last executing test programs: 16m49.521006014s ago: executing program 32 (id=29): time(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs$namespace(0x0, 0x0) setns(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="5c000000010006", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x2a020480) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x88, r6, 0x100, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5956}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0xfffffffffffffcf3, 0xa, 0x80b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6035}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8791}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96e1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x229cc25d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x675d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffd}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r7, r7, 0x6) time(&(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") 16m47.920710986s ago: executing program 33 (id=45): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e27}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x1400c848) 16m19.452705716s ago: executing program 34 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x100}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) 16m9.237839852s ago: executing program 35 (id=564): getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xda, &(0x7f0000000200), &(0x7f0000000100)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b333b316d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d376d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15m57.831784576s ago: executing program 36 (id=759): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x7fffffff}, 0xaaf4, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x368, &(0x7f0000000180)="$eJzs3U9oI9UfAPBvOmnSXfj9tjdREKI3Qct2b3qxRbqw2ItK8M9BDG5XJa1Ci8X2sG09KB4Fj3rypqAHD+JRBEW8efDqCrIqHrS3BRefTCaTTJu02y5WKX4+0PTlvfed73cmQzINyetzc9G9PBlXdnevx9RULepzj8zFjVpMRxal7RjVGNMHAJwON1KK31PhiCG1Ey4JADhhvdf/FyKiFdNFz+tfHjY/efUHgFOv//f/mcPmTB008MqJlAQAnLCR9//v3TPc6P3Uy7v1yqcCAIDT6omnn3l0fjHi8VZrKmLlzfX2ejseGo7PX4mXYjmW4nyci5sRxYVCflPr3V68tLhwvtVqbcVP09GOiIl+YLu4UpjPevHNmB2MDK42UkrZxU8WF2ZbPRGxvdXLHyu19fZknO3n//5sLA0vPKbLIqJ3c2lx4UKrv4H2Shm/FbEzfN8ir38mzsW3zw82k1L5CcbFhauzE/07w/j1djMuD47Cge+AAAAAAAAAAAAAAAAAAAAAAADAbZlpDUwP1s9J+e9ipZyZmTHjvfVxivj++kA7xfpAqZkipd9ee6D9VhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAYGBtoxGd5eWl1bWNzW61sbW6tjEREXnPy19/9MWZGJ1zi0a9SNGMGKRo9dNudjspKyenLGI0PMuTlz0ffDqouDqnOdiLsWU0xw/tRt743z0/vjscujsrt/zncHIW43cwq5Tx8L6kK/8vSjrOgRo0LlR7mqPZr6WUKj1vVMOvPju6wahF1I//wG12J+LgOSlvfHX9xTvLo9/5PBXuu//ck9feef+Xbmc5zxy9R7CxunYzdTu1cvLxDkt+qMueWhSNWvVMqB8WvrO3p5N99+tTd739zdGyp2rPq/n5vG9OVuzOx/vDG0UjLzNvNIZny5lh+GR/J5aXJsec/Ldq3MZjesd7n32Y0g8/HzlFIa9+YuRpo/b3PQMBAAAAAAAAAAAAAAAAAAClynfF+/pf9p08LOrBx06+MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD45wz//3+lsbMd+3qO0vhja0xUc2l1LaLxb+8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/cX8FAAD//zbhVeI=") syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) io_setup(0x8, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@newtclass={0x7c, 0x28, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0x4, 0xfff3}, {0x1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xf}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x7c}}, 0x0) io_submit(0x0, 0x0, 0x0) 15m37.719782034s ago: executing program 37 (id=851): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x8010, 0x602a1}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_ADDRESS={0xa, 0x1, @random="c6213c36c7e7"}]}, 0x34}}, 0x0) 15m23.527208368s ago: executing program 38 (id=1039): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xda, &(0x7f0000000200), &(0x7f0000000100)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b333b316d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d376d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15m21.484601708s ago: executing program 39 (id=1052): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095", @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x60a9, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r6) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15m15.921502007s ago: executing program 40 (id=1087): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x112258, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1809049, 0x0, 0xf1, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x80000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xfffffffffffffe2f, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) exit(0x800) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281a56e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400604040006040c009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 15m6.055129339s ago: executing program 41 (id=1157): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) unshare(0x22020400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 15m3.90076988s ago: executing program 42 (id=1166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0xfcff, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x18050}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 15m2.902918914s ago: executing program 43 (id=1174): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) 15m2.033840487s ago: executing program 44 (id=1176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) removexattr(0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="85000000b800000095000000000000009515f2467a93a1bd9823760f5ee805ca9fea95264447821c6300364f0dac002fd307a2cb103676200f6f751551a8043549d8b39ed646af73087136c9b52530202e5215f9f39e705ac032a2bd540dbaaf4d1a255b7eec124c9fce05ed582436564ce8b9b6251bb25ff0960fc08d6fec4615cef98e6ef0fda8ed7ddde7201e7970eea23dffe89f731182b1e3ec595fea7a5cd0a81d4e6af9a1808301bbbb43ef525c3e8cfc3fa36e2b161437abb269367bf6ab898a97be0c5c515383d9dc7cab989b70b18280cbcd6c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r6 = pidfd_getfd(r4, r5, 0x0) readlinkat(r6, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) timer_create(0x0, 0x0, 0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x4000) gettid() bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000041da000000001c09a83e8eb6083940ab1c62049975e49842721b331bac6577212d6d02320c432f5d7eee8d1674fe133c7edf10d00b18e9d7b019eb76acc55e2057b705db5a073669e22eebbdc0a4ef19e7870f01bdc296db6643ba39476cbc01ce0648491fffb8e11923dd3f31e951682478723300368f244f30f93467d30d7e5ef62988b5aa294dde74edc0316acf87fcbbb210ddde8b65880ffc29cc39b8a9d363327004251b12fd8bbc4d6c9e218bc42ac8e93ef5b8c0cba6"], 0x50) r8 = io_uring_setup(0x4d40, &(0x7f0000000240)={0x0, 0xca66, 0x40, 0x0, 0x4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000480), 0x61) timer_settime(0x0, 0x1, 0x0, 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r9) keyctl$restrict_keyring(0x1d, r9, 0x0, 0x0) 14m57.65348397s ago: executing program 7 (id=1220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$inet(0x10, 0x3, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x800) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001002bbd70000000020002002004e7ffffffffffffff080002"], 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) (fail_nth: 1) 14m57.336732704s ago: executing program 7 (id=1222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095", @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x60a9, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create(0x8) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x41, 0x1, 0x8, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 14m56.137062471s ago: executing program 7 (id=1237): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000d40)='./file1\x00', 0x3a08014, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRES8], 0x1, 0x7d3, &(0x7f0000001d40)="$eJzs3UtsHGcdAPD/OHbsuFKoCipRlKaTpEiJCO7uunWxeijb9diZ1t41u2uUHFBbNU4VxX2oVQXNgZJLCwiEOHEsvVZcuIE4IHEATkj0wIUDUqWeUJFAQiCEZDT7iB9ZP5LYSR+/3yr7zc58833/mZ3Mf2e9MxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCS1mVKpnMR8Xl86n26tNtNsLGwzvd/ebzYU2/QbkRT/YmwsjnRHHfnC2uT7i6eTcaz76liMFcVYXL3n/nsf//zwUH/+bQK6VSd2WS+J+G4R1JXnVlaWX92HQO6gH/z6pmf5z2rxPJfV81YjX6jOZWneaqTTU1Olh8/NttLZfD5rXWi1s4W01syq7UYzPV07k5anpyfTbOJCY6k+N1Odz/ojH/tKpVSaSp+aWMyqzVaj/vBTE63auXx+Pq/PdepUSt+Kos5jxYb4dN5O21l1IU0vXV5Zntwp1KJSecOY0Q0bzrGH7v3w9Q/+eXm52CC3aiTpbZiVcrlSKU89Ov3oY6XScKVU2TiitElcrxFDEUWNfdlo+QTZu5033KahXv6P+cijHktxPtJIY6jzvPYYibGYiWY0YqF4/eeRTdNvyP9fevjvf9yu3/X5v5/lj6xNPhqd/H+8++r4Fvm/2ClvjuNmHwd22caB67GtH/tavBFX40o8FyuxEsvx6m3Hs8ePQ5uiHtp5ns3v/XaPuciiHnmMRkQeC1HtjEkjj1Y0Io3pmIqpKMUzcS5moxVpzEYe85FFKy5EK9qRdbaoWjQji2q0oxHNSON01OJMpFGO6ZiOyUgji4m4EI1YinrMxUxUO61cisud9T65Ka77v/Psr17404fvFMPXK5W3WZCk+DBXVPrHNpV6yfzBuIX8368h/3/ajPX/h+3SXuy2YU+sdvL/8N0OAwAAANhHSefb9yQiRuKBztBs/vW7HRQAAACwpzq/az5WFCPF0AORzObzWWlAzffveGwAAADA3kg659glETEeD3aH+qdLDfoSAAAAAPgE6vz9/3hRjEe82Rnh+B8AAAA+Zb631TX2PzjYu0Zva3E06V/8dvH8Q8mL1WKo+mJvXK/4xvUW27NHk8O9RjrF1PDVe5KIGK5lx5L+1S//N9otP+o8H127AOFW1/pPms2R5NrWAVy3+rmIGwPovIofxolupRMXu+XF/pRuL+Oz+Xw2UWvMP15Oel+OtF9/6fK3I4rev19fOJzEpcsryxPPv7xysRPLtaKVay/2Lg+fbF69A1dGt8fV3hqIBwYv8UjnRIxev+Pdfkvrl3+oO/vQ9n0m6/t8K05265wc75bjG5d/rOizPPF4OarVw0Pt7Hz79dV1S9+LonybS/5WnOrWOXX6VLcYEEVlQxQv3RhFZX0Uu1sXu47inRNvnv/X7xpJNrlTFJO3GQXA3XKpc9WftSx0qJOF/rvaVeT/TXn3UD/h3sxe7tLap4z+BenX5brh2H12j/ZsP9kM2KOf7tY53f08MXx0QF4pDdijv3L5ld/39uiPvPfTn33z+B9+cevZ7b04063TK+K+326RY4tl/tGmrPpuMce7W/RbvKwkMdK9d8La5OUXll+qVCanSo+USo9WYqTzUaFXyD0ADLDjPXZ2cReeRwYfVUc/4913/ScFE/F8vBwrcTHOds42iIgHB7c6vu5nCGd3OGodX3eHl7PbH1seWTu9obK57uipJO45GAPa3ZAqv/iTTvHvfXtLAGDfndwhD2+T/0f6+f/sDsfdG3P5me6Nc/tHx7F1Lh/kq/u9QgDgMyBrfpSMt99Oms188Zny9HS52j6Xpc1G7em0mc/MZWleb2fNWv+b5ka7UesfDc9krbS1tLjYaLbT2UYzXWy08vOdO7+nvVu/t7KFar2d11qL81m1laW1Rr1drbXTmbxVSxeXnpzPW+eyZmfm1mJWy2fzWrWdN+ppq7HUrGUTadrKsnUV85ms3s5n82Kwni4284Vq81pEzC8tZOlM1qo188V2o9tgv6+8PttoLnSanbhx8f92J9c1AHxcvPbG1SvPrawsv7pxYDXZPGbwwF/euHql/yf6LStHrN7lpQQA1lufpQEAAAAAAAAAAAAAgI+nG0/XK8budNrfhoGRuInKmwZGtz5r8DM58OWfd9+WvWjwdto5tOE9PdjbWPZqSQ/EujEHImL/1uqzTzxxZas6T7555NxfR3fT++D/KYNOdX37cMTBX/64O+Zrd2qzeb+3DmP4pmZfTbapc9d2SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwpf8HAAD//+UwRao=") creat(0x0, 0x1df) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x10000, 0x3, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) flistxattr(r3, 0x0, 0x0) 14m56.135936511s ago: executing program 7 (id=1239): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") close_range(r0, 0xffffffffffffffff, 0x2) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000010000b708006f49fd22007b8af8ff00000000bfa2000000000000070200007955b04135413bf8ffffffb703000008002010b70400aa00000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) syz_open_procfs(r1, &(0x7f00000003c0)='ns\x00') (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async) umount2(&(0x7f0000000040)='./file0\x00', 0x7) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYRES64=r6, @ANYRES32=r10], 0x50}}, 0x24000840) 14m55.588394219s ago: executing program 7 (id=1244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x200b414, 0x0, 0x40, 0x0, &(0x7f0000000480)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x80000}) r6 = syz_io_uring_setup(0x4694, &(0x7f00000004c0)={0x0, 0xe0d6, 0x1, 0x1, 0x36d}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 14m54.933957368s ago: executing program 7 (id=1251): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 14m54.82478246s ago: executing program 45 (id=1251): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 14m52.406536555s ago: executing program 3 (id=1276): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 14m52.334513866s ago: executing program 3 (id=1278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095", @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x60a9, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create(0x8) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x41, 0x1, 0x8, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c", 0x1e}, {0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f", 0xfd7c}, {0x0}], 0x5, &(0x7f0000000340)}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 14m51.3329368s ago: executing program 3 (id=1285): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x230e, 0x10100, 0x1, 0xfffffffe}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000080)={[{@noinit_itable}, {@block_validity}, {@quota}, {@nombcache}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 14m50.971053755s ago: executing program 3 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000100)={0x0, 0x4, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x7f, 0x2fe3}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @calipso={0x7, 0x2, {0x3, 0x0, 0x4, 0x2}}]}, 0x30) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 14m50.801446988s ago: executing program 3 (id=1294): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x200b414, 0x0, 0x40, 0x0, &(0x7f0000000480)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 14m50.709481099s ago: executing program 3 (id=1295): syz_emit_ethernet(0xfc0, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0xf8a, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) lseek(r0, 0x84b0, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@broadcast, 0x4e20, 0xc5fc, 0x4e22, 0x6, 0xa, 0x20, 0x10, 0x8}, {0x9, 0x0, 0x4, 0xcc9, 0x40, 0x80, 0x6, 0x9}, {0x7, 0x5, 0x4, 0x8}, 0x7, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d3, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x2, 0x3, 0x1, 0xe, 0xe5}}, 0xe8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x69) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x2}, 0x18) 14m43.711650089s ago: executing program 6 (id=1381): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) lremovexattr(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r4, 0x2, {0x2, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40000c0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001400)={'c', ' *:* ', 'r\x00'}, 0x8) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (fail_nth: 3) 14m42.860510952s ago: executing program 6 (id=1385): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x200400d1) r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0xc4, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3f}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_USERDATA={0x69, 0xd, 0x1, 0x0, "2a35ef084db375bcd300c0df659c38a6fb2a3d50f9f2c0a7a9f1c1a7c471d806cb1177913fe562b6068d6d0b59cbb1316de08f59c29c769555adea912c1e6bb7888fb167ce1234c0fd9933e0006c4e40d186c391baa0195b9e11bdb4a7462b1403444f1d3d"}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0xffffffffffffff9b}}, 0xec}, 0x1, 0x0, 0x0, 0x81}, 0x0) 14m42.820954492s ago: executing program 6 (id=1388): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 14m42.793071132s ago: executing program 6 (id=1390): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 14m42.761151953s ago: executing program 6 (id=1391): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x200b414, 0x0, 0x40, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x10000000) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 14m42.673965584s ago: executing program 6 (id=1395): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000001c0)) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000280)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nomblk_io_submit}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r5}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}}, 0x0) epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100627269646765000040000280080005000000000005002900010000000600270004"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100"], 0x1ac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='xen_mmu_pmd_clear\x00', r8}, 0x18) 14m36.392396365s ago: executing program 46 (id=1295): syz_emit_ethernet(0xfc0, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0xf8a, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) lseek(r0, 0x84b0, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@broadcast, 0x4e20, 0xc5fc, 0x4e22, 0x6, 0xa, 0x20, 0x10, 0x8}, {0x9, 0x0, 0x4, 0xcc9, 0x40, 0x80, 0x6, 0x9}, {0x7, 0x5, 0x4, 0x8}, 0x7, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x4d3, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x2, 0x3, 0x1, 0xe, 0xe5}}, 0xe8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x69) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='skb_copy_datagram_iovec\x00', r0, 0x0, 0x2}, 0x18) 14m28.34922366s ago: executing program 47 (id=1395): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000001c0)) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000280)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nomblk_io_submit}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4be, &(0x7f0000000980)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='netlink_extack\x00', r5}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}}, 0x0) epoll_create1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100627269646765000040000280080005000000000005002900010000000600270004"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100"], 0x1ac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='xen_mmu_pmd_clear\x00', r8}, 0x18) 11m36.2440118s ago: executing program 5 (id=5131): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 11m35.389732822s ago: executing program 5 (id=5144): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x8c9200268ef9770f, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0xf, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1e, 0x13, r1, 0x6000) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x0, 0x1}, 0x10) 11m35.016990537s ago: executing program 5 (id=5148): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000009b9fbbcf00"/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) request_key(&(0x7f0000000800)='id_resolver\x00', &(0x7f0000000840)={'syz', 0x2}, &(0x7f00000008c0)='\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) 11m34.930108158s ago: executing program 5 (id=5149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 11m34.81115779s ago: executing program 5 (id=5152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000005080)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, &(0x7f0000000240), 0x40000000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000003c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) fcntl$dupfd(r5, 0x406, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24020400) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x4e, &(0x7f0000000900)="e026e1578251fb989fed06aed9d3", 0x0, 0x4, 0x0, 0x12, 0x35, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xfffffffffffffd06) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 11m34.508900384s ago: executing program 5 (id=5155): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000423896) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 11m20.19426885s ago: executing program 48 (id=5155): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8841, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000423896) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 4m39.023085453s ago: executing program 4 (id=11776): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180)) ioprio_set$uid(0x3, 0x0, 0x4007) 4m38.865010175s ago: executing program 4 (id=11777): mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000400)='btrfs_set_extent_bit\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018008000000000001c0000001c00000002000400000000000000000900000000000000000000000100000000880000000000"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100000201030000000000000000000a0000010800084000000002140019800800"], 0x150}, 0x1, 0x0, 0x0, 0x8040891}, 0x4080) 4m38.769834967s ago: executing program 4 (id=11780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x8040891}, 0x4080) 4m38.736215877s ago: executing program 4 (id=11781): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nobarrier}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@usrquota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x9b, 0x1c20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000180)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004300), 0x0, 0x40015) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40400c4) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffffffff}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r3, 0xb}}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f01, 0x48, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) openat$cgroup_int(r1, &(0x7f0000000340)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="a6000000c3c2000007000000faffd76a296c1977e06a41fd0e585e5c6cf681f7a2f200fa1eead9d2528b70f323e629d00b6112fe7bd727c6957062be8a83dbf548a551ec43ba67114b905ccdce57ec8ab8c22bb5267a5de14a4534ac1b27db4d7a56a7f7fc2464533c8972f56452958617b0bb6c3c09de8854bc75ae39dd4ef0c969c7f8654e6fbc324a25ee717f2fdca9a2b78a8d996be79b161987e89861938e06b3f6030097fab3a8981fb2ce471643fb"]) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 4m38.633015729s ago: executing program 4 (id=11782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) removexattr(0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) capget(0x0, &(0x7f0000000480)={0x4, 0xa1, 0x5, 0x6, 0x6, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x11, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x24}}, 0x0) r5 = dup(r4) r6 = socket$nl_audit(0x10, 0x3, 0x9) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000530420002bbd7000fbdbdf250bf6f46d"], 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) mq_timedsend(r5, &(0x7f0000000300)="c9a46727179a5472b12c950ccf8b1434cdcfaf7f63b8cdc7efd9e652824887b171ddcca9480296b5ef6e0c7c5016a24b96728dc2117c1214a15da40e4822dcb9ef943af6877c34abb22d3f570ff77f77ef66230336d0cb71616eccf28065576aa5f1c2ea25ba39f786c63988df3e5778ecb528d7fa6c4759b0840dca3ae11607c9201bb4", 0x84, 0x8, &(0x7f0000000100)={0x0, 0x3938700}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x0, &(0x7f0000000640)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000000700)="75d8bec8e4d57789c0b66f29752586629dce90f76e5da7218ce5eb27e310044dabef4ba7915f637c27af2060758726c8faf0b1e21625b9b72acc3aa5d4a9ba3187ac3d252e3cc1359d8fe8050f537a2c1b8104d2f4bae8c69d069e1fdb4029d0a64ec92d8ac7e1776efc4593d6e353ba1e0b9338664bd4390d67b01165b513191687639164396ebd7330290df2dbb939c1701b320c65756d0c73605b8c3d7e1b75eec41a7e919a6ae5b71ae5c11b94ec0a0b3b2f275406c642aceabe84c218a1e79cc22f6c3e014934c80380b99990b9e08189759fea3ec90318e661a690c0be7c044b40f8", 0xe5, 0x0, 0x0, 0x3}]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x42, {0x0, 0x1}, {0x47, 0xfffe}, @cond=[{0x84, 0x3ff, 0x4404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m38.205057024s ago: executing program 4 (id=11788): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) set_robust_list(&(0x7f00000001c0)={0x0, 0x3}, 0x18) 4m38.204751595s ago: executing program 49 (id=11788): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) set_robust_list(&(0x7f00000001c0)={0x0, 0x3}, 0x18) 3.399713311s ago: executing program 2 (id=15699): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 3.295046583s ago: executing program 2 (id=15700): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/35, 0x23, 0x0, 0x4, 0x0, 0x2, 0x20000}}, 0x120) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002880)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x62d, 0x8, 0x7}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xfffffff8, 0x3}, {0x0, 0x4, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xfff, 0x9, 0xffff, 0x1, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0x79, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0xb, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x8, 0x0, 0xff, 0x3}, {0xb, 0x7f, 0x5, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x4d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x8001, 0x40}, {0x7, 0x81, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x81, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x810000, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x2, 0x10003, 0x3, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x8, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0xe5a7}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x9, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x5}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x5, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x1605}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0x4, 0x3ee, 0x4}, {0xbfffffe, 0xfff, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x2, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x9, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x2}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x200}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x0, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405bd, 0x6}, {0x9, 0x0, 0x9, 0x0, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x2}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x2}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0x7fffffff}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0x4, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x6, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x96, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x8c5}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0xc, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0x9, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0x4}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0xd, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x6}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x5, 0x3, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xad}, {0x7, 0x9, 0x8, 0x3, 0xe02, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 3.233783404s ago: executing program 2 (id=15701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}}, 0x1c}}, 0x0) 3.199874724s ago: executing program 2 (id=15702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r2, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) 3.156297395s ago: executing program 2 (id=15703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$rfkill(r0, 0x0, 0x0) 3.041165717s ago: executing program 2 (id=15704): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.237947978s ago: executing program 1 (id=15709): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f0000000180), &(0x7f0000000500)='%pi6 \x00'}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250600000014000180080003000600000008000100", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90) 2.05932378s ago: executing program 1 (id=15710): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="816d6f5009c3", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d707c24701e34eecb6ba8ecd692b74f240ed38d42ec18b2f1e9e052c999467b1782d7eb4703f1717425dcee3641033bf726b8464fc30c7300d4dfac606309ad7d5ff4537ba03efd1ab660dea3c193d5b370bb1c0aa74e75a768e8f487d81fff910fca09233b891c8fadfc8f3927620c18266ad25b12fedbfe905c45c395b064e49994479e2303fa9f349", @ANYRES32, @ANYBLOB="65cd0c017c0e1534954a8e51feab8e312e9ecb243824694438942d995ff51aad3547e8669889c592ec13677be32ace21385e940fc044f91f0144f66a5270c95d7a431692c1d141dca7a10822883922425eecd0f0e8f6fcee456aeab92ce48385dbbbb60e7d0baf370718b169df8f8d40cd5cff0930827dfd19f1800c", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0xb, 0xfff9}, {0x1}}}, 0x24}}, 0x0) pread64(r2, &(0x7f0000000a00)=""/4096, 0x1000, 0x6) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f0000000140)={0x1, 0x80, 0x1, 'queue0\x00', 0x3}) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x301200, 0x0) 1.636624076s ago: executing program 0 (id=15715): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000, 0x8}, 0x0, 0x0, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0, 0x0, 0x1000}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) syz_emit_ethernet(0x0, 0x0, &(0x7f00000000c0)={0x1, 0x3, [0xa37, 0x382, 0x65c, 0x82f]}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) 1.541821338s ago: executing program 1 (id=15719): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) 1.493684709s ago: executing program 1 (id=15720): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 1.452222099s ago: executing program 0 (id=15722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r3 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x219}, &(0x7f0000000980)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}, 0x0, 0x8000}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1.438417239s ago: executing program 1 (id=15724): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250600000014000180080003000600000008000100", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90) 1.39352537s ago: executing program 1 (id=15725): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b08000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000015000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000005000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000c355c819e26c1be8619374221e100000000000b4759f5611d398344b03a71811000030b1a83ef63f242e081ca61ff12ab1e65d83db6472d2b4294460f39db213c1bfb15a0b4998bf8f2f2329c3714d71b38081bfaffdd884d6c06278380d7a8baae6b3bc302834555d9fcbc6e5bf7b92e5e6f86d0dce37fa8c75ad8dd21829c00eb8634718a4afb23a7560146798befa", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) ioperm(0x0, 0x2, 0x7e) memfd_create(0x0, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffff00], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.137923294s ago: executing program 8 (id=15726): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.095887294s ago: executing program 8 (id=15727): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) timer_create(0xf85d86d9cb6f435a, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(r3, 0x10, 0x57c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 983.517256ms ago: executing program 9 (id=15729): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r1, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) 980.856086ms ago: executing program 8 (id=15730): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x28) 952.924646ms ago: executing program 9 (id=15731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}}, 0x0) 916.815467ms ago: executing program 8 (id=15732): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000, 0x8}, 0x0, 0x0, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0, 0x0, 0x1000}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) syz_emit_ethernet(0x0, 0x0, &(0x7f00000000c0)={0x1, 0x3, [0xa37, 0x382, 0x65c, 0x82f]}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) 916.421077ms ago: executing program 9 (id=15733): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 873.831928ms ago: executing program 9 (id=15734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$rfkill(r2, &(0x7f0000000400), 0x8) 843.256128ms ago: executing program 9 (id=15735): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250600000014000180080003000600000008000100", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90) 816.652698ms ago: executing program 9 (id=15736): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x400000000}, 0x18) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 798.103008ms ago: executing program 8 (id=15737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$rfkill(r2, &(0x7f0000000400), 0x8) 703.99818ms ago: executing program 8 (id=15738): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x400000000}, 0x18) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 496.612833ms ago: executing program 0 (id=15739): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x400000000}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 77.963869ms ago: executing program 0 (id=15741): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r1, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561f18c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7228c040c757e6ce437d7853ac2cca9605a2e18bf6553fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d", 0x90}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43a4f66e274175218e8e3f", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x2, 0x4000) 36.73288ms ago: executing program 0 (id=15742): ioperm(0x1, 0x9, 0xfffffffffffffff8) shmctl$IPC_RMID(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x52f, &(0x7f0000001e00)="$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") 0s ago: executing program 0 (id=15743): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000, 0x8}, 0x0, 0x0, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) syz_emit_ethernet(0x0, 0x0, &(0x7f00000000c0)={0x1, 0x3, [0xa37, 0x382, 0x65c, 0x82f]}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) kernel console output (not intermixed with test programs): x6f0 [ 990.856481][T17599] ? __filemap_get_folio+0x49f/0x650 [ 990.856656][T17599] ? swap_cache_get_folio+0x77/0x200 [ 990.856710][T17599] do_swap_page+0x301/0x2460 [ 990.856740][T17599] ? save_fpregs_to_fpstate+0x100/0x160 [ 990.856772][T17599] ? _raw_spin_unlock+0x26/0x50 [ 990.856846][T17599] ? finish_task_switch+0xad/0x2b0 [ 990.856918][T17599] ? __pfx_default_wake_function+0x10/0x10 [ 990.856981][T17599] handle_mm_fault+0xb60/0x2ae0 [ 990.857019][T17599] ? mas_walk+0xf2/0x120 [ 990.857067][T17599] do_user_addr_fault+0x636/0x1090 [ 990.857107][T17599] ? switch_fpu_return+0xe/0x20 [ 990.857234][T17599] exc_page_fault+0x54/0xc0 [ 990.857260][T17599] asm_exc_page_fault+0x26/0x30 [ 990.857281][T17599] RIP: 0033:0x7f7fe30f1228 [ 990.857352][T17599] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 990.857376][T17599] RSP: 002b:00007ffcdea5d810 EFLAGS: 00010293 [ 990.857407][T17599] RAX: 0000000000000000 RBX: 00007f7fe32e5fa0 RCX: 00007f7fe30f1225 [ 990.857425][T17599] RDX: 00007ffcdea5d850 RSI: 0000000000000000 RDI: 0000000000000000 [ 990.857438][T17599] RBP: 00007f7fe32e7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 990.857450][T17599] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000f5a78 [ 990.857465][T17599] R13: 00007f7fe32e6080 R14: ffffffffffffffff R15: 00007ffcdea5d990 [ 990.857490][T17599] [ 990.857499][T17599] memory: usage 307200kB, limit 307200kB, failcnt 3989 [ 991.056180][T17734] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14805'. [ 991.061887][T17599] memory+swap: usage 184968kB, limit 9007199254740988kB, failcnt 0 [ 991.121692][T17599] kmem: usage 137640kB, limit 9007199254740988kB, failcnt 0 [ 991.129066][T17599] Memory cgroup stats for /syz9: [ 991.129921][T17599] cache 4096 [ 991.138156][T17599] rss 4096 [ 991.141299][T17599] shmem 0 [ 991.144291][T17599] mapped_file 4096 [ 991.148134][T17599] dirty 0 [ 991.151274][T17599] writeback 0 [ 991.154787][T17599] workingset_refault_anon 434 [ 991.159610][T17599] workingset_refault_file 505 [ 991.164334][T17599] swap 163840 [ 991.167622][T17599] swapcached 40960 [ 991.171384][T17599] pgpgin 1679412 [ 991.175152][T17599] pgpgout 1679401 [ 991.178831][T17599] pgfault 1247610 [ 991.182487][T17599] pgmajfault 181 [ 991.186189][T17599] inactive_anon 40960 [ 991.190198][T17599] active_anon 0 [ 991.193867][T17599] inactive_file 4096 [ 991.197908][T17599] active_file 0 [ 991.201427][T17599] unevictable 0 [ 991.204901][T17599] hierarchical_memory_limit 314572800 [ 991.210337][T17599] hierarchical_memsw_limit 9223372036854771712 [ 991.216650][T17599] total_cache 4096 [ 991.220445][T17599] total_rss 4096 [ 991.224200][T17599] total_shmem 0 [ 991.227739][T17599] total_mapped_file 4096 [ 991.232167][T17599] total_dirty 0 [ 991.235636][T17599] total_writeback 0 [ 991.239645][T17599] total_workingset_refault_anon 434 [ 991.245090][T17599] total_workingset_refault_file 505 [ 991.250509][T17599] total_swap 163840 [ 991.254818][T17599] total_swapcached 40960 [ 991.259156][T17599] total_pgpgin 1679412 [ 991.263515][T17599] total_pgpgout 1679401 [ 991.267867][T17599] total_pgfault 1247610 [ 991.272814][T17599] total_pgmajfault 181 [ 991.277200][T17599] total_inactive_anon 40960 [ 991.281851][T17599] total_active_anon 0 [ 991.286003][T17599] total_inactive_file 4096 [ 991.290595][T17599] total_active_file 0 [ 991.294751][T17599] total_unevictable 0 [ 991.298758][T17599] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.14790,pid=17599,uid=0 [ 991.313795][T17599] Memory cgroup out of memory: Killed process 17599 (syz.9.14790) total-vm:93748kB, anon-rss:1060kB, file-rss:22464kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 991.414655][T17757] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 991.424174][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 991.424188][ T29] audit: type=1326 audit(1747394531.781:55750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.9.14814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x0 [ 991.496483][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14817'. [ 991.521824][T17766] bridge0: entered promiscuous mode [ 991.528589][T17766] bridge0: port 3(macvlan2) entered blocking state [ 991.535161][T17766] bridge0: port 3(macvlan2) entered disabled state [ 991.542149][T17766] macvlan2: entered allmulticast mode [ 991.547755][T17766] bridge0: entered allmulticast mode [ 991.555467][T17766] macvlan2: left allmulticast mode [ 991.560830][T17766] bridge0: left allmulticast mode [ 991.566909][T17766] bridge0: left promiscuous mode [ 991.572054][ T29] audit: type=1326 audit(1747394531.903:55751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.9.14814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 991.596077][ T29] audit: type=1326 audit(1747394531.903:55752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.9.14814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 991.620033][ T29] audit: type=1326 audit(1747394531.903:55753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.9.14814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 991.644382][ T29] audit: type=1326 audit(1747394531.903:55754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.9.14814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7fe30be9a3 code=0x7ffc0000 [ 991.668634][ T29] audit: type=1326 audit(1747394531.903:55755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.9.14814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7fe30bd41f code=0x7ffc0000 [ 991.692548][ T29] audit: type=1326 audit(1747394531.903:55756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.9.14814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7fe30be9f7 code=0x7ffc0000 [ 991.804191][ T29] audit: type=1326 audit(1747394531.940:55757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17779 comm="syz.2.