989053][T17970] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1585.100490][T26013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17548'. [ 1585.336143][T26032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=777 sclass=netlink_route_socket pid=26032 comm=syz.3.17548 [ 1585.358887][T26032] lo speed is unknown, defaulting to 1000 [ 1585.393612][T26032] lo speed is unknown, defaulting to 1000 [ 1585.585675][T26037] sd 0:0:1:0: device reset [ 1585.720551][T26040] siw: device registration error -23 [ 1586.329411][T26042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17558'. [ 1586.700689][T26044] netlink: 'syz.3.17559': attribute type 27 has an invalid length. [ 1586.742478][T26044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.749674][T26044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.768718][T26047] random: crng reseeded on system resumption [ 1586.805582][T26044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.818362][T26044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.858265][T16764] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.867954][T16764] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.877005][T16764] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.885895][T16764] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.020584][T26056] lo speed is unknown, defaulting to 1000 [ 1587.052916][T26056] lo speed is unknown, defaulting to 1000 [ 1587.264166][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17566'. [ 1587.405120][T26067] random: crng reseeded on system resumption [ 1587.508501][T26070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17568'. [ 1587.522605][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17568'. [ 1587.594898][T26073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=777 sclass=netlink_route_socket pid=26073 comm=syz.4.17566 [ 1587.625635][T26073] lo speed is unknown, defaulting to 1000 [ 1587.671702][T26073] lo speed is unknown, defaulting to 1000 [ 1588.186919][T26083] random: crng reseeded on system resumption [ 1588.281200][T26088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.289935][T26088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.299570][ T1036] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1588.307438][ T1036] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1588.522497][T26090] lo speed is unknown, defaulting to 1000 [ 1588.550553][T26090] lo speed is unknown, defaulting to 1000 [ 1588.735583][T26094] loop6: detected capacity change from 0 to 512 [ 1588.751531][T26094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1588.764220][T26094] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.799583][T26094] lo speed is unknown, defaulting to 1000 [ 1588.835021][T26094] lo speed is unknown, defaulting to 1000 [ 1588.906886][T26101] syzkaller0: entered allmulticast mode [ 1588.915881][T26101] syzkaller0 (unregistering): left allmulticast mode [ 1588.936778][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.002252][T26106] random: crng reseeded on system resumption [ 1589.065502][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17580'. [ 1589.306290][T26113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=777 sclass=netlink_route_socket pid=26113 comm=syz.6.17580 [ 1589.328863][T26113] lo speed is unknown, defaulting to 1000 [ 1589.365329][T26113] lo speed is unknown, defaulting to 1000 [ 1589.453301][T26115] netlink: 'syz.4.17582': attribute type 27 has an invalid length. [ 1589.976164][T26129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17588'. [ 1590.048021][T26136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.057212][T26136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.067932][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1590.075912][ T10] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1590.155204][T26140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17592'. [ 1590.328447][T26142] lo speed is unknown, defaulting to 1000 [ 1590.338532][T26147] random: crng reseeded on system resumption [ 1590.375252][T26142] lo speed is unknown, defaulting to 1000 [ 1590.463059][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17599'. [ 1590.473046][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17599'. [ 1590.484189][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1590.484251][ T29] audit: type=1400 audit(1757616949.995:311545): avc: denied { mount } for pid=26155 comm="syz.4.17599" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1590.513609][ T29] audit: type=1400 audit(1757616950.005:311546): avc: denied { write } for pid=26155 comm="syz.4.17599" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1590.534850][ T29] audit: type=1400 audit(1757616950.005:311547): avc: denied { open } for pid=26155 comm="syz.4.17599" path="/555/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1590.561436][ T29] audit: type=1400 audit(1757616950.055:311548): avc: denied { unmount } for pid=17526 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1590.706540][T26170] loop4: detected capacity change from 0 to 2048 [ 1590.779120][T26174] loop7: detected capacity change from 0 to 8192 [ 1590.799088][T26170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1590.815689][T26174] netlink: 196 bytes leftover after parsing attributes in process `syz.7.17606'. [ 1590.822086][T26167] lo speed is unknown, defaulting to 1000 [ 1590.828771][ T29] audit: type=1400 audit(1757616950.335:311549): avc: denied { mounton } for pid=26169 comm="syz.4.17604" path="/557/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1590.859408][T26167] lo speed is unknown, defaulting to 1000 [ 1590.895255][ T29] audit: type=1326 audit(1757616950.385:311550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.4.17604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1590.919714][ T29] audit: type=1326 audit(1757616950.385:311551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.4.17604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1590.943503][ T29] audit: type=1326 audit(1757616950.385:311552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.4.17604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1590.967388][ T29] audit: type=1326 audit(1757616950.385:311553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.4.17604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1590.991708][ T29] audit: type=1326 audit(1757616950.385:311554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.4.17604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1591.025146][T26188] FAULT_INJECTION: forcing a failure. [ 1591.025146][T26188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.031003][T17526] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1591.038703][T26188] CPU: 0 UID: 0 PID: 26188 Comm: syz.3.17609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1591.038738][T26188] Tainted: [W]=WARN [ 1591.038746][T26188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1591.038758][T26188] Call Trace: [ 1591.038765][T26188] [ 1591.038775][T26188] __dump_stack+0x1d/0x30 [ 1591.038797][T26188] dump_stack_lvl+0xe8/0x140 [ 1591.038818][T26188] dump_stack+0x15/0x1b [ 1591.038914][T26188] should_fail_ex+0x265/0x280 [ 1591.038939][T26188] should_fail+0xb/0x20 [ 1591.038960][T26188] should_fail_usercopy+0x1a/0x20 [ 1591.039056][T26188] _copy_to_user+0x20/0xa0 [ 1591.039087][T26188] simple_read_from_buffer+0xb5/0x130 [ 1591.039111][T26188] proc_fail_nth_read+0x10e/0x150 [ 1591.039199][T26188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1591.039225][T26188] vfs_read+0x1a8/0x770 [ 1591.039253][T26188] ? __rcu_read_unlock+0x4f/0x70 [ 1591.039282][T26188] ? __fget_files+0x184/0x1c0 [ 1591.039332][T26188] ksys_read+0xda/0x1a0 [ 1591.039356][T26188] __x64_sys_read+0x40/0x50 [ 1591.039379][T26188] x64_sys_call+0x27bc/0x2ff0 [ 1591.039401][T26188] do_syscall_64+0xd2/0x200 [ 1591.039480][T26188] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1591.039505][T26188] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1591.039596][T26188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.039618][T26188] RIP: 0033:0x7fda8465d5bc [ 1591.039663][T26188] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1591.039683][T26188] RSP: 002b:00007fda830bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1591.039705][T26188] RAX: ffffffffffffffda RBX: 00007fda848a5fa0 RCX: 00007fda8465d5bc [ 1591.039719][T26188] RDX: 000000000000000f RSI: 00007fda830bf0a0 RDI: 0000000000000004 [ 1591.039732][T26188] RBP: 00007fda830bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.039746][T26188] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1591.039801][T26188] R13: 00007fda848a6038 R14: 00007fda848a5fa0 R15: 00007ffea4f16708 [ 1591.039820][T26188] [ 1591.466262][T17526] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1591.484500][T17526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.555292][T26202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17612'. [ 1592.006647][T26198] lo speed is unknown, defaulting to 1000 [ 1592.078947][T26216] sd 0:0:1:0: device reset [ 1592.080999][T26198] lo speed is unknown, defaulting to 1000 [ 1592.130175][T26218] random: crng reseeded on system resumption [ 1592.219665][T26223] random: crng reseeded on system resumption [ 1592.572229][T26240] loop6: detected capacity change from 0 to 8192 [ 1592.650307][T26244] sd 0:0:1:0: device reset [ 1592.684628][T26249] random: crng reseeded on system resumption [ 1592.818696][T26254] sd 0:0:1:0: device reset [ 1592.841302][T26256] loop7: detected capacity change from 0 to 1024 [ 1592.850967][T26256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.864086][T26256] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.929936][T26259] siw: device registration error -23 [ 1593.055687][T26260] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.17633: lblock 3 mapped to illegal pblock 3 (length 3) [ 1593.292463][T26260] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1593.305145][T26260] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1593.305145][T26260] [ 1593.470104][T26265] lo speed is unknown, defaulting to 1000 [ 1593.480856][T16722] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:30: lblock 8 mapped to illegal pblock 8 (length 8) [ 1593.505093][T26265] lo speed is unknown, defaulting to 1000 [ 1593.544302][T16722] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1593.556848][T16722] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1593.556848][T16722] [ 1593.570166][T24797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1593.735587][T26287] random: crng reseeded on system resumption [ 1593.752731][T26289] sd 0:0:1:0: device reset [ 1593.838249][T26300] random: crng reseeded on system resumption [ 1594.040507][T26301] loop7: detected capacity change from 0 to 512 [ 1594.060142][T26305] loop6: detected capacity change from 0 to 512 [ 1594.071814][T26301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.084602][T26301] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.105681][T26305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.110263][T26301] lo speed is unknown, defaulting to 1000 [ 1594.118354][T26305] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1594.200823][T26301] lo speed is unknown, defaulting to 1000 [ 1594.291909][T26317] lo speed is unknown, defaulting to 1000 [ 1594.349177][T26317] lo speed is unknown, defaulting to 1000 [ 1594.455213][T26316] siw: device registration error -23 [ 1594.604418][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.681718][T24797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.725328][T26324] sd 0:0:1:0: device reset [ 1594.731904][T26325] random: crng reseeded on system resumption [ 1594.804782][T26335] FAULT_INJECTION: forcing a failure. [ 1594.804782][T26335] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.817760][T26335] CPU: 0 UID: 0 PID: 26335 Comm: syz.4.17660 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1594.817795][T26335] Tainted: [W]=WARN [ 1594.817803][T26335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1594.817817][T26335] Call Trace: [ 1594.817823][T26335] [ 1594.817831][T26335] __dump_stack+0x1d/0x30 [ 1594.817869][T26335] dump_stack_lvl+0xe8/0x140 [ 1594.817944][T26335] dump_stack+0x15/0x1b [ 1594.817962][T26335] should_fail_ex+0x265/0x280 [ 1594.818049][T26335] should_failslab+0x8c/0xb0 [ 1594.818078][T26335] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1594.818112][T26335] ? __alloc_skb+0x101/0x320 [ 1594.818204][T26335] __alloc_skb+0x101/0x320 [ 1594.818230][T26335] netlink_alloc_large_skb+0xba/0xf0 [ 1594.818266][T26335] netlink_sendmsg+0x3cf/0x6b0 [ 1594.818294][T26335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1594.818380][T26335] __sock_sendmsg+0x142/0x180 [ 1594.818493][T26335] ____sys_sendmsg+0x31e/0x4e0 [ 1594.818524][T26335] ___sys_sendmsg+0x17b/0x1d0 [ 1594.818567][T26335] __x64_sys_sendmsg+0xd4/0x160 [ 1594.818600][T26335] x64_sys_call+0x191e/0x2ff0 [ 1594.818620][T26335] do_syscall_64+0xd2/0x200 [ 1594.818652][T26335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1594.818681][T26335] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1594.818787][T26335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.818807][T26335] RIP: 0033:0x7f2392b1eba9 [ 1594.818824][T26335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.818845][T26335] RSP: 002b:00007f239157f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.818870][T26335] RAX: ffffffffffffffda RBX: 00007f2392d65fa0 RCX: 00007f2392b1eba9 [ 1594.818933][T26335] RDX: 0000000000040000 RSI: 0000200000000d00 RDI: 0000000000000006 [ 1594.818947][T26335] RBP: 00007f239157f090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.818959][T26335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.818972][T26335] R13: 00007f2392d66038 R14: 00007f2392d65fa0 R15: 00007ffcc78044a8 [ 1594.818994][T26335] [ 1595.166381][T26348] loop6: detected capacity change from 0 to 128 [ 1595.184352][T26345] loop4: detected capacity change from 0 to 512 [ 1595.200066][T26348] vfat: Bad value for 'gid' [ 1595.204609][T26348] vfat: Bad value for 'gid' [ 1595.233338][T26345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1595.246331][T26345] ext4 filesystem being mounted at /570/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1595.270202][T26345] lo speed is unknown, defaulting to 1000 [ 1595.305061][T26345] lo speed is unknown, defaulting to 1000 [ 1595.323537][T26358] sd 0:0:1:0: device reset [ 1595.375660][T26362] netlink: 144 bytes leftover after parsing attributes in process `syz.2.17670'. [ 1595.504448][T26367] tipc: Started in network mode [ 1595.509578][T26367] tipc: Node identity , cluster identity 4711 [ 1595.515807][T26367] tipc: Failed to obtain node identity [ 1595.521336][T26367] tipc: Enabling of bearer rejected, failed to enable media [ 1595.550415][T17526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.572162][T26369] loop7: detected capacity change from 0 to 128 [ 1595.581179][T26369] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1595.639519][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 