last executing test programs: 15m6.503238341s ago: executing program 32 (id=2360): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) (fail_nth: 3) 12m29.039322307s ago: executing program 33 (id=5238): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 12m14.115232306s ago: executing program 34 (id=5502): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) 10m44.90723676s ago: executing program 35 (id=7439): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 9m15.703520105s ago: executing program 36 (id=8798): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x5520, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() setreuid(0x0, 0xee00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000018000180040002800d000100"], 0x2c}, 0x1, 0x0, 0x0, 0x48002}, 0x0) 8m59.4531575s ago: executing program 37 (id=8966): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@orlov}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@minixdf}, {@errors_remount}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@lazytime}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[], 0xe01, 0x1) capset(&(0x7f0000000040)={0x20071026}, 0x0) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 8m59.394304465s ago: executing program 38 (id=8968): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000802b71d8c7c7db5a424f8ff413e3d913af20e0300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38) stat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 8m57.690767082s ago: executing program 39 (id=8981): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f00000003c0)={[{@debug}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@lazytime}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8e7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) link(0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x20a) 8m47.940556025s ago: executing program 40 (id=9093): rt_sigaction(0x32, 0x0, 0x0, 0x8, &(0x7f0000000440)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8840) socket$kcm(0x10, 0x2, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000140)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a183000000000000000005"], 0x78}}, 0x0) r4 = gettid() r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x410240, 0x2e) sendto$phonet(r6, &(0x7f0000000040)="7643187289e9b52bb9074972c90fd39f0fd079364f5d743a17586e1425857935fcb3193214ab9c2c47d6ff834532c8385f8cec9b2dc5ef445fa72d8b", 0x3c, 0x8004, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x3}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8m47.63110321s ago: executing program 41 (id=9103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e000000000000000000080003000300000014000380100003800c0001800800"], 0x48}}, 0x0) 8m47.415261467s ago: executing program 42 (id=9112): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (fail_nth: 2) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='~', 0x1}], 0x1}, 0x0) 8m37.823526518s ago: executing program 43 (id=9294): syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 8m32.875251126s ago: executing program 44 (id=9415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX]) 8m31.922917742s ago: executing program 45 (id=9431): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = timerfd_create(0x6, 0x800) timerfd_settime(r2, 0x2, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=@getlink={0x2fc, 0x12, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x1}, [@IFLA_LINK_NETNSID={0x8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8}]}, @IFLA_AF_SPEC={0xf4, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x4}, {0x8, 0x15, 0x0, 0x0, 0xb}, {0x8, 0x1, 0x0, 0x0, 0x4}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0xb, 0x0, 0x0, 0x6}, {0x8, 0x2, 0x0, 0x0, 0x5}, {0x8, 0x10, 0x0, 0x0, 0x7f}, {0x8, 0x18, 0x0, 0x0, 0x6}, {0x8, 0x20, 0x0, 0x0, 0x7}, {0x8, 0x1c, 0x0, 0x0, 0x4}, {0x8, 0x8, 0x0, 0x0, 0x4}, {0x8, 0x12}]}}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x9, 0x0, 0x0, 0x80}, {0x8, 0x12}, {0x8, 0x9, 0x0, 0x0, 0x1}]}}, @AF_MPLS={0x4}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0xc}, {0x8, 0x6}, {0x8, 0x8, 0x0, 0x0, 0xfffffff9}, {0x8, 0x3, 0x0, 0x0, 0x3}, {0x8, 0x8, 0x0, 0x0, 0x2}, {0x8, 0x3, 0x0, 0x0, 0x1}, {0x8, 0x21, 0x0, 0x0, 0x2}, {0x8, 0xc, 0x0, 0x0, 0x3}, {0x8, 0x17, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1a14}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}, @IFLA_MAP={0x24, 0xe, {0x9, 0x1, 0x21, 0x3, 0x8, 0xbf}}, @IFLA_VF_PORTS={0x12c, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aa2f850321e76be84a8a7cf87a188789"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8126592af59a6760735b7f196fd4acb8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e72ab6cbad2494dc4de6fd276befeafb"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "7bda0607bc6b4e86baefb1681e44fe2e"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "429cae6da01b397b81fa57b3a8bd8adc"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ae95a1beffafc5688cf41dc070a01677"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "04bc8963dedd0b3c248f060a34ecd3b4"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "90e3bf07e3be2732c7c3fc0ffca9fe78"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "182900e388e8f26733693d3d7e319933"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2c93d91ddd90b9e39d8165376eb529b9"}]}]}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'vcan0\x00'}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x480) 8m31.748343636s ago: executing program 46 (id=9433): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r5], 0x20}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x9303}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x4, 0x80000001, {{0xd, 0x4, 0x3, 0x33, 0x34, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1f, 0xf, [@remote, @loopback, @remote, @rand_addr=0x64010100, @local, @empty, @multicast2]}]}}}}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") 8m26.235608039s ago: executing program 47 (id=9495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 8m12.736586954s ago: executing program 6 (id=9688): bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200104, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0xf20, 0x0, 0x0, 0x3bf12284f20f4b0e, 0x2, 0x4, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000001f00)=ANY=[], 0x2, 0x2be, &(0x7f00000006c0)="$eJzs3b1rJGUYAPBnkr3ZjR/sFlZy4IAWVsflWpsNkoPDrZQt1EKDlwPJLkIOAn7gepWtjaV/gSDY+U/Y+B8ItoKdVxyMzNfth5PdW7mNevx+RfLwvs8z7zPvDgkp5s2H16dnd7O49+CLX6PXS2JvGAfxMIlB7EXjq1gy/CYAgP+zh3kef+SVbeqSiOjtri0AYIe2/v3/485bAgB27J1333vraDQ6fjvLenF7+vXFuPjLvvhezR/di49jEqdxM/rxKCJ/rIpv53k+62SFQbw2nV2Mi8rpBz/X1z/6PaKsP4x+DMqh5fo7o+PDrLJQPyv6eK5ef1jU34p+vNSy/p3R8a2W+hin8fqrC/3fiH788lF8EpO4WzYxr//yMMvezL/98/P3i/aK+mR2Me6WeXP5/hV/NAAAAAAAAAAAAAAAAAAAAAAAPMNu1GfndKM8vyciXqhn9h8VX69F1hgsn89TZSVJpwpWzgea5fFdc77OzSzL8qRKm9d34uVOdP6VmwYAAAAAAAAAAAAAAAAAAID/mPuffnZ2Mpmcnj+VoH7J//Fr/Sedf3ad4cLIK7E+udusNZns1WFL8kEdxH6Tk0SsbaO4iae0LZuCg/aeT8+//2F5JI3YsBu9DWu9uJPPfTVonq6zk6R9D7vRjPSiDn5azEnjCddKV0eKLSqC62UDzcOx6Tpp61R/63tPny+D2ZqcSCIuv84bv1UN1yNJrCSn5a62ll+rg7jsIeld9jw3u7Q09fefFYnTOgAAAAAAAAAAAAAAAAAAYKfmrwG3TD5YW7qXd3fWFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcqfn//98imNXFT5Ccxvn99pU7V3mbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPOP+CgAA//9rrVCD") r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x44005) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$qrtrtun(r2, &(0x7f0000000180)="0454", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x1], 0x0, 0x0, 0x1}}, 0x40) socket$kcm(0x10, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000013c0)=ANY=[@ANYRES32=r2, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$P9_RREAD(r7, &(0x7f0000000380)={0x1009, 0x75, 0x0, {0xffe, "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"}}, 0x1009) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500001403000000006c907800000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200080000200000000001b00000000000800655800000000"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r9, 0x0, 0x25, &(0x7f0000000280)={@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 8m12.595644765s ago: executing program 6 (id=9692): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 8m12.499063033s ago: executing program 6 (id=9693): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r6], 0x20}}, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x9303}}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x4, 0x80000001, {{0xb, 0x4, 0x3, 0x33, 0x2c, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x17, 0xf, [@remote, @loopback, @remote, @local, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001880)=ANY=[@ANYBLOB="0c030000", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250d0000007c00018008000300020000000800030000000000140002007767320000000000000000000000000008000300030000001400020070696d3672656700000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e640000000c00018008000300020000005400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300020000001400020064766d727030000000000000000000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000110efaaf36fbf979a7f0c2243095edde7e626ed77785397f62e1f598d0fb9331df9fce03a38f7085696940da473c8e37584df3ff104787308f1402d98616c740b77936dec0741206b21c2ac75841f1491b22cef0e34784bafaab42c453269f65b5823f51a7e2ec07d7370536a7d20af32609efce9522d66a8b5608ca9453043262c4a845e7d6c40b1fae36a0dab8f5b4adf0f0296235bf4032324f6278ea1af7638c5fa4c41199685db52", @ANYRES32=0x0, @ANYBLOB="0800030000000000740001801400020076657468315f746f5f62726964676500080003000100000014000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f310000a000018014000200687372300000000000000000000000001400020076657468315f746f5f687372000000001400020070696d7265670000000000000000000014000200697036746e6c3000000000000000000008000100", @ANYRES32, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r8, @ANYBLOB="140002006c6f000000000000000000000000000014000200776730000000000000000000000000000c000180080003000000000070000180140002006261746164765f736c6176655f31000008000100", @ANYRES32, @ANYRES32=r10, @ANYBLOB="1400020073797a6b616c6c65723000000000000008000300030000005000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f77696669300000000000000800030002000000080003000000000008000100", @ANYRES32=r11, @ANYBLOB="080003000100000008000300000000000800030001000000"], 0x30c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") 8m11.964546115s ago: executing program 6 (id=9698): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 8m11.902493201s ago: executing program 5 (id=9701): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace(0x4208, r2) 8m11.810524198s ago: executing program 6 (id=9705): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32], 0x20}}, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x9303}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000f00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x4, 0x80000001, {{0xd, 0x4, 0x3, 0x33, 0x34, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1f, 0xf, [@remote, @loopback, @remote, @rand_addr=0x64010100, @local, @empty, @multicast2]}]}}}}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") 8m11.79061751s ago: executing program 5 (id=9706): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x453, &(0x7f0000001d00)="$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") syz_clone3(0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) 8m11.707002046s ago: executing program 48 (id=9708): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r2}, 0x38) stat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000061000000180012800e00010069703667726574617000000000000000060001"], 0x44}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 8m11.546058829s ago: executing program 5 (id=9712): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)="fe00000000000000002a0000", 0xc, 0xffffffffffffffff) 8m11.441418337s ago: executing program 5 (id=9715): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 8m11.296688439s ago: executing program 5 (id=9719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) 8m11.247593483s ago: executing program 6 (id=9720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 8m11.247226543s ago: executing program 49 (id=9720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1000000000}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 8m10.7958538s ago: executing program 5 (id=9726): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18f60000000325000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000002000008500000084000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 8m10.79287213s ago: executing program 50 (id=9726): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x78) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18f60000000325000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000002000008500000084000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 7m56.791554925s ago: executing program 1 (id=9930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac14"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x8cc0, &(0x7f0000000100)={[{@cruft}, {@check_relaxed}, {@showassoc}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@nojoliet}, {@mode={'mode', 0x3d, 0x7}}, {@gid}, {@unhide}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uid}, {@utf8}, {@check_strict}, {@session={'session', 0x3d, 0x1b}}]}, 0x1, 0x92e, &(0x7f0000001300)="$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") 7m56.692664243s ago: executing program 1 (id=9934): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x480) 7m56.638689357s ago: executing program 1 (id=9936): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") r1 = getuid() quotactl_fd$Q_SETINFO(r0, 0x0, r1, &(0x7f00000000c0)={0x3, 0x6, 0x0, 0x4}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619ff1e3c70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r5 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x5, 0x8, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3, 0x4, 0x0, 0x2000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0x6000) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000001000/0x3000)=nil, 0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 7m55.637984007s ago: executing program 1 (id=9952): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 7m55.23016479s ago: executing program 1 (id=9957): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 7m54.795166185s ago: executing program 1 (id=9961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 7m54.795081855s ago: executing program 51 (id=9961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 7m54.752409569s ago: executing program 7 (id=9964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) creat(&(0x7f0000000800)='./file0\x00', 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) r3 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000001140)=""/4111, 0x100f, 0x9, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) r5 = io_uring_setup(0xc90, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x40000}) timer_create(0x3, &(0x7f0000000480)={0x0, 0x1c, 0x2}, &(0x7f0000000500)) r6 = io_uring_setup(0x413e, &(0x7f0000000200)={0x0, 0x243d, 0x400, 0xfffffffb, 0x34c, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r6, 0x0, 0x0, 0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0xf00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(0x0, 0x0) 7m54.60452094s ago: executing program 7 (id=9965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) creat(&(0x7f0000000800)='./file0\x00', 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) r3 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000001140)=""/4111, 0x100f, 0x9, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1ee) r5 = io_uring_setup(0xc90, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x40000}) timer_create(0x3, &(0x7f0000000480)={0x0, 0x1c, 0x2}, &(0x7f0000000500)) r6 = io_uring_setup(0x413e, &(0x7f0000000200)={0x0, 0x243d, 0x400, 0xfffffffb, 0x34c, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r6, 0x0, 0x0, 0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(0x0, 0x0) 7m54.531936666s ago: executing program 7 (id=9966): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 7m54.512396648s ago: executing program 7 (id=9967): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 7m54.261504288s ago: executing program 7 (id=9969): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='fib6_table_lookup\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x4060019}, 0x20000041) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fsetxattr$security_selinux(r3, &(0x7f0000000040), &(0x7f0000000140)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 7m53.783564146s ago: executing program 7 (id=9979): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=") socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xbc, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x7c, 0x1, [@m_ctinfo={0x78, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) close(r4) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x4}, &(0x7f0000000280)=0x28) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) 7m53.762456928s ago: executing program 52 (id=9979): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xbc, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x88, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x7c, 0x1, [@m_ctinfo={0x78, 0x1b, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) close(r4) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x4}, &(0x7f0000000280)=0x28) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) 4m15.850448336s ago: executing program 8 (id=14654): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 4m15.771495452s ago: executing program 8 (id=14658): gettid() r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) socket(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 4m15.492208245s ago: executing program 8 (id=14662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0x40ffff}, 0x13c, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0xd, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0xc, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2400, 0x3ca5, 0x1, 0x0, 0xff, 0x3, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x6, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x441, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xce, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d2, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x5, 0xb, 0x0, 0xfffffffa, 0x74e, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0xe, 0x2, 0x1, 0x3, 0xa0, 0xb, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x7, 0x6, 0xfffffffc, 0x6, 0x1010001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x647, 0x10001, 0x5, 0x3, 0x10, 0x10a, 0x2, 0x3d, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x6, 0x1ffe, 0x73ee, 0x100001, 0x5, 0x9, 0x7fffffff, 0x73, 0x0, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x8001, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x9, 0x2, 0x0, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x198, 0x1, 0x9, 0x6, 0x400, 0x2, 0x0, 0x9, 0x5, 0x8, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x8, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x7, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x6a, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x7, 