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 991.828338][ T29] audit: type=1326 audit(1747394531.940:55758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17779 comm="syz.2.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 991.852332][ T29] audit: type=1326 audit(1747394531.940:55759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17779 comm="syz.2.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 991.896569][T17787] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 991.932336][T17789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.998280][T17789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.066858][T17789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.160669][T17789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.261915][T17789] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.313791][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14819'. [ 992.318929][T17789] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.373574][T17789] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.407289][T17789] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.618540][T17825] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.896596][T17825] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.960828][T17825] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.014622][T17825] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.080316][T17825] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.110187][T17825] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.179049][T17825] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.240218][T17825] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.430724][T17875] __nla_validate_parse: 4 callbacks suppressed [ 994.430823][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14835'. [ 994.646129][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14836'. [ 994.683685][T17875] bond3: entered promiscuous mode [ 994.689855][T17875] bond3: entered allmulticast mode [ 994.700502][T17875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 995.193240][T20246] Process accounting resumed [ 995.273542][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14851'. [ 995.335435][T17958] 8021q: adding VLAN 0 to HW filter on device team3 [ 995.542454][T23658] Process accounting resumed [ 995.634011][T23658] Process accounting resumed [ 995.639043][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14852'. [ 995.776352][T18013] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.850997][T18013] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.922837][T18013] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.984654][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14858'. [ 996.069007][T18035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.069305][T18013] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.079494][T18035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.228629][T18059] netlink: 'syz.9.14871': attribute type 3 has an invalid length. [ 996.293480][T18066] netlink: 'syz.2.14874': attribute type 3 has an invalid length. [ 996.317593][T18066] block device autoloading is deprecated and will be removed. [ 996.698189][T18091] cgroup: Unknown subsys name 'audit' [ 996.715342][T18013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.734261][T18013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.768666][T18013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.786111][T18013] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.938378][T18110] bridge_slave_0: left allmulticast mode [ 996.944093][T18110] bridge_slave_0: left promiscuous mode [ 996.950013][T18110] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.972285][T18110] bridge_slave_1: left allmulticast mode [ 996.978010][T18110] bridge_slave_1: left promiscuous mode [ 996.983892][T18110] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.993748][T18115] binfmt_misc: register: failed to install interpreter file ./file2 [ 997.004087][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 997.004102][ T29] audit: type=1400 audit(1747394536.991:56048): avc: denied { wake_alarm } for pid=18109 comm="+}[@" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 997.055284][T18110] bond0: (slave bond_slave_0): Releasing backup interface [ 997.077552][T18110] bond0: (slave bond_slave_1): Releasing backup interface [ 997.124465][T18110] team0: Port device team_slave_0 removed [ 997.141618][T18110] team0: Port device team_slave_1 removed [ 997.141716][T18117] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 997.148894][T18110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.163657][T18110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.211017][T18110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.218897][T18110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.371981][ T29] audit: type=1400 audit(1747394537.337:56049): avc: denied { connect } for pid=18122 comm="syz.8.14887" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 997.392942][ T29] audit: type=1326 audit(1747394537.337:56050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.416860][ T29] audit: type=1326 audit(1747394537.337:56051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.469211][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14889'. [ 997.502140][T18127] bridge0: entered promiscuous mode [ 997.524078][T18127] bridge0: port 3(macvlan2) entered blocking state [ 997.530813][T18127] bridge0: port 3(macvlan2) entered disabled state [ 997.546432][ T29] audit: type=1326 audit(1747394537.347:56052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.551578][T18127] macvlan2: entered allmulticast mode [ 997.570128][ T29] audit: type=1326 audit(1747394537.347:56053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.575494][T18127] bridge0: entered allmulticast mode [ 997.599145][ T29] audit: type=1326 audit(1747394537.347:56054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.628491][ T29] audit: type=1326 audit(1747394537.356:56055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.652475][ T29] audit: type=1326 audit(1747394537.356:56056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.676400][ T29] audit: type=1326 audit(1747394537.356:56057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18122 comm="syz.8.14887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 997.710155][T18127] macvlan2: left allmulticast mode [ 997.715452][T18127] bridge0: left allmulticast mode [ 997.735314][T18127] bridge0: left promiscuous mode [ 997.900547][T18139] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.974185][T18139] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.038097][T18139] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.087443][T18139] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.140362][T18139] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.177037][T18139] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.208782][T18139] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.234641][T18139] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.376692][T18191] netlink: 'syz.1.14902': attribute type 3 has an invalid length. [ 998.445828][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.453656][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.461275][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.468806][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.476404][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.483838][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.491554][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.499161][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.506869][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.514591][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.522056][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.529679][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.537075][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.544594][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.552228][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.559843][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.567303][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.574962][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.582552][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.590431][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.597894][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.605568][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.613430][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.621056][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.628768][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.636294][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.643851][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.651303][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.658978][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.666805][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.674382][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.682169][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.689762][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.697224][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.704769][T23658] hid-generic 0000:0004:0000.001D: unknown main item tag 0x0 [ 998.754203][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.761850][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.769360][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.776924][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.784502][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.792005][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.799514][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.806746][T23658] hid-generic 0000:0004:0000.001D: hidraw0: HID v0.02 Device [syz0] on syz1 [ 998.807991][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.824957][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.832685][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.840253][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.847680][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.855193][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.862658][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.870278][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.877990][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.885642][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.893141][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.900918][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.908484][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.915975][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.923517][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.931127][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.938740][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.946698][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.954176][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.961708][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.969262][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.976766][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.981637][T18219] netlink: 'syz.8.14908': attribute type 3 has an invalid length. [ 998.984304][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 998.999755][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 999.007308][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 999.015593][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 999.023078][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 999.030505][T19495] hid-generic 0000:0004:0000.001E: unknown main item tag 0x0 [ 999.062396][T19495] hid-generic 0000:0004:0000.001E: hidraw0: HID v0.02 Device [syz0] on syz1 [ 999.185349][T18239] lo speed is unknown, defaulting to 1000 [ 999.281216][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14914'. [ 999.304418][T18250] veth1_macvtap: left promiscuous mode [ 999.546237][T18298] FAULT_INJECTION: forcing a failure. [ 999.546237][T18298] name failslab, interval 1, probability 0, space 0, times 0 [ 999.559112][T18298] CPU: 1 UID: 0 PID: 18298 Comm: syz.8.14920 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 999.559149][T18298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 999.559166][T18298] Call Trace: [ 999.559175][T18298] [ 999.559199][T18298] __dump_stack+0x1d/0x30 [ 999.559229][T18298] dump_stack_lvl+0xe8/0x140 [ 999.559281][T18298] dump_stack+0x15/0x1b [ 999.559298][T18298] should_fail_ex+0x265/0x280 [ 999.559341][T18298] ? assoc_array_delete+0x58/0x950 [ 999.559371][T18298] should_failslab+0x8c/0xb0 [ 999.559430][T18298] __kmalloc_cache_noprof+0x4c/0x320 [ 999.559461][T18298] assoc_array_delete+0x58/0x950 [ 999.559487][T18298] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 999.559515][T18298] key_unlink+0x66/0xf0 [ 999.559604][T18298] keyctl_keyring_unlink+0xe1/0x120 [ 999.559644][T18298] __se_sys_keyctl+0x5a3/0xb80 [ 999.559663][T18298] ? __rcu_read_unlock+0x4f/0x70 [ 999.559730][T18298] ? __fget_files+0x184/0x1c0 [ 999.559765][T18298] ? fput+0x8f/0xc0 [ 999.559792][T18298] __x64_sys_keyctl+0x67/0x80 [ 999.559817][T18298] x64_sys_call+0x2e7f/0x2fb0 [ 999.559881][T18298] do_syscall_64+0xd0/0x1a0 [ 999.559907][T18298] ? clear_bhb_loop+0x40/0x90 [ 999.559979][T18298] ? clear_bhb_loop+0x40/0x90 [ 999.560073][T18298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.560127][T18298] RIP: 0033:0x7f0fb5eee969 [ 999.560144][T18298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.560168][T18298] RSP: 002b:00007f0fb4557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 999.560192][T18298] RAX: ffffffffffffffda RBX: 00007f0fb6115fa0 RCX: 00007f0fb5eee969 [ 999.560208][T18298] RDX: 000000003b5fafa5 RSI: 000000001b72f51b RDI: 0000000000000009 [ 999.560252][T18298] RBP: 00007f0fb4557090 R08: 0000000000000000 R09: 0000000000000000 [ 999.560268][T18298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.560284][T18298] R13: 0000000000000000 R14: 00007f0fb6115fa0 R15: 00007ffc2f972508 [ 999.560310][T18298] [ 999.871749][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14924'. [ 999.895908][T18310] bridge0: entered promiscuous mode [ 999.909663][T18310] bridge0: port 3(macvlan2) entered blocking state [ 999.916453][T18310] bridge0: port 3(macvlan2) entered disabled state [ 999.937905][T18310] macvlan2: entered allmulticast mode [ 999.943441][T18310] bridge0: entered allmulticast mode [ 999.962768][T18310] macvlan2: left allmulticast mode [ 999.968000][T18310] bridge0: left allmulticast mode [ 999.985002][T18310] bridge0: left promiscuous mode [ 1000.149604][T18329] netlink: 'syz.8.14930': attribute type 13 has an invalid length. [ 1000.212584][T18329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.220465][T18329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.260269][T18329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.270535][T18329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.292165][T18329] veth1_vlan: left allmulticast mode [ 1000.308115][T18329] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.316600][T18329] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.325391][T18329] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.334129][T18329] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.346005][T19495] lo speed is unknown, defaulting to 1000 [ 1000.351802][T19495] syz0: Port: 1 Link DOWN [ 