last executing test programs:

3m14.673140381s ago: executing program 1 (id=781):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1)

3m13.781140828s ago: executing program 1 (id=792):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x1000000}, 0x8000)

3m13.780506498s ago: executing program 1 (id=793):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x68, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10054}, 0x105)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)

3m13.780336488s ago: executing program 1 (id=794):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
open(&(0x7f0000000100)='./file0/file0\x00', 0xc43810581c177e98, 0x20)
mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0xb5008, 0x0)
umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffd61, 0x10008895, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x42c00)

3m13.561026312s ago: executing program 1 (id=799):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x5ff, &(0x7f0000000400)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0x1}])
r5 = openat$cgroup_ro(r3, &(0x7f0000000340)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x1000000002f, 0x80})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000140), 0xecb, 0x189000)
ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f00000002c0)={0x5})
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
io_destroy(r4)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
connect$vsock_stream(r8, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4c57}, 0x8)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r11)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x3c, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x44)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000680)=0x7e)

3m13.559882003s ago: executing program 1 (id=801):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1884242dbd4ffa150000000000d00000000080000000850000", @ANYRES32, @ANYBLOB="2be68894cdacb672b9ca28fe3c7c6bf2f28f544d8b9b4fdcf1d19734ef4da38041e3c30712f2fec320de47bf48cb72194a0863d9581cd1c4b80c0c89d400589cd12dd652ad1280ffef725dad007159b34f50842cf61353eb594be6c31be2dcd9c39dd3d9c8f4231b4cfee809cd7ae1be62f867b1e7c1bd57af40da61e827fe737ae15d8a126889f5ceb38cdcb06fb14835a6bd5192dac48eade3f514e2be21e2f7868391c18299ac8dcf802b122d20df9746a90853936bf2f1833ec9a10339d8eb036b4b3f9191afb64df9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async)
r4 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1e9, &(0x7f00000002c0)="$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") (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES16=r4], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r9=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r12) (async)
write(r7, &(0x7f0000000240)="94", 0x1)
vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async)
tee(r6, r8, 0x8f5, 0x100000000000000) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)

3m13.481898414s ago: executing program 32 (id=801):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1884242dbd4ffa150000000000d00000000080000000850000", @ANYRES32, @ANYBLOB="2be68894cdacb672b9ca28fe3c7c6bf2f28f544d8b9b4fdcf1d19734ef4da38041e3c30712f2fec320de47bf48cb72194a0863d9581cd1c4b80c0c89d400589cd12dd652ad1280ffef725dad007159b34f50842cf61353eb594be6c31be2dcd9c39dd3d9c8f4231b4cfee809cd7ae1be62f867b1e7c1bd57af40da61e827fe737ae15d8a126889f5ceb38cdcb06fb14835a6bd5192dac48eade3f514e2be21e2f7868391c18299ac8dcf802b122d20df9746a90853936bf2f1833ec9a10339d8eb036b4b3f9191afb64df9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async)
r4 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1e9, &(0x7f00000002c0)="$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") (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES16=r4], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r9=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000140), &(0x7f0000000040)='%pI4   \x00'}, 0x2a) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r12) (async)
write(r7, &(0x7f0000000240)="94", 0x1)
vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async)
tee(r6, r8, 0x8f5, 0x100000000000000) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)

6.956492144s ago: executing program 0 (id=3941):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0b000000080000008c000000ffffffff01fe5d7c8676c5d0dd0492833c8f7f63695a3424a56bc89b8f55ee0f3113ea002f330eef48dfb04077bfdcb88b7dac4149461f4a65c022b900c5be35676b164fdc6bf663f9089cb3d1f78bc6ce776a6bb3845cbddd5d1887c086b0e4b225387b3ec281624b734f036fc8902e88dac010d1b0a4835139dd52af87ed7fb3ca102b6894fff4e4e1"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r4 = socket(0x1e, 0x805, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r4, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='kmem_cache_free\x00', r5}, 0x18)
syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0)
close(r4)
eventfd2(0x9, 0x80c01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18)
r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x20, 0xe, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x501, 0x0})
memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)

6.081640911s ago: executing program 0 (id=3959):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=0x4)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@report={0x174, 0x20, 0x10, 0x70bd2d, 0x25dfdbfc, {0x33, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e21, 0x0, 0x4e23, 0x100, 0x2, 0x0, 0x80, 0x2c, r4, r5}}, [@extra_flags={0x8, 0x18, 0x5}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0x0, @in6=@private0, 0x3507, 0x4, 0x3, 0x0, 0x4, 0x3, 0x5400}]}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2a, 0x70bd26, 0x70bd2c, 0x70bd2a, 0x3c56, [0x5, 0x7]}}, @mark={0xc, 0x15, {0x35075a, 0x44d7}}, @tmpl={0x84, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010102, 0x3507, 0x4, 0x0, 0x4, 0xfffffffd, 0x1, 0x7ff}, {{@in=@empty, 0x4d4, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x2, 0x2, 0x1, 0xe487, 0x4}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xa}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd25, 0x70bd25, 0x70bd29, 0x5, [0x3]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4040811}, 0x4028080)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

5.959586124s ago: executing program 0 (id=3963):
prlimit64(0x0, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
tkill(r0, 0x7)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240), 0x8})
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf)
write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[], 0x5b0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000)
mq_open(&(0x7f0000000100)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0\xe3\x1dy\x00\x00\x00\x00\x00\x00\x00\x00\xbe\xbd\xae\x00^}\xb4VD\xff\nJ+\xef\xe8\x96\x1a\x06 \x0fZ\xd6\xce\x96\x1eX\xbc\x881\xe2w\x06fG\"e\xd4\xd1:\x8e:\x1dR\xbb\xcb3\xed\x10\\\x10\x17D\xe3=\x7f\x15\xab\xadS\x82\xd2\x1b\xf3c\x8c\xe5\xd3\xf3\xc3\xf5X\x13G\xbd\x06 Yp\xa6N\xba\x81\xff\xd3>\xd5\xcc8\xf2(\x01aa\xa3\xea\xf0\x93\xbb\x015\x12\xbb\xcd\xbdi|z\xc3\x91q\xd9\x933\xb6\x13j', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000000c0)="914ec5", &(0x7f00000003c0)=""/92, &(0x7f00000004c0)="bf91d60e08231efac28e9fdf0263eb8d0c7e7dda4531f445735363ee7fd6227602798dbee23804bbd6e5cbd8f8977702ec74b2a055ee6e96eecd07159e31686860cc5a7746247ebb6b0ddb344e2a330d81571992d736a082ec8b6345b8ab6364c73003efb8a0d93b099747b776526b963bb0f31a6c4d31c266e58f", &(0x7f0000000300)="6016e5cac508d10848aa", 0x4, r3}, 0x38)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x18)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0xb4}}, 0x24040810)

5.794871117s ago: executing program 0 (id=3969):
r0 = socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0xfc, 0x6, @local}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x111, 0x3}}, 0x42)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000006c0)={0x15, 0x110, 0xfa00, {r6, 0xffffaa8b, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3fb}, @ib={0x1b, 0xffff, 0x9, {"0000000002000000001393000000dd00"}, 0x8074, 0x0, 0x7fff}}}, 0x118)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
setns(r9, 0x24020000)
r10 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r10, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r11 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r11, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="6204270059023b000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8001)

2.137097259s ago: executing program 4 (id=4073):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000a40)='./file0\x00')
syz_open_dev$tty20(0xc, 0x4, 0x1)

2.105776299s ago: executing program 4 (id=4075):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