0x10001, 0xf, 0x4, 0x100, 0x4, 0x59b, 0x7, 0x6, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x7ff, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0x1, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x8000000, 0x3, 0x0, 0xc, 0x6, 0x7, 0xfffffefe, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x2, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x205, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x102, 0x401, 0x2, 0x7, 0x800000c, 0x7, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x5, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfffffff7, 0x7f, 0x1, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0xfffffffc, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x1005, 0xb, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce8, 0x10, 0x8, 0x4, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x7, 0x80000000, 0x2, 0xa, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0xc, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x8003, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0x1, 0x5, 0xe, 0x6, 0x1000, 0x5, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0xb0fc, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x2, 0x101, 0x35, 0x7, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x80000000, 0x2b, 0x200006, 0x4, 0x7, 0x0, 0xfb4, 0xbf9, 0x7, 0x3, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffc00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0x3, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffefff8, 0x2, 0x9af, 0xa, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x7, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x54, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x0, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x6, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x4d, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x4, 0xfff, 0xfffffff5, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0xfffffff4, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x401, 0x6, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x6, 0x72, 0x80, 0x1000, 0x6, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0xfffffffc, 0x200e, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x6, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x80000000, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x3, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaae500aabb88a82d00810049000800480b002004640000002990780a010100ac14140c8903ef860600000000000000"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000480)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000000065"], 0x38}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000013c0)=0x19, 0x4) r9 = socket$pppoe(0x18, 0x1, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000001280)=""/191, 0xbf, 0x1, &(0x7f0000001340)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x824, @private2, 0xffff42a7}}}, 0x80) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@sg0, 0x0, &(0x7f0000000cc0)='./file0\x00') ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="308c00ac0100002e00"]) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 4m15.382049613s ago: executing program 8 (id=14667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xc0, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbff, {}, [{0xac, 0x1, [@m_ct={0xa8, 0x14, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x19}]}, {0x78, 0x6, "0e43ca20a596e7968336220eb02e2f6f00cd2f551fc5d59b1f8d0c355c47905923fb8f896a0c87b45bc87e4272f401c2141e7d8c4889076e05424944d6651fd219e9383466f5efd3caaf6364b332fa533974fb4f9115a99e6fb45315d54e19e8fc27501b1e9de5dd63493fe48d26276747c7eedc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8858}, 0x0) r4 = socket$inet(0x2, 0xa, 0x7e) sendto(r2, &(0x7f0000000400)="05e34272b9e119ef4e043b563a82b331e5eda5d78f492f8ae6a0d9452c135157d1ebc9c808321246d7485187f56d8f210a96c52380c35305f07d2309c539ee681ef0e16a64c33283925d065e31c9604d0ddb65aafe4e1b9383ba53e0824736fef9bc9787616f37", 0x67, 0x40000, &(0x7f00000004c0)=@generic={0x3e, "bf1963d3fb6f51c36ecddafddb1d61224f5b1e56f22b97aa7a924ed51b63fae2ebf201f5f12c6fd11982af46c5e836d7386d83d70626d8ec268fa0408d5112e07e38312ccfe09f5755b916a5b7178a1bec56b2afe07e1cd1adf325fe56d6b967a3efd22806dda39adf5426fbac937f78fa7e70e82979a04367bc5fe4630d"}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r8, &(0x7f0000000280)={r7, 0xffffffffffffffff, 0x5}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000f04159ebb31028198789c44d0bb3ab4db20f8e482edab29cf826cf562c4004b84035e6a2b8053c033a0a71a9f675ed7cd6037318b0699b7df3695d76680f11708d17cc324fddfe0b37a1ddb011b918359a8f0537eeaad2674c7922193aed11052125b5b8cf3b97e77727611f0b18cf5480d75ddac886752ffb"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m15.203598578s ago: executing program 8 (id=14671): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)}}], 0x1, 0x0) 4m14.587590557s ago: executing program 8 (id=14680): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000008e7b2b4b0500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 4m14.586696377s ago: executing program 53 (id=14680): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000008e7b2b4b0500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 3.197756582s ago: executing program 4 (id=18414): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000000)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0x8, 0xfffffffffffffff0}, @exit, @func, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x15}, @ldst={0x2, 0x0, 0x1, 0x0, 0x4, 0xfffffffffffffff4, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x9d, &(0x7f0000000100)=""/157, 0x41000, 0x6c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x6}, 0x10, 0x15cd3, 0xffffffffffffffff, 0x3, &(0x7f0000000240)=[0x1], &(0x7f0000000280)=[{0x1, 0x1, 0xb, 0x2}, {0x2, 0x3, 0x8, 0x9}, {0x2, 0x3, 0xf, 0x1}], 0x10, 0x1ad6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex=0x0, 0x36, 0x0, 0xe, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000540), 0x4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r3, r0, 0x36, 0x0, 0x0, @void, @value=r5, @void, @void, r2}, 0x20) recvmsg$inet_nvme(r5, &(0x7f0000000700)={&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/165, 0xa5}], 0x1}, 0x0) readahead(r0, 0x4, 0xeb1) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000740), 0x2) r6 = io_uring_setup(0x37a8, &(0x7f0000000780)={0x0, 0xb99b, 0x4000, 0x2, 0xac}) syz_io_uring_setup(0x2f4c, &(0x7f0000000800)={0x0, 0xd6eb, 0x40, 0x1, 0x220, 0x0, r6}, &(0x7f0000000880), &(0x7f00000008c0)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000900)={0x0, 0x0, 0x5, [0x9, 0x400, 0x5, 0x23c9, 0x4000]}, &(0x7f0000000940)=0x12) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000980)={r7, 0x5, 0x20}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000009c0)=0x0) connect$nfc_llcp(r5, &(0x7f0000000a00)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x6, "a41a3e69e6e14596f753213c3b2ef68ffdc396d04eb835b8623ed65e2935f005d34d7eb4b91397eda49aa1a0ce9174843b01833f1ee58c64107a3cbba26839", 0x38}, 0x60) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a80)={r7, @in={{0x2, 0x4e24, @remote}}, 0x3ff, 0x0, 0x1ff, 0x5, 0x4, 0x9, 0x1}, 0x9c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000001580)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4010040}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x960, r9, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x67}}}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "0a667b3344e9"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7ff}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x900, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xff}, @NL80211_NAN_FUNC_SRF={0x5b4, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "0a3c72a148edcfabd97a19f49d5749a7ba9959afd784457b7fcd47942622847cdf0b428fdd2f68a41bbaaa479f9dac9ee11ec3ef032b32627b66a185b8f149beae2ad8ec4d7b36fa63bb6edbeb0035901f813d3785a06efc0f94233d102b025e40f4e6130ab06face5549ee85d92add2f35bb7a50a1505958e98e23d64958d23d7d9adcb827c7a35db3e6973dd01be158e1507ae007a3426398ac783e1aa69cbe7ea88911f6d50edd016356a64e5202dae5b3c6a8c2c618d5c66f9f283ddd0d2608b6f1a515328186c2a3bd14f7964f46e29d5bea26653656775127c5c2afa617cd88aa85bc41f58b765a2149e70705742d3b6d3ff0b42853532e765a91410"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xf9}, @NL80211_NAN_SRF_BF={0x103, 0x2, "1f2358bb275a5c84bd50731cb9c22ecbcde3bb1d99cdbc11a98cfa0903368e5c836df3c0a866c2e60d1be30a7f54bce82a2d27d9fe52973f2f19e47eb6962d399056d059fcf4d5aca2359864acd0ed055e55b73e9dfa069e60c9ef30997e8ea392f2fc7e2e137a3b5b89a224f73e58521000bba5da28e6e7eae0646ba244fa4d556a3087742bf06e98bad94c7badf6488c88d72c81e740040256a37a080dc7eaa7bcd52784c251038e1d55712521f06fba19c63eb798d4c91ff0ee7d35969a55600ea322fbee1a7c401dbd7709c382ff3b17cd6a79ffbddb6c0ed701deebfd7df6e9db6393879d714817c1cc1e48e259de46303913c6eb1d4a538620b18538"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "6c03d6ced8de6f395e17e3346c2ec3ce5645b43bb732ca19674bf7a5e2f758ab19c13b06b212408cb62c15fbd70ceaa554ffc5d34450ef99a9fa9ebed41b90aff678709b341c6449b17d43ccc971a1eac481851d4f8d01031995bff7af6615223f811e2d118356bc030a839d358b5b5d7c1f561533e9c495ebf6342ec3aaa8055a49635181e924948db9fb7f421dd4ef61ebd15328b5377be387670ec50eb121563d149679e18b3310252b9ba2e9323432fde8e2bc3eceb7cec36215d06b49cd9e6957b8d32ce2cb24be2d3abb6ea577694f577e8630540a82978e501f7b6af434e315f6d65be28855c865e1726d8201d78b415f4d2c3004680f073a839ac5"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x34, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x328, 0xd, 0x0, 0x1, [{0x37, 0x0, "befc863c7fd60063e8e7e24f746e2b3eeb36842f1dbe0f399c74e0def14e0bbdbbf8367f4497bde5c68bbdbf0d119987dd279e"}, {0xfd, 0x0, "8e3e6a205201182a8313f675b034bd44d598074675940246e2b44f026fad73c908799956fe1b597947eaa98732bc4ed5bb33b83148f71a2d4002e7ea9cd09d2ba594710407fec26eb34cc77d419a1548c6a5f578dc60aa03269ad71da5dfd2ab8d40bbfea2220d096c27fe04b0da69487ce6826fef1094c5f917e91be8c7b2f921e899f05879501952c734fba9f4f4a3ccf2bc5b4c1e23b304ed66ad2671b20499baca7d842de9293d1970ff66dca52a318c7196abd3f57f49b92971da13f4194189c95124674348b5c0409bccdf8f116d800ee0d9f511fc42fde13c5511556c76138c81f0a2e73eab9b1f5c99713593642a7a6ea9767a38dd"}, {0xec, 0x0, "ca81f7b619d049487e619670307ad01f38f76b85529c4d0d1b855ab5a57104f00b7cc7a09c74670a51502dbf4c01077d78be892bbdbc1387475d9cfe6771148c30bcc908c72820082291ceb013156ceb53e5adecb27a628788d2bb9ac7e3513911aebab95eaa9d74c4df855769e8087d1c4dd5636dde1e1319c7e20be23e3e3d60cbcdc42060520797b1955c3c435b367a29279bb45f9313ee1c62b9e4730930bd5954ba6cd53617c46bbd02837aa792ed4923933b82d2b813eca6ffed2b1c4b50d4ecea747e645e6cf391c289c80902373044a35ab79a893de372d1a516d4c5185119408270df16"}, {0xff, 0x0, "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"}]}]}]}, 0x960}, 0x1, 0x0, 0x0, 0x4850}, 0x0) write$sndseq(r4, &(0x7f00000015c0)=[{0x6, 0x9, 0xe6, 0x4, @time={0x5e7069af, 0x7}, {0x7, 0x2}, {0x1c, 0x1}, @note={0x0, 0x30, 0x5c, 0x8, 0x3}}], 0x1c) ioctl(r0, 0x7cd7, &(0x7f0000001600)="87e33667de8ff0e865e0d661560e39d050832bcdf341d6295f1afda7a12b4adc24c6ae16717afe0388c792b2c568de0f0c71130243e6283c3c2f0d88601ecc333d5df4d0bd") ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000001680)={0x1, 0x8}) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) bind$rds(r4, &(0x7f0000001700)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000001740)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$VT_RELDISP(r12, 0x5605) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r13, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001940)={&(0x7f00000017c0)={0x154, 0x13, 0x800, 0x70bd2b, 0x25dfdbff, {0x25, 0xe5, 0x10, 0x7, {0x4e20, 0x4e21, [0x7, 0x101, 0x80, 0x3], [0x5, 0x9, 0x0, 0x9], r1, [0x3, 0x7]}, 0x81, 0x20000000}, [@INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "02281975907cf5f20eee4ca72596de0513f53d32327078a154769b4813a3ed9c8f819863b7297e1e5a301e0bdeceee824fe787452719a0ff5e360921d231092aa4bc958a9b7f46bf6f2e"}, @INET_DIAG_REQ_BYTECODE={0x51, 0x1, "2106d2f8e1b3013d731cb0ba8447f1d0b431d04d43238c488a8c4159fd3c2890bbaab57b8bb7cc3be6d4403d708875e869917215f7b8811d168205d191460e1eb4a8a4f10ac6b0ecc1bd1ef4bf"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "a82d553af24df82903b0bffa8cb0333925aab2c51b4f5c365e5a5f72c75aaa7e359c239a34b2b9dc644c96"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "2bc4e3d547e509fae609898620dd1b57a6e3cb1aa31da9dc268b2327621a120d56bb435a8eec0f8b5ad8ce7cce"}]}, 0x154}, 0x1, 0x0, 0x0, 0x804}, 0x20004040) writev(r10, &(0x7f0000002c80)=[{&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="2c4e9390c320c8ac914d6e4d3036eb20d9e19e5878ee75729484a720339cfa02ae33a3c2d93954d803b0", 0x2a}, {&(0x7f0000002a00)="e7c47f1fcf34bd16d3671cb426704451729e5f6ab901aae53269c122c1731f7960a03aa41d34d07a11b8df1081a01b87df7f6ca9b8d769866e32599266e8ccaae103c9c5a420342123a4ec2bc5521d1521d8cf2dddd4b21dd77f10a0718c907fdfdd33ec33b000e7a3ce599d3a8ba2705dea23ac59c0d72031c36dae435c64", 0x7f}, {&(0x7f0000002a80)="2bfc5539d2229f9807839eb9a57d4194d8a5443587293411d9011ef45af53be4e8a2494f1af19321df8930184c35c85eb5abc9db4fcbb17558ab0749cf1f437d416e6e9792e31026c5687c37296e9b9ed27d428972fc2288a7cb71334cf339c008af418ffe9efae86719bd0c464c595b3c4bb99ccdb4dd60b83fea51537cedfc398e4c0ea416629b81544e7b8a28340e30fc574acc4002829fa975d2db8004a2a94575101cbfcbc26ce85aa70496a4d6d6395645c55ec20985ddfb0269d60fa785b6aa75457d4447a723d9faf1fdecc94a8314af35db048da656b861386772f3a9985afe387d1e42db9fd9f9080ef8bb7b9298a03fbd8ec8be", 0xf9}, {&(0x7f0000002b80)="a6e9afccce424057100d5656ff65db84f7b79973c98ef7e1aac6ddb729fea74790495b4b6b95834f7fc365c1ba6e6fddbe24807cd9745ae4278fee18ce0762170392bf9a2d203a3b7b9885c5c5fa9e686065051c61f050d12858ad07d200226a4833e099fbf15f750e66be7ae2a5a31dd62ba6d83d17dd3ab889746ecbe50c0da6ad0a601e9729cbbdf18548d32e20b3c9d8dc19048e29ea0a82a124f1eb29cda45ac4dc2511e0180b7d134a44826d0376c4912fcff8d806d43c887853b956a8d73b82c5afb7d8aebdb4d4349d09841c3505d11256b95a6d4e7fd11c4b58175e79d8c26ce819b7d2", 0xe8}], 0x5) r14 = fcntl$dupfd(r4, 0x0, r5) getsockopt$IP_VS_SO_GET_VERSION(r14, 0x0, 0x480, &(0x7f0000002d00), &(0x7f0000002d40)=0x40) 3.091649661s ago: executing program 4 (id=18417): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) r4 = add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000140)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$assume_authority(0x10, r4) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, 0x0, &(0x7f00000001c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000008000300", @ANYBLOB="6705724b27c162f0be0e8fc4ae618eacbb0678ed08b26fcb0e879b63705a65d8f9e8e50cd8198492a025ac7bc0dd9fa266889e77dc94bb66d658d0addbec681f615fd2f8ea66"], 0x1c}}, 0x0) 2.695232322s ago: executing program 4 (id=18425): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x2, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) 2.681720484s ago: executing program 9 (id=18426): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r5, 0xf3a, 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=r0], 0x28}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r8) 2.055241164s ago: executing program 3 (id=18428): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r7) 1.967672361s ago: executing program 0 (id=18431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r5, 0x0, 0x100000004, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="c50100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/18], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1b, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000040000000000000001000000b7080000000000007b8af8ff00000000b708000007c100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000040000000000000005000000852000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8d, 0x0, 0x0, 0x41100, 0x31, '\x00', r3, 0x25, r6, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r0, r0, r8, r0, r0], &(0x7f00000002c0)=[{0x2, 0x3, 0x0, 0x2}, {0x1, 0x5, 0x1, 0x7}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r10, 0xffffffffffffffff, 0x2) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r12}, 0x18) socket$pptp(0x18, 0x1, 0x2) r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) 1.967031311s ago: executing program 2 (id=18432): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9f0fab9abf03f514, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x200000000000000) 1.86237825s ago: executing program 9 (id=18433): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000440)={[{@nolazytime}, {@orlov}, {@usrjquota}, {@usrjquota}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") (fail_nth: 1) 1.680901764s ago: executing program 9 (id=18434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000015c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x64000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x80000008}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000018500000082000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x1, 0xffff}, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000e80)='./bus\x00', 0x0, &(0x7f0000000500), 0x21, 0x4a6, &(0x7f0000003840)="$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") setgroups(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) timer_gettime(0x0, 0x0) 1.678328264s ago: executing program 4 (id=18435): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000015c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x64000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x80000008}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000018500000082000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x1, 0xffff}, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000e80)='./bus\x00', 0x0, &(0x7f0000000500), 0x21, 0x4a6, &(0x7f0000003840)="$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") setgroups(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) timer_gettime(0x0, 0x0) (fail_nth: 1) 1.601183641s ago: executing program 3 (id=18436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xffef, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) r4 = add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000140)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$assume_authority(0x10, r4) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, 0x0, &(0x7f00000001c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000008000300", @ANYBLOB="6705724b27c162f0be0e8fc4ae618eacbb0678ed08b26fcb0e879b63705a65d8f9e8e50cd8198492a025ac7bc0dd9fa266889e77dc94bb66d658d0addbec681f615fd2f8ea66"], 0x1c}}, 0x0) 1.317159083s ago: executing program 3 (id=18437): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4014) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000c00000000010000000900020073797a3000"/32], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000000001", @ANYRES32=0x0, @ANYBLOB="e63ce9deca9b013fa4fdb75bba87a2f81480a98ec1ad58030162b7e6a6fb826991eee629f4a24be395d34d08c48faa868a19781aeae02c53c4823c0d6a8ca8ad3d86b8d76dae76efd19e99f35304c441ecd7f01df4ae353cc2ed77101c4a997e49bfc1254a8f8d20c1814134ad9ed582a9816392d80797cc363dea12a16ea7f43f94a6558e65c4fb88b8f232618d5575abd90c46e41cf71ce007", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000140)=@newtaction={0xc90, 0x30, 0x12f, 0x0, 0x0, {}, [{0xc7c, 0x1, [@m_police={0xc78, 0x1, 0x0, 0x0, {{0xb}, {0xc4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x7, 0x7f, 0x401, 0x2, 0x345, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x8000, 