1595.639535][ T29] audit: type=1400 audit(1757616955.145:311658): avc: denied { module_load } for pid=26368 comm="syz.7.17674" path="/75/file2/bus" dev="loop7" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 1595.681959][T26376] loop6: detected capacity change from 0 to 128 [ 1595.692309][T26376] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1595.705091][T26369] bio_check_eod: 91 callbacks suppressed [ 1595.705111][T26369] syz.7.17674: attempt to access beyond end of device [ 1595.705111][T26369] loop7: rw=0, sector=97, nr_sectors = 944 limit=128 [ 1595.725895][T26378] siw: device registration error -23 [ 1595.756976][T26376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17676'. [ 1595.767770][T26376] netlink: 312 bytes leftover after parsing attributes in process `syz.6.17676'. [ 1595.777097][T26376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17676'. [ 1595.845001][T16710] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1596.170593][ T29] audit: type=1400 audit(1757616955.265:311659): avc: denied { ioctl } for pid=26375 comm="syz.6.17676" path="socket:[236547]" dev="sockfs" ino=236547 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1596.248061][T26395] siw: device registration error -23 [ 1596.344422][T26393] lo speed is unknown, defaulting to 1000 [ 1596.380382][T26393] lo speed is unknown, defaulting to 1000 [ 1596.501926][T26401] random: crng reseeded on system resumption [ 1596.576519][T26392] lo speed is unknown, defaulting to 1000 [ 1596.582541][T26399] loop4: detected capacity change from 0 to 8192 [ 1596.653730][ T29] audit: type=1400 audit(1757616956.165:311660): avc: denied { ioctl } for pid=26405 comm="syz.2.17686" path="socket:[236635]" dev="sockfs" ino=236635 ioctlcmd=0x2402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1596.708332][T26392] lo speed is unknown, defaulting to 1000 [ 1596.719289][ T29] audit: type=1400 audit(1757616956.165:311661): avc: denied { bind } for pid=26405 comm="syz.2.17686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1596.803833][ T29] audit: type=1326 audit(1757616956.315:311662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.3.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8465eba9 code=0x7ffc0000 [ 1596.827864][ T29] audit: type=1326 audit(1757616956.315:311663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.3.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8465eba9 code=0x7ffc0000 [ 1596.900876][ T29] audit: type=1326 audit(1757616956.315:311664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.3.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fda8465eba9 code=0x7ffc0000 [ 1596.924874][ T29] audit: type=1326 audit(1757616956.315:311665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.3.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8465eba9 code=0x7ffc0000 [ 1596.924907][ T29] audit: type=1326 audit(1757616956.315:311666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.3.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda8465eba9 code=0x7ffc0000 [ 1596.924933][ T29] audit: type=1326 audit(1757616956.365:311667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26414 comm="syz.3.17688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fda8465eba9 code=0x7ffc0000 [ 1597.090692][T26412] lo speed is unknown, defaulting to 1000 [ 1597.138211][T26424] random: crng reseeded on system resumption [ 1597.206063][T26412] lo speed is unknown, defaulting to 1000 [ 1597.365914][T26435] random: crng reseeded on system resumption [ 1597.393159][T26431] lo speed is unknown, defaulting to 1000 [ 1597.420642][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17697'. [ 1597.428323][T26431] lo speed is unknown, defaulting to 1000 [ 1597.438046][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17697'. [ 1597.545541][T26445] tipc: Started in network mode [ 1597.550556][T26445] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1597.557779][T26445] tipc: Enabled bearer , priority 0 [ 1597.580033][T26443] random: crng reseeded on system resumption [ 1597.588398][T26446] loop6: detected capacity change from 0 to 1024 [ 1597.597407][T26446] EXT4-fs: Ignoring removed bh option [ 1597.603122][T26446] EXT4-fs: inline encryption not supported [ 1597.611331][T26446] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1597.627726][T26446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1597.656924][T26446] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.17698: lblock 2 mapped to illegal pblock 2 (length 1) [ 1597.672941][T26446] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.17698: lblock 0 mapped to illegal pblock 48 (length 1) [ 1597.688349][T26446] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.17698: Failed to acquire dquot type 0 [ 1597.702201][T26446] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1597.712193][T26446] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.17698: mark_inode_dirty error [ 1597.724532][T26446] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1597.734871][T26446] EXT4-fs (loop6): 1 orphan inode deleted [ 1597.741286][T26446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1597.754206][T16710] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 1597.789000][T16710] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:20: Failed to release dquot type 0 [ 1597.803028][T26442] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm syz.6.17698: lblock 1 mapped to illegal pblock 1 (length 1) [ 1597.830712][T26458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17705'. [ 1597.865691][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.884482][T21592] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1597.903137][T21592] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1597.922087][T21592] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1597.934851][T26448] lo speed is unknown, defaulting to 1000 [ 1597.979439][T26464] random: crng reseeded on system resumption [ 1598.041239][T26448] lo speed is unknown, defaulting to 1000 [ 1598.093664][T26466] loop2: detected capacity change from 0 to 512 [ 1598.138873][T26466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1598.151597][T26467] loop4: detected capacity change from 0 to 512 [ 1598.151579][T26466] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1598.164678][T26466] lo speed is unknown, defaulting to 1000 [ 1598.203823][T26466] lo speed is unknown, defaulting to 1000 [ 1598.254072][T26469] lo speed is unknown, defaulting to 1000 [ 1598.299438][T26467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1598.312257][T26467] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1598.313949][T26469] lo speed is unknown, defaulting to 1000 [ 1598.341190][T26467] lo speed is unknown, defaulting to 1000 [ 1598.376128][T26467] lo speed is unknown, defaulting to 1000 [ 1598.521478][T17526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.641558][T26482] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.696850][T26485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.734576][T26482] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.795488][T26485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.816288][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.848266][T18541] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1598.869049][ T4880] tipc: Node number set to 11578026 [ 