2.04369168s ago: executing program 4 (id=4077):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@local, @broadcast, <r4=>0x0}, &(0x7f0000000340)=0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r3, 0x20, 0x1, 0x6, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580), 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r4, 0x25, 0x3, @val=@tcx={@void, @value=r6, @void, @void, r5}}, 0x1c)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x5, <r7=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@fallback=r0, r0, 0x23, 0x2020, r0, @void, @void, @value=r7, @void, r5}, 0x20)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
close_range(r9, 0xffffffffffffffff, 0x0)
close(r0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
kcmp(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r9, @ANYRES64=r8, @ANYRESOCT=r10, @ANYBLOB="420e1575c72ea9b490a81acfeb1bb0eb8976aee0e0cbba846a40a6b77c16494463a855097da33e6957"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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")

1.746378466s ago: executing program 4 (id=4079):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x9, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES64], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r4, 0x3, r1, 0x5})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r5 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r5, &(0x7f00000001c0)={0x11, 0xe9, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r9}, 0x10)
acct(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rt_sigprocmask(0x1, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0xa, 0x1}, 0x0, 0x2, &(0x7f0000000140)="23171c3ab37afb4a351df2536855ea0552b0cf6a528f4d3a03a419ca6e4c9414d119e930dc600ed6804406257dbad0cf5368410ac0a38314317ab999d7f1e75826f060cfffc1a9714db5e16fda159fe74f3860c0", 0x54, 0x3, 0xcb1c, 0x0, 0x9654, 0xfffffffe, &(0x7f00000001c0)="a1fd071b5a9c3d7002f4b266b13a45437a8203b635eaf7c7dd32eb6f4f2981c2e7a1048be3465fcc0d0038ba42ad351128c7ef3029be0dc640146b785dd70cab0e151dc979ceb8c0b6f4428d6d30db02df170985f65b478d9aa4d1219a043117214068f4a10f8d88b1d4a407d902413676129f903f9f6f45d159b61facc0e357aae64d493c11179cb02835a78c383ea5f8de032ccd9aac7a"})
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

907.480873ms ago: executing program 0 (id=4092):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40800}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0b000000080000008c000000ffffffff01fe5d7c8676c5d0dd0492833c8f7f63695a3424a56bc89b8f55ee0f3113ea002f330eef48dfb04077bfdcb88b7dac4149461f4a65c022b900c5be35676b164fdc6bf663f9089cb3d1f78bc6ce776a6bb3845cbddd5d1887c086b0e4b225387b3ec281624b734f036fc8902e88dac010d1b0a4835139dd52af87ed7fb3ca102b6894fff4e4e1"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r4 = socket(0x1e, 0x805, 0x0)
connect$tipc(r4, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='kmem_cache_free\x00', r6}, 0x18)
syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0)
close(r4)
eventfd2(0x9, 0x80c01)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x3}, 0x18)
r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x20, 0xe, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x501, 0x0})
memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)

853.262873ms ago: executing program 4 (id=4096):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f9ff0000000000000000"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0600000000000000db62005a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
fcntl$lock(r2, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c310060030001280080001000069740024000280ca230e000010000008000200ac14142d08000c00ee0000000800140001000100790476c59b088b2e86b8b9d5c8be00fb271a774c77"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) (async, rerun: 32)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc001) (async)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@mcast2, <r8=>0x0}, &(0x7f0000000400)=0x14) (async, rerun: 64)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x2, 0xfffff000, 0x8f99, 0x400, r3, 0xffffffff, '\x00', r8, r9, 0x1, 0x1, 0x1}, 0x50) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYRESOCT=r6], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r10, 0x0, 0xffffffffffffffff}, 0x18)
r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') (async, rerun: 32)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) (async, rerun: 32)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x13, 0xffffffffffffffff, 0x3a8bc000)

776.064345ms ago: executing program 3 (id=4100):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501040, 0x2)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)

716.293186ms ago: executing program 4 (id=4103):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
readv(r7, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001800)={{{@in=@multicast2, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f00000017c0)=0xffffffffffffff9f)
getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000007140)='./file0\x00', 0x2000, 0x20, &(0x7f0000007180)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmmsg$unix(r3, &(0x7f00000074c0)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000340)="2a906b672d2f2ec599397d860a1b58ac4bcb8afed608acc6ea518b7c1eb585f1309af583189628f0e3c3b63bffd30fc425a4388cf65397ae37d1e15d4accb09b7d53360d8f10734938059d464a3529f4f2f5843254d8cfc70006f47de8ca3afa76a4f2adfd28e8aaa90a67fcd4a60e0f8d54b53c7727b5c1f325a9236dd66be25d9974d81fb0da7379691d96eff5ca551cb967ad3829ae3cfac8cac6c8942296df210f5466a9e7f57723097bb5", 0xad}, {&(0x7f0000000400)="9988e0ebe31c2ac32acae60d2a6356b67dfa8abffe2afe939a7beb778e9f114cd40b649e4ccc827dc1d34181d87ca7c10fbeec77b2d1ba91d8a132a594cd39e979c86e616f0f50bd8f37628a39b6d92b6f724bff4ece174d6820754ee96e6decc6b22bce6552733ecf33e032399b1be315b9328f8bb36919eddf0d6c4a96ddff2d6dfb587310a6149ffab9ee67e62d84ae7f8d43634a38a41c74a416505d2e9cdca6e2e8f52a29429e2e86e7512448b9958183d8194f17832e6001667cc42789b2fc3fb05da41bef5d9a7628b596e47b852436895f82e6e7a36ccec976c252", 0xdf}, {&(0x7f0000000500)="c0759b5c82f8a1c5e112d9194c3c7f344831d00d0c35ad420bb980c71caae79c6717367d204876b8baddc94872b4b2e938bd935656ba36d1f2fe7b4b543cd19e0423ba4c03218ef071d5cf4c2e60410c05", 0x51}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="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", 0xff}], 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000000000000000000200000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}, {{&(0x7f0000001f80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000002040)="1856a1994d565865171322a4068ee97a20c8e5f22c9d0da402d2fa623bdffe08441c252d6b74293ff1b3b7de7e9d", 0x2e}, {&(0x7f0000002080)="22d5283e516c8db65e73bca6361d5b337074dbf665b96063bec7b9fe5366d741f458b6fe63ffefef0c323931e88cbac14c5d40af0ccd00f28c1035f6ce0be9a2f2a91760cc2916c367df1bb1b00c339dba73b901e732dfa8467722457e864945326fa9b1d5313b1cf5c2f757547524b34e98e291b3331d05ac0e2c0f5a86e88b1e64702925aa5bff50bdc70982edf282dbcf2c2091f669912e3d1ddaecee414d64f96ef763e8cc83c1cad3f8", 0xac}, {0x0}, {&(0x7f0000002280)}], 0x4, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20, 0x4040844}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000004ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005500), 0x0, &(0x7f0000005800)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}], 0xb8, 0x4048043}}, {{&(0x7f0000005900)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006d40)=[{0x0}, {&(0x7f00000059c0)="9eeb4e733bad8cab8a953601622b5c47c729ce97d02fae30e592e0c2eea5ed4bad364771728ca40b78f87be92c71b192ba8ba559915f21472303", 0x3a}, {&(0x7f0000005a00)="31be64d3b39568adf98c4be6291faaf7c5bb893d672811", 0x17}, {&(0x7f0000005a40)="1666d00d0343be6df14ef667d2eb20036c2bb3864c10896578ca5eacee87e3a1a51b215a337589cff2be2ae9b9b8b5d7770b1d48d87ca1b0cdc4486f79dc88db5b030841a060e9c2e7e3d28e3c7abc10879eee78f5dd25c604fc4659d4690b813f01e4eebe3dd562f7612ac1e01d818273eb1af02a7d78f17c7ea4fb51cccf3f0eefef70bc304b97ae18f4336d359dbff48d", 0x92}, {&(0x7f0000005b00)="0c904503f602e24a9f0e6260f8e7f89ae3f939b770808c37985c4747e47e903765def2ab331237f200958076e8a17e53e5867e3d73c9965f876da9b6ba95c64163174f", 0x43}, {&(0x7f0000005b80)="65b5c7badf507ec5972523569b15232faa2cd6d25117c66c6b176741ec2e28ed01126dd9d55d2271f4f8f5f73d28558cebc37e838957751bfa865ec639c0af875d16fb574fe76a7a32dedd2073540df73d77b10207d12b96972455c300af2580456e09076e1026d4f470e64d3be0f05ed2b8cd2579cf136c679d9474e9047e4e33b3b53693658f398a32ffce7b18fd7562f89840ac278498258809a6b67d62f41d6aad6edebb6a4d42def214305c1bf4909161cbd55ea8e10bfd7019de3aa62e52afb53f8d0594ea05aaf209ae221db05e5dd2", 0xd3}, {&(0x7f0000005c80)}, {0x0}, {&(0x7f0000006d00)}], 0x9, &(0x7f00000073c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="17cbef1bb7000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x48010}}], 0x6, 0x4000001)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r8, &(0x7f0000000100)={0x6, 0x1, 0x8, 0x7, 0x0, 0x3af6, 0x8, 0x0, 0x6})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x3}}, 0x20)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c)