0x6, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x4, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0xffffffff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0xcb0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x8, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0xfffffffa, 0xb, 0x0, 0x22, 0x7fffffff, 0x7, 0xffffff13, 0x1, 0xfffffffc, 0x10000, 0x1, 0xd, 0x2, 0x3, 0x2, 0x0, 0x2df9, 0x5, 0x2, 0x3, 0x8, 0x4, 0xfff, 0x7, 0x1, 0x5, 0x7, 0xd, 0x2, 0x67b, 0xffff, 0x1, 0x8, 0x2, 0x7, 0x7, 0x10, 0x1, 0xa3b, 0x7, 0x0, 0x7ff, 0x6, 0x2, 0x7, 0x6, 0x2, 0x81, 0x3, 0x9, 0x0, 0x8, 0x6, 0x6, 0x1000, 0x8001, 0x6, 0x9, 0x101, 0x40, 0x6, 0x3, 0x3, 0x401, 0x8000, 0x7, 0x1, 0x19f, 0x8, 0x3, 0xa158, 0x8001, 0x5, 0x3ff, 0x80, 0x7, 0x10, 0x3ff, 0x4, 0xfffffffd, 0xaed4, 0x695e, 0x7, 0xa5d0, 0x4, 0x9, 0x37cc, 0x9, 0xc, 0x8000, 0x7, 0x400, 0xfffffff6, 0x1, 0xb, 0x3, 0xa0000000, 0x6e7, 0x1, 0xe, 0x7, 0x8001, 0xdb54, 0x3d04, 0x4, 0x6, 0x90, 0x6, 0x3, 0x1, 0x3, 0xfffffff6, 0x7ff, 0x72, 0x7, 0x10, 0x9, 0x0, 0xc810, 0x4, 0x2, 0x9, 0xb, 0xf6c, 0x1000, 0x5e, 0x3, 0x9, 0xdf5c, 0x6, 0x3, 0x4, 0x4000000, 0xfffffffb, 0x1, 0x7, 0x1, 0x1, 0xc4, 0x81, 0xc, 0x7319, 0x1, 0x6, 0x7fff, 0x5e89f4eb, 0x8, 0x1, 0x8, 0xe, 0x7, 0x25, 0x9, 0x5, 0x0, 0x0, 0x7, 0x3, 0xd86d, 0x2, 0x8, 0x10000, 0x1, 0x80000000, 0x5f8, 0x40, 0x6, 0x3, 0xe422, 0x4, 0x4, 0x8, 0x390d, 0x7, 0x7, 0x2, 0x8, 0x13d92c0c, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0x4, 0x1, 0xffffffff, 0x7, 0x1, 0xc, 0x7fffffff, 0x3, 0x3, 0x81, 0x5, 0xfff, 0xfffffffc, 0x365, 0xfffffc00, 0x401, 0xb1d, 0x5, 0xff, 0x7, 0x8, 0x1, 0x2, 0x9, 0x0, 0x80, 0x9, 0xf, 0x6, 0x3, 0x0, 0x3, 0x1, 0x3, 0x3, 0x9, 0xda85, 0x7, 0x2, 0x10, 0x6, 0x6, 0x2, 0xfff, 0x3, 0x74, 0x1, 0x9, 0x7, 0x15, 0x4, 0x0, 0x5, 0x9, 0x31, 0x5, 0x81, 0x9, 0xfffffff1, 0x80000001, 0x0, 0x5, 0x6, 0xcdb8, 0x0, 0x7, 0x4, 0x7, 0x9, 0xee3d]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0xc90}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, r6, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) shmdt(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) ftruncate(r7, 0x2000009) openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.262092748s ago: executing program 3 (id=18438): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1, 0x0, 0x779a, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000000000000b7, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002e4000085"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() socket(0x40000000015, 0x5, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) fsmount(r4, 0x0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28000000000000000000000007000000890f5d510f9d497dc94d0892f2cad8830704001e0c00000014000000000000000000000002000000810000000000000088db0abe09db689cfb672cce21cf5bb7a90cb1a283997d385f728e0191a8f68ccb6873bb5895c2f2f26b00f96b52a8e634bf92bdcabe3f3fa2f9069878173e59aa09092dc81a697a700ca57567791d94f7ca19ddd09c3f7146825a6073299d8242baa60e9c306c32"], 0x40}, 0x4008011) r9 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.173440845s ago: executing program 0 (id=18439): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x41b000a}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x368, 0x16, 0x4, 0x70bd2b, 0x25dfdbfd, {0xe}, [@generic="bd4a54e10fda86047c97a84434bac8fbe9d520fb123f5894d60b09cc4933dc5a65944c32aed71929a50884a211fdd7b30aee51cdbc0cacf1b5ad4ff79c70a53d8993be4c5ae61f08f77fe5a7d0cbe430316fe7a70ef9f771a7cedf0c27817fb225cf3143ce1f954035cdb0ebf4a8449820fbb7d37d6b3ff32de90d1853886d37ad6988eeb5982e970063fb19db345ca28351371d878d0a94299bcb01a911bbba419d50af7f2e205c644b689c10cebffe9a45330784c7b087f4d2b6a9401b8039279c749a1cf0517071b8756f1a1f5588abe3cde134db79377213f32043a249a69bf7", @nested={0x1d4, 0x119, 0x0, 0x1, [@generic="6c2e8c0393686e7ecbaff9285c4d733854b0997421953d91caeb406173a374a7560f5b35e026d2aed7afbb2513a3f5123febc75631d971063267fc", @generic="4d5dc06b4b60b0ff6ed5e64c99fbe009f071cac639d734f4d65eed3a069615f2b3c06905c30193befc2878bedf16b7aed213a238a94b8c1dad2e70f0a46038666e99440f07532042e85de8a9220c7efafa13a946122437896d505e36da2e37dd94d15b0e3870bfc7de6c0ab1211f10a3ccb5645f89af263b5304e6972f22b9867d882f6175983951368341f1de98a4d503743e4bd7484d84c6caad742d4af606bc23f3722c44ab69d7d0c730cc0d94e10112875c4e499b22b3b3e71aaff53f7ba77a4d13edab3fc8747f3985948608b6dd36b1e6b00800c88a6b971a31d7cf574fb1b22475e8fc085494424d", @typed={0x19, 0x85, 0x0, 0x0, @str='/dev/bus/usb/00#/00#\x00'}, @nested={0x4, 0x11c}, @typed={0x8, 0x31, 0x0, 0x0, @fd=r2}, @generic="bc0238fd5a3f2f9a3b2191297b420f7a329cad5887026b99ce0bf24bc30d5675ced6ae7c3b76bffbe38ddb9d217f6b8730ec8705c6af6a05b0a1759e759b9f53f0bf76124e2a91200bf7eb5d51007505467afd50eb877d2e7905779998cb2f0c21c48c12a9a004b774989a9491f897ce4a4dfb573ffd02c5aefe07e18644c97d1f"]}, @nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0x12d}]}, @generic="cd991f6ffe5e303008adbd366f29e09f80b9a941be7b444bc14124b83607548afcee48a39f96eadfefa5c6abf5af81f63b074d521c1f0f038d79976b31eb4b125c972444e5b2be2b18f0bcd861c8bb22cc33ddf42d146c214feedfe9f1d086d59b4d67be1737b8023bb79a9edd27e6266b5eff87b23226b68da3d290d12a9d9cd74c0cfd88eeb9fba6df40241a4e80a4342824a5866a"]}, 0x368}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r0, 0x0, 0x0, 0xc001, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r5, &(0x7f0000000000)=""/39, 0x82) 1.120850459s ago: executing program 0 (id=18440): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d9", 0x10}], 0x2, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b9", 0xf}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) dup2(r3, r3) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x200000d1) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6, 0x0, 0x7}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095", @ANYRES32=r6, @ANYRESHEX=r2, @ANYRES8=r7, @ANYRESOCT=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r10 = getpgrp(0x0) perf_event_open(0x0, r10, 0x8, r9, 0x1) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r4) 988.27941ms ago: executing program 0 (id=18441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r5, 0x0, 0x100000004, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100000000000000000000000000008d"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1b, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000040000000000000001000000b7080000000000007b8af8ff00000000b708000007c100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000040000000000000005000000852000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8d, 0x0, 0x0, 0x41100, 0x31, '\x00', r3, 0x25, r6, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r0, r0, r8, r0, r0], &(0x7f00000002c0)=[{0x2, 0x3, 0x0, 0x2}, {0x1, 0x5, 0x1, 0x7}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r10, 0xffffffffffffffff, 0x2) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r12 = socket$pptp(0x18, 0x1, 0x2) fcntl$setlease(r12, 0x400, 0x1) r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) 965.168682ms ago: executing program 2 (id=18442): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001600)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x9}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @loopback, 0x7}, r2}}, 0x30) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0xfc, 0x0, 0xfd, 0x0, 0xfb, 0x12020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x100002, 0x0, 0xfffffff9, 0x0, 0x4, 0x80000001, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r6 = socket$kcm(0x2, 0x7, 0x106) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES8=r5], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r9], 0x48) 913.585726ms ago: executing program 2 (id=18443): socket(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x20040054) 909.893036ms ago: executing program 9 (id=18444): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000fa0000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) 895.975297ms ago: executing program 9 (id=18445): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x2, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) 885.259478ms ago: executing program 2 (id=18446): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$eJzs3d9rU+cbAPDnpKm/v99WENnGGAUv5nCmtt0PB7twl2OTCdu9C2ks0tRIk4rthOnFvNnNkMEYE8but3svZf/A/gphCjKkbBe76TjpSW1t0jbamur5fCDyvnlP+p7nvOd5fU9OQgLIrZH0n0LEqxHxXRIxFBFJ1laMrHFkebvFR9cq6SOJpaXP/0pa26X19t9qv+5gVnklIn7/JuJEYX2/jfmF6XKtVp3N6qPNmcujjfmFkxdnylPVqeql8YmJ0+9OjH/w/nvbFutb5/758bO7H5/+9tjiD789OHwriTNxKGtbHcem9nVtub66MhIj2TEZjDNPbDjWy46/AJJ+7wBPZSDL88FI54ChGMiyHnj5fR0RS0BOJfIfcqq9Dmhf2/d0HfwSePjR8gXQ+viLy++NxL7WtdGBxWTNlVF6vTu8Df2nfdy5f/tW+ohe34cAeAbXb0TEqWJx/fyXZPPf0zu1hW2e7MP8B8/P3XT983an9U9hZf0THdY/Bzvk7tPYPP8LD7ahm67S9d+HHde/Kzethgey2v9aa77B5MLFWjWd2/4fEcdjcG9a3+h+zunFe0vd2lav/+6kh/rRtUp7LZjtx4Pi3rWvmSw3y88S82oPb0S81nH9m6yMf9Jh/NPjcW6LfRyt3n6jW9ua+O/fvrW4Lv6dtfRLxJsdx//xHa1k4/uTo63zYbR9Vqz3982jf3Trv9/xp+N/YOP4h5PV92sbvffx875/q93a1sQfneLvfP7vSb5olfdkz10tN5uzYxF7kk/XPz/++LXtenv7NP7jxzae/zqd//sj4sstxn/zyK+vbyn+Po3/ZE/j33vh3idf/dSt/83jT8f/nVbpePZMNv8NbRTXVnfwWY8fAAAAAAAA7CaFiDgUSaG0Ui4USqXlz3cciQOFWr3RPHGhPndpMlrflR2OwUL7TvfQqs9DjGWfh23Xx5+oT0TE4Yj4fmB/q16q1GuT/Q4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/pzoN97B+w4P/kN+bVp/m/HLz0Bu5L//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+rc2bPpY2nx0bVKWp+8Mj83Xb9ycrLamC7NzFVKlfrs5dJUvT5Vq5Yq9ZnN/l6tXr88Nh5zV0eb1UZztDG/cH6mPnepef7iTHmqer46+FyiAgAAAAAAAAAAAAAAAAAAgBdLY35hulyrVWd3qpDsfBcK/SwUd8du5KdQjOfSV79nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47L8AAAD//84fMw8=") mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x40010, r0, 0xd0110000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r1, 0x0, 0x0, 0x8000c62) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r3, 0x4020744f, &(0x7f0000000300)) 819.585703ms ago: executing program 4 (id=18447): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x1, 0x0, 0x779a, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000000000000b7, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002e400"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() socket(0x40000000015, 0x5, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) fsmount(r4, 0x0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x0, 0x7}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x60, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28000000000000000000000007000000890f5d510f9d497dc94d0892f2cad8830704001e0c00000014000000000000000000000002000000810000000000000088db0abe09db689cfb672cce21cf5bb7a90cb1a283997d385f728e0191a8f68ccb6873bb5895c2f2f26b00f96b52a8e634bf92bdcabe3f3fa2f9069878173e59aa09092dc81a697a700ca57567791d94f7ca19ddd09c3f7146825a6073299d8242baa60e9c306c32"], 0x40}, 0x4008011) r9 = gettid() bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 449.577243ms ago: executing program 3 (id=18448): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x2a) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) 436.351524ms ago: executing program 2 (id=18449): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x27, 0x0, &(0x7f00000003c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f00000007c0)=ANY=[@ANYRES16, @ANYBLOB="16ec37cc838851a0b4a0f3bc89b4e21ad7b9ba3c90aef1fe70a1527d358917e71f51c876bf502e92a6b1ec6b2758bd279a08169b147422cb9ff36aaf0f81c5ff4cf14366b63866e7e92b799cabcb4d56c3c54c92d06b91d86cebe64ca35a5cce84c21bf1571bc634bf143c6eade625ce879ebd4ff59c599f5548ab82ceb0ea19543ac72f162ed9528f1dc75dc81007c04efe803b6d77151b29c351b801733ed9980f9429a164ee383c", @ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}], 0x1c) sendto$inet6(r7, &(0x7f0000000000)='\a', 0x1, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2f, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5], 0xb4}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000005c0)={0x3ff, 0x4, 0x5, 0xfffffffffffffffb}, &(0x7f0000000600)) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="5953f9fffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000037b66fee6973e93f2d9af569d70300000000"], 0x28}}, 0x0) 421.507435ms ago: executing program 3 (id=18450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04000000040000000400000005", @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r5, 0x0, 0x100000004, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="c50100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/19], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1b, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000040000000000000001000000b7080000000000007b8af8ff00000000b708000007c100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000040000000000000005000000852000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8d, 0x0, 0x0, 0x41100, 0x31, '\x00', r3, 0x25, r6, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r0, r0, r8, r0, r0], &(0x7f00000002c0)=[{0x2, 0x3, 0x0, 0x2}, {0x1, 0x5, 0x1, 0x7}], 0x10, 0x8001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r10, 0xffffffffffffffff, 0x2) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r12}, 0x18) socket$pptp(0x18, 0x1, 0x2) r13 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) 215.509962ms ago: executing program 0 (id=18451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x55954c279cd8c010, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x12400) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffc95}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 123.550959ms ago: executing program 2 (id=18452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000fdffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000400850000008600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80002002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(0x0, 0x182) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ustat(0x3, 0x0) r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x5000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) 11.537648ms ago: executing program 9 (id=18453): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001600)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x9}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @loopback, 0x7}, r2}}, 0x30) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0xfc, 0x0, 0xfd, 0x0, 0xfb, 0x12020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x100002, 0x0, 0xfffffff9, 0x0, 0x4, 0x80000001, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r6 = socket$kcm(0x2, 0x7, 0x106) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES8=r5], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r9], 0x48) 11.255019ms ago: executing program 0 (id=18454): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000280)=@udp}, 0x20) 0s ago: executing program 4 (id=18455): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000fa000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 998.665344][T18696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.724643][T18718] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17628'. [ 999.738754][T18718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.748844][T18718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.763160][T18718] bond0 (unregistering): Released all slaves [ 1000.379596][T18735] ref_ctr increment failed for inode: 0xbac offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881040c8000 [ 1000.414567][T18739] FAULT_INJECTION: forcing a failure. [ 1000.414567][T18739] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.427263][T18739] CPU: 1 UID: 0 PID: 18739 Comm: syz.2.17635 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1000.427295][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1000.427307][T18739] Call Trace: [ 1000.427368][T18739] [ 1000.427378][T18739] __dump_stack+0x1d/0x30 [ 1000.427403][T18739] dump_stack_lvl+0xe8/0x140 [ 1000.427426][T18739] dump_stack+0x15/0x1b [ 1000.427549][T18739] should_fail_ex+0x265/0x280 [ 1000.427571][T18739] ? resv_map_alloc+0x57/0x190 [ 1000.427613][T18739] should_failslab+0x8c/0xb0 [ 1000.427642][T18739] __kmalloc_cache_noprof+0x4c/0x320 [ 1000.427676][T18739] resv_map_alloc+0x57/0x190 [ 1000.427763][T18739] hugetlbfs_get_inode+0x67/0x370 [ 1000.427792][T18739] hugetlb_file_setup+0x192/0x3d0 [ 1000.427819][T18739] ksys_mmap_pgoff+0x157/0x310 [ 1000.427925][T18739] x64_sys_call+0x14a3/0x2ff0 [ 1000.427944][T18739] do_syscall_64+0xd2/0x200 [ 1000.428043][T18739] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1000.428065][T18739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1000.428088][T18739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.428146][T18739] RIP: 0033:0x7f9c0fb5ebe9 [ 1000.428160][T18739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.428177][T18739] RSP: 002b:00007f9c0e5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1000.428249][T18739] RAX: ffffffffffffffda RBX: 00007f9c0fd95fa0 RCX: 00007f9c0fb5ebe9 [ 1000.428261][T18739] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1000.428273][T18739] RBP: 00007f9c0e5bf090 R08: ffffffffffffffff R09: 00000000fffff000 [ 1000.428285][T18739] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 1000.428300][T18739] R13: 00007f9c0fd96038 R14: 00007f9c0fd95fa0 R15: 00007ffc5c8c4348 [ 1000.428322][T18739] [ 1000.679866][T18741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.707288][T18741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.142605][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 1001.142702][ T29] audit: type=1326 audit(1756619386.350:113011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18751 comm="syz.9.17641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa298baebe9 code=0x0 [ 1001.186537][ T29] audit: type=1326 audit(1756619386.392:113012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.17643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b315ebe9 code=0x7ffc0000 [ 1001.191955][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17641'. [ 1001.237549][ T29] audit: type=1326 audit(1756619386.392:113013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.17643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b315ebe9 code=0x7ffc0000 [ 1001.261434][ T29] audit: type=1400 audit(1756619386.392:113014): avc: denied { read } for pid=18751 comm="syz.9.17641" dev="nsfs" ino=4026532504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1001.283187][ T29] audit: type=1400 audit(1756619386.392:113015): avc: denied { open } for pid=18751 comm="syz.9.17641" path="net:[4026532504]" dev="nsfs" ino=4026532504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1001.306788][ T29] audit: type=1326 audit(1756619386.434:113016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.17643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b315ebe9 code=0x7ffc0000 [ 1001.330737][ T29] audit: type=1326 audit(1756619386.434:113017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.17643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b315ebe9 code=0x7ffc0000 [ 1001.354997][ T29] audit: type=1326 audit(1756619386.434:113018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.17643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b315ebe9 code=0x7ffc0000 [ 1001.378862][ T29] audit: type=1326 audit(1756619386.434:113019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.17643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28b315ebe9 code=0x7ffc0000 [ 1001.402982][ T29] audit: type=1326 audit(1756619386.434:113020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18755 comm="syz.4.17643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28b315ebe9 