1598.888868][T18541] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1598.901144][T26482] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.940941][T26482] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.982002][T26496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.005120][T26497] random: crng reseeded on system resumption [ 1599.011354][T26496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.058425][T18541] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1599.059013][T18541] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1599.092469][T16722] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.105148][T12611] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.118011][T12611] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.131934][T12611] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.182251][T26508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17719'. [ 1599.422502][T26518] lo speed is unknown, defaulting to 1000 [ 1599.427298][T26525] netlink: 120 bytes leftover after parsing attributes in process `syz.6.17724'. [ 1599.437963][T26525] netlink: 120 bytes leftover after parsing attributes in process `syz.6.17724'. [ 1599.457270][T26518] lo speed is unknown, defaulting to 1000 [ 1599.474652][T26519] lo speed is unknown, defaulting to 1000 [ 1599.526210][T26519] lo speed is unknown, defaulting to 1000 [ 1599.892971][T26534] C: renamed from team_slave_0 [ 1599.902544][T26534] can0: slcan on ttyS3. [ 1599.916739][T26538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1599.925515][T26538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1599.934481][T13534] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1599.942914][T13534] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1599.979605][T26534] can0 (unregistered): slcan off ttyS3. [ 1599.988037][T26539] can0: slcan on ttyS3. [ 1600.057654][T26541] random: crng reseeded on system resumption [ 1600.079617][T26533] can0 (unregistered): slcan off ttyS3. [ 1600.307024][T26554] loop8: detected capacity change from 0 to 7 [ 1600.819826][T26556] siw: device registration error -23 [ 1601.443350][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1601.443366][ T29] audit: type=1400 audit(1757616960.955:311724): avc: denied { write } for pid=26557 comm="syz.6.17734" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1601.461472][T26558] program syz.6.17734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1601.483558][T26558] FAULT_INJECTION: forcing a failure. [ 1601.483558][T26558] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.496263][T26558] CPU: 1 UID: 0 PID: 26558 Comm: syz.6.17734 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1601.496333][T26558] Tainted: [W]=WARN [ 1601.496341][T26558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1601.496432][T26558] Call Trace: [ 1601.496440][T26558] [ 1601.496449][T26558] __dump_stack+0x1d/0x30 [ 1601.496476][T26558] dump_stack_lvl+0xe8/0x140 [ 1601.496499][T26558] dump_stack+0x15/0x1b [ 1601.496519][T26558] should_fail_ex+0x265/0x280 [ 1601.496544][T26558] ? sdev_prefix_printk+0x79/0x170 [ 1601.496615][T26558] should_failslab+0x8c/0xb0 [ 1601.496650][T26558] __kmalloc_cache_noprof+0x4c/0x320 [ 1601.496738][T26558] sdev_prefix_printk+0x79/0x170 [ 1601.496766][T26558] ? vprintk_default+0x26/0x30 [ 1601.496789][T26558] ioctl_internal_command+0x223/0x250 [ 1601.496819][T26558] scsi_ioctl+0x635/0x14d0 [ 1601.496855][T26558] ? ioctl_has_perm+0x257/0x2a0 [ 1601.496876][T26558] ? scsi_block_when_processing_errors+0x1fa/0x230 [ 1601.496906][T26558] sg_ioctl+0x12fb/0x1360 [ 1601.496993][T26558] ? __pfx_sg_ioctl+0x10/0x10 [ 1601.497094][T26558] __se_sys_ioctl+0xce/0x140 [ 1601.497112][T26558] __x64_sys_ioctl+0x43/0x50 [ 1601.497128][T26558] x64_sys_call+0x1816/0x2ff0 [ 1601.497152][T26558] do_syscall_64+0xd2/0x200 [ 1601.497292][T26558] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1601.497318][T26558] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1601.497348][T26558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.497373][T26558] RIP: 0033:0x7f66c5e8eba9 [ 1601.497392][T26558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1601.497421][T26558] RSP: 002b:00007f66c48ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1601.497515][T26558] RAX: ffffffffffffffda RBX: 00007f66c60d5fa0 RCX: 00007f66c5e8eba9 [ 1601.497528][T26558] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007 [ 1601.497594][T26558] RBP: 00007f66c48ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.497609][T26558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.497624][T26558] R13: 00007f66c60d6038 R14: 00007f66c60d5fa0 R15: 00007ffd5de83078 [ 1601.497644][T26558] [ 1601.769061][T26561] loop7: detected capacity change from 0 to 8192 [ 1601.824592][ T29] audit: type=1400 audit(1757616961.335:311725): avc: denied { read } for pid=26564 comm="syz.6.17737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1601.924739][T26573] random: crng reseeded on system resumption [ 1601.942305][T26565] smc: net device bond0 applied user defined pnetid SYZ0 [ 1601.951178][T26565] smc: net device bond0 erased user defined pnetid SYZ0 [ 1601.990105][T26578] random: crng reseeded on system resumption [ 1602.062459][T26579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.073317][T26579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.086754][T18541] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1602.096985][T26583] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17742'. [ 1602.097075][T18541] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1602.120182][T26581] loop4: detected capacity change from 0 to 512 [ 1602.136378][T26581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1602.149148][T26581] ext4 filesystem being mounted at /584/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1602.156536][T26590] random: crng reseeded on system resumption [ 1602.201336][T26581] lo speed is unknown, defaulting to 1000 [ 1602.218188][T26592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17745'. [ 1602.237963][T26581] lo speed is unknown, defaulting to 1000 [ 1602.400115][T26596] loop6: detected capacity change from 0 to 512 [ 1602.421929][T26596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1602.440594][T26596] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1602.463730][T26596] FAULT_INJECTION: forcing a failure. [ 1602.463730][T26596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.482741][T26596] CPU: 0 UID: 0 PID: 26596 Comm: syz.6.17747 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1602.482781][T26596] Tainted: [W]=WARN [ 1602.482789][T26596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1602.482803][T26596] Call Trace: [ 1602.482812][T26596] [ 1602.482822][T26596] __dump_stack+0x1d/0x30 [ 1602.482848][T26596] dump_stack_lvl+0xe8/0x140 [ 1602.482926][T26596] dump_stack+0x15/0x1b [ 1602.482945][T26596] should_fail_ex+0x265/0x280 [ 1602.482973][T26596] should_fail+0xb/0x20 [ 1602.482996][T26596] should_fail_usercopy+0x1a/0x20 [ 1602.483093][T26596] _copy_from_user+0x1c/0xb0 [ 1602.483130][T26596] ext4_ioctl+0x718/0x2080 [ 1602.483231][T26596] ? __pfx_ext4_ioctl+0x10/0x10 [ 1602.483254][T26596] __se_sys_ioctl+0xce/0x140 [ 1602.483273][T26596] __x64_sys_ioctl+0x43/0x50 [ 1602.483292][T26596] x64_sys_call+0x1816/0x2ff0 [ 1602.483316][T26596] do_syscall_64+0xd2/0x200 [ 1602.483368][T26596] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1602.483394][T26596] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1602.483426][T26596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.483450][T26596] RIP: 0033:0x7f66c5e8eba9 [ 