553.67655ms ago: executing program 3 (id=4111):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501040, 0x2)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)

513.43114ms ago: executing program 2 (id=4112):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={<r5=>0xffffffffffffffff})
fsetxattr$security_selinux(r5, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:framebuf_device_t:s0\x00', 0x27, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)

478.867901ms ago: executing program 5 (id=4113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

410.608682ms ago: executing program 5 (id=4114):
r0 = creat(0x0, 0xecf86c37d53049cc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000006000000850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x80, 0x700, 0x7a16, 0x1, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x68, 0x0, 0x7, 0x0, 0x0, @multicast2, @multicast2}}}})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xd76}, 0x18)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b80100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b40000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000a0002006000000000000000c800010073686131"], 0x1b8}}, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000400)='freezer.state\x00', 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000100000000000000000085100b000600000018000000", @ANYRES32, @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_shutdown\x00', r4, 0x0, 0x2}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

389.224362ms ago: executing program 3 (id=4115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7000ffc31000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d3000000000000034001680300001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40)

359.601653ms ago: executing program 5 (id=4116):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0)

359.174313ms ago: executing program 3 (id=4117):
r0 = memfd_secret(0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)

358.250333ms ago: executing program 5 (id=4118):
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000002540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f00000000c0)={0x2440, r1, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x26}}}}, [@NL80211_ATTR_TX_RATES={0x114, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xc, 0x3, 0x9, 0xcea1, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x3, 0xfffc, 0x2, 0x7, 0xbe5, 0x5]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x16, 0x0, 0x30, 0x5, 0x6, 0x24, 0x36, 0x36, 0xb, 0x3f, 0x1b, 0x18, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x1, 0x3, 0xfff9, 0xf, 0xfffe, 0x4, 0x9]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x36, 0x1f, 0xc, 0x9, 0x5e, 0x6, 0xc, 0x24, 0x48, 0x9, 0xc, 0x1b, 0x2, 0x30, 0x60, 0x60, 0x36, 0xc, 0xb, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb, 0xa6, 0x2a, 0x1, 0xffe1, 0xe8, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x92, 0x2, 0x1, 0x7, 0x3, 0x6, 0xc4d5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x12, 0x18, 0xb, 0x36, 0xc, 0x5, 0x2ac4b532c8724b3e, 0x9, 0x12, 0x30, 0x6c, 0x3, 0x3, 0x7c, 0x4, 0x30, 0x16, 0x3, 0x12, 0x48, 0x12, 0x7, 0x76, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x1b, 0x12, 0x16, 0x6c, 0x16, 0x2, 0x30, 0x5, 0x30, 0x1b, 0x0, 0x6, 0x48, 0x3, 0x48, 0x30, 0x18, 0x3, 0x12, 0xc, 0x1b, 0x48, 0x5, 0x48, 0x6c]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x8}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0xa}, {}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0xa}, {0x7, 0xa}, {0x5}]}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x22bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xec, 0x3, "c35183ac204504aab7eab2c579a7b771aa545d6b339354e59a71da8b061467e4be67e07af608a91f9fd3a93fb0cff9c0ed241e156c03831cdf6ceaf2de1bdff74c76df76af2331f8ad53b64aa0ce8bb1c2e9244c3eacdb415f03849711a6eb103c2341b02e8ce1f4884d0a5d03e17dcb8ac83f6a392a28e6dba9ca4cc00e037584e2f2b9225a618731f12bc5440d906755c882115f90bfe04c1c95dfb2739d0b41051c3a44ec3137d375feca3f72316dbdb7cdb7cdfc0c68ac6c0d9e28d138370fe376b06a923aa34f3cba403fb8b9eda20aff006402259bcc7ad7284e9965a322a289039dfb8f9b"}, @NL80211_FTM_RESP_ATTR_LCI={0x7f, 0x2, "1895d75efea948c3b7d2b986ab319c5dbc5a8dea3ebce56e3fb092940df832c483cf548a8e272bf35be75499650221f5b652441650bc0398778f4708efb3708dca8b2ee2a0f8827e6b583bb25a44f14eadb4375efce6e772d2a943787bb2192627aaa729e7e5618d73427323af9989cd08ad59c4b9e6801f3e1b87"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "921b0250f3d9039bfe48f20c18bec098c0aadea12db804c0404c163167311b91"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x81, 0x3, "1dd506f049d9519d6ae5e50a569c8787d7a6f8f97f33a14c592b6c9e78c9186d65b246b7a525f64765c3484ff88e87d4e388a0858b73d962ac0e74772766450b8f5225accdc1f57ba8478871447cb6467ff08d30cf9c55ef93bf21d62f977e233dde4552953d60a0505863918f5af189bfcaebb90fd9002915632c8d03"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x91, 0x3, "eec199ff1cb82517802bcc1842bb1a0f5520a0bfc6e26393d5c9346688a21abf425430f35c76d7dbda192c021215cac64471a2c397a66795b4bb63cc170d190eebfb2ad6082b65372a2d26e82841403eb301b62fec7ad505d98c61ef9ce9b7bfe44776f1be49e64031efab90a3a8fc5cec6d112284c244b5a016c8930bd4e3b78cc2f6a717544d89f227eab499"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "da34982ec2b7351cc1e4d0d93b1ff5ec82261c4ee27dd17fe49030718daa24f8c3da48e3e6fd25677d2cfcbc0d96a569522b891920b97b744fd3540c6828d58ed95c68ba1dfccf35ecd79adbc5f6f54c2d62bd956e4c030962f52e9d5dc10ffe9cf8195bf801fb9d86896bbc50077ccabe543dfb17f52ff8c09a631eddc0e4fb03f567db20bd32f8aaa45dc172ff1ff3e7e97a03bbb097a153d93b1f2ea99461c55d9f6fd224542eaf5fa805e6182748c95bfedb90e963758a5201fc864d8bc393280a1df89383c951733284f1654ce17c155f2ab442eec7e76e733cb43f7ce449f081f255b1944b69f709f794eef919927aad32fb8e5fb6aadc09a4c790fd16d6843d675456df8d9354a6af8860aea8a3af837354a24dabe40221f16b562145df5b2ab74d2b70dd97a351c8323788c5267cde0823321456ceae478d02e2ca1061d0495f1f100254c6ed3e3af1737e711661330fb2167b03d73931c548646fbe659bc76fdc25f12900a95bf2e5adba9d8671dba1fb7d8d6e76e8357930c82ee30fcae49020c3c2f1ee3c42aba64f0561b249745768508dcf4d99371ce3492eb7710a2759490d45d501f42a9383c039ee524f1d695b8c342e2fd9750c32731c3b470cb807697eabfc75a60a2613077858dcd5e3242d4eb3248918569618c72e804705b77ae9f6971eba44e54b188f58a8e75c064cb89922360e019d718c49a95ce5aa88c740e6898a8cb3076edcf2bd23ffffc57ea5075896bc80cf7cb561ed109840983b3338e9c39da34c07329c45cdd583042614399981ff1c65967ed24e51593250c2c0b0f50afde5039417f40ab4c4fb1cf2e6e8ea707a55378461378159a6ae90f6c7e7333ce7a8126ce53d50f2e581eaaaedada5d6b9301be99c09a67d78ce55c19f20e50b9a72a5430fd631800f99e304499b3812c54249aad47bdedfbd1b04915438867aa6e774fd13d9955b1a2ea095a54c17a8cb3091885593bed5e66caa166b5729bab79b96c513ae3eda908507d0fd99766c96d8c4e8e7f8027c4d43b004e25f465ec8e6d9c99537ba156ac209722b8197ebf7f56414f5acf11e0686ccd8710dc8d295b707848ab39272b7e48618b0a45c14dd8eaf8dbc67b6504c091cbd1129d1aa0aef04c1e101436925f86a4d7d21ffd13211e00047ae818fbe577559d7a88402790913fa8477ebe0cb07644c502066a0e6068aca24150be03802627148c6757dc52005c0e510df25082a22e4981493183f09997ec30683304d0f3937d65d8a3d790bf94d2125cfccfa57d779f4b477b4b9e100a725dae6925158f902144cf0fe00037d3b1d52edf440f02bb6a8d03b5eb4d8adbd618298fbf7e29e7cbb97751752262377350f314447c20da693f8c5a0a3ed14c78d41924da474152793c08b64a8d9846b37ed59b5c6c29b19546f2e93f70003bd13c4ef2b20921c5280715699df2289e7d42e9b436d23f02864a53bf8ac0bc339f8a6efd97e70ebef975ba1d1bae7b5c39535c09326302d490bc44d5bc260851d8810828b6edc725343153fba15175cf890a05768ecc4a32ef3fadf9303167aa0432dd4d18b54cea533daaaf353ee7566bde2390ae0fe800779a05c31fd959dba22d2207865a165551d82d730bc8b11cc1a09d458b452364e716fde8a59dea2771f6f7629ff4a1a9729eabe749abd76189c2f8eab8d6e4adfebfebc6a533887df729fab94a3d1e7f29ddc0c2306c64492fab2747d7ce18c8b29606e2f476d10bf80dc8da9129c84adc779035f134831249dbec2a1e788785ec3ccd250a7f18358e615cc16d0ca54f052daead57b6cfd1696a920095ac027c19f971921c971aade7b930382af18395b7f8e60f39342d0d6e836807f5f8540e8890ec737aa7fd09dbb97b10dd6d6350fa9522316429c2a1b554225ed4e774f9ed5db0037af7a2b51a581be5deeb89d153bbbcd754a0b9b0454d6a08bb5116c7f498fee8781037b31ce74338613fcbc91314b4b672002567ebc663b4570cfeee3761d530a419c8c587a9b9892b02aab0ef6f67258