code=0x7ffc0000 [ 1001.896756][T18771] FAULT_INJECTION: forcing a failure. [ 1001.896756][T18771] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.909467][T18771] CPU: 0 UID: 0 PID: 18771 Comm: syz.0.17647 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1001.909489][T18771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1001.909498][T18771] Call Trace: [ 1001.909509][T18771] [ 1001.909515][T18771] __dump_stack+0x1d/0x30 [ 1001.909532][T18771] dump_stack_lvl+0xe8/0x140 [ 1001.909603][T18771] dump_stack+0x15/0x1b [ 1001.909616][T18771] should_fail_ex+0x265/0x280 [ 1001.909631][T18771] should_failslab+0x8c/0xb0 [ 1001.909652][T18771] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1001.909727][T18771] ? __alloc_skb+0x101/0x320 [ 1001.909743][T18771] __alloc_skb+0x101/0x320 [ 1001.909759][T18771] netlink_alloc_large_skb+0xba/0xf0 [ 1001.909812][T18771] netlink_sendmsg+0x3cf/0x6b0 [ 1001.909828][T18771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.909839][T18771] __sock_sendmsg+0x145/0x180 [ 1001.909902][T18771] ____sys_sendmsg+0x31e/0x4e0 [ 1001.909963][T18771] ___sys_sendmsg+0x17b/0x1d0 [ 1001.909989][T18771] __x64_sys_sendmsg+0xd4/0x160 [ 1001.910009][T18771] x64_sys_call+0x191e/0x2ff0 [ 1001.910019][T18771] do_syscall_64+0xd2/0x200 [ 1001.910062][T18771] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1001.910073][T18771] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1001.910085][T18771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.910096][T18771] RIP: 0033:0x7f3d713bebe9 [ 1001.910190][T18771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.910201][T18771] RSP: 002b:00007f3d6fe1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.910211][T18771] RAX: ffffffffffffffda RBX: 00007f3d715f5fa0 RCX: 00007f3d713bebe9 [ 1001.910218][T18771] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1001.910264][T18771] RBP: 00007f3d6fe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.910270][T18771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.910276][T18771] R13: 00007f3d715f6038 R14: 00007f3d715f5fa0 R15: 00007ffeda4aa3d8 [ 1001.910286][T18771] [ 1003.376800][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17660'. [ 1003.386724][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.394158][T18808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.402788][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.410734][T18808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.525961][T18852] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.295710][T18852] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.372396][T18852] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.543786][T18852] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.768898][ T6020] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.808042][ T6020] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.878325][ T6020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.953801][ T6020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.993890][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17679'. [ 1006.044290][T18880] FAULT_INJECTION: forcing a failure. [ 1006.044290][T18880] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.057007][T18880] CPU: 0 UID: 0 PID: 18880 Comm: syz.0.17680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1006.057088][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1006.057103][T18880] Call Trace: [ 1006.057112][T18880] [ 1006.057121][T18880] __dump_stack+0x1d/0x30 [ 1006.057148][T18880] dump_stack_lvl+0xe8/0x140 [ 1006.057168][T18880] dump_stack+0x15/0x1b [ 1006.057258][T18880] should_fail_ex+0x265/0x280 [ 1006.057284][T18880] should_failslab+0x8c/0xb0 [ 1006.057326][T18880] __kmalloc_cache_node_noprof+0x54/0x320 [ 1006.057359][T18880] ? __get_vm_area_node+0x106/0x1d0 [ 1006.057389][T18880] __get_vm_area_node+0x106/0x1d0 [ 1006.057481][T18880] __vmalloc_node_range_noprof+0x273/0xe00 [ 1006.057526][T18880] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1006.057561][T18880] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1006.057620][T18880] ? cred_has_capability+0x210/0x280 [ 1006.057640][T18880] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1006.057668][T18880] __vmalloc_noprof+0x83/0xc0 [ 1006.057765][T18880] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1006.057806][T18880] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1006.057869][T18880] ? bpf_prog_alloc+0x2a/0x150 [ 1006.057967][T18880] bpf_prog_alloc+0x3c/0x150 [ 1006.057989][T18880] bpf_prog_load+0x514/0x1070 [ 1006.058023][T18880] ? security_bpf+0x2b/0x90 [ 1006.058073][T18880] __sys_bpf+0x462/0x7b0 [ 1006.058109][T18880] __x64_sys_bpf+0x41/0x50 [ 1006.058154][T18880] x64_sys_call+0x2aea/0x2ff0 [ 1006.058183][T18880] do_syscall_64+0xd2/0x200 [ 1006.058209][T18880] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1006.058251][T18880] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1006.058280][T18880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.058326][T18880] RIP: 0033:0x7f3d713bebe9 [ 1006.058355][T18880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.058372][T18880] RSP: 002b:00007f3d6fe1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1006.058391][T18880] RAX: ffffffffffffffda RBX: 00007f3d715f5fa0 RCX: 00007f3d713bebe9 [ 1006.058469][T18880] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1006.058481][T18880] RBP: 00007f3d6fe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.058493][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.058511][T18880] R13: 00007f3d715f6038 R14: 00007f3d715f5fa0 R15: 00007ffeda4aa3d8 [ 1006.058536][T18880] [ 1006.058544][T18880] syz.0.17680: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 1006.314653][T18880] CPU: 0 UID: 0 PID: 18880 Comm: syz.0.17680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1006.314679][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1006.314690][T18880] Call Trace: [ 1006.314698][T18880] [ 1006.314747][T18880] __dump_stack+0x1d/0x30 [ 1006.314769][T18880] dump_stack_lvl+0xe8/0x140 [ 1006.314789][T18880] dump_stack+0x15/0x1b [ 1006.314805][T18880] warn_alloc+0x12b/0x1a0 [ 1006.314844][T18880] __vmalloc_node_range_noprof+0x297/0xe00 [ 1006.314894][T18880] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1006.314926][T18880] ? cred_has_capability+0x210/0x280 [ 1006.314950][T18880] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1006.314979][T18880] __vmalloc_noprof+0x83/0xc0 [ 1006.315004][T18880] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1006.315148][T18880] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1006.315170][T18880] ? bpf_prog_alloc+0x2a/0x150 [ 1006.315231][T18880] bpf_prog_alloc+0x3c/0x150 [ 1006.315299][T18880] bpf_prog_load+0x514/0x1070 [ 1006.315331][T18880] ? security_bpf+0x2b/0x90 [ 1006.315362][T18880] __sys_bpf+0x462/0x7b0 [ 1006.315417][T18880] __x64_sys_bpf+0x41/0x50 [ 1006.315438][T18880] x64_sys_call+0x2aea/0x2ff0 [ 1006.315462][T18880] do_syscall_64+0xd2/0x200 [ 1006.315524][T18880] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1006.315614][T18880] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1006.315637][T18880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.315657][T18880] RIP: 0033:0x7f3d713bebe9 [ 1006.315682][T18880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.315703][T18880] RSP: 002b:00007f3d6fe1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1006.315726][T18880] RAX: ffffffffffffffda RBX: 00007f3d715f5fa0 RCX: 00007f3d713bebe9 [ 1006.315740][T18880] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 1006.315754][T18880] RBP: 00007f3d6fe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.315783][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.315797][T18880] R13: 00007f3d715f6038 R14: 00007f3d715f5fa0 R15: 00007ffeda4aa3d8 [ 1006.315814][T18880] [ 1006.315822][T18880] Mem-Info: [ 1006.336127][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 1006.336142][ T29] audit: type=1326 audit(1756619391.779:113392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18888 comm="syz.3.17683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1006.339117][T18880] active_anon:45668 inactive_anon:11 isolated_anon:0 [ 1006.339117][T18880] active_file:9197 inactive_file:23778 isolated_file:0 [ 1006.339117][T18880] unevictable:0 dirty:440 writeback:0 [ 1006.339117][T18880] slab_reclaimable:3721 slab_unreclaimable:48140 [ 1006.339117][T18880] mapped:32933 shmem:42372 pagetables:1225 [ 1006.339117][T18880] sec_pagetables:0 bounce:0 [ 1006.339117][T18880] kernel_misc_reclaimable:0 [ 1006.339117][T18880] free:1792519 free_pcp:11874 free_cma:0 [ 1006.342058][ T29] audit: type=1326 audit(1756619391.779:113393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18888 comm="syz.3.17683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1006.629871][T18880] Node 0 active_anon:175248kB inactive_anon:44kB active_file:36788kB inactive_file:95112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135792kB dirty:1760kB writeback:0kB shmem:162064kB kernel_stack:5856kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1006.657655][T18880] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1006.686541][T18880] lowmem_reserve[]: 0 2883 7862 7862 [ 1006.691894][T18880] Node 0 DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 1006.722145][T18880] lowmem_reserve[]: 0 0 4978 4978 [ 1006.727391][T18880] Node 0 Normal free:4228024kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:178032kB inactive_anon:44kB active_file:36788kB inactive_file:95112kB unevictable:0kB writepending:1760kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:25708kB local_pcp:4768kB free_cma:0kB [ 1006.759598][T18880] lowmem_reserve[]: 0 0 0 0 [ 1006.764156][T18880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1006.777164][T18880] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 1006.793412][T18880] Node 0 Normal: 3294*4kB (UME) 1388*8kB (UME) 1206*16kB (UME) 951*32kB (UME) 739*64kB (UME) 341*128kB (UME) 117*256kB (UE) 131*512kB (UM) 163*1024kB (UM) 91*2048kB (UME) 882*4096kB (UM) = 4227928kB [ 1006.813219][T18880] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1006.822596][T18880] 73948 total pagecache pages [ 1006.827276][T18880] 20 pages in swap cache [ 1006.831574][T18880] Free swap = 124864kB [ 1006.835732][T18880] Total swap = 124996kB [ 1006.839927][T18880] 2097051 pages RAM [ 1006.843770][T18880] 0 pages HighMem/MovableOnly [ 1006.848600][T18880] 80444 pages reserved [ 1006.919475][ T29] audit: type=1400 audit(1756619392.409:113394): avc: denied { connect } for pid=18901 comm="syz.0.17687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1007.351708][ T29] audit: type=1326 audit(1756619392.702:113395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.0.17690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1007.375594][ T29] audit: type=1326 audit(1756619392.702:113396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.0.17690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1007.399378][ T29] audit: type=1326 audit(1756619392.702:113397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.0.17690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1007.423834][ T29] audit: type=1326 audit(1756619392.702:113398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.0.17690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1007.447746][ T29] audit: type=1326 audit(1756619392.702:113399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.0.17690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1007.471638][ T29] audit: type=1326 audit(1756619392.702:113400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.0.17690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1007.495569][ T29] audit: type=1326 audit(1756619392.702:113401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18912 comm="syz.0.17690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1007.830100][T18923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.838689][T18923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.914433][T18925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17692'. [ 1008.095475][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17699'. [ 1008.963988][T18962] FAULT_INJECTION: forcing a failure. [ 1008.963988][T18962] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.976688][T18962] CPU: 0 UID: 0 PID: 18962 Comm: syz.2.17708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1008.976715][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1008.976727][T18962] Call Trace: [ 1008.976736][T18962] [ 1008.976746][T18962] __dump_stack+0x1d/0x30 [ 1008.976771][T18962] dump_stack_lvl+0xe8/0x140 [ 1008.976790][T18962] dump_stack+0x15/0x1b [ 1008.976859][T18962] should_fail_ex+0x265/0x280 [ 1008.976879][T18962] should_failslab+0x8c/0xb0 [ 1008.976904][T18962] __kmalloc_noprof+0xa5/0x3e0 [ 1008.976933][T18962] ? kobject_get_path+0x92/0x1c0 [ 1008.977043][T18962] kobject_get_path+0x92/0x1c0 [ 1008.977096][T18962] kobject_uevent_env+0x1da/0x570 [ 1008.977119][T18962] ? device_pm_check_callbacks+0x683/0x6a0 [ 1008.977208][T18962] kobject_uevent+0x1d/0x30 [ 1008.977292][T18962] device_del+0x710/0x790 [ 1008.977339][T18962] device_unregister+0x15/0x40 [ 1008.977360][T18962] bdi_unregister+0x307/0x3a0 [ 1008.977386][T18962] __del_gendisk+0x2c3/0x570 [ 1008.977412][T18962] del_gendisk+0xac/0xf0 [ 1008.977443][T18962] loop_remove+0x26/0x80 [ 1008.977467][T18962] loop_control_ioctl+0x3b3/0x3f0 [ 1008.977602][T18962] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1008.977633][T18962] __se_sys_ioctl+0xce/0x140 [ 1008.977763][T18962] __x64_sys_ioctl+0x43/0x50 [ 1008.977869][T18962] x64_sys_call+0x1816/0x2ff0 [ 1008.977893][T18962] do_syscall_64+0xd2/0x200 [ 1008.977923][T18962] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1008.977950][T18962] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1008.977990][T18962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.978014][T18962] RIP: 0033:0x7f9c0fb5ebe9 [ 1008.978032][T18962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.978053][T18962] RSP: 002b:00007f9c0e5bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.978096][T18962] RAX: ffffffffffffffda RBX: 00007f9c0fd95fa0 RCX: 00007f9c0fb5ebe9 [ 1008.978110][T18962] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 1008.978198][T18962] RBP: 00007f9c0e5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.978213][T18962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.978227][T18962] R13: 00007f9c0fd96038 R14: 00007f9c0fd95fa0 R15: 00007ffc5c8c4348 [ 1008.978256][T18962] [ 1009.383385][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17711'. [ 1009.752659][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17719'. [ 1009.858178][T18998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17722'. [ 1010.724703][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17729'. [ 1010.825439][T19028] FAULT_INJECTION: forcing a failure. [ 1010.825439][T19028] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.838222][T19028] CPU: 1 UID: 0 PID: 19028 Comm: syz.3.17730 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1010.838244][T19028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.838255][T19028] Call Trace: [ 1010.838261][T19028] [ 1010.838268][T19028] __dump_stack+0x1d/0x30 [ 1010.838328][T19028] dump_stack_lvl+0xe8/0x140 [ 1010.838356][T19028] dump_stack+0x15/0x1b [ 1010.838370][T19028] should_fail_ex+0x265/0x280 [ 1010.838386][T19028] should_failslab+0x8c/0xb0 [ 1010.838467][T19028] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1010.838491][T19028] ? __alloc_skb+0x101/0x320 [ 1010.838508][T19028] __alloc_skb+0x101/0x320 [ 1010.838522][T19028] netlink_alloc_large_skb+0xba/0xf0 [ 1010.838569][T19028] netlink_sendmsg+0x3cf/0x6b0 [ 1010.838645][T19028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.838665][T19028] __sock_sendmsg+0x145/0x180 [ 1010.838769][T19028] ____sys_sendmsg+0x31e/0x4e0 [ 1010.838844][T19028] ___sys_sendmsg+0x17b/0x1d0 [ 1010.838938][T19028] __x64_sys_sendmsg+0xd4/0x160 [ 1010.839003][T19028] x64_sys_call+0x191e/0x2ff0 [ 1010.839024][T19028] do_syscall_64+0xd2/0x200 [ 1010.839081][T19028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1010.839108][T19028] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1010.839135][T19028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.839157][T19028] RIP: 0033:0x7f74e609ebe9 [ 1010.839175][T19028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.839196][T19028] RSP: 002b:00007f74e4b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.839244][T19028] RAX: ffffffffffffffda RBX: 00007f74e62d5fa0 RCX: 00007f74e609ebe9 [ 1010.839258][T19028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1010.839272][T19028] RBP: 00007f74e4b07090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.839285][T19028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.839298][T19028] R13: 00007f74e62d6038 R14: 00007f74e62d5fa0 R15: 00007ffd2ff9e4b8 [ 1010.839318][T19028] [ 1011.142573][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 1011.142597][ T29] audit: type=1400 audit(1756619396.839:114105): avc: denied { associate } for pid=19042 comm="syz.9.17737" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1011.171602][ T29] audit: type=1400 audit(1756619396.839:114106): avc: denied { bind } for pid=19042 comm="syz.9.17737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1011.191449][ T29] audit: type=1400 audit(1756619396.839:114107): avc: denied { name_bind } for pid=19042 comm="syz.9.17737" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1011.213631][ T29] audit: type=1400 audit(1756619396.839:114108): avc: denied { node_bind } for pid=19042 comm="syz.9.17737" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1011.234778][ T29] audit: type=1400 audit(1756619396.839:114109): avc: denied { name_connect } for pid=19042 comm="syz.9.17737" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1011.329351][T19048] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.352809][T19050] FAULT_INJECTION: forcing a failure. [ 1011.352809][T19050] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.365537][T19050] CPU: 0 UID: 0 PID: 19050 Comm: syz.0.17738 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1011.365565][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.365571][T19050] Call Trace: [ 1011.365576][T19050] [ 1011.365580][T19050] __dump_stack+0x1d/0x30 [ 1011.365594][T19050] dump_stack_lvl+0xe8/0x140 [ 1011.365686][T19050] dump_stack+0x15/0x1b [ 1011.365694][T19050] should_fail_ex+0x265/0x280 [ 1011.365706][T19050] should_failslab+0x8c/0xb0 [ 1011.365718][T19050] __kmalloc_cache_node_noprof+0x54/0x320 [ 1011.365769][T19050] ? __get_vm_area_node+0x106/0x1d0 [ 1011.365784][T19050] __get_vm_area_node+0x106/0x1d0 [ 1011.365833][T19050] __vmalloc_node_range_noprof+0x273/0xe00 [ 1011.365857][T19050] ? copy_process+0x399/0x2000 [ 1011.365880][T19050] ? __rcu_read_unlock+0x4f/0x70 [ 1011.365981][T19050] __vmalloc_node_noprof+0x89/0xc0 [ 1011.366003][T19050] ? copy_process+0x399/0x2000 [ 1011.366022][T19050] ? copy_process+0x399/0x2000 [ 1011.366033][T19050] dup_task_struct+0x449/0x6a0 [ 1011.366107][T19050] ? _parse_integer+0x27/0x40 [ 1011.366118][T19050] copy_process+0x399/0x2000 [ 1011.366129][T19050] ? kstrtouint+0x76/0xc0 [ 1011.366199][T19050] ? kstrtouint_from_user+0x9f/0xf0 [ 1011.366258][T19050] ? __rcu_read_unlock+0x4f/0x70 [ 1011.366351][T19050] kernel_clone+0x16c/0x5c0 [ 1011.366366][T19050] ? vfs_write+0x7e8/0x960 [ 1011.366380][T19050] __x64_sys_clone+0xe6/0x120 [ 1011.366468][T19050] x64_sys_call+0x119c/0x2ff0 [ 1011.366481][T19050] do_syscall_64+0xd2/0x200 [ 1011.366498][T19050] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1011.366513][T19050] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1011.366562][T19050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.366576][T19050] RIP: 0033:0x7f3d713bebe9 [ 1011.366588][T19050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.366617][T19050] RSP: 002b:00007f3d6fe1efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1011.366631][T19050] RAX: ffffffffffffffda RBX: 00007f3d715f5fa0 RCX: 00007f3d713bebe9 [ 1011.366640][T19050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 1011.366648][T19050] RBP: 00007f3d6fe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.366656][T19050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1011.366664][T19050] R13: 00007f3d715f6038 R14: 00007f3d715f5fa0 R15: 00007ffeda4aa3d8 [ 1011.366722][T19050] [ 1011.367280][T19050] netlink: 'syz.0.17738': attribute type 3 has an invalid length. [ 1011.615100][T19050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17738'. [ 1011.626129][T19048] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.653045][ T29] audit: type=1400 audit(1756619397.385:114110): avc: denied { mounton } for pid=19054 comm="syz.0.17740" path="/425/file0" dev="tmpfs" ino=2215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1011.676297][ T29] audit: type=1400 audit(1756619397.385:114111): avc: denied { mount } for pid=19054 comm="syz.0.17740" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1011.699051][ T29] audit: type=1400 audit(1756619397.385:114112): avc: denied { read write } for pid=19054 comm="syz.0.17740" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1011.720556][ T29] audit: type=1400 audit(1756619397.385:114113): avc: denied { open } for pid=19054 comm="syz.0.17740" path="/425/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1011.744964][T19048] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.838964][T19048] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.849874][ T29] audit: type=1400 audit(1756619397.595:114114): avc: denied { unmount } for pid=13409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1011.910722][ T6017] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.942320][ T6017] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.971212][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17742'. [ 1011.990403][ T6017] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.019837][ T6017] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.212172][T19075] lo speed is unknown, defaulting to 1000 [ 1012.243124][T19077] lo speed is unknown, defaulting to 1000 [ 1012.282950][T19075] chnl_net:caif_netlink_parms(): no params data found [ 1012.327087][T19075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.334262][T19075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.341491][T19075] bridge_slave_0: entered allmulticast mode [ 1012.348142][T19075] bridge_slave_0: entered promiscuous mode [ 1012.356393][T19075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.363596][T19075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.370974][T19075] bridge_slave_1: entered allmulticast mode [ 1012.377369][T19075] bridge_slave_1: entered promiscuous mode [ 1012.397579][T19075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.411050][T19075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.436356][T19075] team0: Port device team_slave_0 added [ 1012.443141][T19075] team0: Port device team_slave_1 added [ 1012.600676][ T6017] bond0 (unregistering): Released all slaves [ 1012.608713][ T6017] bond1 (unregistering): Released all slaves [ 1012.616625][ T6017] bond2 (unregistering): Released all slaves [ 1012.633077][T19075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1012.640049][T19075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.666123][T19075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1012.677542][T19075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1012.684495][T19075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.710700][T19075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.727084][ T6017] IPVS: stopping master sync thread 13224 ... [ 1012.744076][T19075] hsr_slave_0: entered promiscuous mode [ 1012.750215][T19075] hsr_slave_1: entered promiscuous mode [ 1012.756399][T19075] debugfs: 'hsr0' already exists in 'hsr' [ 1012.762338][T19075] Cannot create hsr debugfs directory [ 1012.770334][ T6017] hsr_slave_0: left promiscuous mode [ 1012.780406][ T6017] hsr_slave_1: left promiscuous mode [ 1012.788593][T19102] openvswitch: netlink: Message has 6 unknown bytes. [ 1012.852578][T19104] FAULT_INJECTION: forcing a failure. [ 1012.852578][T19104] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.865408][T19104] CPU: 1 UID: 0 PID: 19104 Comm: syz.9.17751 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1012.865438][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1012.865452][T19104] Call Trace: [ 1012.865459][T19104] [ 1012.865468][T19104] __dump_stack+0x1d/0x30 [ 1012.865545][T19104] dump_stack_lvl+0xe8/0x140 [ 1012.865567][T19104] dump_stack+0x15/0x1b [ 1012.865587][T19104] should_fail_ex+0x265/0x280 [ 1012.865611][T19104] should_failslab+0x8c/0xb0 [ 1012.865639][T19104] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1012.865669][T19104] ? __alloc_skb+0x101/0x320 [ 1012.865686][T19104] __alloc_skb+0x101/0x320 [ 1012.865703][T19104] netlink_alloc_large_skb+0xba/0xf0 [ 1012.865772][T19104] netlink_sendmsg+0x3cf/0x6b0 [ 1012.865797][T19104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.865820][T19104] __sock_sendmsg+0x145/0x180 [ 1012.865894][T19104] ____sys_sendmsg+0x31e/0x4e0 [ 1012.865917][T19104] ___sys_sendmsg+0x17b/0x1d0 [ 1012.865946][T19104] __x64_sys_sendmsg+0xd4/0x160 [ 1012.866000][T19104] x64_sys_call+0x191e/0x2ff0 [ 1012.866019][T19104] do_syscall_64+0xd2/0x200 [ 1012.866043][T19104] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1012.866149][T19104] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1012.866179][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.866228][T19104] RIP: 0033:0x7fa298baebe9 [ 1012.866255][T19104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.866345][T19104] RSP: 002b:00007fa297617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.866417][T19104] RAX: ffffffffffffffda RBX: 00007fa298de5fa0 RCX: 00007fa298baebe9 [ 1012.866430][T19104] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1012.866441][T19104] RBP: 00007fa297617090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.866453][T19104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.866465][T19104] R13: 00007fa298de6038 R14: 00007fa298de5fa0 R15: 00007ffd3f694d98 [ 1012.866482][T19104] [ 1013.132222][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17754'. [ 1013.151282][T19112] hsr_slave_1 (unregistering): left promiscuous mode [ 1013.707247][T19075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1013.738624][T19075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1013.770192][T19075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1013.802399][T19075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1013.850260][T19075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.868244][T19075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.878079][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.885128][T19136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17760'. [ 1013.885222][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.909411][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.916553][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.030062][T19075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.187870][T19075] veth0_vlan: entered promiscuous mode [ 1014.205913][T19075] veth1_vlan: entered promiscuous mode [ 1014.214687][T19171] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17766'. [ 1014.223346][T19075] veth0_macvtap: entered promiscuous mode [ 1014.232968][T19075] veth1_macvtap: entered promiscuous mode [ 1014.246201][T19075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.266174][T19075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.282503][ T6021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.300488][T19178] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17767'. [ 1014.313397][ T6017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.341105][ T6017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.350526][ T6017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.669186][T19192] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.775190][T19192] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.848904][T19192] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.954906][T19192] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.058811][T19202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17772'. [ 1015.410920][T19213] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.425866][T19218] FAULT_INJECTION: forcing a failure. [ 1015.425866][T19218] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.438641][T19218] CPU: 0 UID: 0 PID: 19218 Comm: syz.9.17777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1015.438713][T19218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.438726][T19218] Call Trace: [ 1015.438733][T19218] [ 1015.438740][T19218] __dump_stack+0x1d/0x30 [ 1015.438794][T19218] dump_stack_lvl+0xe8/0x140 [ 1015.438868][T19218] dump_stack+0x15/0x1b [ 1015.438886][T19218] should_fail_ex+0x265/0x280 [ 1015.438911][T19218] should_failslab+0x8c/0xb0 [ 1015.438935][T19218] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1015.439034][T19218] ? __alloc_skb+0x101/0x320 [ 1015.439060][T19218] __alloc_skb+0x101/0x320 [ 1015.439079][T19218] netlink_alloc_large_skb+0xba/0xf0 [ 1015.439193][T19218] netlink_sendmsg+0x3cf/0x6b0 [ 1015.439239][T19218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.439295][T19218] __sock_sendmsg+0x145/0x180 [ 1015.439321][T19218] ____sys_sendmsg+0x31e/0x4e0 [ 1015.439347][T19218] ___sys_sendmsg+0x17b/0x1d0 [ 1015.439384][T19218] __x64_sys_sendmsg+0xd4/0x160 [ 1015.439418][T19218] x64_sys_call+0x191e/0x2ff0 [ 1015.439439][T19218] do_syscall_64+0xd2/0x200 [ 1015.439536][T19218] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1015.439609][T19218] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1015.439637][T19218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.439656][T19218] RIP: 0033:0x7fa298baebe9 [ 1015.439671][T19218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.439741][T19218] RSP: 002b:00007fa297617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.439764][T19218] RAX: ffffffffffffffda RBX: 00007fa298de5fa0 RCX: 00007fa298baebe9 [ 1015.439778][T19218] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1015.439833][T19218] RBP: 00007fa297617090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.439844][T19218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.439858][T19218] R13: 00007fa298de6038 R14: 00007fa298de5fa0 R15: 00007ffd3f694d98 [ 1015.439879][T19218] [ 1015.663419][T19213] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.697035][T19213] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.754128][T19213] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.915959][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 1015.915987][ T29] audit: type=1326 audit(1756619401.858:114361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa298ba5ba7 code=0x7ffc0000 [ 1015.946500][ T29] audit: type=1326 audit(1756619401.879:114362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19228 comm="syz.2.17781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1015.970315][ T29] audit: type=1326 audit(1756619401.879:114363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19228 comm="syz.2.17781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1015.994260][ T29] audit: type=1326 audit(1756619401.879:114364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa298b4adb9 code=0x7ffc0000 [ 1016.017958][ T29] audit: type=1326 audit(1756619401.879:114365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa298baebe9 code=0x7ffc0000 [ 1016.041783][ T29] audit: type=1326 audit(1756619401.889:114366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa298ba5ba7 code=0x7ffc0000 [ 1016.065507][ T29] audit: type=1326 audit(1756619401.889:114367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa298b4adb9 code=0x7ffc0000 [ 1016.089187][ T29] audit: type=1326 audit(1756619401.889:114368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa298baebe9 code=0x7ffc0000 [ 1016.124831][ T6024] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.138025][ T6024] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.155876][ T6024] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.172736][ T6024] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.178304][ T29] audit: type=1326 audit(1756619401.900:114369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa298ba5ba7 code=0x7ffc0000 [ 1016.204595][ T29] audit: type=1326 audit(1756619401.900:114370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19221 comm="syz.9.17780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa298b4adb9 code=0x7ffc0000 [ 1016.322179][T19239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17784'. [ 1016.369454][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17785'. [ 1016.413850][T19253] usb usb1: check_ctrlrecip: process 19253 (syz.3.17788) requesting ep 01 but needs 81 [ 1016.423548][T19253] usb usb1: usbfs: process 19253 (syz.3.17788) did not claim interface 0 before use [ 1016.433035][T19253] FAULT_INJECTION: forcing a failure. [ 1016.433035][T19253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.446247][T19253] CPU: 1 UID: 0 PID: 19253 Comm: syz.3.17788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1016.446271][T19253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1016.446280][T19253] Call Trace: [ 1016.446284][T19253] [ 1016.446290][T19253] __dump_stack+0x1d/0x30 [ 1016.446306][T19253] dump_stack_lvl+0xe8/0x140 [ 1016.446372][T19253] dump_stack+0x15/0x1b [ 1016.446386][T19253] should_fail_ex+0x265/0x280 [ 1016.446406][T19253] should_fail+0xb/0x20 [ 1016.446461][T19253] should_fail_usercopy+0x1a/0x20 [ 1016.446544][T19253] _copy_to_user+0x20/0xa0 [ 1016.446571][T19253] simple_read_from_buffer+0xb5/0x130 [ 1016.446615][T19253] proc_fail_nth_read+0x10e/0x150 [ 1016.446653][T19253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1016.446678][T19253] vfs_read+0x1a8/0x770 [ 1016.446699][T19253] ? __rcu_read_unlock+0x4f/0x70 [ 1016.446767][T19253] ? __fget_files+0x184/0x1c0 [ 1016.446781][T19253] ? finish_task_switch+0xad/0x2b0 [ 1016.446836][T19253] ksys_read+0xda/0x1a0 [ 1016.446850][T19253] __x64_sys_read+0x40/0x50 [ 1016.446863][T19253] x64_sys_call+0x27bc/0x2ff0 [ 1016.446876][T19253] do_syscall_64+0xd2/0x200 [ 1016.446973][T19253] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1016.446987][T19253] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1016.447002][T19253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.447016][T19253] RIP: 0033:0x7f74e609d5fc [ 1016.447027][T19253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1016.447092][T19253] RSP: 002b:00007f74e4b07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1016.447107][T19253] RAX: ffffffffffffffda RBX: 00007f74e62d5fa0 RCX: 00007f74e609d5fc [ 1016.447115][T19253] RDX: 000000000000000f RSI: 00007f74e4b070a0 RDI: 0000000000000004 [ 1016.447123][T19253] RBP: 00007f74e4b07090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.447131][T19253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.447182][T19253] R13: 00007f74e62d6038 R14: 00007f74e62d5fa0 R15: 00007ffd2ff9e4b8 [ 1016.447194][T19253] [ 1016.693404][T19264] option changes via remount are deprecated (pid=19263 comm=syz.9.17791) [ 1016.706923][T19264] usb usb1: check_ctrlrecip: process 19264 (syz.9.17791) requesting ep 01 but needs 81 [ 1016.716736][T19264] usb usb1: usbfs: process 19264 (syz.9.17791) did not claim interface 0 before use [ 1016.735757][T19267] pim6reg: entered allmulticast mode [ 1017.300444][ T6016] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.310979][ T6016] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.321795][ T6016] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.332365][ T6016] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.379101][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17796'. [ 1017.749402][T19311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17805'. [ 1017.991780][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17806'. [ 1018.051219][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17807'. [ 1018.400935][T19332] lo speed is unknown, defaulting to 1000 [ 1018.590065][T19345] FAULT_INJECTION: forcing a failure. [ 1018.590065][T19345] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.602853][T19345] CPU: 1 UID: 0 PID: 19345 Comm: syz.9.17816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1018.602938][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1018.602950][T19345] Call Trace: [ 1018.602957][T19345] [ 1018.602965][T19345] __dump_stack+0x1d/0x30 [ 1018.602986][T19345] dump_stack_lvl+0xe8/0x140 [ 1018.603053][T19345] dump_stack+0x15/0x1b [ 1018.603069][T19345] should_fail_ex+0x265/0x280 [ 1018.603096][T19345] should_failslab+0x8c/0xb0 [ 1018.603120][T19345] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1018.603149][T19345] ? __alloc_skb+0x101/0x320 [ 1018.603205][T19345] __alloc_skb+0x101/0x320 [ 1018.603231][T19345] ? audit_log_start+0x365/0x6c0 [ 1018.603256][T19345] audit_log_start+0x380/0x6c0 [ 1018.603283][T19345] audit_seccomp+0x48/0x100 [ 1018.603304][T19345] ? __seccomp_filter+0x68c/0x10d0 [ 1018.603387][T19345] __seccomp_filter+0x69d/0x10d0 [ 1018.603406][T19345] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1018.603466][T19345] ? vfs_write+0x7e8/0x960 [ 1018.603484][T19345] ? __rcu_read_unlock+0x4f/0x70 [ 1018.603503][T19345] ? __fget_files+0x184/0x1c0 [ 1018.603600][T19345] __secure_computing+0x82/0x150 [ 1018.603619][T19345] syscall_trace_enter+0xcf/0x1e0 [ 1018.603648][T19345] do_syscall_64+0xac/0x200 [ 1018.603690][T19345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1018.603710][T19345] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1018.603731][T19345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.603805][T19345] RIP: 0033:0x7fa298baebe9 [ 1018.603819][T19345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.603834][T19345] RSP: 002b:00007fa297617038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1018.603852][T19345] RAX: ffffffffffffffda RBX: 00007fa298de5fa0 RCX: 00007fa298baebe9 [ 1018.603864][T19345] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000495 [ 1018.603875][T19345] RBP: 00007fa297617090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.603915][T19345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.603926][T19345] R13: 00007fa298de6038 R14: 00007fa298de5fa0 R15: 00007ffd3f694d98 [ 1018.603941][T19345] [ 