1602.483479][T26596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.483531][T26596] RSP: 002b:00007f66c48ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1602.483556][T26596] RAX: ffffffffffffffda RBX: 00007f66c60d5fa0 RCX: 00007f66c5e8eba9 [ 1602.483571][T26596] RDX: 0000200000000d40 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 1602.483586][T26596] RBP: 00007f66c48ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.483600][T26596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.483615][T26596] R13: 00007f66c60d6038 R14: 00007f66c60d5fa0 R15: 00007ffd5de83078 [ 1602.483634][T26596] [ 1602.852994][T17526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.918484][T26606] siw: device registration error -23 [ 1603.129724][T26610] random: crng reseeded on system resumption [ 1603.249652][ T29] audit: type=1326 audit(1757616962.765:311726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26611 comm="syz.2.17754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1603.279702][T26612] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 1603.287456][T26612] audit: out of memory in audit_log_start [ 1603.323277][ T29] audit: type=1326 audit(1757616962.785:311727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26611 comm="syz.2.17754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1603.324596][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.347292][ T29] audit: type=1326 audit(1757616962.785:311728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26611 comm="syz.2.17754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b0f1ad510 code=0x7ffc0000 [ 1603.347325][ T29] audit: type=1326 audit(1757616962.795:311729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26611 comm="syz.2.17754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b0f1ad65f code=0x7ffc0000 [ 1603.373084][T26612] loop2: detected capacity change from 0 to 128 [ 1603.384055][ T29] audit: type=1326 audit(1757616962.875:311730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26611 comm="syz.2.17754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b0f1aebe3 code=0x7ffc0000 [ 1603.411619][T26612] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1603.434848][ T29] audit: type=1326 audit(1757616962.875:311731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26611 comm="syz.2.17754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b0f1ad65f code=0x7ffc0000 [ 1603.485677][T26620] random: crng reseeded on system resumption [ 1603.527049][T26627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17759'. [ 1603.536338][T26627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17759'. [ 1603.545480][T26627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17759'. [ 1603.563999][T26627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17759'. [ 1603.573226][T26627] netlink: 'syz.2.17759': attribute type 6 has an invalid length. [ 1603.698537][T26634] $Hÿ: renamed from bond0 [ 1603.706997][T26634] $Hÿ: entered promiscuous mode [ 1603.712102][T26634] bond_slave_0: entered promiscuous mode [ 1603.717921][T26634] bond_slave_1: entered promiscuous mode [ 1603.727693][T26634] loop2: detected capacity change from 0 to 128 [ 1603.744678][T26634] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1603.747193][T26621] lo speed is unknown, defaulting to 1000 [ 1603.786530][T26621] lo speed is unknown, defaulting to 1000 [ 1603.796206][T26635] loop6: detected capacity change from 0 to 512 [ 1603.821194][T26635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.833886][T26635] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.858869][T26635] lo speed is unknown, defaulting to 1000 [ 1603.887951][T26635] lo speed is unknown, defaulting to 1000 [ 1604.138036][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17762'. [ 1604.147213][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17762'. [ 1604.194427][T26644] random: crng reseeded on system resumption [ 1604.359280][T26652] program syz.3.17767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1604.378819][T26652] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1604.538041][T26655] lo speed is unknown, defaulting to 1000 [ 1604.596476][T26655] lo speed is unknown, defaulting to 1000 [ 1604.611446][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.645441][T26658] random: crng reseeded on system resumption [ 1604.766669][T26668] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 1604.775185][T26668] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 1604.783929][T26668] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 1604.802170][T26668] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 1605.258428][T26681] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.280286][T26684] loop2: detected capacity change from 0 to 1024 [ 1605.292137][T26684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1605.323118][T20290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.351520][T26681] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.401289][T26681] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.423527][T26690] loop4: detected capacity change from 0 to 512 [ 1605.428783][T26693] hugetlbfs: Unknown parameter '' [ 1605.441282][T26690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1605.453876][T26690] ext4 filesystem being mounted at /593/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1605.472658][T26681] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.494358][T26690] lo speed is unknown, defaulting to 1000 [ 1605.530370][T26690] lo speed is unknown, defaulting to 1000 [ 1605.584406][T16722] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.585727][T26699] random: crng reseeded on system resumption [ 1605.602504][T16722] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.602600][T16722] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.606725][T16722] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.675345][T26701] SELinux: failed to load policy [ 1605.854285][T26719] lo speed is unknown, defaulting to 1000 [ 1605.895652][T26719] lo speed is unknown, defaulting to 1000 [ 1606.161326][T17526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.415192][T26735] FAULT_INJECTION: forcing a failure. [ 1606.415192][T26735] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.428132][T26735] CPU: 1 UID: 0 PID: 26735 Comm: syz.2.17796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1606.428169][T26735] Tainted: [W]=WARN [ 1606.428176][T26735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1606.428189][T26735] Call Trace: [ 1606.428195][T26735] [ 1606.428243][T26735] __dump_stack+0x1d/0x30 [ 1606.428267][T26735] dump_stack_lvl+0xe8/0x140 [ 1606.428287][T26735] dump_stack+0x15/0x1b [ 1606.428306][T26735] should_fail_ex+0x265/0x280 [ 1606.428373][T26735] should_failslab+0x8c/0xb0 [ 1606.428402][T26735] kmem_cache_alloc_noprof+0x50/0x310 [ 1606.428449][T26735] ? getname_flags+0x80/0x3b0 [ 1606.428541][T26735] getname_flags+0x80/0x3b0 [ 1606.428571][T26735] user_path_at+0x28/0x130 [ 1606.428650][T26735] __se_sys_quotactl+0xb6/0x670 [ 1606.428676][T26735] __x64_sys_quotactl+0x55/0x70 [ 1606.428699][T26735] x64_sys_call+0x15d6/0x2ff0 [ 1606.428723][T26735] do_syscall_64+0xd2/0x200 [ 1606.428758][T26735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1606.428786][T26735] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1606.428818][T26735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.428866][T26735] RIP: 0033:0x7f0b0f1aeba9 [ 1606.428881][T26735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.428903][T26735] RSP: 