936dd926ef0b50423064976bb8908aa57b24889b2da710c7adefe093a5607c828b59f86cef52c5b4bec5b57f0630f54c2ca04508997de2c28db61863e9b49de73b40bb31e54fa98701ea1679613e2dbd4114f056fe845114f9e08a8dabb3cad254252ca1abd40a0d07fb80fcc08d399ead28295e982ea417ebf93ce35915af6c48ede8e0edacd74b44bdbecd54442f03e0a80a5e177a8425f474add4a8147370112fea078a144d77cf72f0897fd8e51a1645593de0446e46806acad00f2b74e0593962007f40c52c80dfe102ba76b37a800d4493ab43af1ffca10104dbea61a96f36c611668e0759b64046c8567ea60dc8a61fde8e3ff1aa22e32332f8b6d769219e951cf8d104855754589e09d589766f0d0d1c54c3dcdb96ff09ca466283de93f08a457e67b1f0c62ef7593402927a1728131a3f10ca2b56241ad202de61b1d73e6c60116dd69614c40489d3c83ef7c6ddb8dba05b79a8d21b813f6320b3c77ab82d8d868d30df8243c0768c681e1e0bdb049e415768addeeeee1ed9ccb03f65f2ba23100dac21f878856643c744f6da58ad68bc7a55eae8c96b854658a4434c11cca71dda1b6bad6dd371a07b651b629587d11d562a1d41236242646aad6087135cf0e6004dc906a82c6968294d3e510317dd9383c27444b93a61901b6947bd51e32dc92cc30fa53c898a12a3220c283fd381a9179bdd30eb50ef1a7994e8a9f2c27420b42d40227281f80df9ed87e44def3a9eb72ff23ef469945ad74ad3810a1261f2f54f92ed037f535a34ea05e10f2258b9b1edc5ed82bf28a47f69b27c6ea6cf817b563afb440791ef55e8a24e6396e7fca90086c1c0d2fb7f4520d1649f04a7e6f19ea90c69873ad0eec62eeb02535a349754ddcf63d665d608eaa9770348f4f1070c2772936ef44ecf19dddfaafa54a1f3cf3ad711db6e1be1af8037958992b8650257d4fe42cdc47316e6573c68cb2c6fee144c38fa7e256b4eb9408f3733a627643219c22022d09d085b89b072f51e8a1839c2438b867e1795952b39e304896bcf073203878fa6c01e4aefc7b0fba74d51b7835211329f8613333b13475e95f68f6b502175d0c70094ab2d032fa2b98ffaadaaec43902482d946c0464d6f7b63e3afd11ff7240b0e51cbe1c69dbda4a2144b33ee075a3ebcde5a3ba72089e6c00ba406344b16a74b8c31599c4c350e7225781e1e770047c6bf0a40e3808fb9002e57db1a5edbd009bc8fdf71bc596bc3cd34a91634cd9c54cd5a1f7548d2c2e6881a0cc6bd0a68688302d18a1e8704bb32624b8d6670d3af80f01b4c0a0bc1778ae4fedb9aae365ad8765eef702aee310ed472563ea6ed773a919e84caef585c4e71580cae87e643895994452e788b0ed4422007e0faef80dd6d4d44d48302cbab10b147aacf4dc30e70eed8a2a07fdf56b7d19d89cde74a036a5cbc6fcdd6c3b8ff2457c3b2ad04a176c9c3e565b5bf14d08fb263da3a75601bbf8af315a207580155d756abb971c02a4ad723e1f33dd828690c80873f75550f1cc5f366e968b1b987bd791afd61c807990f28c9a0829e3c8f562365903c3335241b116de93bb347eb9f1784f9344da357301e1e46e8f36c4c44aeb9b31bdd3d99f1d3af4eba55bb3828698e028759ae6941ce0283afac759dcbef6289d21b007078599f025bf62da7521e55c6bb52cf54b13406b5c2fe4ba4d0d61af4562b3c166297571c8cdb1b3ef9900e95b4a62694f2dfff86ac3a1dd42f72858fd1ec005cdd3a1f80973647d68ffc2fc9085dbd1848987576d20582228db5c6b0fd434505776b5a0681362ab5136a4d40fe305aa7c5879b3dc4d805371fd6e81dfcbde20500f68b8c19f12d92b0d5347742d0eacc317f119fbb401b45e05dd4c34f07ec632ddcad4cc2450a2bf09c26485ec045d6ccc19bb43b20350c99ef18a11195031be16dbebf2feeee5d0526eb6524e8603953becafce4e85e342f2f3b07d27b0eeaa59f99822998c48c4368bac704e6be0337af7852630589a94083a84ae0e195568acab4c38f53b2a9e8e297ad1604759cbdad681228d4144c1e53661c85c593b3d440ed07e41ad96502aca724b0e50baed2bb021aeac1843172c62d63620ec59bdcc4a1e50fc746e4913adaee13d4be8a7b653fdab2f981d43cffcfdf4af9780922535aed01b6035ebd3beb208973a13576a2598c1456a981f4ba58c47b8fcfdf72b4dff88b353111e6a6bc2ca65552273478819a615c123573aac4b455b01e2ea1b481dd4bccf262f0afab98d1bff5c405ce5c8ca27a16a7b4be84714bc91c024599975e6d3a458cd04b9d1d42885ec60046227dd3007ea1c1df6061c63fa7ea2c6860d255e63d358adae9adc7fcc5e50e8793d75a5201d10dcba8301c130284f79e99e0041c8d46235b810912e87ba47f546b3761cbe308cd4e72d4e04c2891ae2a97a3c570bfb364a34c9b69291dc3d1f386d6fa51661d14bb5fc301ed7efd81820abc70a5faad9b01c8b5bc1177076adf485192846512d4f3c4ac0a134436e41a679ad0e0a0d4f391c68b31194d2a3d29091ceb4c5ad435d830424cc68904cccdbfe6672f95a212034f0c6aa123c1bf713b8c33a90a60836b368e18a6b22f6253f819d0a932a132a274cd1212c867c7172b53e2ceee7f18b660a8dc17c56d3060d4ddc2cd302a1202ff82a2a670e289e1d75c3772726462b9689ada248e5ebd8bd33c6f01932e76f557a332b10cd86a3e081c12702b1e925f9e38b4b360f3c2bbd3561c647ef26d341306f062eacf459252d400392926363cfc929e16035d123d139b265029e82fb9b496bc41857b4f79277b8c23a4eee3a0aa1e167814c3636b75b06ebfddaa86cf8364aac0f1b5acfad46dc2f94e3a30434ca996516802d21fa2d7a4442e4df46ba0dab17faf01e44c2d906ee52dbf275aad4c51c5cd226b2b30ed36c4b25d81ddfce02757745cc0cee8a9a7ec6108694066b21a303dff8560574a547a8e9b9b5d594962d6312d94a12eab12517d6fa10282bec68a1bebbb21042c0ae62dabbb04d6e91c7e4c3b0f89ede9346b4f24e46ac67a117185e29669da62916884580b1fe50fef2d4cc2d73f263598823707d93aa9ac5351dfad8dec1b54e804d21bce3ef770f8a97866c11e4876d0330c32b0f2a65fcf0d643069ddf1bf0e45c6f972d4593e1bfcdc03a335bbe79ca4f1eac8901b7bd6632cb1e4b04b7c61ca592fc9cd4d721bdb5d224af642d0036f90eb762fffa078ad44e85345dad98a4f407296b24d5e9112f6e7563e5603a3884dfc9c663f8027d9105e2c7bf0f2002e98916373f517756e889f16f2012a3f9de2c719e1a1fdcea654f6dfcb8b594ea19afd0932f522c39237a7decdb2e9cfb98c628f5f0a635ca70d1648fc3bff8cb3267101678db4d814b55915c43df07964ba6383eb4622b0a6821909ce6f5519ca0e61273477311c34334554d2f60d0c9cc907c441aefdb6a25daf16d058f6decb2469aa4d08bcbe1cb8a6c4b840fd22d683ebd22ee7d387bd16a8c795fc0b44005d1f34af74480540efee114039283281aa29b2db6e3463a95a9a8f77712be92fd367df20334d2ce23b96f0edcc5eec8de8ec8e670601257ccf20dd1e4d5f348161fe1f8935f002627c8a7aa61adb12b37676ae9245eb75956f092469d97d53cc717cb551fdfbc2ac545fd753f77c16a51d7c310d920c8f8932eb0a8ca26fea1d4869969c454bbec05c01f0b4384d539cdc"}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "bbe30ca9f163768c"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xc}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "3b407fcc6d792402"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x1}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "34b8a6ab1d4a879a"}]}]}, 0x2440}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000002580)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
times(&(0x7f00000025c0)) (async)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000002600), &(0x7f0000002640), 0x2, 0x2) (async)
times(&(0x7f0000002680)) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x14, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000012}, 0x4040000) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000027c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, 0xc)
utimes(&(0x7f0000002800)='./file0/file0\x00', &(0x7f0000002840)={{}, {0x0, 0x2710}}) (async)
sysinfo(&(0x7f0000002880)=""/195) (async)
r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000029c0)=0x900020) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002a40), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x38, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000054}, 0x48001)
ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000002b40)) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000002bc0), r2) (async)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000002c00)={r0, 0x3, {0x0, 0x0, 0x0, 0x8001, 0x2, 0x0, 0x2, 0x3, 0x19, "2ab70e899a30ab912640792848ce863f20748d235661a69f76120abd05c27929020e753854229bd81450f7aff4e509730eea53422863d07f32f5fa7de453ce57", "4fdab5f45b0e59018977622c3c5a70cf0c9547c19f6296a7b931862325d5b8a4c9942bafc1eb0b95caf7ff2c65f461d2618f7b3629c191bc99ebe0d8598a1b1c", "7a6e8970daf385f6a344edac17d6f66dba4b12cdfe95da5c928ea1f0a6762276", [0x3]}}) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), r0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x18, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x48880)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000002ec0), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000002f00)=<r9=>0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x34, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x20048080)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000d, 0x20030, r4, 0x2c920000) (async)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000003000)) (async)
getsockname$packet(r2, &(0x7f0000003080)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000030c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200bb}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0xc0aff99e98116e5b}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000c0) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000003300)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x404480c}, 0x4811)