1018.690384][T19347] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.872431][T19363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.881835][T19363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.892439][T19347] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.935469][T19347] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.001501][T19347] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.466126][T19408] FAULT_INJECTION: forcing a failure. [ 1019.466126][T19408] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.478892][T19408] CPU: 1 UID: 0 PID: 19408 Comm: syz.3.17839 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1019.478916][T19408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1019.478926][T19408] Call Trace: [ 1019.478932][T19408] [ 1019.478938][T19408] __dump_stack+0x1d/0x30 [ 1019.478957][T19408] dump_stack_lvl+0xe8/0x140 [ 1019.479047][T19408] dump_stack+0x15/0x1b [ 1019.479060][T19408] should_fail_ex+0x265/0x280 [ 1019.479078][T19408] should_failslab+0x8c/0xb0 [ 1019.479102][T19408] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1019.479151][T19408] ? __alloc_skb+0x101/0x320 [ 1019.479164][T19408] __alloc_skb+0x101/0x320 [ 1019.479174][T19408] ? audit_log_start+0x365/0x6c0 [ 1019.479192][T19408] audit_log_start+0x380/0x6c0 [ 1019.479294][T19408] audit_seccomp+0x48/0x100 [ 1019.479315][T19408] ? __seccomp_filter+0x68c/0x10d0 [ 1019.479328][T19408] __seccomp_filter+0x69d/0x10d0 [ 1019.479341][T19408] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1019.479433][T19408] ? vfs_write+0x7e8/0x960 [ 1019.479479][T19408] ? __rcu_read_unlock+0x4f/0x70 [ 1019.479564][T19408] ? __fget_files+0x184/0x1c0 [ 1019.479579][T19408] __secure_computing+0x82/0x150 [ 1019.479592][T19408] syscall_trace_enter+0xcf/0x1e0 [ 1019.479607][T19408] do_syscall_64+0xac/0x200 [ 1019.479637][T19408] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1019.479651][T19408] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1019.479696][T19408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.479709][T19408] RIP: 0033:0x7f74e609ebe9 [ 1019.479720][T19408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.479732][T19408] RSP: 002b:00007f74e4b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 1019.479743][T19408] RAX: ffffffffffffffda RBX: 00007f74e62d5fa0 RCX: 00007f74e609ebe9 [ 1019.479800][T19408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1019.479810][T19408] RBP: 00007f74e4b07090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.479816][T19408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.479822][T19408] R13: 00007f74e62d6038 R14: 00007f74e62d5fa0 R15: 00007ffd2ff9e4b8 [ 1019.479831][T19408] [ 1019.776318][T19418] lo speed is unknown, defaulting to 1000 [ 1020.563677][T19438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.584429][T19438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.663633][T19440] usb usb1: usbfs: process 19440 (syz.2.17850) did not claim interface 0 before use [ 1020.701107][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17850'. [ 1020.752602][ T29] kauditd_printk_skb: 602 callbacks suppressed [ 1020.752620][ T29] audit: type=1326 audit(1756619406.929:114969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1020.790611][T19451] FAULT_INJECTION: forcing a failure. [ 1020.790611][T19451] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.803479][T19451] CPU: 1 UID: 0 PID: 19451 Comm: syz.2.17852 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1020.803501][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1020.803561][T19451] Call Trace: [ 1020.803568][T19451] [ 1020.803576][T19451] __dump_stack+0x1d/0x30 [ 1020.803653][T19451] dump_stack_lvl+0xe8/0x140 [ 1020.803670][T19451] dump_stack+0x15/0x1b [ 1020.803684][T19451] should_fail_ex+0x265/0x280 [ 1020.803734][T19451] should_failslab+0x8c/0xb0 [ 1020.803756][T19451] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1020.803780][T19451] ? __alloc_skb+0x101/0x320 [ 1020.803867][T19451] __alloc_skb+0x101/0x320 [ 1020.803882][T19451] ? audit_log_start+0x365/0x6c0 [ 1020.803908][T19451] audit_log_start+0x380/0x6c0 [ 1020.803941][T19451] audit_seccomp+0x48/0x100 [ 1020.804025][T19451] ? __seccomp_filter+0x68c/0x10d0 [ 1020.804049][T19451] __seccomp_filter+0x69d/0x10d0 [ 1020.804074][T19451] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1020.804102][T19451] ? vfs_write+0x7e8/0x960 [ 1020.804126][T19451] ? __rcu_read_unlock+0x4f/0x70 [ 1020.804150][T19451] ? __fget_files+0x184/0x1c0 [ 1020.804217][T19451] __secure_computing+0x82/0x150 [ 1020.804236][T19451] syscall_trace_enter+0xcf/0x1e0 [ 1020.804258][T19451] do_syscall_64+0xac/0x200 [ 1020.804383][T19451] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1020.804462][T19451] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1020.804490][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.804604][T19451] RIP: 0033:0x7f9c0fb5ebe9 [ 1020.804626][T19451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.804641][T19451] RSP: 002b:00007f9c0e5bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1020.804659][T19451] RAX: ffffffffffffffda RBX: 00007f9c0fd95fa0 RCX: 00007f9c0fb5ebe9 [ 1020.804686][T19451] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 000000000000039a [ 1020.804697][T19451] RBP: 00007f9c0e5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.804707][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.804718][T19451] R13: 00007f9c0fd96038 R14: 00007f9c0fd95fa0 R15: 00007ffc5c8c4348 [ 1020.804734][T19451] [ 1020.804742][T19451] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 1020.866024][ T29] audit: type=1326 audit(1756619406.971:114970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1020.869135][T19451] audit: out of memory in audit_log_start [ 1021.034843][T19423] syz.3.17840 (19423) used greatest stack depth: 6136 bytes left [ 1021.052521][ T29] audit: type=1326 audit(1756619406.971:114971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1021.090220][ T29] audit: type=1326 audit(1756619406.971:114972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1021.113981][ T29] audit: type=1326 audit(1756619406.971:114973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c0fb914a5 code=0x7ffc0000 [ 1021.137808][ T29] audit: type=1326 audit(1756619406.971:114974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c0fb5d550 code=0x7ffc0000 [ 1021.161692][ T29] audit: type=1326 audit(1756619406.971:114975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c0fb5d69f code=0x7ffc0000 [ 1021.295841][ T29] audit: type=1326 audit(1756619407.265:114976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19453 comm="syz.2.17852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1021.510391][ T6016] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.536413][ T6016] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.536569][ T6016] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.536613][ T6016] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.591986][T19479] usb usb1: usbfs: process 19479 (syz.9.17863) did not claim interface 0 before use [ 1021.642568][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.9.17863'. [ 1022.440892][T19501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.469264][T19501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.021941][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 1023.029810][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 1023.048469][ T10] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 1023.095855][ T10] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 1023.306470][T19516] lo speed is unknown, defaulting to 1000 [ 1024.474455][T19518] tipc: Started in network mode [ 1024.479387][T19518] tipc: Node identity fe1ea26890d, cluster identity 4711 [ 1024.486531][T19518] tipc: Enabled bearer , priority 0 [ 1024.508937][T19518] tipc: Disabling bearer [ 1024.534754][T19540] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 1024.552704][T19525] __vm_enough_memory: pid: 19525, comm: syz.4.17873, bytes: 4503599627366400 not enough memory for the allocation [ 1024.782683][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.791836][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.800972][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.823609][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.832621][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.877493][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.914153][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.923229][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1024.937432][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1025.058620][T19559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.106781][T19559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.155962][T19559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.202706][T19559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.274681][ T6020] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.283496][ T6020] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.291920][ T6020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.314967][ T6020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.526245][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 1025.526257][ T29] audit: type=1326 audit(1756619411.947:115225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1025.586647][ T29] audit: type=1326 audit(1756619411.989:115226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d7135adb9 code=0x7ffc0000 [ 1025.610514][ T29] audit: type=1326 audit(1756619411.989:115227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1025.634408][ T29] audit: type=1326 audit(1756619411.989:115228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d7135adb9 code=0x7ffc0000 [ 1025.658100][ T29] audit: type=1326 audit(1756619411.989:115229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1025.682001][ T29] audit: type=1326 audit(1756619411.989:115230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1025.705762][ T29] audit: type=1326 audit(1756619411.989:115231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d7135adb9 code=0x7ffc0000 [ 1025.729648][ T29] audit: type=1326 audit(1756619411.989:115232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1025.753644][ T29] audit: type=1326 audit(1756619412.000:115233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1025.778000][ T29] audit: type=1326 audit(1756619412.000:115234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19563 comm="syz.0.17888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d7135adb9 code=0x7ffc0000 [ 1025.908161][T19577] netlink: 'syz.9.17891': attribute type 7 has an invalid length. [ 1025.925972][T19577] netlink: 68 bytes leftover after parsing attributes in process `syz.9.17891'. [ 1026.888555][T19601] tipc: Enabled bearer , priority 0 [ 1026.902218][T19601] tipc: Disabling bearer [ 1027.482197][T19645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.490865][T19645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.211470][T19669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.220549][T19669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.488014][T19685] loop0: detected capacity change from 0 to 1024 [ 1028.526407][T19685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.546772][T19685] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.17929: Allocating blocks 385-513 which overlap fs metadata [ 1028.563263][T19684] EXT4-fs (loop0): pa ffff8881072612a0: logic 16, phys. 129, len 24 [ 1028.571318][T19684] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1028.593550][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.381196][T19733] loop0: detected capacity change from 0 to 1024 [ 1029.430861][T19733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.475596][T19733] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.17944: Allocating blocks 385-513 which overlap fs metadata [ 1029.493178][T19732] EXT4-fs (loop0): pa ffff8881072612a0: logic 16, phys. 129, len 24 [ 1029.501261][T19732] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1029.521033][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.913136][T19750] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.964779][T19750] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.022025][T19750] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.078907][T19750] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.170728][ T6024] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.242392][ T6024] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.260169][ T6024] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.269388][ T6024] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.315626][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 1030.315641][ T29] audit: type=1400 audit(1756619416.977:115730): avc: denied { create } for pid=19761 comm="syz.2.17954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.351213][ T29] audit: type=1400 audit(1756619417.008:115731): avc: denied { perfmon } for pid=19761 comm="syz.2.17954" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1030.372643][ T29] audit: type=1400 audit(1756619417.008:115732): avc: denied { map_read map_write } for pid=19761 comm="syz.2.17954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1030.393049][ T29] audit: type=1400 audit(1756619417.008:115733): avc: denied { prog_load } for pid=19761 comm="syz.2.17954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1030.412616][ T29] audit: type=1400 audit(1756619417.008:115734): avc: denied { bpf } for pid=19761 comm="syz.2.17954" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1030.433633][ T29] audit: type=1400 audit(1756619417.008:115735): avc: denied { prog_run } for pid=19761 comm="syz.2.17954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1030.452999][ T29] audit: type=1400 audit(1756619417.008:115736): avc: denied { create } for pid=19761 comm="syz.2.17954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1030.474024][ T29] audit: type=1400 audit(1756619417.008:115737): avc: denied { write } for pid=19761 comm="syz.2.17954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1030.553024][ T29] audit: type=1400 audit(1756619417.019:115738): avc: denied { read write } for pid=13409 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1030.577466][ T29] audit: type=1400 audit(1756619417.019:115739): avc: denied { open } for pid=13409 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1033.102086][T19854] ref_ctr increment failed for inode: 0x81f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ae52e00 [ 1034.455817][T19884] __nla_validate_parse: 2 callbacks suppressed [ 1034.455836][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18007'. [ 1034.946013][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18000'. [ 1035.416304][ T29] kauditd_printk_skb: 761 callbacks suppressed [ 1035.416324][ T29] audit: type=1326 audit(1756619422.331:116501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19890 comm="syz.9.17999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa298baebe9 code=0x7ffc0000 [ 1035.497808][ T29] audit: type=1326 audit(1756619422.363:116502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19890 comm="syz.9.17999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa298baebe9 code=0x7ffc0000 [ 1035.570686][ T29] audit: type=1326 audit(1756619422.457:116503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1035.594524][ T29] audit: type=1326 audit(1756619422.457:116504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1035.618409][ T29] audit: type=1326 audit(1756619422.457:116505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1035.642280][ T29] audit: type=1326 audit(1756619422.457:116506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1035.666082][ T29] audit: type=1326 audit(1756619422.457:116507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1035.690174][ T29] audit: type=1326 audit(1756619422.457:116508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1035.713845][ T29] audit: type=1326 audit(1756619422.457:116509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1035.738007][ T29] audit: type=1326 audit(1756619422.457:116510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19901 comm="syz.0.18001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1036.885612][T19944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.914076][T19944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.835384][T19977] loop0: detected capacity change from 0 to 8192 [ 1038.380010][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18036'. [ 1038.679379][T19983] Set syz1 is full, maxelem 65536 reached [ 1040.017707][T20057] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.067057][T20057] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.155651][T20057] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.212936][T20057] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.285652][ T6017] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.316164][ T6017] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.334347][ T6017] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.342690][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 1040.342706][ T29] audit: type=1326 audit(1756619427.497:117238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.372793][ T29] audit: type=1326 audit(1756619427.497:117239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.396610][ T29] audit: type=1326 audit(1756619427.497:117240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.420466][ T29] audit: type=1326 audit(1756619427.497:117241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.444307][ T29] audit: type=1326 audit(1756619427.497:117242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.468055][ T29] audit: type=1326 audit(1756619427.497:117243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.490777][ T6017] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.491830][ T29] audit: type=1326 audit(1756619427.497:117244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.523685][ T29] audit: type=1326 audit(1756619427.497:117245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.547489][ T29] audit: type=1326 audit(1756619427.497:117246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1040.571262][ T29] audit: type=1326 audit(1756619427.497:117247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20061 comm="syz.4.18055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fe2cf72ebe9 code=0x7ffc0000 [ 1041.818058][T20123] loop0: detected capacity change from 0 to 1024 [ 1041.841745][T20123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.937562][T20123] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.18075: Allocating blocks 385-513 which overlap fs metadata [ 1041.971788][T20122] EXT4-fs (loop0): pa ffff8881072afe00: logic 16, phys. 129, len 24 [ 1041.980048][T20122] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1042.031686][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.226347][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18090'. [ 1043.909547][T20185] tipc: Enabling of bearer rejected, failed to enable media [ 1045.121634][T20224] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.18104'. [ 1045.132484][T20224] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18104'. [ 1045.368851][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18109'. [ 