1000.726005][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14940'. [ 1000.740430][T18362] bridge0: entered promiscuous mode [ 1000.747277][T18362] bridge0: port 1(macvlan2) entered blocking state [ 1000.753881][T18362] bridge0: port 1(macvlan2) entered disabled state [ 1000.762377][T18362] macvlan2: entered allmulticast mode [ 1000.767829][T18362] bridge0: entered allmulticast mode [ 1000.775400][T18362] macvlan2: left allmulticast mode [ 1000.780619][T18362] bridge0: left allmulticast mode [ 1000.786801][T18362] bridge0: left promiscuous mode [ 1000.928025][T18388] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.951461][T18395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.968107][T18395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.981587][T18388] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.993571][T18398] netlink: 'syz.0.14951': attribute type 3 has an invalid length. [ 1001.032823][T18388] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.116747][T23658] Process accounting resumed [ 1001.139896][T18388] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.203930][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14957'. [ 1001.210689][T18388] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.230349][T18420] 8021q: adding VLAN 0 to HW filter on device team2 [ 1001.255088][T18388] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.267221][T18388] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.279369][T18388] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.543526][T18480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14960'. [ 1002.553476][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14960'. [ 1002.661310][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14965'. [ 1002.732448][T23658] Process accounting resumed [ 1002.810339][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14967'. [ 1002.889298][T18523] FAULT_INJECTION: forcing a failure. [ 1002.889298][T18523] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.902032][T18523] CPU: 0 UID: 0 PID: 18523 Comm: syz.8.14969 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1002.902062][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1002.902075][T18523] Call Trace: [ 1002.902144][T18523] [ 1002.902229][T18523] __dump_stack+0x1d/0x30 [ 1002.902257][T18523] dump_stack_lvl+0xe8/0x140 [ 1002.902277][T18523] dump_stack+0x15/0x1b [ 1002.902293][T18523] should_fail_ex+0x265/0x280 [ 1002.902330][T18523] should_failslab+0x8c/0xb0 [ 1002.902468][T18523] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1002.902498][T18523] ? __alloc_skb+0x101/0x320 [ 1002.902570][T18523] __alloc_skb+0x101/0x320 [ 1002.902609][T18523] netlink_alloc_large_skb+0xba/0xf0 [ 1002.902727][T18523] netlink_sendmsg+0x3cf/0x6b0 [ 1002.902753][T18523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.902780][T18523] __sock_sendmsg+0x145/0x180 [ 1002.902813][T18523] sock_write_iter+0x165/0x1b0 [ 1002.902891][T18523] ? __pfx_sock_write_iter+0x10/0x10 [ 1002.902923][T18523] vfs_write+0x49d/0x8d0 [ 1002.902957][T18523] ksys_write+0xda/0x1a0 [ 1002.902984][T18523] __x64_sys_write+0x40/0x50 [ 1002.903090][T18523] x64_sys_call+0x2cdd/0x2fb0 [ 1002.903160][T18523] do_syscall_64+0xd0/0x1a0 [ 1002.903184][T18523] ? clear_bhb_loop+0x40/0x90 [ 1002.903204][T18523] ? clear_bhb_loop+0x40/0x90 [ 1002.903306][T18523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.903334][T18523] RIP: 0033:0x7f0fb5eee969 [ 1002.903353][T18523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.903378][T18523] RSP: 002b:00007f0fb4536038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.903403][T18523] RAX: ffffffffffffffda RBX: 00007f0fb6116080 RCX: 00007f0fb5eee969 [ 1002.903420][T18523] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 1002.903491][T18523] RBP: 00007f0fb4536090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.903507][T18523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.903521][T18523] R13: 0000000000000000 R14: 00007f0fb6116080 R15: 00007ffc2f972508 [ 1002.903540][T18523] [ 1003.135892][T18498] bond4: entered promiscuous mode [ 1003.141072][T18498] bond4: entered allmulticast mode [ 1003.146595][T18498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1003.164473][T18500] lo speed is unknown, defaulting to 1000 [ 1003.279102][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14971'. [ 1003.317555][T18570] bridge0: port 3(macvlan2) entered blocking state [ 1003.324462][T18570] bridge0: port 3(macvlan2) entered disabled state [ 1003.362880][T18570] macvlan2: entered allmulticast mode [ 1003.368339][T18570] bridge0: entered allmulticast mode [ 1003.404011][T18570] macvlan2: left allmulticast mode [ 1003.409193][T18570] bridge0: left allmulticast mode [ 1003.609468][T23658] Process accounting resumed [ 1003.617090][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1003.617109][ T29] audit: type=1326 audit(1747394543.156:56075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18587 comm="syz.9.14976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1003.647288][ T29] audit: type=1326 audit(1747394543.156:56076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18587 comm="syz.9.14976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1003.671502][ T29] audit: type=1326 audit(1747394543.156:56077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18587 comm="syz.9.14976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1003.695627][ T29] audit: type=1326 audit(1747394543.156:56078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18587 comm="syz.9.14976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1003.719498][ T29] audit: type=1326 audit(1747394543.156:56079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18587 comm="syz.9.14976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1003.743245][ T29] audit: type=1326 audit(1747394543.156:56080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18587 comm="syz.9.14976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1003.818817][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14979'. [ 1003.840750][T18601] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.891778][T18611] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.903923][T18609] FAULT_INJECTION: forcing a failure. [ 1003.903923][T18609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.917482][T18609] CPU: 0 UID: 0 PID: 18609 Comm: syz.0.14982 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1003.917511][T18609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1003.917550][T18609] Call Trace: [ 1003.917557][T18609] [ 1003.917567][T18609] __dump_stack+0x1d/0x30 [ 1003.917595][T18609] dump_stack_lvl+0xe8/0x140 [ 1003.917619][T18609] dump_stack+0x15/0x1b [ 1003.917638][T18609] should_fail_ex+0x265/0x280 [ 1003.917717][T18609] should_fail+0xb/0x20 [ 1003.917754][T18609] should_fail_usercopy+0x1a/0x20 [ 1003.917832][T18609] _copy_from_user+0x1c/0xb0 [ 1003.917857][T18609] __sys_bpf+0x178/0x790 [ 1003.917903][T18609] __x64_sys_bpf+0x41/0x50 [ 1003.917966][T18609] x64_sys_call+0x2478/0x2fb0 [ 1003.918026][T18609] do_syscall_64+0xd0/0x1a0 [ 1003.918049][T18609] ? clear_bhb_loop+0x40/0x90 [ 1003.918076][T18609] ? clear_bhb_loop+0x40/0x90 [ 1003.918120][T18609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.918142][T18609] RIP: 0033:0x7f4c8f70e969 [ 1003.918156][T18609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.918283][T18609] RSP: 002b:00007f4c8dd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1003.918301][T18609] RAX: ffffffffffffffda RBX: 00007f4c8f935fa0 RCX: 00007f4c8f70e969 [ 1003.918342][T18609] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000001 [ 1003.918358][T18609] RBP: 00007f4c8dd77090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.918382][T18609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.918405][T18609] R13: 0000000000000000 R14: 00007f4c8f935fa0 R15: 00007ffe4924d708 [ 1003.918430][T18609] [ 1004.124691][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14984'. [ 1004.135677][T18601] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.151339][T18617] bridge0: entered promiscuous mode [ 1004.158952][T18617] bridge0: port 1(macvlan2) entered blocking state [ 1004.165577][T18617] bridge0: port 1(macvlan2) entered disabled state [ 1004.175756][T18617] macvlan2: entered allmulticast mode [ 1004.181295][T18617] bridge0: entered allmulticast mode [ 1004.188148][T18617] macvlan2: left allmulticast mode [ 1004.193339][T18617] bridge0: left allmulticast mode [ 1004.200536][T18617] bridge0: left promiscuous mode [ 1004.211308][T18611] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.228130][T18601] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.314243][T18611] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.331195][T18601] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.354294][ T29] audit: type=1326 audit(1747394543.866:56081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.0.14986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c8f70e969 code=0x0 [ 1004.388921][T18611] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.482274][T18611] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.496698][T18611] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.510857][T18611] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.524580][T18611] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.564983][ T29] audit: type=1326 audit(1747394544.063:56082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.9.14987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1004.589024][ T29] audit: type=1326 audit(1747394544.063:56083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.9.14987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1004.639107][ T29] audit: type=1326 audit(1747394544.119:56084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18647 comm="syz.9.14987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1004.749099][T18651] random: crng reseeded on system resumption [ 1005.318913][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14992'. [ 1005.422141][T18673] netlink: 36 bytes leftover after parsing attributes in process `syz.8.14991'. [ 1005.435769][T18673] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14991'. [ 1005.637516][T18675] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.748578][T18675] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.762120][T18684] cgroup: Unknown subsys name 'audit' [ 1005.812082][T18675] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.909912][T18675] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.031780][T18675] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.143267][T18675] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.216622][T18675] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.263964][T18675] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.316464][T18711] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.365276][T18713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.410189][T18711] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.449825][T18721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18721 comm=syz.1.15004 [ 1006.468198][T18713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.516834][T18711] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.561600][T18713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.602072][T18711] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.732132][T18713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.842060][T18713] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.886677][T18713] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.933660][T18713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.975870][T18713] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.161023][T18755] FAULT_INJECTION: forcing a failure. [ 1007.161023][T18755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.174201][T18755] CPU: 0 UID: 0 PID: 18755 Comm: syz.8.15009 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1007.174232][T18755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1007.174245][T18755] Call Trace: [ 1007.174252][T18755] [ 1007.174270][T18755] __dump_stack+0x1d/0x30 [ 1007.174293][T18755] dump_stack_lvl+0xe8/0x140 [ 1007.174312][T18755] dump_stack+0x15/0x1b [ 1007.174329][T18755] should_fail_ex+0x265/0x280 [ 1007.174364][T18755] should_fail+0xb/0x20 [ 1007.174465][T18755] should_fail_usercopy+0x1a/0x20 [ 1007.174485][T18755] _copy_from_user+0x1c/0xb0 [ 1007.174508][T18755] ___sys_sendmsg+0xc1/0x1d0 [ 1007.174545][T18755] __x64_sys_sendmsg+0xd4/0x160 [ 1007.174599][T18755] x64_sys_call+0x2999/0x2fb0 [ 1007.174621][T18755] do_syscall_64+0xd0/0x1a0 [ 1007.174697][T18755] ? clear_bhb_loop+0x40/0x90 [ 1007.174743][T18755] ? clear_bhb_loop+0x40/0x90 [ 1007.174765][T18755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.174786][T18755] RIP: 0033:0x7f0fb5eee969 [ 1007.174848][T18755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.174866][T18755] RSP: 002b:00007f0fb4557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.174885][T18755] RAX: ffffffffffffffda RBX: 00007f0fb6115fa0 RCX: 00007f0fb5eee969 [ 1007.174898][T18755] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1007.174910][T18755] RBP: 00007f0fb4557090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.174944][T18755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.174988][T18755] R13: 0000000000000000 R14: 00007f0fb6115fa0 R15: 00007ffc2f972508 [ 1007.175007][T18755] [ 1007.466911][T18758] random: crng reseeded on system resumption [ 1007.733398][T18771] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1008.412948][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15015'. [ 1008.494706][T18778] 9pnet_fd: Insufficient options for proto=fd [ 1008.544881][T18785] netlink: 'syz.0.15019': attribute type 3 has an invalid length. [ 1008.558733][T18785] block device autoloading is deprecated and will be removed. [ 1008.682373][T18798] netlink: 'syz.0.15021': attribute type 3 has an invalid length. [ 1008.909885][T18828] FAULT_INJECTION: forcing a failure. [ 1008.909885][T18828] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.922879][T18828] CPU: 1 UID: 0 PID: 18828 Comm: syz.8.15035 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1008.922908][T18828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1008.922991][T18828] Call Trace: [ 1008.922997][T18828] [ 1008.923005][T18828] __dump_stack+0x1d/0x30 [ 1008.923097][T18828] dump_stack_lvl+0xe8/0x140 [ 1008.923121][T18828] dump_stack+0x15/0x1b [ 1008.923143][T18828] should_fail_ex+0x265/0x280 [ 1008.923184][T18828] ? alloc_pipe_info+0xae/0x350 [ 1008.923228][T18828] should_failslab+0x8c/0xb0 [ 1008.923258][T18828] __kmalloc_cache_noprof+0x4c/0x320 [ 1008.923364][T18828] alloc_pipe_info+0xae/0x350 [ 1008.923473][T18828] splice_direct_to_actor+0x592/0x680 [ 1008.923503][T18828] ? file_has_perm+0x324/0x370 [ 1008.923535][T18828] ? __pfx_direct_splice_actor+0x10/0x10 [ 1008.923560][T18828] do_splice_direct+0xda/0x150 [ 1008.923612][T18828] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1008.923648][T18828] do_sendfile+0x380/0x640 [ 1008.923669][T18828] __x64_sys_sendfile64+0x105/0x150 [ 1008.923701][T18828] x64_sys_call+0xb39/0x2fb0 [ 1008.923801][T18828] do_syscall_64+0xd0/0x1a0 [ 1008.924037][T18828] ? clear_bhb_loop+0x40/0x90 [ 1008.924067][T18828] ? clear_bhb_loop+0x40/0x90 [ 1008.924094][T18828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.924153][T18828] RIP: 0033:0x7f0fb5eee969 [ 1008.924168][T18828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.924190][T18828] RSP: 002b:00007f0fb4557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1008.924213][T18828] RAX: ffffffffffffffda RBX: 00007f0fb6115fa0 RCX: 00007f0fb5eee969 [ 1008.924228][T18828] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 1008.924243][T18828] RBP: 00007f0fb4557090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.924258][T18828] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001 [ 1008.924322][T18828] R13: 0000000000000000 R14: 00007f0fb6115fa0 R15: 00007ffc2f972508 [ 1008.924343][T18828] [ 1009.164674][T18711] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.176911][T18711] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.196428][T18831] netlink: 'syz.8.15037': attribute type 3 has an invalid length. [ 1009.209583][T18711] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.222683][T18711] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.294043][T18855] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.335968][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 1009.335986][ T29] audit: type=1326 audit(1747394548.525:56293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.371572][ T29] audit: type=1326 audit(1747394548.534:56294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.396071][ T29] audit: type=1326 audit(1747394548.534:56295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.420149][ T29] audit: type=1326 audit(1747394548.534:56296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.444376][ T29] audit: type=1326 audit(1747394548.534:56297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.468676][ T29] audit: type=1326 audit(1747394548.534:56298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.492860][ T29] audit: type=1326 audit(1747394548.534:56299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.517434][ T29] audit: type=1326 audit(1747394548.534:56300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.541304][ T29] audit: type=1326 audit(1747394548.534:56301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.565716][ T29] audit: type=1326 audit(1747394548.534:56302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18852 comm="syz.1.15041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1009.591021][T18855] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.638741][T18855] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.766019][T18855] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.840572][T18890] netlink: 