254.619815ms ago: executing program 2 (id=4119):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0)

254.436085ms ago: executing program 3 (id=4120):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xf, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

253.927005ms ago: executing program 5 (id=4129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0)

223.335616ms ago: executing program 3 (id=4121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x4}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x8bd1, 0xc3, 0x0, 0x0, 0x9}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x4}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0xfffeffff}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xffffdee2, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0xfffffffd, 0x0, 0x2}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0xfffffffe, 0x0, 0x7fffffff, 0x8510}, {0xffff}, {}, {}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x7}, {0x7}, {}, {0x0, 0x0, 0x800}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x2}, {0x2}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xb}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d}, {0x2}, {0x2, 0x9, 0x20000000, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0xfffffffe, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x1}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {0x3}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {0x6}, {0x4}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00')
preadv(r10, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/97, 0x61}], 0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'caif0\x00', <r11=>0x0})
bind$xdp(r10, &(0x7f0000001240)={0x2c, 0x4, r11, 0x3c, r3}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r13, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r14}, 0x10)
r15 = dup(r13)
write$RDMA_USER_CM_CMD_SET_OPTION(r15, &(0x7f0000000100)={0xe, 0xb, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffe44}}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r15])
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804800, &(0x7f0000001280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="1a7b1b6731c3e2", @ANYRESHEX=r8, @ANYRES64=r1])