1045.384933][T20234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.387560][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 1045.387613][ T29] audit: type=1326 audit(1756619432.799:117594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.392346][T20234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.398537][ T29] audit: type=1326 audit(1756619432.799:117595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.453273][ T29] audit: type=1326 audit(1756619432.799:117596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.477062][ T29] audit: type=1326 audit(1756619432.799:117597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.500809][ T29] audit: type=1326 audit(1756619432.799:117598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.524625][ T29] audit: type=1326 audit(1756619432.799:117599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.548434][ T29] audit: type=1326 audit(1756619432.799:117600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.572196][ T29] audit: type=1326 audit(1756619432.799:117601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.596381][ T29] audit: type=1326 audit(1756619432.799:117602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.620198][ T29] audit: type=1326 audit(1756619432.799:117603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20235 comm="syz.3.18107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1045.646934][T20234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.654457][T20234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.767194][T20228] tipc: Enabling of bearer rejected, failed to enable media [ 1045.887830][T20253] loop0: detected capacity change from 0 to 1024 [ 1045.926618][T20253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.971887][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.517284][T20283] FAULT_INJECTION: forcing a failure. [ 1046.517284][T20283] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.530040][T20283] CPU: 1 UID: 0 PID: 20283 Comm: syz.9.18123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1046.530138][T20283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.530150][T20283] Call Trace: [ 1046.530158][T20283] [ 1046.530165][T20283] __dump_stack+0x1d/0x30 [ 1046.530186][T20283] dump_stack_lvl+0xe8/0x140 [ 1046.530214][T20283] dump_stack+0x15/0x1b [ 1046.530233][T20283] should_fail_ex+0x265/0x280 [ 1046.530258][T20283] should_failslab+0x8c/0xb0 [ 1046.530286][T20283] kmem_cache_alloc_noprof+0x50/0x310 [ 1046.530313][T20283] ? audit_log_start+0x365/0x6c0 [ 1046.530452][T20283] audit_log_start+0x365/0x6c0 [ 1046.530549][T20283] audit_seccomp+0x48/0x100 [ 1046.530578][T20283] ? __seccomp_filter+0x68c/0x10d0 [ 1046.530602][T20283] __seccomp_filter+0x69d/0x10d0 [ 1046.530691][T20283] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1046.530722][T20283] ? vfs_write+0x7e8/0x960 [ 1046.530806][T20283] __secure_computing+0x82/0x150 [ 1046.530828][T20283] syscall_trace_enter+0xcf/0x1e0 [ 1046.530870][T20283] do_syscall_64+0xac/0x200 [ 1046.530900][T20283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1046.530923][T20283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.530951][T20283] RIP: 0033:0x7fa298baebe9 [ 1046.530968][T20283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.530989][T20283] RSP: 002b:00007fa297617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.531009][T20283] RAX: ffffffffffffffda RBX: 00007fa298de5fa0 RCX: 00007fa298baebe9 [ 1046.531096][T20283] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000b [ 1046.531111][T20283] RBP: 00007fa297617090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.531125][T20283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.531138][T20283] R13: 00007fa298de6038 R14: 00007fa298de5fa0 R15: 00007ffd3f694d98 [ 1046.531159][T20283] [ 1046.947663][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18128'. [ 1047.171498][T20287] tipc: Enabling of bearer rejected, failed to enable media [ 1048.001259][T20339] tipc: Enabling of bearer rejected, failed to enable media [ 1048.339643][T20353] netlink: 500 bytes leftover after parsing attributes in process `syz.0.18147'. [ 1048.481881][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18149'. [ 1049.070524][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.9.18157'. [ 1049.170194][T20379] tipc: Enabling of bearer rejected, failed to enable media [ 1049.331594][T20410] loop0: detected capacity change from 0 to 1024 [ 1049.347587][T20410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.362138][T20410] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.18162: Allocating blocks 385-513 which overlap fs metadata [ 1049.377827][T20409] EXT4-fs (loop0): pa ffff8881072afc40: logic 16, phys. 129, len 24 [ 1049.385887][T20409] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1049.422483][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.441755][T20420] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.499834][T20420] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.585395][T20420] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.662768][T20420] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.852801][ T6016] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.861201][T20432] tipc: Enabling of bearer rejected, failed to enable media [ 1049.871276][ T6016] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.894334][ T6016] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.925070][ T6016] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.156865][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 1050.156883][ T29] audit: type=1326 audit(1756619437.817:118033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa298ba5ba7 code=0x7ffc0000 [ 1050.187041][ T29] audit: type=1326 audit(1756619437.817:118034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa298b4adb9 code=0x7ffc0000 [ 1050.211069][ T29] audit: type=1326 audit(1756619437.817:118035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa298baebe9 code=0x7ffc0000 [ 1050.234847][ T29] audit: type=1326 audit(1756619437.817:118036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa298ba5ba7 code=0x7ffc0000 [ 1050.258548][ T29] audit: type=1326 audit(1756619437.817:118037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa298b4adb9 code=0x7ffc0000 [ 1050.282594][ T29] audit: type=1326 audit(1756619437.817:118038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa298baebe9 code=0x7ffc0000 [ 1050.306389][ T29] audit: type=1326 audit(1756619437.817:118039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa298ba5ba7 code=0x7ffc0000 [ 1050.330265][ T29] audit: type=1326 audit(1756619437.817:118040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa298b4adb9 code=0x7ffc0000 [ 1050.353967][ T29] audit: type=1326 audit(1756619437.817:118041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa298baebe9 code=0x7ffc0000 [ 1050.377748][ T29] audit: type=1326 audit(1756619437.817:118042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20439 comm="syz.9.18172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa298ba5ba7 code=0x7ffc0000 [ 1050.464419][T20472] tipc: Started in network mode [ 1050.469312][T20472] tipc: Node identity be3e6bef1e02, cluster identity 4711 [ 1050.476697][T20472] tipc: Enabled bearer , priority 0 [ 1050.514928][T20474] tipc: Disabling bearer [ 1051.384728][T20510] tipc: Enabled bearer , priority 0 [ 1051.424245][T20510] tipc: Disabling bearer [ 1051.629869][T20529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18201'. [ 1051.639007][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18201'. [ 1051.649782][T20531] FAULT_INJECTION: forcing a failure. [ 1051.649782][T20531] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.662567][T20531] CPU: 1 UID: 0 PID: 20531 Comm: syz.0.18202 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1051.662601][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1051.662614][T20531] Call Trace: [ 1051.662620][T20531] [ 1051.662628][T20531] __dump_stack+0x1d/0x30 [ 1051.662672][T20531] dump_stack_lvl+0xe8/0x140 [ 1051.662694][T20531] dump_stack+0x15/0x1b [ 1051.662711][T20531] should_fail_ex+0x265/0x280 [ 1051.662730][T20531] should_failslab+0x8c/0xb0 [ 1051.662822][T20531] kmem_cache_alloc_noprof+0x50/0x310 [ 1051.662848][T20531] ? dup_fd+0x3a/0x540 [ 1051.662871][T20531] dup_fd+0x3a/0x540 [ 1051.662894][T20531] copy_files+0x98/0xf0 [ 1051.662933][T20531] copy_process+0xc5b/0x2000 [ 1051.662967][T20531] kernel_clone+0x16c/0x5c0 [ 1051.662993][T20531] ? vfs_write+0x7e8/0x960 [ 1051.663018][T20531] __x64_sys_clone+0xe6/0x120 [ 1051.663082][T20531] x64_sys_call+0x119c/0x2ff0 [ 1051.663104][T20531] do_syscall_64+0xd2/0x200 [ 1051.663160][T20531] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1051.663186][T20531] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1051.663238][T20531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.663261][T20531] RIP: 0033:0x7f3d713bebe9 [ 1051.663277][T20531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.663297][T20531] RSP: 002b:00007f3d6fe1efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1051.663318][T20531] RAX: ffffffffffffffda RBX: 00007f3d715f5fa0 RCX: 00007f3d713bebe9 [ 1051.663386][T20531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006001000 [ 1051.663401][T20531] RBP: 00007f3d6fe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.663418][T20531] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1051.663431][T20531] R13: 00007f3d715f6038 R14: 00007f3d715f5fa0 R15: 00007ffeda4aa3d8 [ 1051.663450][T20531] [ 1052.048831][T20543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18206'. [ 1052.261755][T20562] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.309842][T20562] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.347709][T20562] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.386615][T20562] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.453051][ T6017] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.453326][ T6017] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.453605][ T6017] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.453667][ T6017] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.906607][T20574] FAULT_INJECTION: forcing a failure. [ 1052.906607][T20574] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.906749][T20574] CPU: 0 UID: 0 PID: 20574 Comm: syz.3.18215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1052.906777][T20574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1052.906790][T20574] Call Trace: [ 1052.906797][T20574] [ 1052.906810][T20574] __dump_stack+0x1d/0x30 [ 1052.906832][T20574] dump_stack_lvl+0xe8/0x140 [ 1052.906854][T20574] dump_stack+0x15/0x1b [ 1052.906873][T20574] should_fail_ex+0x265/0x280 [ 1052.906896][T20574] should_failslab+0x8c/0xb0 [ 1052.906967][T20574] __kvmalloc_node_noprof+0x123/0x4e0 [ 1052.906994][T20574] ? file_tty_write+0x19e/0x690 [ 1052.907026][T20574] file_tty_write+0x19e/0x690 [ 1052.907081][T20574] ? __pfx_tty_write+0x10/0x10 [ 1052.907161][T20574] tty_write+0x25/0x30 [ 1052.907231][T20574] vfs_write+0x52a/0x960 [ 1052.907259][T20574] ksys_write+0xda/0x1a0 [ 1052.907351][T20574] __x64_sys_write+0x40/0x50 [ 1052.907372][T20574] x64_sys_call+0x27fe/0x2ff0 [ 1052.907396][T20574] do_syscall_64+0xd2/0x200 [ 1052.907500][T20574] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1052.907526][T20574] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1052.907552][T20574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.907575][T20574] RIP: 0033:0x7f74e609ebe9 [ 1052.907613][T20574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.907633][T20574] RSP: 002b:00007f74e4b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1052.907656][T20574] RAX: ffffffffffffffda RBX: 00007f74e62d5fa0 RCX: 00007f74e609ebe9 [ 1052.907671][T20574] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 1052.907685][T20574] RBP: 00007f74e4b07090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.907699][T20574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.907774][T20574] R13: 00007f74e62d6038 R14: 00007f74e62d5fa0 R15: 00007ffd2ff9e4b8 [ 1052.907795][T20574] [ 1053.180880][T20586] loop0: detected capacity change from 0 to 1024 [ 1053.208331][T20586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.241805][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.474695][T20614] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.528802][T20614] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.605325][T20614] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.643587][T20614] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.952648][T20601] tipc: Started in network mode [ 1053.957581][T20601] tipc: Node identity 329ef39597ea, cluster identity 4711 [ 1053.964893][T20601] tipc: Enabled bearer , priority 0 [ 1054.006912][T20604] tipc: Disabling bearer [ 1054.386284][T20627] tipc: Enabled bearer , priority 0 [ 1054.397159][T20627] tipc: Disabling bearer [ 1054.928667][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 1054.928682][ T29] audit: type=1326 audit(1756619442.825:118473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1054.958788][ T29] audit: type=1326 audit(1756619442.825:118474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d7135adb9 code=0x7ffc0000 [ 1054.982477][ T29] audit: type=1326 audit(1756619442.825:118475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1055.006232][ T29] audit: type=1326 audit(1756619442.836:118476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1055.029994][ T29] audit: type=1326 audit(1756619442.836:118477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d7135adb9 code=0x7ffc0000 [ 1055.053836][ T29] audit: type=1326 audit(1756619442.836:118478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1055.077789][ T29] audit: type=1326 audit(1756619442.846:118479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1055.101641][ T29] audit: type=1326 audit(1756619442.846:118480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d7135adb9 code=0x7ffc0000 [ 1055.125590][ T29] audit: type=1326 audit(1756619442.846:118481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1055.149389][ T29] audit: type=1326 audit(1756619442.857:118482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20673 comm="syz.0.18251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d713b5ba7 code=0x7ffc0000 [ 1055.261203][T20690] vlan2: entered allmulticast mode [ 1055.267084][T20690] dummy0: entered allmulticast mode [ 1055.307359][T20695] vlan0: entered allmulticast mode [ 1055.312846][T20695] dummy0: entered allmulticast mode [ 1055.491916][T20701] loop0: detected capacity change from 0 to 1024 [ 1055.509572][T20701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.534213][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.435978][ T6017] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.447356][ T6017] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.458597][ T6017] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.469300][ T6017] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.000409][T20758] syz.2.18277 (20758): attempted to duplicate a private mapping with mremap. This is not supported. [ 1057.579337][T20768] debugfs: 'netdev@ffff88811a1f8550' already exists in 'ref_tracker' [ 1057.638437][T20787] loop0: detected capacity change from 0 to 1024 [ 1057.652244][T20787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.676509][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.499228][T20818] FAULT_INJECTION: forcing a failure. [ 1058.499228][T20818] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.511963][T20818] CPU: 1 UID: 0 PID: 20818 Comm: syz.0.18296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1058.512028][T20818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1058.512040][T20818] Call Trace: [ 1058.512048][T20818] [ 1058.512057][T20818] __dump_stack+0x1d/0x30 [ 1058.512078][T20818] dump_stack_lvl+0xe8/0x140 [ 1058.512098][T20818] dump_stack+0x15/0x1b [ 1058.512118][T20818] should_fail_ex+0x265/0x280 [ 1058.512143][T20818] should_failslab+0x8c/0xb0 [ 1058.512178][T20818] kmem_cache_alloc_noprof+0x50/0x310 [ 1058.512209][T20818] ? getname_flags+0x80/0x3b0 [ 1058.512293][T20818] getname_flags+0x80/0x3b0 [ 1058.512336][T20818] do_sys_openat2+0x60/0x110 [ 1058.512406][T20818] __x64_sys_creat+0x65/0x90 [ 1058.512463][T20818] x64_sys_call+0x2d94/0x2ff0 [ 1058.512483][T20818] do_syscall_64+0xd2/0x200 [ 1058.512569][T20818] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1058.512605][T20818] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1058.512635][T20818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.512654][T20818] RIP: 0033:0x7f3d713bebe9 [ 1058.512713][T20818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.512741][T20818] RSP: 002b:00007f3d6fe1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1058.512765][T20818] RAX: ffffffffffffffda RBX: 00007f3d715f5fa0 RCX: 00007f3d713bebe9 [ 1058.512781][T20818] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0 [ 1058.512795][T20818] RBP: 00007f3d6fe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.512808][T20818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.512820][T20818] R13: 00007f3d715f6038 R14: 00007f3d715f5fa0 R15: 00007ffeda4aa3d8 [ 1058.512837][T20818] [ 1058.922759][T20832] Unsupported ieee802154 address type: 0 [ 1058.937620][T20832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.946739][T20832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.377977][T20842] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.418169][T20834] tipc: Started in network mode [ 1059.423120][T20834] tipc: Node identity c6329f6c717c, cluster identity 4711 [ 1059.430321][T20834] tipc: Enabled bearer , priority 0 [ 1059.452664][T20826] tipc: Disabling bearer [ 1059.473096][T20842] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.557510][T20842] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.608922][T20842] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.749025][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 1059.749043][ T29] audit: type=1326 audit(1756619447.886:119388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1059.874546][ T29] audit: type=1326 audit(1756619447.886:119389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1059.898483][ T29] audit: type=1326 audit(1756619447.886:119390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1059.922445][ T29] audit: type=1326 audit(1756619447.886:119391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1059.939024][T20862] vlan2: entered allmulticast mode [ 1059.946314][ T29] audit: type=1326 audit(1756619447.886:119392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1059.951850][T20862] dummy0: entered allmulticast mode [ 1059.975222][ T29] audit: type=1326 audit(1756619447.886:119393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1060.004230][ T29] audit: type=1326 audit(1756619447.886:119394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1060.028059][ T29] audit: type=1326 audit(1756619447.886:119395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1060.051998][ T29] audit: type=1326 audit(1756619447.886:119396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1060.076070][ T29] audit: type=1326 audit(1756619447.886:119397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20848 