002b:00007f0b0dc17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1606.428926][T26735] RAX: ffffffffffffffda RBX: 00007f0b0f3f5fa0 RCX: 00007f0b0f1aeba9 [ 1606.428943][T26735] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202 [ 1606.428971][T26735] RBP: 00007f0b0dc17090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.429035][T26734] random: crng reseeded on system resumption [ 1606.429055][T26735] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1606.429070][T26735] R13: 00007f0b0f3f6038 R14: 00007f0b0f3f5fa0 R15: 00007ffeb6d74668 [ 1606.429090][T26735] [ 1606.442500][T26737] loop6: detected capacity change from 0 to 512 [ 1606.673534][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 1606.673554][ T29] audit: type=1326 audit(1757616966.165:311866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.4.17800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1606.703863][ T29] audit: type=1326 audit(1757616966.165:311867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.4.17800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1606.727972][ T29] audit: type=1326 audit(1757616966.165:311868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.4.17800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1606.752338][ T29] audit: type=1326 audit(1757616966.165:311869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.4.17800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1606.776208][ T29] audit: type=1326 audit(1757616966.165:311870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26741 comm="syz.4.17800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2392b1eba9 code=0x7ffc0000 [ 1606.808983][T26737] EXT4-fs error (device loop6): ext4_quota_enable:7128: inode #4: comm syz.6.17798: iget: bogus i_mode (4200) [ 1606.821843][T26750] FAULT_INJECTION: forcing a failure. [ 1606.821843][T26750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.835146][T26750] CPU: 1 UID: 0 PID: 26750 Comm: syz.2.17803 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1606.835213][T26750] Tainted: [W]=WARN [ 1606.835221][T26750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1606.835234][T26750] Call Trace: [ 1606.835241][T26750] [ 1606.835249][T26750] __dump_stack+0x1d/0x30 [ 1606.835298][T26743] loop7: detected capacity change from 0 to 512 [ 1606.835360][T26750] dump_stack_lvl+0xe8/0x140 [ 1606.835382][T26750] dump_stack+0x15/0x1b [ 1606.835400][T26750] should_fail_ex+0x265/0x280 [ 1606.835424][T26750] should_fail+0xb/0x20 [ 1606.835446][T26750] should_fail_usercopy+0x1a/0x20 [ 1606.835472][T26750] _copy_from_user+0x1c/0xb0 [ 1606.835544][T26750] ___sys_sendmsg+0xc1/0x1d0 [ 1606.835619][T26750] __x64_sys_sendmsg+0xd4/0x160 [ 1606.835648][T26750] x64_sys_call+0x191e/0x2ff0 [ 1606.835670][T26750] do_syscall_64+0xd2/0x200 [ 1606.835707][T26750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1606.835734][T26750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1606.835763][T26750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.835785][T26750] RIP: 0033:0x7f0b0f1aeba9 [ 1606.835803][T26750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.835822][T26750] RSP: 002b:00007f0b0dc17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1606.835923][T26750] RAX: ffffffffffffffda RBX: 00007f0b0f3f5fa0 RCX: 00007f0b0f1aeba9 [ 1606.835937][T26750] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1606.835952][T26750] RBP: 00007f0b0dc17090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.835965][T26750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.836041][T26750] R13: 00007f0b0f3f6038 R14: 00007f0b0f3f5fa0 R15: 00007ffeb6d74668 [ 1606.836060][T26750] [ 1606.839008][T26737] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.17798: Bad quota inode: 4, type: 1 [ 1606.931967][T26743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1606.934033][T26737] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1606.939488][T26743] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1606.977391][T26737] EXT4-fs (loop6): mount failed [ 1607.101025][T26743] lo speed is unknown, defaulting to 1000 [ 1607.135074][T26743] lo speed is unknown, defaulting to 1000 [ 1607.219804][T26748] lo speed is unknown, defaulting to 1000 [ 1607.273484][T24797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.346411][T26761] lo speed is unknown, defaulting to 1000 [ 1607.402975][T26761] lo speed is unknown, defaulting to 1000 [ 1607.445251][T26748] lo speed is unknown, defaulting to 1000 [ 1607.456888][T26763] FAULT_INJECTION: forcing a failure. [ 1607.456888][T26763] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.470158][T26763] CPU: 0 UID: 0 PID: 26763 Comm: syz.2.17806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1607.470192][T26763] Tainted: [W]=WARN [ 1607.470198][T26763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1607.470212][T26763] Call Trace: [ 1607.470219][T26763] [ 1607.470229][T26763] __dump_stack+0x1d/0x30 [ 1607.470254][T26763] dump_stack_lvl+0xe8/0x140 [ 1607.470313][T26763] dump_stack+0x15/0x1b [ 1607.470329][T26763] should_fail_ex+0x265/0x280 [ 1607.470420][T26763] should_failslab+0x8c/0xb0 [ 1607.470448][T26763] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1607.470483][T26763] ? __alloc_skb+0x101/0x320 [ 1607.470550][T26763] __alloc_skb+0x101/0x320 [ 1607.470649][T26763] netlink_alloc_large_skb+0xba/0xf0 [ 1607.470671][T26763] netlink_sendmsg+0x3cf/0x6b0 [ 1607.470714][T26763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1607.470750][T26763] __sock_sendmsg+0x142/0x180 [ 1607.470840][T26763] ____sys_sendmsg+0x31e/0x4e0 [ 1607.470872][T26763] ___sys_sendmsg+0x17b/0x1d0 [ 1607.470913][T26763] __x64_sys_sendmsg+0xd4/0x160 [ 1607.470957][T26763] x64_sys_call+0x191e/0x2ff0 [ 1607.470978][T26763] do_syscall_64+0xd2/0x200 [ 1607.471012][T26763] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1607.471050][T26763] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1607.471120][T26763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.471147][T26763] RIP: 0033:0x7f0b0f1aeba9 [ 1607.471167][T26763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1607.471243][T26763] RSP: 002b:00007f0b0dc17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1607.471265][T26763] RAX: ffffffffffffffda RBX: 00007f0b0f3f5fa0 RCX: 00007f0b0f1aeba9 [ 1607.471281][T26763] RDX: 0000000004008800 RSI: 0000200000000540 RDI: 0000000000000003 [ 1607.471297][T26763] RBP: 00007f0b0dc17090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.471313][T26763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1607.471328][T26763] R13: 00007f0b0f3f6038 R14: 00007f0b0f3f5fa0 R15: 00007ffeb6d74668 [ 1607.471349][T26763] [ 1608.058098][T26737] loop6: detected capacity change from 0 to 1024 [ 1608.065312][T26737] EXT4-fs: Ignoring removed bh option [ 1608.080685][T26737] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1608.097467][T26737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 1608.130632][T26737] System zones: 0-1, 3-12 [ 1608.148940][T26737] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.17798: lblock 1 mapped to illegal pblock 1 (length 1) [ 1608.170050][T26782] random: crng reseeded on system resumption [ 1608.229551][T26737] Quota error (device loop6): write_blk: dquota write failed [ 1608.237101][T26737] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1608.252991][T26737] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.17798: Failed to acquire dquot type 0 [ 1608.282606][T26737] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.17798: Freeing blocks not in datazone - block = 0, count = 4096 [ 1608.314630][T26737] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.17798: Invalid inode bitmap blk 0 in block_group 0 [ 1608.350785][ T498] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1608.371889][ T498] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1608.380414][ T498] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 1608.396281][T26737] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 1608.418626][T26737] EXT4-fs (loop6): 1 orphan inode deleted [ 1608.439106][T26737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.467454][T26792] FAULT_INJECTION: forcing a failure. [ 1608.467454][T26792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.480707][T26792] CPU: 0 UID: 0 PID: 26792 Comm: syz.7.17812 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1608.480743][T26792] Tainted: [W]=WARN [ 1608.480751][T26792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1608.480765][T26792] Call Trace: [ 1608.480836][T26792] [ 1608.480846][T26792] __dump_stack+0x1d/0x30 [ 1608.480870][T26792] dump_stack_lvl+0xe8/0x140 [ 1608.480943][T26792] dump_stack+0x15/0x1b [ 1608.480998][T26792] should_fail_ex+0x265/0x280 [ 1608.481021][T26792] should_fail+0xb/0x20 [ 1608.481043][T26792] should_fail_usercopy+0x1a/0x20 [ 1608.481069][T26792] _copy_from_user+0x1c/0xb0 [ 1608.481137][T26792] restore_altstack+0x4b/0x2d0 [ 1608.481181][T26792] ? __set_task_blocked+0x23a/0x2a0 [ 1608.481280][T26792] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 1608.481348][T26792] ? _raw_spin_unlock_irq+0x26/0x50 [ 1608.481374][T26792] ? signal_setup_done+0x266/0x290 [ 1608.481392][T26792] ? xfd_validate_state+0x45/0xf0 [ 1608.481454][T26792] ? fpu__clear_user_states+0x63/0x1e0 [ 1608.481488][T26792] ? fpregs_mark_activate+0x66/0x140 [ 1608.481521][T26792] ? fpu__clear_user_states+0x63/0x1e0 [ 1608.481608][T26792] ? arch_do_signal_or_restart+0x2f3/0x480 [ 1608.481640][T26792] ? __rcu_read_unlock+0x4f/0x70 [ 1608.481698][T26792] x64_sys_call+0x2d3c/0x2ff0 [ 1608.481724][T26792] do_syscall_64+0xd2/0x200 [ 1608.481758][T26792] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1608.481847][T26792] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1608.481878][T26792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.481902][T26792] RIP: 0033:0x7f90abc2ada9 [ 1608.481920][T26792] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1608.481984][T26792] RSP: 002b:00007f90aa6f6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1608.482006][T26792] RAX: ffffffffffffffda RBX: 00007f90abed5fa0 RCX: 00007f90abc2ada9 [ 1608.482022][T26792] RDX: 00007f90aa6f6a80 RSI: 00007f90aa6f6bb0 RDI: 0000000000000021 [ 1608.482064][T26792] RBP: 00007f90aa6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.482078][T26792] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1608.482090][T26792] R13: 00007f90abed6038 R14: 00007f90abed5fa0 R15: 00007ffd34ae9088 [ 1608.482107][T26792] [ 1608.785336][ T29] audit: type=1326 audit(1757616968.295:311871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26800 comm="syz.2.17814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1608.813298][ T29] audit: type=1326 audit(1757616968.325:311872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26800 comm="syz.2.17814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0f1aeba9 code=0x7ffc0000 [ 1608.874308][T26813] __nla_validate_parse: 6 callbacks suppressed [ 1608.874325][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17816'. [ 1608.891659][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17816'. [ 1608.943304][T26737] netlink: 'syz.6.17798': attribute type 21 has an invalid length. [ 1608.969618][T26822] lo speed is unknown, defaulting to 1000 [ 1608.970126][T26737] netlink: 156 bytes leftover after parsing attributes in process `syz.6.17798'. [ 1608.984852][T26737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17798'. [ 1609.013142][T26737] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1609.053820][T26822] lo speed is unknown, defaulting to 1000 [ 1609.475526][T26855] loop7: detected capacity change from 0 to 512 [ 1609.491486][T26855] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1609.504286][T26855] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1609.528395][T26855] lo speed is unknown, defaulting to 1000 [ 1609.564445][T26855] lo speed is unknown, defaulting to 1000 [ 1609.572310][T26864] loop2: detected capacity change from 0 to 8192 [ 1609.706432][T26885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17822'. [ 1609.795851][T26890] lo speed is unknown, defaulting to 1000 [ 1609.837710][T26896] geneve2: entered allmulticast mode [ 1609.848719][T12611] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.862375][T26890] lo speed is unknown, defaulting to 1000 [ 1609.867547][T12611] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.886103][T26896] netlink: 148 bytes leftover after parsing attributes in process `syz.4.17823'. [ 1609.915523][T12611] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.932520][T12611] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.182462][T24797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.256324][T26930] lo speed is unknown, defaulting to 1000 [ 1610.337961][T21592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.345356][T26930] lo speed is unknown, defaulting to 1000 [ 1610.358454][T26956] random: crng reseeded on system resumption [ 1610.411961][T26962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17832'. [ 1610.649148][T26930] chnl_net:caif_netlink_parms(): no params data found [ 1610.682513][T26973] lo speed is unknown, defaulting to 1000 [ 1610.752849][T26973] lo speed is unknown, defaulting to 1000 [ 1610.965943][T26930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.973093][T26930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.046662][T26930] bridge_slave_0: entered allmulticast mode [ 1611.083673][T26930] bridge_slave_0: entered promiscuous mode [ 1611.091263][T26983] netlink: 272 bytes leftover after parsing attributes in process `syz.2.17836'. [ 1611.109549][T26930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.116736][T26930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.126446][T26930] bridge_slave_1: entered allmulticast mode [ 1611.169738][T26930] bridge_slave_1: entered promiscuous mode [ 1611.185304][T26981] lo speed is unknown, defaulting to 1000 [ 1611.207133][T26989] FAULT_INJECTION: forcing a failure. [ 1611.207133][T26989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.220331][T26989] CPU: 1 UID: 0 PID: 26989 Comm: syz.6.17839 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1611.220383][T26989] Tainted: [W]=WARN [ 1611.220392][T26989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1611.220407][T26989] Call Trace: [ 1611.220416][T26989] [ 1611.220465][T26989] __dump_stack+0x1d/0x30 [ 1611.220487][T26989] dump_stack_lvl+0xe8/0x140 [ 1611.220507][T26989] dump_stack+0x15/0x1b [ 1611.220527][T26989] should_fail_ex+0x265/0x280 [ 1611.220554][T26989] should_fail+0xb/0x20 [ 1611.220625][T26989] should_fail_usercopy+0x1a/0x20 [ 1611.220649][T26989] _copy_from_user+0x1c/0xb0 [ 1611.220751][T26989] ___sys_sendmsg+0xc1/0x1d0 [ 1611.220848][T26989] __x64_sys_sendmsg+0xd4/0x160 [ 1611.220875][T26989] x64_sys_call+0x191e/0x2ff0 [ 1611.220895][T26989] do_syscall_64+0xd2/0x200 [ 1611.220977][T26989] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1611.221005][T26989] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1611.221035][T26989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.221172][T26989] RIP: 