210.394696ms ago: executing program 5 (id=4122):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501040, 0x2)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)

191.486197ms ago: executing program 2 (id=4123):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@local, @broadcast, <r4=>0x0}, &(0x7f0000000340)=0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r3, 0x20, 0x1, 0x6, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580), 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r4, 0x25, 0x3, @val=@tcx={@void, @value=r6, @void, @void, r5}}, 0x1c)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x5, <r7=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@fallback=r0, r0, 0x23, 0x2020, r0, @void, @void, @value=r7, @void, r5}, 0x20)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
close_range(r9, 0xffffffffffffffff, 0x0)
close(r0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]})
r11 = getpgrp(0xffffffffffffffff)
kcmp(r11, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r9, @ANYRES64=r8, @ANYRESOCT=r10, @ANYBLOB="420e1575c72ea9b490a81acfeb1bb0eb8976aee0e0cbba846a40a6b77c16494463a855097da33e6957"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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")

113.448618ms ago: executing program 2 (id=4124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

27.30507ms ago: executing program 2 (id=4125):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pK    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x4b, &(0x7f00000003c0)=""/75, 0x40f00, 0x0, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r2, r0, r0], &(0x7f0000000680)=[{0x2, 0x4, 0x9, 0xc}, {0x0, 0x4, 0x7, 0xb}, {0x2, 0x1, 0x1, 0x7}, {0x4, 0x5, 0xb, 0x6}, {0x5, 0x1, 0x0, 0x5}, {0x1, 0x3, 0xa, 0xc}, {0x0, 0x1, 0xc, 0x6}], 0x10, 0xb}, 0x94)
rt_sigprocmask(0x1000000, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pK    \x00'}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x4b, &(0x7f00000003c0)=""/75, 0x40f00, 0x0, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r2, r0, r0], &(0x7f0000000680)=[{0x2, 0x4, 0x9, 0xc}, {0x0, 0x4, 0x7, 0xb}, {0x2, 0x1, 0x1, 0x7}, {0x4, 0x5, 0xb, 0x6}, {0x5, 0x1, 0x0, 0x5}, {0x1, 0x3, 0xa, 0xc}, {0x0, 0x1, 0xc, 0x6}], 0x10, 0xb}, 0x94) (async)
rt_sigprocmask(0x1000000, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) (async)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)

807.8µs ago: executing program 2 (id=4126):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501040, 0x2)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x4, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)