'syz.1.15050': attribute type 3 has an invalid length. [ 1009.893675][T18896] netlink: 'syz.8.15053': attribute type 3 has an invalid length. [ 1009.940034][T18904] FAULT_INJECTION: forcing a failure. [ 1009.940034][T18904] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.952934][T18904] CPU: 1 UID: 0 PID: 18904 Comm: syz.8.15057 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1009.953009][T18904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1009.953104][T18904] Call Trace: [ 1009.953112][T18904] [ 1009.953123][T18904] __dump_stack+0x1d/0x30 [ 1009.953151][T18904] dump_stack_lvl+0xe8/0x140 [ 1009.953176][T18904] dump_stack+0x15/0x1b [ 1009.953192][T18904] should_fail_ex+0x265/0x280 [ 1009.953279][T18904] should_failslab+0x8c/0xb0 [ 1009.953375][T18904] kmem_cache_alloc_noprof+0x50/0x310 [ 1009.953474][T18904] ? getname_flags+0x80/0x3b0 [ 1009.953553][T18904] ? vfs_write+0x75e/0x8d0 [ 1009.953588][T18904] getname_flags+0x80/0x3b0 [ 1009.953693][T18904] user_path_at+0x28/0x130 [ 1009.953715][T18904] vfs_open_tree+0xef/0x540 [ 1009.953803][T18904] __x64_sys_open_tree+0x45/0xc0 [ 1009.953836][T18904] x64_sys_call+0x28d3/0x2fb0 [ 1009.953863][T18904] do_syscall_64+0xd0/0x1a0 [ 1009.953926][T18904] ? clear_bhb_loop+0x40/0x90 [ 1009.953950][T18904] ? clear_bhb_loop+0x40/0x90 [ 1009.953976][T18904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.954003][T18904] RIP: 0033:0x7f0fb5eee969 [ 1009.954069][T18904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.954086][T18904] RSP: 002b:00007f0fb4557038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1009.954104][T18904] RAX: ffffffffffffffda RBX: 00007f0fb6115fa0 RCX: 00007f0fb5eee969 [ 1009.954114][T18904] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1009.954187][T18904] RBP: 00007f0fb4557090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.954198][T18904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.954209][T18904] R13: 0000000000000000 R14: 00007f0fb6115fa0 R15: 00007ffc2f972508 [ 1009.954271][T18904] [ 1010.142827][T18905] random: crng reseeded on system resumption [ 1010.281160][T18913] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1010.607931][T18927] netlink: 'syz.0.15065': attribute type 3 has an invalid length. [ 1010.636264][T18601] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.648046][T18601] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.659930][T18601] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.671990][T18601] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.692251][T18937] netlink: 'syz.0.15066': attribute type 3 has an invalid length. [ 1011.377747][T18982] netlink: 'syz.8.15079': attribute type 3 has an invalid length. [ 1011.390464][T18976] netlink: 'syz.1.15077': attribute type 3 has an invalid length. [ 1011.511042][T18995] random: crng reseeded on system resumption [ 1011.665419][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15085'. [ 1011.697206][T19004] 8021q: adding VLAN 0 to HW filter on device team14 [ 1011.936786][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15089'. [ 1011.949009][T19057] bridge0: entered promiscuous mode [ 1011.955636][T19057] bridge0: port 3(macvlan2) entered blocking state [ 1011.962595][T19057] bridge0: port 3(macvlan2) entered disabled state [ 1011.969455][T19057] macvlan2: entered allmulticast mode [ 1011.974896][T19057] bridge0: entered allmulticast mode [ 1011.981193][T19057] macvlan2: left allmulticast mode [ 1011.986401][T19057] bridge0: left allmulticast mode [ 1011.992014][T19057] bridge0: left promiscuous mode [ 1012.167334][T19070] netlink: 'syz.2.15092': attribute type 3 has an invalid length. [ 1012.511729][T19097] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1013.589999][T19118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15105'. [ 1013.599246][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15105'. [ 1013.643409][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15107'. [ 1013.679409][T19122] 8021q: adding VLAN 0 to HW filter on device team1 [ 1013.785536][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15110'. [ 1013.823069][T19165] 8021q: adding VLAN 0 to HW filter on device team2 [ 1013.941374][T18855] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.964379][T18855] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.986006][T18855] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.003405][T18855] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.025382][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15119'. [ 1014.039361][T19226] bridge0: entered promiscuous mode [ 1014.046548][T19226] bridge0: port 3(macvlan2) entered blocking state [ 1014.053395][T19226] bridge0: port 3(macvlan2) entered disabled state [ 1014.055976][T19231] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1014.069940][T19226] macvlan2: entered allmulticast mode [ 1014.075417][T19226] bridge0: entered allmulticast mode [ 1014.082129][T19226] macvlan2: left allmulticast mode [ 1014.087321][T19226] bridge0: left allmulticast mode [ 1014.094683][T19226] bridge0: left promiscuous mode [ 1014.328075][ T3393] Process accounting resumed [ 1014.454636][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15126'. [ 1014.476659][T19249] 8021q: adding VLAN 0 to HW filter on device team6 [ 1014.609212][T19293] random: crng reseeded on system resumption [ 1014.691460][T19297] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.758699][T19297] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.772800][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 1014.772818][ T29] audit: type=1326 audit(1747394553.613:56430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.802968][ T29] audit: type=1326 audit(1747394553.613:56431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.831772][ T29] audit: type=1326 audit(1747394553.669:56432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.855532][ T29] audit: type=1326 audit(1747394553.669:56433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.879297][ T29] audit: type=1326 audit(1747394553.669:56434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.903079][ T29] audit: type=1326 audit(1747394553.669:56435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.926994][ T29] audit: type=1326 audit(1747394553.669:56436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.950978][ T29] audit: type=1326 audit(1747394553.669:56437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.975116][ T29] audit: type=1326 audit(1747394553.669:56438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1014.999101][ T29] audit: type=1326 audit(1747394553.669:56439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19300 comm="syz.0.15131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c8f70e969 code=0x7ffc0000 [ 1015.032122][T19312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15132'. [ 1015.043251][T19297] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.059221][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15133'. [ 1015.059714][T19312] bridge0: entered promiscuous mode [ 1015.074774][T19312] bridge0: port 1(macvlan2) entered blocking state [ 1015.081419][T19312] bridge0: port 1(macvlan2) entered disabled state [ 1015.088824][T19312] macvlan2: entered allmulticast mode [ 1015.094247][T19312] bridge0: entered allmulticast mode [ 1015.101320][T19312] macvlan2: left allmulticast mode [ 1015.106512][T19312] bridge0: left allmulticast mode [ 1015.113219][T19312] bridge0: left promiscuous mode [ 1015.133985][T19313] 8021q: adding VLAN 0 to HW filter on device team3 [ 1015.156467][T19297] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.280873][T19297] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.307949][T19370] 8021q: adding VLAN 0 to HW filter on device team4 [ 1015.333064][T19297] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.370042][T19297] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.384079][T19297] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.582216][T19435] validate_nla: 1 callbacks suppressed [ 1015.582237][T19435] netlink: 'syz.9.15146': attribute type 3 has an invalid length. [ 1015.776352][T19440] bridge0: port 3(macvlan2) entered blocking state [ 1015.783057][T19440] bridge0: port 3(macvlan2) entered disabled state [ 1015.807009][T19440] macvlan2: entered allmulticast mode [ 1015.812708][T19440] bridge0: entered allmulticast mode [ 1015.827270][T19440] macvlan2: left allmulticast mode [ 1015.832435][T19440] bridge0: left allmulticast mode [ 1016.031723][T19461] 8021q: adding VLAN 0 to HW filter on device team4 [ 1016.474768][T19532] bridge0: entered promiscuous mode [ 1016.491189][T19532] bridge0: port 4(macvlan2) entered blocking state [ 1016.497795][T19532] bridge0: port 4(macvlan2) entered disabled state [ 1016.513368][T19532] macvlan2: entered allmulticast mode [ 1016.519013][T19532] bridge0: entered allmulticast mode [ 1016.532701][T19532] macvlan2: left allmulticast mode [ 1016.537900][T19532] bridge0: left allmulticast mode [ 1016.554779][T19532] bridge0: left promiscuous mode [ 1016.623320][T19548] random: crng reseeded on system resumption [ 1016.857761][T19566] 8021q: adding VLAN 0 to HW filter on device team5 [ 1016.911427][T19602] veth0: entered promiscuous mode [ 1016.917502][T19602] veth0: left promiscuous mode [ 1017.040526][T19617] netlink: 'syz.8.15173': attribute type 3 has an invalid length. [ 1017.427726][T19625] __nla_validate_parse: 7 callbacks suppressed [ 1017.427778][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15170'. [ 1017.527823][T19641] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.728063][T19648] FAULT_INJECTION: forcing a failure. [ 1017.728063][T19648] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.740870][T19648] CPU: 1 UID: 0 PID: 19648 Comm: syz.2.15183 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1017.740908][T19648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1017.740926][T19648] Call Trace: [ 1017.740934][T19648] [ 1017.740942][T19648] __dump_stack+0x1d/0x30 [ 1017.740983][T19648] dump_stack_lvl+0xe8/0x140 [ 1017.741008][T19648] dump_stack+0x15/0x1b [ 1017.741029][T19648] should_fail_ex+0x265/0x280 [ 1017.741110][T19648] should_failslab+0x8c/0xb0 [ 1017.741150][T19648] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1017.741178][T19648] ? __alloc_skb+0x101/0x320 [ 1017.741284][T19648] __alloc_skb+0x101/0x320 [ 1017.741319][T19648] netlink_alloc_large_skb+0xba/0xf0 [ 1017.741359][T19648] netlink_sendmsg+0x3cf/0x6b0 [ 1017.741379][T19648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.741398][T19648] __sock_sendmsg+0x145/0x180 [ 1017.741427][T19648] ____sys_sendmsg+0x31e/0x4e0 [ 1017.741506][T19648] ___sys_sendmsg+0x17b/0x1d0 [ 1017.741550][T19648] __x64_sys_sendmsg+0xd4/0x160 [ 1017.741628][T19648] x64_sys_call+0x2999/0x2fb0 [ 1017.741649][T19648] do_syscall_64+0xd0/0x1a0 [ 1017.741719][T19648] ? clear_bhb_loop+0x40/0x90 [ 1017.741745][T19648] ? clear_bhb_loop+0x40/0x90 [ 1017.741773][T19648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.741807][T19648] RIP: 0033:0x7ff3bc43e969 [ 1017.741821][T19648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.741844][T19648] RSP: 002b:00007ff3baa86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.741868][T19648] RAX: ffffffffffffffda RBX: 00007ff3bc666080 RCX: 00007ff3bc43e969 [ 1017.741885][T19648] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 1017.741901][T19648] RBP: 00007ff3baa86090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.741928][T19648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.741943][T19648] R13: 0000000000000000 R14: 00007ff3bc666080 R15: 00007ffcd6c12bb8 [ 1017.741969][T19648] [ 1019.441727][T19658] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1019.696835][T19641] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.717782][T19645] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15180'. [ 1019.821381][T19641] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.911377][T19641] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.035194][T19641] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.062002][T19641] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.095800][T19641] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.118582][T19690] netlink: 'syz.9.15195': attribute type 1 has an invalid length. [ 1020.131844][T19641] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.220877][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15198'. [ 1020.253920][T19712] bridge0: entered promiscuous mode [ 1020.276449][T19712] bridge0: port 1(macvlan2) entered blocking state [ 1020.283119][T19712] bridge0: port 1(macvlan2) entered disabled state [ 1020.305631][T19712] macvlan2: entered allmulticast mode [ 1020.311182][T19712] bridge0: entered allmulticast mode [ 1020.328320][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 1020.328335][ T29] audit: type=1326 audit(1747394558.814:56577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19725 comm="syz.9.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1020.360094][T19712] macvlan2: left allmulticast mode [ 1020.365518][T19712] bridge0: left allmulticast mode [ 1020.401073][T19712] bridge0: left promiscuous mode [ 1020.422497][T19730] netlink: 'syz.9.15204': attribute type 3 has an invalid length. [ 1020.438566][ T29] audit: type=1326 audit(1747394558.917:56578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="syz.8.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.462425][ T29] audit: type=1326 audit(1747394558.917:56579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="syz.8.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.491002][ T29] audit: type=1326 audit(1747394558.964:56580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="syz.8.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.514873][ T29] audit: type=1326 audit(1747394558.964:56581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.537967][ T29] audit: type=1326 audit(1747394558.964:56582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.562215][ T29] audit: type=1326 audit(1747394559.011:56583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.585243][ T29] audit: type=1326 audit(1747394559.011:56584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.608468][ T29] audit: type=1326 audit(1747394559.011:56585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.631760][ T29] audit: type=1326 audit(1747394559.029:56586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19735 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb5eee969 code=0x7ffc0000 [ 1020.715310][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15209'. [ 1020.724536][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15209'. [ 1020.802316][T19758] netlink: 'syz.0.15212': attribute type 3 has an invalid length. [ 1021.001155][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15223'. [ 1021.010199][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15223'. [ 1021.051523][T19794] netlink: 'syz.2.15221': attribute type 3 has an invalid length. [ 1021.106218][T19792] syz_tun: entered allmulticast mode [ 1021.161921][T19800] netlink: 'syz.0.15227': attribute type 1 has an invalid length. [ 1021.185841][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15229'. [ 1021.267533][T19791] syz_tun: left allmulticast mode [ 1021.380136][T19827] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15234'. [ 1021.465436][T19837] netlink: 'syz.2.15236': attribute type 3 has an invalid length. [ 1021.571016][T19847] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1021.749972][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15234'. [ 1021.774808][T19859] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.933390][T19859] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.999011][T19859] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.083915][T19859] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.173804][T19859] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.206549][T19859] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.239886][T19859] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.272105][T19859] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.473950][T19896] netlink: 'syz.0.15250': attribute type 3 has an invalid length. [ 1022.518005][T19904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.538681][T19904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.900005][T19954] __nla_validate_parse: 1 callbacks suppressed [ 1022.900025][T19954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15267'. [ 1022.954664][T19958] netlink: 'syz.1.15265': attribute type 3 has an invalid length. [ 1023.107406][T19978] netlink: 'syz.2.15274': attribute type 1 has an invalid length. [ 1023.217466][T19999] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15279'. [ 1023.524774][T20025] netlink: 'syz.0.15288': attribute type 1 has an invalid length. [ 1023.534809][T20028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.543271][T20028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.629689][T20043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15292'. [ 1023.692423][T20053] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.740411][T20053] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.804021][T20053] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.899107][T20053] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.963013][T20082] netlink: 'syz.8.15303': attribute type 1 has an invalid length. [ 1023.973872][T20085] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1024.074817][T20089] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15304'. [ 1024.327348][T20116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15315'. [ 1024.351606][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.359181][T20122] netlink: 268 bytes leftover after parsing attributes in process `syz.1.15318'. [ 1024.370905][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.479556][T20137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20137 