comm="syz.2.18306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0fb5ebe9 code=0x7ffc0000 [ 1060.169898][T20869] netlink: 28 bytes leftover after parsing attributes in process `syz.9.18313'. [ 1060.179069][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18313'. [ 1060.418368][T20878] tipc: Enabled bearer , priority 0 [ 1060.426261][T20878] tipc: Disabling bearer [ 1060.512743][ T6023] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.523723][ T6023] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.534678][ T6023] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.546373][ T6016] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.943078][T20918] tipc: Enabled bearer , priority 0 [ 1060.951586][T20918] tipc: Disabling bearer [ 1063.064992][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18357'. [ 1063.383454][T21008] tipc: Enabled bearer , priority 0 [ 1063.393874][T21008] tipc: Disabling bearer [ 1063.916768][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18368'. [ 1064.277821][T21047] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.319555][T21047] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.376462][T21047] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.433733][T21047] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.604902][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18376'. [ 1064.700069][ T29] kauditd_printk_skb: 956 callbacks suppressed [ 1064.700086][ T29] audit: type=1326 audit(1756619453.083:120354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1064.735530][ T29] audit: type=1326 audit(1756619453.115:120355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1064.759493][ T29] audit: type=1326 audit(1756619453.115:120356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1064.783222][ T29] audit: type=1326 audit(1756619453.115:120357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1064.787903][T21059] FAULT_INJECTION: forcing a failure. [ 1064.787903][T21059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.807115][ T29] audit: type=1326 audit(1756619453.115:120358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1064.807142][ T29] audit: type=1326 audit(1756619453.115:120359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1064.820169][T21059] CPU: 1 UID: 0 PID: 21059 Comm: syz.4.18378 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1064.820271][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1064.820283][T21059] Call Trace: [ 1064.820290][T21059] [ 1064.820298][T21059] __dump_stack+0x1d/0x30 [ 1064.820321][T21059] dump_stack_lvl+0xe8/0x140 [ 1064.820442][T21059] dump_stack+0x15/0x1b [ 1064.820459][T21059] should_fail_ex+0x265/0x280 [ 1064.820479][T21059] should_fail+0xb/0x20 [ 1064.820508][T21059] should_fail_usercopy+0x1a/0x20 [ 1064.820537][T21059] _copy_from_user+0x1c/0xb0 [ 1064.820563][T21059] do_sys_poll+0x149/0xbd0 [ 1064.820589][T21059] ? selinux_file_open+0x2df/0x330 [ 1064.820637][T21059] __se_sys_poll+0xdd/0x200 [ 1064.820659][T21059] __x64_sys_poll+0x43/0x50 [ 1064.820738][T21059] x64_sys_call+0x27d2/0x2ff0 [ 1064.820759][T21059] do_syscall_64+0xd2/0x200 [ 1064.820786][T21059] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1064.820854][T21059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1064.820879][T21059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.820900][T21059] RIP: 0033:0x7fe2cf72ebe9 [ 1064.820917][T21059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.821002][T21059] RSP: 002b:00007fe2ce197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1064.821023][T21059] RAX: ffffffffffffffda RBX: 00007fe2cf965fa0 RCX: 00007fe2cf72ebe9 [ 1064.821036][T21059] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000200000000180 [ 1064.821122][T21059] RBP: 00007fe2ce197090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.821134][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.821147][T21059] R13: 00007fe2cf966038 R14: 00007fe2cf965fa0 R15: 00007ffe29441158 [ 1064.821166][T21059] [ 1065.047584][ T29] audit: type=1326 audit(1756619453.115:120360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1065.047616][ T29] audit: type=1326 audit(1756619453.115:120361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1065.047686][ T29] audit: type=1326 audit(1756619453.115:120362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1065.047714][ T29] audit: type=1326 audit(1756619453.115:120363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21055 comm="syz.0.18377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d713bebe9 code=0x7ffc0000 [ 1065.227856][ T6017] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.292702][ T6017] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.301018][ T6017] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.309490][ T6017] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.852043][T21092] netlink: 'syz.0.18388': attribute type 3 has an invalid length. [ 1066.144160][T21109] Unsupported ieee802154 address type: 0 [ 1066.307280][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18396'. [ 1067.195034][T21135] lo speed is unknown, defaulting to 1000 [ 1067.259062][T21135] chnl_net:caif_netlink_parms(): no params data found [ 1067.327345][T21135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.334490][T21135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.363476][T21135] bridge_slave_0: entered allmulticast mode [ 1067.390673][T21135] bridge_slave_0: entered promiscuous mode [ 1067.412339][T21135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.419556][T21135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.438175][T21135] bridge_slave_1: entered allmulticast mode [ 1067.445497][T21135] bridge_slave_1: entered promiscuous mode [ 1067.479458][T21135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.501528][T21135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.541098][T21135] team0: Port device team_slave_0 added [ 1067.558294][T21135] team0: Port device team_slave_1 added [ 1067.593352][T21135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.600391][T21135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.626834][T21135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.668056][T21135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.675308][T21135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.701267][T21135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.745654][T21135] hsr_slave_0: entered promiscuous mode [ 1067.762066][T21135] hsr_slave_1: entered promiscuous mode [ 1067.790566][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18410'. [ 1067.800615][T21135] debugfs: 'hsr0' already exists in 'hsr' [ 1067.806445][T21135] Cannot create hsr debugfs directory [ 1067.840553][ T6016] bridge_slave_1: left allmulticast mode [ 1067.846407][ T6016] bridge_slave_1: left promiscuous mode [ 1067.852206][ T6016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.868370][ T6016] bridge_slave_0: left allmulticast mode [ 1067.874235][ T6016] bridge_slave_0: left promiscuous mode [ 1067.880162][ T6016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.987871][ T6016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.996568][T21183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18411'. [ 1068.005691][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18411'. [ 1068.015520][ T6016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.024624][ T6016] bond0 (unregistering): Released all slaves [ 1068.032673][ T6016] bond1 (unregistering): Released all slaves [ 1068.040285][ T6016] bond2 (unregistering): Released all slaves [ 1068.081461][ T6016] tipc: Left network mode [ 1068.090751][ T6016] IPVS: stopping master sync thread 13638 ... [ 1068.103526][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18412'. [ 1068.127520][ T6016] hsr_slave_0: left promiscuous mode [ 1068.133358][ T6016] hsr_slave_1: left promiscuous mode [ 1068.156168][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 1068.165262][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 1068.435419][T21135] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1068.444439][T21135] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1068.453104][T21135] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1068.461757][T21135] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1068.495605][T21135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.506694][T21135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.516092][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.523199][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.542585][T21135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1068.553135][T21135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1068.566868][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.574082][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.605658][T21199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=21199 comm=syz.4.18414 [ 1068.647947][T21135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.830936][T21135] veth0_vlan: entered promiscuous mode [ 1068.839222][T21135] veth1_vlan: entered promiscuous mode [ 1068.852653][T21135] veth0_macvtap: entered promiscuous mode [ 1068.860194][T21135] veth1_macvtap: entered promiscuous mode [ 1068.886177][T21135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.897738][T21135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.911571][ T6017] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.911625][ T6017] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.911828][ T6017] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.911867][ T6017] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.035326][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18423'. [ 1069.227356][T21255] tipc: Started in network mode [ 1069.232280][T21255] tipc: Node identity d66547234e7, cluster identity 4711 [ 1069.239400][T21255] tipc: Enabled bearer , priority 0 [ 1069.248550][T21255] tipc: Disabling bearer [ 1069.472680][ T29] kauditd_printk_skb: 918 callbacks suppressed [ 1069.472695][ T29] audit: type=1326 audit(1756619458.091:121282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74e6095ba7 code=0x7ffc0000 [ 1069.502925][ T29] audit: type=1326 audit(1756619458.091:121283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74e603adb9 code=0x7ffc0000 [ 1069.526713][ T29] audit: type=1326 audit(1756619458.091:121284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1069.550565][ T29] audit: type=1326 audit(1756619458.091:121285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74e6095ba7 code=0x7ffc0000 [ 1069.574313][ T29] audit: type=1326 audit(1756619458.091:121286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74e603adb9 code=0x7ffc0000 [ 1069.598641][ T29] audit: type=1326 audit(1756619458.091:121287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1069.622594][ T29] audit: type=1326 audit(1756619458.091:121288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74e6095ba7 code=0x7ffc0000 [ 1069.646284][ T29] audit: type=1326 audit(1756619458.091:121289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74e603adb9 code=0x7ffc0000 [ 1069.670009][ T29] audit: type=1326 audit(1756619458.091:121290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f74e609ebe9 code=0x7ffc0000 [ 1069.693826][ T29] audit: type=1326 audit(1756619458.091:121291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.3.18419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74e6095ba7 code=0x7ffc0000 [ 1069.826850][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18431'. [ 1069.913741][T21259] tipc: Enabled bearer , priority 0 [ 1069.930162][T21276] FAULT_INJECTION: forcing a failure. [ 1069.930162][T21276] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.942881][T21276] CPU: 0 UID: 0 PID: 21276 Comm: syz.9.18433 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1069.942924][T21276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1069.942938][T21276] Call Trace: [ 1069.942945][T21276] [ 1069.942954][T21276] __dump_stack+0x1d/0x30 [ 1069.943006][T21276] dump_stack_lvl+0xe8/0x140 [ 1069.943028][T21276] dump_stack+0x15/0x1b [ 1069.943045][T21276] should_fail_ex+0x265/0x280 [ 1069.943094][T21276] ? __se_sys_memfd_create+0x1cc/0x590 [ 1069.943135][T21276] should_failslab+0x8c/0xb0 [ 1069.943156][T21276] __kmalloc_cache_noprof+0x4c/0x320 [ 1069.943181][T21276] ? fput+0x8f/0xc0 [ 1069.943215][T21276] __se_sys_memfd_create+0x1cc/0x590 [ 1069.943284][T21276] __x64_sys_memfd_create+0x31/0x40 [ 1069.943302][T21276] x64_sys_call+0x2abe/0x2ff0 [ 1069.943323][T21276] do_syscall_64+0xd2/0x200 [ 1069.943351][T21276] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1069.943440][T21276] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1069.943467][T21276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.943503][T21276] RIP: 0033:0x7fa121c5ebe9 [ 1069.943522][T21276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.943543][T21276] RSP: 002b:00007fa1206c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1069.943566][T21276] RAX: ffffffffffffffda RBX: 0000000000000513 RCX: 00007fa121c5ebe9 [ 1069.943604][T21276] RDX: 00007fa1206c6ef0 RSI: 0000000000000000 RDI: 00007fa121ce27e8 [ 1069.943627][T21276] RBP: 0000200000000c40 R08: 00007fa1206c6bb7 R09: 00007fa1206c6e40 [ 1069.943641][T21276] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 1069.943653][T21276] R13: 00007fa1206c6ef0 R14: 00007fa1206c6eb0 R15: 0000200000000440 [ 1069.943670][T21276] [ 1069.946416][T21259] tipc: Disabling bearer [ 1070.204027][T21286] FAULT_INJECTION: forcing a failure. [ 1070.204027][T21286] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.216785][T21286] CPU: 1 UID: 0 PID: 21286 Comm: syz.4.18435 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1070.216822][T21286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1070.216836][T21286] Call Trace: [ 1070.216842][T21286] [ 1070.216850][T21286] __dump_stack+0x1d/0x30 [ 1070.216948][T21286] dump_stack_lvl+0xe8/0x140 [ 1070.216969][T21286] dump_stack+0x15/0x1b [ 1070.216987][T21286] should_fail_ex+0x265/0x280 [ 1070.217011][T21286] should_failslab+0x8c/0xb0 [ 1070.217076][T21286] kmem_cache_alloc_noprof+0x50/0x310 [ 1070.217103][T21286] ? audit_log_start+0x365/0x6c0 [ 1070.217134][T21286] audit_log_start+0x365/0x6c0 [ 1070.217254][T21286] audit_seccomp+0x48/0x100 [ 1070.217280][T21286] ? __seccomp_filter+0x68c/0x10d0 [ 1070.217303][T21286] __seccomp_filter+0x69d/0x10d0 [ 1070.217390][T21286] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1070.217420][T21286] ? vfs_write+0x7e8/0x960 [ 1070.217521][T21286] ? __rcu_read_unlock+0x4f/0x70 [ 1070.217545][T21286] ? __fget_files+0x184/0x1c0 [ 1070.217572][T21286] __secure_computing+0x82/0x150 [ 1070.217607][T21286] syscall_trace_enter+0xcf/0x1e0 [ 1070.217634][T21286] do_syscall_64+0xac/0x200 [ 1070.217659][T21286] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1070.217685][T21286] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1070.217755][T21286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.217780][T21286] RIP: 0033:0x7fe2cf72ebe9 [ 1070.217803][T21286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.217822][T21286] RSP: 002b:00007fe2ce176038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 1070.217884][T21286] RAX: ffffffffffffffda RBX: 00007fe2cf966090 RCX: 00007fe2cf72ebe9 [ 1070.217899][T21286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1070.217912][T21286] RBP: 00007fe2ce176090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.217924][T21286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.217937][T21286] R13: 00007fe2cf966128 R14: 00007fe2cf966090 R15: 00007ffe29441158 [ 1070.218011][T21286] [ 1070.473668][T21288] pim6reg: entered allmulticast mode [ 1070.480546][T21288] pim6reg: left allmulticast mode [ 1070.778125][T21299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18441'. [ 1071.386975][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18450'. [ 1071.577952][T21333] loop0: detected capacity change from 0 to 512 [ 1071.584699][T21333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1071.596509][T21333] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.18451: invalid indirect mapped block 4294967295 (level 0) [ 1071.610830][T21333] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.18451: invalid indirect mapped block 4294967295 (level 1) [ 1071.626088][T21333] EXT4-fs (loop0): 1 orphan inode deleted [ 1071.632161][T21333] EXT4-fs (loop0): 1 truncate cleaned up [ 1071.638313][T21333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.756718][T13409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.783383][T13409] ================================================================== [ 1071.791509][T13409] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 1071.799092][T13409] [ 1071.801432][T13409] read-write to 0xffff888237c26a48 of 1 bytes by task 21339 on cpu 0: [ 1071.809678][T13409] mlock_new_folio+0x114/0x200 [ 1071.814479][T13409] folio_add_lru_vma+0x5f/0x70 [ 1071.819285][T13409] handle_mm_fault+0x281f/0x2c20 [ 1071.824242][T13409] __get_user_pages+0x102e/0x1fa0 [ 1071.829340][T13409] __mm_populate+0x243/0x3a0 [ 1071.833946][T13409] __se_sys_mlockall+0x368/0x3d0 [ 1071.838903][T13409] __x64_sys_mlockall+0x1f/0x30 [ 1071.843766][T13409] x64_sys_call+0xd68/0x2ff0 [ 1071.848369][T13409] do_syscall_64+0xd2/0x200 [ 1071.852974][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.858883][T13409] [ 1071.861210][T13409] read to 0xffff888237c26a48 of 1 bytes by task 13409 on cpu 1: [ 1071.868836][T13409] need_mlock_drain+0x30/0x50 [ 1071.873533][T13409] __lru_add_drain_all+0x220/0x3f0 [ 1071.878686][T13409] lru_add_drain_all+0x10/0x20 [ 1071.883461][T13409] invalidate_bdev+0x47/0x70 [ 1071.888070][T13409] ext4_put_super+0x624/0x7d0 [ 1071.892756][T13409] generic_shutdown_super+0xe6/0x210 [ 1071.898054][T13409] kill_block_super+0x2a/0x70 [ 1071.902757][T13409] ext4_kill_sb+0x42/0x80 [ 1071.907100][T13409] deactivate_locked_super+0x72/0x1c0 [ 1071.912482][T13409] deactivate_super+0x97/0xa0 [ 1071.917171][T13409] cleanup_mnt+0x269/0x2e0 [ 1071.921591][T13409] __cleanup_mnt+0x19/0x20 [ 1071.926022][T13409] task_work_run+0x131/0x1a0 [ 1071.930618][T13409] exit_to_user_mode_loop+0xe4/0x100 [ 1071.936078][T13409] do_syscall_64+0x1d6/0x200 [ 1071.940675][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.946580][T13409] [ 1071.948897][T13409] value changed: 0x13 -> 0x1a [ 1071.953660][T13409] [ 1071.955981][T13409] Reported by Kernel Concurrency Sanitizer on: [ 1071.962129][T13409] CPU: 1 UID: 0 PID: 13409 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1071.972125][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1071.982336][T13409] ================================================================== [ 1072.239324][T21353] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.254488][T21353] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.292425][T21353] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.330742][T21353] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.371728][ T6021] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.382938][ T6021] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.394070][ T6021] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.405023][ T6020] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0