0s ago: executing program 0 (id=4127):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x20002, 0x0)
flock(r0, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0)
read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x10000, 0x0)
read$msr(r3, &(0x7f0000000180)=""/92, 0x5c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x80000}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fe00003, 0x0, 0x0, 0x0, 0x102}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x400142, 0x0)
pipe(&(0x7f0000001140))
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r10}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffeac)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.387699][T13825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.410956][   T29] kauditd_printk_skb: 195 callbacks suppressed
[  227.410975][   T29] audit: type=1326 audit(1758045643.179:16789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.450575][   T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.459505][   T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.516861][   T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.529763][   T29] audit: type=1326 audit(1758045643.189:16790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.553626][   T29] audit: type=1326 audit(1758045643.189:16791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.578417][   T29] audit: type=1326 audit(1758045643.189:16792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.602112][   T29] audit: type=1326 audit(1758045643.189:16793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.625914][   T29] audit: type=1326 audit(1758045643.189:16794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.649692][   T29] audit: type=1326 audit(1758045643.189:16795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.673633][   T29] audit: type=1326 audit(1758045643.189:16796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.697349][   T29] audit: type=1326 audit(1758045643.189:16797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.721450][   T29] audit: type=1326 audit(1758045643.189:16798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.2.3282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  227.752232][   T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.988203][T14478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  227.995489][T14478] IPv6: NLM_F_CREATE should be set when creating new route
[  228.002715][T14478] IPv6: NLM_F_CREATE should be set when creating new route
[  228.014323][T14428] vhci_hcd: invalid port number 96
[  228.019591][T14428] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  228.052175][T14477] loop3: detected capacity change from 0 to 512
[  228.060934][T14477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  228.115332][T14477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.189743][T14477] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.235871][T14477] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  228.251888][T14477] EXT4-fs (loop3): Remounting filesystem read-only
[  228.374255][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.446479][T14523] FAULT_INJECTION: forcing a failure.
[  228.446479][T14523] name failslab, interval 1, probability 0, space 0, times 0
[  228.459168][T14523] CPU: 1 UID: 0 PID: 14523 Comm: syz.2.3305 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  228.459201][T14523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  228.459235][T14523] Call Trace:
[  228.459247][T14523]  <TASK>
[  228.459254][T14523]  __dump_stack+0x1d/0x30
[  228.459278][T14523]  dump_stack_lvl+0xe8/0x140
[  228.459296][T14523]  dump_stack+0x15/0x1b
[  228.459344][T14523]  should_fail_ex+0x265/0x280
[  228.459367][T14523]  ? io_ring_ctx_alloc+0x38/0x6a0
[  228.459404][T14523]  should_failslab+0x8c/0xb0
[  228.459428][T14523]  __kmalloc_cache_noprof+0x4c/0x320
[  228.459487][T14523]  ? avc_has_perm_noaudit+0x1b1/0x200
[  228.459512][T14523]  io_ring_ctx_alloc+0x38/0x6a0
[  228.459541][T14523]  ? avc_has_perm+0xf7/0x180
[  228.459630][T14523]  ? io_uring_fill_params+0x270/0x300
[  228.459655][T14523]  io_uring_create+0x10f/0x610
[  228.459718][T14523]  __se_sys_io_uring_setup+0x1f7/0x210
[  228.459746][T14523]  __x64_sys_io_uring_setup+0x31/0x40
[  228.459769][T14523]  x64_sys_call+0x2b21/0x2ff0
[  228.459790][T14523]  do_syscall_64+0xd2/0x200
[  228.459824][T14523]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  228.459865][T14523]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  228.459979][T14523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.459999][T14523] RIP: 0033:0x7f865375eba9
[  228.460015][T14523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.460046][T14523] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  228.460065][T14523] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  228.460079][T14523] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000004d3f
[  228.460136][T14523] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  228.460147][T14523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.460159][T14523] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  228.460178][T14523]  </TASK>
[  228.658944][T14522] loop3: detected capacity change from 0 to 512
[  228.670950][T14522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  228.709989][T14522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.795453][T14522] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.865957][T14537] vlan2: entered allmulticast mode
[  228.900069][T14537] dummy0: entered allmulticast mode
[  228.925589][ T7335] IPVS: starting estimator thread 0...
[  228.931963][T14555] msdos: Unknown parameter 'ÿ'
[  228.943212][T14522] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  228.980277][T14522] EXT4-fs (loop3): Remounting filesystem read-only
[  229.021788][T14556] IPVS: using max 2304 ests per chain, 115200 per kthread
[  229.068467][T14574] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  229.177415][T14514] lo speed is unknown, defaulting to 1000
[  229.194119][T14587] FAULT_INJECTION: forcing a failure.
[  229.194119][T14587] name failslab, interval 1, probability 0, space 0, times 0
[  229.207077][T14587] CPU: 1 UID: 0 PID: 14587 Comm: syz.2.3320 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  229.207236][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  229.207250][T14587] Call Trace:
[  229.207258][T14587]  <TASK>
[  229.207267][T14587]  __dump_stack+0x1d/0x30
[  229.207291][T14587]  dump_stack_lvl+0xe8/0x140
[  229.207312][T14587]  dump_stack+0x15/0x1b
[  229.207407][T14587]  should_fail_ex+0x265/0x280
[  229.207435][T14587]  should_failslab+0x8c/0xb0
[  229.207465][T14587]  __kvmalloc_node_noprof+0x123/0x4e0
[  229.207495][T14587]  ? alloc_netdev_mqs+0xa0/0xa30
[  229.207587][T14587]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  229.207616][T14587]  alloc_netdev_mqs+0xa0/0xa30
[  229.207649][T14587]  ip6_tnl_locate+0x37e/0x4a0
[  229.207680][T14587]  ip6_tnl_siocdevprivate+0x550/0x920
[  229.207880][T14587]  dev_ifsioc+0x8f5/0xaa0
[  229.207911][T14587]  dev_ioctl+0x78d/0x960
[  229.207942][T14587]  sock_ioctl+0x593/0x610
[  229.208051][T14587]  ? __pfx_sock_ioctl+0x10/0x10
[  229.208095][T14587]  __se_sys_ioctl+0xce/0x140
[  229.208114][T14587]  __x64_sys_ioctl+0x43/0x50
[  229.208131][T14587]  x64_sys_call+0x1816/0x2ff0
[  229.208194][T14587]  do_syscall_64+0xd2/0x200
[  229.208227][T14587]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  229.208252][T14587]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  229.208330][T14587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.208355][T14587] RIP: 0033:0x7f865375eba9
[  229.208371][T14587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.208390][T14587] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  229.208410][T14587] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  229.208422][T14587] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004
[  229.208454][T14587] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  229.208517][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.208529][T14587] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  229.208552][T14587]  </TASK>
[  229.275848][T14514] wg1 speed is unknown, defaulting to 1000
[  229.332688][T14586] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  229.435774][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.446916][T14586] vhci_hcd: invalid port number 96
[  229.452212][T14586] vhci_hcd: default hub control req: 0017 vfffc i0060 l0
[  229.654527][T14514] chnl_net:caif_netlink_parms(): no params data found
[  229.716052][T14707] loop3: detected capacity change from 0 to 512
[  229.752916][T14707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  229.780596][T14767] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3333'.
[  229.789674][T14767] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3333'.
[  229.798776][T14767] netlink: 'syz.5.3333': attribute type 6 has an invalid length.
[  229.806607][T14767] netlink: 'syz.5.3333': attribute type 5 has an invalid length.
[  229.814520][T14767] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3333'.
[  229.839307][T14707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.850714][T14514] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.853460][T14707] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.858905][T14514] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.859014][T14514] bridge_slave_0: entered allmulticast mode
[  229.926158][T14514] bridge_slave_0: entered promiscuous mode
[  229.955654][T14514] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.963116][T14514] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.987530][T14707] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  230.009364][T14514] bridge_slave_1: entered allmulticast mode
[  230.018532][T14514] bridge_slave_1: entered promiscuous mode
[  230.023698][T14707] EXT4-fs (loop3): Remounting filesystem read-only
[  230.094343][T14514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.116675][T14514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.173973][T14514] team0: Port device team_slave_0 added
[  230.184581][ T9178] batadv1: left allmulticast mode
[  230.189660][ T9178] batadv1: left promiscuous mode
[  230.194796][ T9178] bridge0: port 3(batadv1) entered disabled state
[  230.222308][ T9178] bridge_slave_1: left allmulticast mode
[  230.228227][ T9178] bridge_slave_1: left promiscuous mode
[  230.234108][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.243280][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.243363][ T9178] bridge_slave_0: left allmulticast mode
[  230.258079][ T9178] bridge_slave_0: left promiscuous mode
[  230.263776][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.296602][ T9178] dvmrp0 (unregistering): left allmulticast mode
[  230.366263][T14882] program syz.0.3350 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  230.377955][ T9178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.388019][ T9178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.397808][ T9178] bond0 (unregistering): Released all slaves