comm=syz.1.15324 [ 1024.611841][T20149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15329'. [ 1024.621276][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15329'. [ 1024.681369][T20153] FAULT_INJECTION: forcing a failure. [ 1024.681369][T20153] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.694118][T20153] CPU: 0 UID: 0 PID: 20153 Comm: syz.1.15330 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1024.694157][T20153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1024.694198][T20153] Call Trace: [ 1024.694207][T20153] [ 1024.694216][T20153] __dump_stack+0x1d/0x30 [ 1024.694239][T20153] dump_stack_lvl+0xe8/0x140 [ 1024.694267][T20153] dump_stack+0x15/0x1b [ 1024.694340][T20153] should_fail_ex+0x265/0x280 [ 1024.694379][T20153] should_failslab+0x8c/0xb0 [ 1024.694480][T20153] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1024.694555][T20153] ? __alloc_skb+0x101/0x320 [ 1024.694606][T20153] __alloc_skb+0x101/0x320 [ 1024.694703][T20153] netlink_alloc_large_skb+0xba/0xf0 [ 1024.694750][T20153] netlink_sendmsg+0x3cf/0x6b0 [ 1024.694837][T20153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.694865][T20153] __sock_sendmsg+0x145/0x180 [ 1024.694910][T20153] ____sys_sendmsg+0x31e/0x4e0 [ 1024.694940][T20153] ___sys_sendmsg+0x17b/0x1d0 [ 1024.694976][T20153] __x64_sys_sendmsg+0xd4/0x160 [ 1024.695004][T20153] x64_sys_call+0x2999/0x2fb0 [ 1024.695100][T20153] do_syscall_64+0xd0/0x1a0 [ 1024.695126][T20153] ? clear_bhb_loop+0x40/0x90 [ 1024.695193][T20153] ? clear_bhb_loop+0x40/0x90 [ 1024.695217][T20153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.695270][T20153] RIP: 0033:0x7f5e95a6e969 [ 1024.695337][T20153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.695362][T20153] RSP: 002b:00007f5e940d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.695417][T20153] RAX: ffffffffffffffda RBX: 00007f5e95c95fa0 RCX: 00007f5e95a6e969 [ 1024.695434][T20153] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008 [ 1024.695452][T20153] RBP: 00007f5e940d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.695469][T20153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.695496][T20153] R13: 0000000000000000 R14: 00007f5e95c95fa0 R15: 00007ffec5605278 [ 1024.695523][T20153] [ 1025.158802][T20179] random: crng reseeded on system resumption [ 1025.583357][T20203] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1025.611303][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15343'. [ 1025.703101][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 1025.703154][ T29] audit: type=1326 audit(1747394563.837:57071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.735886][ T29] audit: type=1326 audit(1747394563.837:57072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.759825][ T29] audit: type=1326 audit(1747394563.837:57073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.783647][ T29] audit: type=1326 audit(1747394563.847:57074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.807371][ T29] audit: type=1326 audit(1747394563.847:57075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.831135][ T29] audit: type=1326 audit(1747394563.847:57076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.855052][ T29] audit: type=1326 audit(1747394563.847:57077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.879029][ T29] audit: type=1326 audit(1747394563.856:57078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.903219][ T29] audit: type=1326 audit(1747394563.856:57079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1025.927011][ T29] audit: type=1326 audit(1747394563.856:57080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20210 comm="syz.2.15348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3bc43e969 code=0x7ffc0000 [ 1026.021079][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15348'. [ 1026.536785][T20261] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1026.558056][T20262] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.604895][T20262] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.657574][T20262] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.714039][T20262] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.799184][T20262] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.824559][T20262] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.857343][T20262] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.882452][T20262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.101038][T20294] random: crng reseeded on system resumption [ 1027.104855][T20053] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.156510][T20053] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.188782][T20053] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.223149][T20053] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.304489][T20310] 9pnet_fd: Insufficient options for proto=fd [ 1027.422891][T20323] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1027.495350][T20324] hub 2-0:1.0: USB hub found [ 1027.505970][T20324] hub 2-0:1.0: 8 ports detected [ 1027.563203][T20329] netlink: 'syz.0.15374': attribute type 3 has an invalid length. [ 1028.517453][T20378] __nla_validate_parse: 5 callbacks suppressed [ 1028.517476][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15388'. [ 1028.532710][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15388'. [ 1028.820067][T20389] random: crng reseeded on system resumption [ 1029.098558][T20385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15391'. [ 1029.434830][T20417] netlink: 'syz.2.15401': attribute type 1 has an invalid length. [ 1029.464013][T20423] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.522193][T20423] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.575846][T20423] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.673334][T20423] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.749175][T20423] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.775200][T20423] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.802695][T20423] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.839508][T20423] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.521798][T20476] random: crng reseeded on system resumption [ 1030.612525][T20478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15414'. [ 1030.627565][T20477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15414'. [ 1031.742716][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 1031.742756][ T29] audit: type=1326 audit(1747394569.487:57581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1031.773261][ T29] audit: type=1326 audit(1747394569.487:57582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1031.930018][ T29] audit: type=1326 audit(1747394569.487:57583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1031.954357][ T29] audit: type=1326 audit(1747394569.487:57584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1031.978969][ T29] audit: type=1326 audit(1747394569.487:57585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1032.003313][ T29] audit: type=1326 audit(1747394569.543:57586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1032.027211][ T29] audit: type=1326 audit(1747394569.543:57587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1032.051118][ T29] audit: type=1326 audit(1747394569.543:57588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1032.075547][ T29] audit: type=1326 audit(1747394569.543:57589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1032.099915][ T29] audit: type=1326 audit(1747394569.543:57590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20510 comm="syz.9.15426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1032.246677][T20522] random: crng reseeded on system resumption [ 1032.489272][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15430'. [ 1032.498420][T20534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15430'. [ 1032.564301][T20541] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1032.835268][T20561] wg2: entered promiscuous mode [ 1032.840201][T20561] wg2: entered allmulticast mode [ 1033.158392][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15443'. [ 1033.167797][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15443'. [ 1033.533258][T20595] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.546510][T20598] random: crng reseeded on system resumption [ 1033.624207][T20595] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.681335][T20595] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.734460][T20595] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.807024][T20623] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.889734][T20623] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.927290][T20623] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.980084][T20623] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.997835][T20639] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1034.040793][T20623] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.052520][T20623] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.064651][T20623] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.076609][T20623] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.269025][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15464'. [ 1034.571140][T20690] random: crng reseeded on system resumption [ 1034.928098][T20717] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15488'. [ 1034.937045][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.947781][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.016627][T20734] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1035.203917][T20736] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15492'. [ 1035.218073][T20736] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15492'. [ 1035.626726][T20746] wg2: entered promiscuous mode [ 1035.631793][T20746] wg2: entered allmulticast mode [ 1036.020913][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15501'. [ 1036.151798][T20763] FAULT_INJECTION: forcing a failure. [ 1036.151798][T20763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.165000][T20763] CPU: 0 UID: 0 PID: 20763 Comm: syz.9.15497 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1036.165059][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1036.165072][T20763] Call Trace: [ 1036.165079][T20763] [ 1036.165087][T20763] __dump_stack+0x1d/0x30 [ 1036.165111][T20763] dump_stack_lvl+0xe8/0x140 [ 1036.165130][T20763] dump_stack+0x15/0x1b [ 1036.165148][T20763] should_fail_ex+0x265/0x280 [ 1036.165267][T20763] should_fail+0xb/0x20 [ 1036.165323][T20763] should_fail_usercopy+0x1a/0x20 [ 1036.165346][T20763] _copy_from_user+0x1c/0xb0 [ 1036.165372][T20763] get_itimerspec64+0xf9/0x1a0 [ 1036.165399][T20763] __x64_sys_timer_settime+0x9a/0x160 [ 1036.165483][T20763] x64_sys_call+0x29e6/0x2fb0 [ 1036.165508][T20763] do_syscall_64+0xd0/0x1a0 [ 1036.165599][T20763] ? clear_bhb_loop+0x40/0x90 [ 1036.165661][T20763] ? clear_bhb_loop+0x40/0x90 [ 1036.165683][T20763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.165708][T20763] RIP: 0033:0x7f7fe30be969 [ 1036.165726][T20763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.165748][T20763] RSP: 002b:00007f7fe1706038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1036.165784][T20763] RAX: ffffffffffffffda RBX: 00007f7fe32e6080 RCX: 00007f7fe30be969 [ 1036.165797][T20763] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 0000000000000001 [ 1036.165812][T20763] RBP: 00007f7fe1706090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.165827][T20763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.165843][T20763] R13: 0000000000000000 R14: 00007f7fe32e6080 R15: 00007ffcdea5d718 [ 1036.165933][T20763] [ 1036.381200][T20765] netlink: 'syz.1.15504': attribute type 3 has an invalid length. [ 1036.422266][T20595] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.435067][T20595] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.448998][T20595] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.482878][T20595] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.934070][T20801] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15514'. [ 1037.109654][T20805] netlink: 'syz.9.15516': attribute type 3 has an invalid length. [ 1037.187511][T20822] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.274413][T20822] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.295953][T20830] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.369786][T20822] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.384158][T20830] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.455491][T20822] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.476251][T20830] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.526182][T20859] netlink: 'syz.1.15523': attribute type 1 has an invalid length. [ 1037.583499][T20830] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.712122][T20830] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.727363][T20830] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.752273][T20830] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.766524][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 1037.766542][ T29] audit: type=1326 audit(1747394575.127:58029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.15524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1037.784505][T20830] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.796892][ T29] audit: type=1326 audit(1747394575.127:58030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.15524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1037.864953][ T29] audit: type=1326 audit(1747394575.184:58031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.15524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1037.889146][ T29] audit: type=1326 audit(1747394575.184:58032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.15524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1037.913058][ T29] audit: type=1326 audit(1747394575.184:58033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20866 comm="syz.1.15524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1038.186649][T20896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15526'. [ 1038.266549][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15531'. [ 1038.321784][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15531'. [ 1038.715767][ T29] audit: type=1326 audit(1747394575.932:58034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.9.15534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1038.739563][ T29] audit: type=1326 audit(1747394575.932:58035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.9.15534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1038.763335][ T29] audit: type=1326 audit(1747394575.932:58036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.9.15534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1038.787851][ T29] audit: type=1326 audit(1747394575.932:58037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.9.15534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1038.811881][ T29] audit: type=1326 audit(1747394575.932:58038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20912 comm="syz.9.15534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1039.157656][T20934] netlink: 268 bytes leftover after parsing attributes in process `syz.9.15542'. [ 1039.896734][T20957] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1039.942942][T20961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15552'. [ 1039.952110][T20961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15552'. [ 1040.002516][T20970] macvtap0: entered promiscuous mode [ 1040.009777][T20970] macvtap0: left promiscuous mode [ 1040.398679][T20955] syz.8.15551 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1040.409834][T20955] CPU: 1 UID: 0 PID: 20955 Comm: syz.8.15551 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1040.409870][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1040.409887][T20955] Call Trace: [ 1040.409896][T20955] [ 1040.409907][T20955] __dump_stack+0x1d/0x30 [ 1040.409980][T20955] dump_stack_lvl+0xe8/0x140 [ 1040.410000][T20955] dump_stack+0x15/0x1b [ 1040.410025][T20955] dump_header+0x81/0x220 [ 1040.410122][T20955] oom_kill_process+0x334/0x3f0 [ 1040.410156][T20955] out_of_memory+0x979/0xb80 [ 1040.410187][T20955] ? css_next_descendant_pre+0x138/0x160 [ 1040.410288][T20955] mem_cgroup_out_of_memory+0x13d/0x190 [ 1040.410323][T20955] try_charge_memcg+0x5e2/0x870 [ 1040.410361][T20955] charge_memcg+0x51/0xc0 [ 1040.410433][T20955] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1040.410489][T20955] __read_swap_cache_async+0x1df/0x350 [ 1040.410517][T20955] swap_cluster_readahead+0x277/0x3e0 [ 1040.410550][T20955] swapin_readahead+0xde/0x6f0 [ 1040.410650][T20955] ? __filemap_get_folio+0x49f/0x650 [ 1040.410686][T20955] ? __rcu_read_unlock+0x34/0x70 [ 1040.410749][T20955] ? swap_cache_get_folio+0x77/0x200 [ 1040.410776][T20955] do_swap_page+0x301/0x2460 [ 1040.410876][T20955] ? cgroup_rstat_updated+0xa3/0x510 [ 1040.410917][T20955] ? __pfx_default_wake_function+0x10/0x10 [ 1040.410950][T20955] handle_mm_fault+0xb60/0x2ae0 [ 1040.411067][T20955] ? mas_walk+0xf2/0x120 [ 1040.411097][T20955] do_user_addr_fault+0x636/0x1090 [ 1040.411208][T20955] ? fpregs_restore_userregs+0x7d/0x190 [ 1040.411237][T20955] exc_page_fault+0x54/0xc0 [ 1040.411257][T20955] asm_exc_page_fault+0x26/0x30 [ 1040.411281][T20955] RIP: 0033:0x7f0fb5dc5388 [ 1040.411377][T20955] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 3a 28 35 00 00 0f 8e 09 fe ff ff e8 f3 9f fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 06 03 e8 00 e8 03 00 00 48 8d 1d 07 0c 35 00 e8 22 95 12 00 [ 1040.411399][T20955] RSP: 002b:00007ffc2f972670 EFLAGS: 00010202 [ 1040.411418][T20955] RAX: 0000000000100f25 RBX: 00007f0fb6117ba0 RCX: 0000000000100d60 [ 1040.411435][T20955] RDX: 00000000000001c5 RSI: 00007ffc2f972650 RDI: 0000000000000001 [ 1040.411448][T20955] RBP: 00007f0fb6117ba0 R08: 000000001b0e2899 R09: 7fffffffffffffff [ 