0033:0x7f66c5e8eba9 [ 1611.221192][T26989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.221214][T26989] RSP: 002b:00007f66c48ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1611.221239][T26989] RAX: ffffffffffffffda RBX: 00007f66c60d5fa0 RCX: 00007f66c5e8eba9 [ 1611.221254][T26989] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1611.221267][T26989] RBP: 00007f66c48ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.221302][T26989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1611.221314][T26989] R13: 00007f66c60d6038 R14: 00007f66c60d5fa0 R15: 00007ffd5de83078 [ 1611.221333][T26989] [ 1611.507443][T26981] lo speed is unknown, defaulting to 1000 [ 1611.515669][T26930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.573348][T27000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17844'. [ 1611.576551][T26930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1611.624355][T26930] team0: Port device team_slave_0 added [ 1611.635940][T26930] team0: Port device team_slave_1 added [ 1611.700052][T26930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1611.707084][T26930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.733872][T26930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1611.752306][T27009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.761215][T27009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.771191][ T4880] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1611.779042][ T4880] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1611.789595][T26930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1611.796749][T26930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1611.822826][T26930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.854750][T26930] hsr_slave_0: entered promiscuous mode [ 1611.861178][T26930] hsr_slave_1: entered promiscuous mode [ 1611.867258][T26930] debugfs: 'hsr0' already exists in 'hsr' [ 1611.873157][T26930] Cannot create hsr debugfs directory [ 1611.969926][T26930] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.011227][T26930] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.056605][T26930] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.182466][T26930] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.192690][T27021] loop7: detected capacity change from 0 to 512 [ 1612.221662][T27021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1612.234293][T27021] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.256820][T27021] lo speed is unknown, defaulting to 1000 [ 1612.293179][T26930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1612.303003][T27021] lo speed is unknown, defaulting to 1000 [ 1612.310555][T26930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1612.325875][T26930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1612.339152][T26930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1612.396416][T26930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.410767][T26930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.421768][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.428879][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.441344][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.448498][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.474551][T26930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1612.485104][T26930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1612.546591][T26930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1612.582288][T27033] C: renamed from team_slave_0 [ 1612.594376][T27033] can0: slcan on ttyS3. [ 1612.594502][T27040] tipc: Started in network mode [ 1612.603775][T27040] tipc: Node identity ba3fd752aa69, cluster identity 4711 [ 1612.611046][T27040] tipc: Enabled bearer , priority 0 [ 1612.611138][T27033] ================================================================== [ 1612.625854][T27033] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1612.632928][T27033] [ 1612.635279][T27033] write to 0xffffffff86915498 of 88 bytes by task 27040 on cpu 1: [ 1612.643181][T27033] prb_reserve+0x696/0xaf0 [ 1612.647726][T27033] vprintk_store+0x56d/0x860 [ 1612.652046][T27040] syzkaller0: entered promiscuous mode [ 1612.652360][T27033] vprintk_emit+0x178/0x650 [ 1612.658019][T27040] syzkaller0: entered allmulticast mode [ 1612.662508][T27033] vprintk_default+0x26/0x30 [ 1612.662533][T27033] vprintk+0x1d/0x30 [ 1612.662560][T27033] _printk+0x79/0xa0 [ 1612.662590][T27033] __tipc_nl_bearer_enable+0xc55/0xda0 [ 1612.662619][T27033] tipc_nl_compat_doit+0x274/0x360 [ 1612.662654][T27033] tipc_nl_compat_recv+0x689/0x800 [ 1612.662686][T27033] genl_family_rcv_msg_doit+0x140/0x1b0 [ 1612.662718][T27033] genl_rcv_msg+0x422/0x460 [ 1612.662751][T27033] netlink_rcv_skb+0x123/0x220 [ 1612.662776][T27033] genl_rcv+0x28/0x40 [ 1612.662805][T27033] netlink_unicast+0x5bd/0x690 [ 1612.662828][T27033] netlink_sendmsg+0x58b/0x6b0 [ 1612.669797][T27040] tipc: Resetting bearer [ 1612.672946][T27033] __sock_sendmsg+0x142/0x180 [ 1612.735595][T27033] ____sys_sendmsg+0x31e/0x4e0 [ 1612.740370][T27033] ___sys_sendmsg+0x17b/0x1d0 [ 1612.745158][T27033] __x64_sys_sendmsg+0xd4/0x160 [ 1612.750032][T27033] x64_sys_call+0x191e/0x2ff0 [ 1612.754729][T27033] do_syscall_64+0xd2/0x200 [ 1612.759611][T27033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.765517][T27033] [ 1612.767854][T27033] read to 0xffffffff86915498 of 8 bytes by task 27033 on cpu 0: [ 1612.775582][T27033] _prb_read_valid+0x383/0x920 [ 1612.780414][T27033] prb_read_valid+0x3c/0x60 [ 1612.784953][T27033] console_unlock+0x164/0x330 [ 1612.789645][T27033] con_install+0x26b/0x2a0 [ 1612.794108][T27033] tty_init_dev+0x7c/0x330 [ 1612.798737][T27033] tty_open+0x6cc/0xaf0 [ 1612.802903][T27033] chrdev_open+0x2eb/0x3a0 [ 1612.807329][T27033] do_dentry_open+0x646/0xa20 [ 1612.812033][T27033] vfs_open+0x37/0x1e0 [ 1612.816186][T27033] path_openat+0x1c5e/0x2170 [ 1612.820794][T27033] do_filp_open+0x109/0x230 [ 1612.825301][T27033] do_sys_openat2+0xa6/0x110 [ 1612.829903][T27033] __x64_sys_openat+0xf2/0x120 [ 1612.834702][T27033] x64_sys_call+0x2e9c/0x2ff0 [ 1612.839388][T27033] do_syscall_64+0xd2/0x200 [ 1612.843911][T27033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.850042][T27033] [ 1612.852367][T27033] value changed: 0x00000000000076cf -> 0x00000000000096cf [ 1612.859505][T27033] [ 1612.861845][T27033] Reported by Kernel Concurrency Sanitizer on: [ 1612.867999][T27033] CPU: 0 UID: 0 PID: 27033 Comm: syz.6.17851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1612.879463][T27033] Tainted: [W]=WARN [ 1612.883267][T27033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1612.893322][T27033] ================================================================== [ 1612.916796][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1612.916814][ T29] audit: type=1400 audit(1757616972.415:311901): avc: denied { write } for pid=3293 comm="syz-executor" path="pipe:[2145]" dev="pipefs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1613.003742][T27039] tipc: Resetting bearer [ 1613.013487][T24797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.039788][T27039] tipc: Disabling bearer [ 1613.051459][T24797] syz_tun (unregistering): left allmulticast mode [ 1613.063345][T27033] syz_tun (unregistering): left allmulticast mode [ 1613.098250][T27039] syz_tun (unregistering): left allmulticast mode [ 1613.239443][T27033] can0 (unregistered): slcan off ttyS3.