1040.411461][T20955] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000101089 [ 1040.411472][T20955] R13: 00007f0fb6116160 R14: ffffffffffffffff R15: 00007ffc2f972780 [ 1040.411567][T20955] [ 1040.411576][T20955] memory: usage 307200kB, limit 307200kB, failcnt 8311 [ 1040.651897][T20955] memory+swap: usage 206520kB, limit 9007199254740988kB, failcnt 0 [ 1040.659944][T20955] kmem: usage 193524kB, limit 9007199254740988kB, failcnt 0 [ 1040.667312][T20955] Memory cgroup stats for /syz8: [ 1040.668264][T20955] cache 0 [ 1040.676238][T20955] rss 4096 [ 1040.679449][T20955] shmem 0 [ 1040.682460][T20955] mapped_file 0 [ 1040.685937][T20955] dirty 0 [ 1040.688883][T20955] writeback 4096 [ 1040.692515][T20955] workingset_refault_anon 352 [ 1040.697288][T20955] workingset_refault_file 1627 [ 1040.702123][T20955] swap 12132352 [ 1040.705750][T20955] swapcached 16384 [ 1040.709563][T20955] pgpgin 1956466 [ 1040.713145][T20955] pgpgout 1956462 [ 1040.716808][T20955] pgfault 1303289 [ 1040.720528][T20955] pgmajfault 183 [ 1040.724092][T20955] inactive_anon 12288 [ 1040.728113][T20955] active_anon 4096 [ 1040.731840][T20955] inactive_file 0 [ 1040.735505][T20955] active_file 0 [ 1040.738984][T20955] unevictable 0 [ 1040.742477][T20955] hierarchical_memory_limit 314572800 [ 1040.747899][T20955] hierarchical_memsw_limit 9223372036854771712 [ 1040.754116][T20955] total_cache 0 [ 1040.757624][T20955] total_rss 4096 [ 1040.761179][T20955] total_shmem 0 [ 1040.764714][T20955] total_mapped_file 0 [ 1040.768745][T20955] total_dirty 0 [ 1040.772232][T20955] total_writeback 4096 [ 1040.776305][T20955] total_workingset_refault_anon 352 [ 1040.781536][T20955] total_workingset_refault_file 1627 [ 1040.786889][T20955] total_swap 12132352 [ 1040.790887][T20955] total_swapcached 16384 [ 1040.795140][T20955] total_pgpgin 1956466 [ 1040.799247][T20955] total_pgpgout 1956462 [ 1040.803574][T20955] total_pgfault 1303289 [ 1040.807882][T20955] total_pgmajfault 183 [ 1040.812108][T20955] total_inactive_anon 12288 [ 1040.816630][T20955] total_active_anon 4096 [ 1040.820948][T20955] total_inactive_file 0 [ 1040.825121][T20955] total_active_file 0 [ 1040.829121][T20955] total_unevictable 0 [ 1040.833156][T20955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.13957,pid=12741,uid=0 [ 1040.848306][T20955] Memory cgroup out of memory: Killed process 12741 (syz.8.13957) total-vm:93748kB, anon-rss:1100kB, file-rss:20720kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1041.150920][T20822] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.188060][T20822] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.221209][T21002] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15562'. [ 1041.850304][T20822] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.963730][T20822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.376089][T21044] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.429340][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15571'. [ 1043.002282][T21044] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.070419][T21044] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.130302][T21068] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1043.164358][T21044] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.184949][T21080] macvtap0: entered promiscuous mode [ 1043.190906][T21080] macvtap0: left promiscuous mode [ 1043.271614][T21086] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.334620][T21086] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.400400][T21086] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.452200][T21086] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.473838][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 1043.473857][ T29] audit: type=1326 audit(1747394580.459:58194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.9.15584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1043.504260][ T29] audit: type=1326 audit(1747394580.459:58195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.9.15584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1043.528131][ T29] audit: type=1326 audit(1747394580.459:58196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.9.15584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1043.551917][ T29] audit: type=1326 audit(1747394580.459:58197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.9.15584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1043.575764][ T29] audit: type=1326 audit(1747394580.459:58198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.9.15584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe30be969 code=0x7ffc0000 [ 1043.606989][T21086] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.619019][T21086] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.631017][T21086] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.643053][T21086] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.784537][T21111] lo speed is unknown, defaulting to 1000 [ 1043.905649][ T29] audit: type=1326 audit(1747394580.861:58199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.1.15588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1043.929870][ T29] audit: type=1326 audit(1747394580.861:58200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.1.15588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1043.956672][ T29] audit: type=1326 audit(1747394580.871:58201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.1.15588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1043.980640][ T29] audit: type=1326 audit(1747394580.871:58202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.1.15588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1044.004407][ T29] audit: type=1326 audit(1747394580.871:58203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21136 comm="syz.1.15588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e95a6e969 code=0x7ffc0000 [ 1044.037851][T21139] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15589'. [ 1044.074114][T21141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.082960][T21141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.224181][T21160] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1044.366549][T21168] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.414386][T21168] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.467779][T21176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1044.479090][T21168] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.532144][T21168] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.622399][T21168] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.634347][T21168] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.649009][T21168] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.651835][T21188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15601'. [ 1044.662491][T21168] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.711865][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15602'. [ 1044.754476][T21206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.763212][T21206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.775330][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15602'. [ 1045.336261][T21225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15612'. [ 1045.543048][T21247] vhci_hcd: invalid port number 65 [ 1045.548542][T21247] vhci_hcd: invalid port number 65 [ 1045.554632][T21247] netlink: 'syz.9.15620': attribute type 21 has an invalid length. [ 1045.583615][T21249] syzkaller0: entered promiscuous mode [ 1045.591167][T21249] FAULT_INJECTION: forcing a failure. [ 1045.591167][T21249] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.604334][T21249] CPU: 0 UID: 0 PID: 21249 Comm: syz.9.15621 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1045.604368][T21249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1045.604460][T21249] Call Trace: [ 1045.604467][T21249] [ 1045.604475][T21249] __dump_stack+0x1d/0x30 [ 1045.604559][T21249] dump_stack_lvl+0xe8/0x140 [ 1045.604576][T21249] dump_stack+0x15/0x1b [ 1045.604660][T21249] should_fail_ex+0x265/0x280 [ 1045.604691][T21249] should_failslab+0x8c/0xb0 [ 1045.604719][T21249] __kmalloc_noprof+0xa5/0x3e0 [ 1045.604736][T21249] ? unregister_netdevice_many_notify+0x4cf/0x16a0 [ 1045.604801][T21249] ? unlist_netdevice+0x2cc/0x320 [ 1045.604821][T21249] unregister_netdevice_many_notify+0x4cf/0x16a0 [ 1045.604860][T21249] ? call_rcu+0x2bb/0x3e0 [ 1045.604893][T21249] unregister_netdevice_queue+0x1f5/0x220 [ 1045.604953][T21249] br_dev_delete+0xc4/0xe0 [ 1045.604978][T21249] br_del_bridge+0x97/0xc0 [ 1045.605035][T21249] br_ioctl_stub+0x535/0x860 [ 1045.605062][T21249] ? ioctl_has_perm+0x289/0x2e0 [ 1045.605152][T21249] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1045.605211][T21249] sock_ioctl+0x399/0x610 [ 1045.605272][T21249] ? __pfx_sock_ioctl+0x10/0x10 [ 1045.605293][T21249] __se_sys_ioctl+0xcb/0x140 [ 1045.605398][T21249] __x64_sys_ioctl+0x43/0x50 [ 1045.605422][T21249] x64_sys_call+0x19a8/0x2fb0 [ 1045.605499][T21249] do_syscall_64+0xd0/0x1a0 [ 1045.605531][T21249] ? clear_bhb_loop+0x40/0x90 [ 1045.605557][T21249] ? clear_bhb_loop+0x40/0x90 [ 1045.605577][T21249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.605596][T21249] RIP: 0033:0x7f7fe30be969 [ 1045.605690][T21249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.605764][T21249] RSP: 002b:00007f7fe1727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.605780][T21249] RAX: ffffffffffffffda RBX: 00007f7fe32e5fa0 RCX: 00007f7fe30be969 [ 1045.605792][T21249] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000004 [ 1045.605803][T21249] RBP: 00007f7fe1727090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.605814][T21249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.605825][T21249] R13: 0000000000000000 R14: 00007f7fe32e5fa0 R15: 00007ffcdea5d718 [ 1045.605843][T21249] [ 1045.606958][T21249] syzkaller0 (unregistering): left promiscuous mode [ 1046.081702][T21262] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15625'. [ 1046.942877][T21044] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.954763][T21044] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.967015][T21044] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.980023][T21044] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.025738][T21303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15637'. [ 1047.159503][T21318] FAULT_INJECTION: forcing a failure. [ 1047.159503][T21318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.172874][T21318] CPU: 0 UID: 0 PID: 21318 Comm: syz.8.15645 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1047.172936][T21318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1047.172953][T21318] Call Trace: [ 1047.172991][T21318] [ 1047.173000][T21318] __dump_stack+0x1d/0x30 [ 1047.173027][T21318] dump_stack_lvl+0xe8/0x140 [ 1047.173053][T21318] dump_stack+0x15/0x1b [ 1047.173070][T21318] should_fail_ex+0x265/0x280 [ 1047.173103][T21318] should_fail+0xb/0x20 [ 1047.173250][T21318] should_fail_usercopy+0x1a/0x20 [ 1047.173277][T21318] _copy_to_user+0x20/0xa0 [ 1047.173308][T21318] simple_read_from_buffer+0xb5/0x130 [ 1047.173374][T21318] proc_fail_nth_read+0x100/0x140 [ 1047.173407][T21318] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1047.173439][T21318] vfs_read+0x19d/0x6f0 [ 1047.173472][T21318] ? __rcu_read_unlock+0x4f/0x70 [ 1047.173501][T21318] ? __fget_files+0x184/0x1c0 [ 1047.173577][T21318] ksys_read+0xda/0x1a0 [ 1047.173614][T21318] __x64_sys_read+0x40/0x50 [ 1047.173649][T21318] x64_sys_call+0x2d77/0x2fb0 [ 1047.173732][T21318] do_syscall_64+0xd0/0x1a0 [ 1047.173810][T21318] ? clear_bhb_loop+0x40/0x90 [ 1047.173838][T21318] ? clear_bhb_loop+0x40/0x90 [ 1047.173924][T21318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.173953][T21318] RIP: 0033:0x7f0fb5eed37c [ 1047.173973][T21318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1047.174074][T21318] RSP: 002b:00007f0fb4557030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1047.174168][T21318] RAX: ffffffffffffffda RBX: 00007f0fb6115fa0 RCX: 00007f0fb5eed37c [ 1047.174185][T21318] RDX: 000000000000000f RSI: 00007f0fb45570a0 RDI: 0000000000000006 [ 1047.174202][T21318] RBP: 00007f0fb4557090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.174291][T21318] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.174308][T21318] R13: 0000000000000000 R14: 00007f0fb6115fa0 R15: 00007ffc2f972508 [ 1047.174332][T21318] [ 1047.385262][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15644'. [ 1047.394482][T21320] netlink: 39 bytes leftover after parsing attributes in process `syz.9.15644'. [ 1047.807128][T21356] netlink: 'syz.0.15660': attribute type 10 has an invalid length. [ 1047.831643][T21356] team0: Device veth1_macvtap failed to register rx_handler [ 1048.385361][T21364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15661'. [ 1048.411037][T21361] random: crng reseeded on system resumption [ 1048.927739][T21414] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1048.987464][T21419] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.044390][T21419] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.090714][T21421] lo speed is unknown, defaulting to 1000 [ 1049.107920][T21419] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.194077][T21419] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.218131][T21421] chnl_net:caif_netlink_parms(): no params data found [ 1049.284881][T21421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.292243][T21421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.302601][T21421] bridge_slave_0: entered allmulticast mode [ 1049.309668][T21421] bridge_slave_0: entered promiscuous mode [ 1049.321676][T21419] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.339554][T21421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.346872][T21421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.355431][T21421] bridge_slave_1: entered allmulticast mode [ 1049.362103][T21421] bridge_slave_1: entered promiscuous mode [ 1049.375998][T21419] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.399805][T21419] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.417523][ T2553] bridge_slave_1: left allmulticast mode [ 1049.423312][ T2553] bridge_slave_1: left promiscuous mode [ 1049.429414][ T2553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.439051][ T2553] bridge_slave_0: left allmulticast mode [ 1049.444799][ T2553] bridge_slave_0: left promiscuous mode [ 1049.450812][ T2553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.570372][ T2553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.587852][ T2553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.605251][ T2553] bond0 (unregistering): Released all slaves [ 1049.626164][T21419] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.648279][T21421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.666523][T21421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.743987][ T2553] hsr_slave_0: left promiscuous mode [ 1049.766485][ T2553] hsr_slave_1: left promiscuous mode [ 1049.779440][ T2553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.791677][ T2553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.803039][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 1049.803059][ T29] audit: type=1400 audit(1747394586.380:58445): avc: denied { setopt } for pid=21621 comm="syz.0.15683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1049.941429][ T2553] team0 (unregistering): Port device team_slave_1 removed [ 1049.954155][ T2553] team0 (unregistering): Port device team_slave_0 removed [ 1050.059557][T21421] team0: Port device team_slave_0 added [ 1050.073550][T21421] team0: Port device team_slave_1 added [ 1050.103228][T21682] SELinux: policydb version -495658086 does not match my version range 15-34 [ 1050.117538][ T29] audit: type=1400 audit(1747394586.661:58446): avc: denied { load_policy } for pid=21681 comm="syz.2.15691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1050.121541][T21682] SELinux: failed to load policy [ 1050.161193][T21421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.168238][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.194587][T21421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.208269][T21421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.215286][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.241521][T21421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.267645][ T29] audit: type=1400 audit(1747394586.811:58447): avc: denied { bind } for pid=21681 comm="syz.2.15691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1050.310101][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15693'. [ 1050.358563][T21716] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15694'. [ 1050.375316][T21421] hsr_slave_0: entered promiscuous mode [ 1050.392212][T21421] hsr_slave_1: entered promiscuous mode [ 1050.403125][T21421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.420765][ T29] audit: type=1400 audit(1747394586.951:58448): avc: denied { search } for pid=21714 comm="syz.2.15694" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.443582][ T29] audit: type=1400 audit(1747394586.951:58449): avc: denied { read } for pid=21714 comm="syz.2.15694" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.466172][ T29] audit: type=1400 audit(1747394586.951:58450): avc: denied { open } for pid=21714 comm="syz.2.15694" path="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.474141][T21421] Cannot create hsr debugfs directory [ 1050.488466][ T29] audit: type=1400 audit(1747394586.951:58451): avc: denied { setattr } for pid=21714 comm="syz.2.15694" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.601404][T21780] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1050.602441][ T29] audit: type=1400 audit(1747394586.970:58452): avc: denied { write } for pid=21714 comm="syz.2.15694" name="/" dev="configfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.632390][ T29] audit: type=1400 audit(1747394586.970:58453): avc: denied { add_name } for pid=21714 comm="syz.2.15694" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1050.653602][ T29] audit: type=1400 audit(1747394586.970:58454): avc: denied { create } for pid=21714 comm="syz.2.15694" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1051.185065][T21421] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1051.213927][T21421] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1051.252898][T21421] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1051.284748][T21421] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1051.408790][T16392] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1051.419883][T16392] CPU: 0 UID: 0 PID: 16392 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1051.419915][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1051.419931][T16392] Call Trace: [ 1051.419940][T16392] [ 1051.419948][T16392] __dump_stack+0x1d/0x30 [ 1051.420039][T16392] dump_stack_lvl+0xe8/0x140 [ 1051.420058][T16392] dump_stack+0x15/0x1b [ 1051.420073][T16392] dump_header+0x81/0x220 [ 1051.420111][T16392] oom_kill_process+0x334/0x3f0 [ 1051.420185][T16392] out_of_memory+0x979/0xb80 [ 1051.420210][T16392] ? css_next_descendant_pre+0x138/0x160 [ 1051.420236][T16392] mem_cgroup_out_of_memory+0x13d/0x190 [ 1051.420358][T16392] try_charge_memcg+0x5e2/0x870 [ 1051.420394][T16392] charge_memcg+0x51/0xc0 [ 1051.420426][T16392] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1051.420463][T16392] __read_swap_cache_async+0x1df/0x350 [ 1051.420550][T16392] swap_cluster_readahead+0x277/0x3e0 [ 1051.420587][T16392] swapin_readahead+0xde/0x6f0 [ 1051.420686][T16392] ? __filemap_get_folio+0x49f/0x650 [ 1051.420723][T16392] ? swap_cache_get_folio+0x77/0x200 [ 1051.420788][T16392] do_swap_page+0x301/0x2460 [ 1051.420885][T16392] ? save_fpregs_to_fpstate+0x100/0x160 [ 1051.420948][T16392] ? _raw_spin_unlock+0x26/0x50 [ 1051.421014][T16392] ? finish_task_switch+0xad/0x2b0 [ 1051.421037][T16392] ? __pfx_default_wake_function+0x10/0x10 [ 1051.421112][T16392] handle_mm_fault+0xb60/0x2ae0 [ 1051.421141][T16392] ? mas_walk+0xf2/0x120 [ 1051.421167][T16392] do_user_addr_fault+0x636/0x1090 [ 1051.421277][T16392] ? switch_fpu_return+0xe/0x20 [ 1051.421305][T16392] exc_page_fault+0x54/0xc0 [ 1051.421325][T16392] asm_exc_page_fault+0x26/0x30 [ 1051.421344][T16392] RIP: 0033:0x7f4c8f7411e5 [ 1051.421413][T16392] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 1051.421436][T16392] RSP: 002b:00007ffe4924da48 EFLAGS: 00010246 [ 1051.421453][T16392] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 00007f4c8f7411e3 [ 1051.421465][T16392] RDX: 00007ffe4924da60 RSI: 0000000000000000 RDI: 0000000000000000 [ 1051.421479][T16392] RBP: 00007ffe4924dacc R08: 000000002c77ed3d R09: 0000000000000000 [ 1051.421569][T16392] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1051.421582][T16392] R13: 00000000000927c0 R14: 0000000000103506 R15: 00007ffe4924db20 [ 1051.421606][T16392] [ 1051.421615][T16392] memory: usage 307200kB, limit 307200kB, failcnt 788 [ 1051.635302][T21421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.642987][T16392] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 1051.643007][T16392] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 1051.643021][T16392] Memory cgroup stats for /syz0: [ 1051.713170][T21421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.831837][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.838978][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.854399][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.861847][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.925942][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15706'. [ 1051.928754][T21421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1051.945337][T21421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1051.955933][T16392] cache 0 [ 1051.958985][T16392] rss 28672 [ 1051.962198][T16392] shmem 0 [ 1051.965171][T16392] mapped_file 0 [ 1051.968753][T16392] dirty 0 [ 1051.971793][T16392] writeback 28672 [ 1051.975451][T16392] workingset_refault_anon 3377 [ 1051.980309][T16392] workingset_refault_file 605 [ 1051.985043][T16392] swap 184320 [ 1051.988389][T16392] swapcached 28672 [ 1051.992383][T16392] pgpgin 352801 [ 1051.995936][T16392] pgpgout 352793 [ 1051.999523][T16392] pgfault 413360 [ 1052.003126][T16392] pgmajfault 938 [ 1052.006778][T16392] inactive_anon 28672 [ 1052.010819][T16392] active_anon 0 [ 1052.014352][T16392] inactive_file 4096 [ 1052.018293][T16392] active_file 0 [ 1052.021764][T16392] unevictable 0 [ 1052.025319][T16392] hierarchical_memory_limit 314572800 [ 1052.030955][T16392] hierarchical_memsw_limit 9223372036854771712 [ 1052.037181][T16392] total_cache 0 [ 1052.040681][T16392] total_rss 28672 [ 1052.044359][T16392] total_shmem 0 [ 1052.048024][T16392] total_mapped_file 0 [ 1052.052042][T16392] total_dirty 0 [ 1052.055602][T16392] total_writeback 28672 [ 1052.059873][T16392] total_workingset_refault_anon 3377 [ 1052.065176][T16392] total_workingset_refault_file 605 [ 1052.070458][T16392] total_swap 184320 [ 1052.074290][T16392] total_swapcached 28672 [ 1052.078577][T16392] total_pgpgin 352801 [ 1052.082628][T16392] total_pgpgout 352793 [ 1052.086800][T16392] total_pgfault 413360 [ 1052.090927][T16392] total_pgmajfault 938 [ 1052.095008][T16392] total_inactive_anon 28672 [ 1052.099637][T16392] total_active_anon 0 [ 1052.103649][T16392] total_inactive_file 4096 [ 1052.108773][T16392] total_active_file 0 [ 1052.112828][T16392] total_unevictable 0 [ 1052.116834][T16392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.15695,pid=21742,uid=0 [ 1052.131922][T16392] Memory cgroup out of memory: Killed process 21742 (syz.0.15695) total-vm:93880kB, anon-rss:932kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1052.191589][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15710'. [ 1052.235517][T21421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.348823][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15713'. [ 1052.590214][T21421] veth0_vlan: entered promiscuous mode [ 1052.616862][T21421] veth1_vlan: entered promiscuous mode [ 1052.665362][T21421] veth0_macvtap: entered promiscuous mode [ 1052.684991][T21917] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.703865][T21421] veth1_macvtap: entered promiscuous mode [ 1052.719928][T21421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.732650][T21421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.743045][T21917] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.755657][T21421] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.764598][T21421] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.773360][T21421] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.782121][T21421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.796268][T21927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1052.817579][T21917] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.881656][T21917] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.941935][T21917] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.966281][T21917] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.001642][T21917] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.030788][T21917] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.305968][T21978] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.359883][T21982] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.426905][T21978] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.501595][T21978] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.616863][T21994] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.653727][T21978] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.683914][T21994] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.739066][T21994] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.801401][T21994] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.913997][T21994] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.928268][T21994] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.941726][T21994] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.964172][T21994] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.039894][T16965] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.103506][T16965] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.174966][T16957] ================================================================== [ 1054.183182][T16957] BUG: KCSAN: data-race in copy_process / free_pid [ 1054.189720][T16957] [ 1054.192078][T16957] read-write to 0xffffffff8685f0b0 of 4 bytes by task 22074 on cpu 0: [ 1054.200248][T16957] free_pid+0x77/0x180 [ 1054.204340][T16957] free_pids+0x7a/0xb0 [ 1054.208472][T16957] release_task+0x9d0/0xbb0 [ 1054.212990][T16957] do_exit+0xee3/0x17c0 [ 1054.217162][T16957] call_usermodehelper_exec_async+0x247/0x250 [ 1054.223350][T16957] ret_from_fork+0x4b/0x60 [ 1054.227778][T16957] ret_from_fork_asm+0x1a/0x30 [ 1054.232571][T16957] [ 1054.234904][T16957] read to 0xffffffff8685f0b0 of 4 bytes by task 16957 on cpu 1: [ 1054.242541][T16957] copy_process+0x1790/0x1f90 [ 1054.247340][T16957] kernel_clone+0x16c/0x5b0 [ 1054.251877][T16957] user_mode_thread+0x7d/0xb0 [ 1054.256720][T16957] call_usermodehelper_exec_work+0x41/0x160 [ 1054.262650][T16957] process_scheduled_works+0x4ce/0x9d0 [ 1054.268131][T16957] worker_thread+0x582/0x770 [ 1054.272744][T16957] kthread+0x489/0x510 [ 1054.276905][T16957] ret_from_fork+0x4b/0x60 [ 1054.281418][T16957] ret_from_fork_asm+0x1a/0x30 [ 1054.286195][T16957] [ 1054.288520][T16957] value changed: 0x80000130 -> 0x8000012f [ 1054.294248][T16957] [ 1054.296585][T16957] Reported by Kernel Concurrency Sanitizer on: [ 1054.302756][T16957] CPU: 1 UID: 0 PID: 16957 Comm: kworker/u8:12 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 1054.315546][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1054.325621][T16957] Workqueue: events_unbound call_usermodehelper_exec_work [ 1054.332764][T16957] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1054.418522][T16965] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.506830][T16965] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.582901][T21982] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.826813][T16965] bond0 (unregistering): Released all slaves [ 1054.835389][T16965] bond1 (unregistering): Released all slaves [ 1054.911114][T16965] hsr_slave_0: left promiscuous mode [ 1054.916774][T16965] hsr_slave_1: left promiscuous mode [ 1054.925908][T16965] veth0_macvtap: left promiscuous mode [ 1054.931576][T16965] veth1_vlan: left promiscuous mode [ 1054.936855][T16965] veth0_vlan: left promiscuous mode [ 1055.055655][T23658] infiniband syz1: ib_query_port failed (-19) [ 1055.436470][T16965] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.489403][T16965] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.542703][T16965] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.585820][T16965] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.665581][T16965] bridge_slave_1: left allmulticast mode [ 1055.671489][T16965] bridge_slave_1: left promiscuous mode [ 1055.677242][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.686097][T16965] bridge_slave_0: left allmulticast mode [ 1055.691965][T16965] bridge_slave_0: left promiscuous mode [ 1055.697612][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.843764][T16965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.853756][T16965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.863475][T16965] bond0 (unregistering): Released all slaves [ 1055.871397][T16965] bond0 (unregistering): Released all slaves [ 1055.929279][T21982] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.975887][T16965] hsr_slave_0: left promiscuous mode [ 1055.982196][T16965] hsr_slave_1: left promiscuous mode [ 1055.987811][T16965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.995362][T16965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.003146][T16965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.010568][T16965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.021932][T16965] veth1_macvtap: left promiscuous mode [ 1056.027651][T16965] veth0_macvtap: left promiscuous mode [ 1056.033338][T16965] veth1_vlan: left promiscuous mode [ 1056.038583][T16965] veth0_vlan: left promiscuous mode [ 1056.110522][T16965] team0 (unregistering): Port device team_slave_1 removed [ 1056.121642][T16965] team0 (unregistering): Port device team_slave_0 removed [ 1056.157487][T21982] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.211002][T21982] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.222672][T21982] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.234589][T21982] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.246430][T21982] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.365328][T21978] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.377067][T21978] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.389257][T21978] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.402801][T21978] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.046795][T16957] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.098191][T16957] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.140702][T16957] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.194303][T16957] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.376091][T16957] bond0 (unregistering): Released all slaves [ 1058.384286][T16957] bond1 (unregistering): Released all slaves [ 1058.392775][T16957] bond2 (unregistering): Released all slaves [ 1058.401314][T16957] bond3 (unregistering): Released all slaves [ 1058.410315][T16957] bond4 (unregistering): Released all slaves [ 1058.510064][T16957] hsr_slave_0: left promiscuous mode [ 1058.515825][T16957] hsr_slave_1: left promiscuous mode [ 1058.524223][T16957] veth0_macvtap: left promiscuous mode [ 1058.529757][T16957] veth1_vlan: left promiscuous mode [ 1058.535190][T16957] veth0_vlan: left promiscuous mode [ 1060.922914][T16957] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.973793][T16957] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.059178][T16957] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.112660][T16957] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.181501][T16957] bridge_slave_1: left allmulticast mode [ 1061.187331][T16957] bridge_slave_1: left promiscuous mode [ 1061.192978][T16957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.200994][T16957] bridge_slave_0: left allmulticast mode [ 1061.206739][T16957] bridge_slave_0: left promiscuous mode [ 1061.212537][T16957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.317254][T16957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.327240][T16957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.337102][T16957] bond0 (unregistering): Released all slaves [ 1061.411211][T16957] hsr_slave_0: left promiscuous mode [ 1061.416899][T16957] hsr_slave_1: left promiscuous mode [ 1061.423034][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.430488][T16957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.438575][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.446097][T16957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.456892][T16957] veth1_macvtap: left promiscuous mode [ 1061.462389][T16957] veth0_macvtap: left promiscuous mode [ 1061.468269][T16957] veth1_vlan: left promiscuous mode [ 1061.473764][T16957] veth0_vlan: left promiscuous mode [ 1061.536693][T16957] team0 (unregistering): Port device team_slave_1 removed [ 1061.547253][T16957] team0 (unregistering): Port device team_slave_0 removed [ 1061.926295][T16957] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.968119][T16957] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.031952][T16957] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.085350][T16957] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.163463][T16957] team0: left allmulticast mode [ 1062.168351][T16957] team_slave_0: left allmulticast mode [ 1062.173923][T16957] team_slave_1: left allmulticast mode [ 1062.179558][T16957] bridge0: port 3(team0) entered disabled state [ 1062.186674][T16957] bridge_slave_1: left allmulticast mode [ 1062.192461][T16957] bridge_slave_1: left promiscuous mode [ 1062.198137][T16957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.205921][T16957] bridge_slave_0: left allmulticast mode [ 1062.211579][T16957] bridge_slave_0: left promiscuous mode [ 1062.217396][T16957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.300201][T16957] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.309633][T16957] bond_slave_0: left promiscuous mode [ 1062.316468][T16957] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.325332][T16957] bond_slave_1: left promiscuous mode [ 1062.331886][T16957] $Hÿ (unregistering): Released all slaves [ 1062.340565][T16957] bond1 (unregistering): Released all slaves [ 1062.348872][T16957] bond0 (unregistering): Released all slaves [ 1062.357592][T16957] bond2 (unregistering): Released all slaves [ 1062.423217][T16957] hsr_slave_0: left promiscuous mode [ 1062.429159][T16957] hsr_slave_1: left promiscuous mode [ 1062.434811][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.442401][T16957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.450088][T16957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.457855][T16957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.468106][T16957] veth1_macvtap: left promiscuous mode [ 1062.473962][T16957] veth0_macvtap: left promiscuous mode [ 1062.479773][T16957] veth1_vlan: left promiscuous mode [ 1062.485087][T16957] veth0_vlan: left promiscuous mode [ 1062.562183][T16957] team_slave_1 (unregistering): left promiscuous mode [ 1062.569491][T16957] team0 (unregistering): Port device team_slave_1 removed [ 1062.578833][T16957] team_slave_0 (unregistering): left promiscuous mode [ 1062.586012][T16957] team0 (unregistering): Port device team_slave_0 removed [ 1062.595289][T16962] smc: removing ib device syz!