[  230.410509][ T9178] bond1 (unregistering): Released all slaves
[  230.419133][ T9178] bond2 (unregistering): Released all slaves
[  230.431137][T14514] team0: Port device team_slave_1 added
[  230.474695][ T9178] tipc: Disabling bearer <udp:s>
[  230.479749][ T9178] tipc: Left network mode
[  230.499588][T14514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.506662][T14514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.532694][T14514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.539466][T14912] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  230.544929][T14514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.556915][T14514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.583040][T14514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.758933][T14956] sctp: [Deprecated]: syz.2.3359 (pid 14956) Use of int in max_burst socket option deprecated.
[  230.758933][T14956] Use struct sctp_assoc_value instead
[  230.778289][T14960] loop3: detected capacity change from 0 to 512
[  230.783294][T14514] hsr_slave_0: entered promiscuous mode
[  230.790689][T14960] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  230.792220][T14514] hsr_slave_1: entered promiscuous mode
[  230.813342][T14514] debugfs: 'hsr0' already exists in 'hsr'
[  230.819093][T14514] Cannot create hsr debugfs directory
[  230.855403][ T9178] hsr_slave_0: left promiscuous mode
[  230.864153][ T9178] hsr_slave_1: left promiscuous mode
[  230.869826][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.884262][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.915997][T14973] loop3: detected capacity change from 0 to 1024
[  230.924698][T14973] EXT4-fs: test_dummy_encryption option not supported
[  231.074509][T14991] loop3: detected capacity change from 0 to 164
[  231.085073][ T9178] team0 (unregistering): Port device team_slave_1 removed
[  231.107330][ T9178] team0 (unregistering): Port device team_slave_0 removed
[  231.119588][ T9190] smc: removing ib device syz!
[  231.180228][T14992] FAULT_INJECTION: forcing a failure.
[  231.180228][T14992] name failslab, interval 1, probability 0, space 0, times 0
[  231.192971][T14992] CPU: 0 UID: 0 PID: 14992 Comm: syz.2.3371 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  231.193003][T14992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  231.193018][T14992] Call Trace:
[  231.193026][T14992]  <TASK>
[  231.193036][T14992]  __dump_stack+0x1d/0x30
[  231.193063][T14992]  dump_stack_lvl+0xe8/0x140
[  231.193137][T14992]  dump_stack+0x15/0x1b
[  231.193154][T14992]  should_fail_ex+0x265/0x280
[  231.193195][T14992]  should_failslab+0x8c/0xb0
[  231.193225][T14992]  __kvmalloc_node_noprof+0x123/0x4e0
[  231.193312][T14992]  ? alloc_netdev_mqs+0xa0/0xa30
[  231.193348][T14992]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  231.193447][T14992]  alloc_netdev_mqs+0xa0/0xa30
[  231.193476][T14992]  ? sized_strscpy+0x157/0x1a0
[  231.193564][T14992]  ip6_tnl_locate+0x37e/0x4a0
[  231.193716][T14992]  ip6_tnl_siocdevprivate+0x550/0x920
[  231.193753][T14992]  dev_ifsioc+0x8f5/0xaa0
[  231.193789][T14992]  dev_ioctl+0x78d/0x960
[  231.193822][T14992]  sock_ioctl+0x593/0x610
[  231.193864][T14992]  ? __pfx_sock_ioctl+0x10/0x10
[  231.193895][T14992]  __se_sys_ioctl+0xce/0x140
[  231.193991][T14992]  __x64_sys_ioctl+0x43/0x50
[  231.194014][T14992]  x64_sys_call+0x1816/0x2ff0
[  231.194040][T14992]  do_syscall_64+0xd2/0x200
[  231.194138][T14992]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  231.194168][T14992]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  231.194239][T14992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.194266][T14992] RIP: 0033:0x7f865375eba9
[  231.194286][T14992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.194308][T14992] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.194337][T14992] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  231.194352][T14992] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003
[  231.194365][T14992] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  231.194376][T14992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.194389][T14992] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  231.194406][T14992]  </TASK>
[  231.429852][T15011] FAULT_INJECTION: forcing a failure.
[  231.429852][T15011] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  231.443301][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.5.3376 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  231.443329][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  231.443341][T15011] Call Trace:
[  231.443347][T15011]  <TASK>
[  231.443355][T15011]  __dump_stack+0x1d/0x30
[  231.443377][T15011]  dump_stack_lvl+0xe8/0x140
[  231.443396][T15011]  dump_stack+0x15/0x1b
[  231.443419][T15011]  should_fail_ex+0x265/0x280
[  231.443447][T15011]  should_fail_alloc_page+0xf2/0x100
[  231.443487][T15011]  __alloc_frozen_pages_noprof+0xff/0x360
[  231.443523][T15011]  alloc_pages_mpol+0xb3/0x250
[  231.443622][T15011]  alloc_pages_noprof+0x90/0x130
[  231.443660][T15011]  pte_alloc_one+0x2d/0x120
[  231.443736][T15011]  __pte_alloc+0x32/0x2b0
[  231.443773][T15011]  handle_mm_fault+0x1c55/0x2c20
[  231.443935][T15011]  ? __rcu_read_unlock+0x4f/0x70
[  231.444037][T15011]  do_user_addr_fault+0x3fe/0x1090
[  231.444071][T15011]  exc_page_fault+0x62/0xa0
[  231.444114][T15011]  asm_exc_page_fault+0x26/0x30
[  231.444138][T15011] RIP: 0010:__put_user_1+0xd/0x20
[  231.444173][T15011] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca e9 d7 83 01 00 90 90 90 90 90 90 90 90 90 90
[  231.444227][T15011] RSP: 0018:ffffc900037b3de8 EFLAGS: 00050206
[  231.444244][T15011] RAX: ffffffff821bad02 RBX: 0000000000000000 RCX: 0000200000000000
[  231.444257][T15011] RDX: 0000000000000000 RSI: ffffffff86a1b0c0 RDI: 0000000000004b33
[  231.444269][T15011] RBP: 0000000000004b33 R08: ffff88810a95d280 R09: 000000000000003a
[  231.444283][T15011] R10: 0000000080085610 R11: 0000000000000000 R12: 0000000000004b33
[  231.444298][T15011] R13: ffff88811895f400 R14: ffff888100065000 R15: 0000200000000000
[  231.444316][T15011]  ? vt_ioctl+0x8e2/0x1880
[  231.444424][T15011]  vt_ioctl+0x9c3/0x1880
[  231.444457][T15011]  ? tty_jobctrl_ioctl+0x29e/0x810
[  231.444490][T15011]  tty_ioctl+0x7db/0xb80
[  231.444508][T15011]  ? __pfx_tty_ioctl+0x10/0x10
[  231.444559][T15011]  __se_sys_ioctl+0xce/0x140
[  231.444597][T15011]  __x64_sys_ioctl+0x43/0x50
[  231.444616][T15011]  x64_sys_call+0x1816/0x2ff0
[  231.444642][T15011]  do_syscall_64+0xd2/0x200
[  231.444677][T15011]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  231.444706][T15011]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  231.444797][T15011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.444822][T15011] RIP: 0033:0x7fde76bfeba9
[  231.444840][T15011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.444861][T15011] RSP: 002b:00007fde75667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.444884][T15011] RAX: ffffffffffffffda RBX: 00007fde76e45fa0 RCX: 00007fde76bfeba9
[  231.444918][T15011] RDX: 0000200000000000 RSI: 0000000000004b33 RDI: 0000000000000003
[  231.444930][T15011] RBP: 00007fde75667090 R08: 0000000000000000 R09: 0000000000000000
[  231.444942][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.444956][T15011] R13: 00007fde76e46038 R14: 00007fde76e45fa0 R15: 00007ffc4beff5e8
[  231.444976][T15011]  </TASK>
[  231.875616][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'.
[  232.037106][T15049] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.123877][T15049] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.150549][T15104] SELinux: failed to load policy
[  232.163176][T15002] loop3: detected capacity change from 0 to 512
[  232.171763][T15002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  232.185917][T15107] FAULT_INJECTION: forcing a failure.
[  232.185917][T15107] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.199265][T15107] CPU: 0 UID: 0 PID: 15107 Comm: syz.2.3385 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  232.199320][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  232.199333][T15107] Call Trace:
[  232.199340][T15107]  <TASK>
[  232.199349][T15107]  __dump_stack+0x1d/0x30
[  232.199372][T15107]  dump_stack_lvl+0xe8/0x140
[  232.199464][T15107]  dump_stack+0x15/0x1b
[  232.199485][T15107]  should_fail_ex+0x265/0x280
[  232.199512][T15107]  should_fail+0xb/0x20
[  232.199681][T15107]  should_fail_usercopy+0x1a/0x20
[  232.199709][T15107]  _copy_to_user+0x20/0xa0
[  232.199739][T15107]  do_tcp_getsockopt+0x1389/0x1af0
[  232.199769][T15107]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  232.199819][T15107]  ? _parse_integer_limit+0x170/0x190
[  232.199920][T15107]  ? _parse_integer+0x27/0x40
[  232.199942][T15107]  ? __rcu_read_unlock+0x4f/0x70
[  232.199965][T15107]  ? avc_has_perm_noaudit+0x1b1/0x200
[  232.200017][T15107]  ? avc_has_perm+0xf7/0x180
[  232.200040][T15107]  tcp_getsockopt+0x6e/0xe0
[  232.200065][T15107]  ? selinux_socket_getsockopt+0xc0/0x1b0
[  232.200133][T15107]  ? selinux_socket_getsockopt+0xc0/0x1b0
[  232.200168][T15107]  sock_common_getsockopt+0x60/0x70
[  232.200204][T15107]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  232.200242][T15107]  smc_getsockopt+0x103/0x260
[  232.200265][T15107]  ? __pfx_smc_getsockopt+0x10/0x10
[  232.200317][T15107]  do_sock_getsockopt+0x200/0x240
[  232.200362][T15107]  __x64_sys_getsockopt+0x11e/0x1a0
[  232.200393][T15107]  x64_sys_call+0x2bc6/0x2ff0
[  232.200417][T15107]  do_syscall_64+0xd2/0x200
[  232.200449][T15107]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  232.200553][T15107]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  232.200654][T15002] EXT4-fs (loop3): 1 truncate cleaned up
[  232.200661][T15107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.200751][T15107] RIP: 0033:0x7f865375eba9
[  232.200768][T15107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.200787][T15107] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  232.200809][T15107] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  232.200823][T15107] RDX: 000000000000000c RSI: 0000000000000006 RDI: 0000000000000003
[  232.200836][T15107] RBP: 00007f86521bf090 R08: 00002000000000c0 R09: 0000000000000000
[  232.200887][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.200900][T15107] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  232.200920][T15107]  </TASK>
[  232.232920][T15111] FAULT_INJECTION: forcing a failure.
[  232.232920][T15111] name failslab, interval 1, probability 0, space 0, times 0
[  232.241541][T15002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.245630][T15111] CPU: 0 UID: 0 PID: 15111 Comm: syz.2.3386 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  232.245660][T15111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  232.245679][T15111] Call Trace:
[  232.245687][T15111]  <TASK>
[  232.245695][T15111]  __dump_stack+0x1d/0x30
[  232.245718][T15111]  dump_stack_lvl+0xe8/0x140
[  232.245797][T15111]  dump_stack+0x15/0x1b
[  232.245815][T15111]  should_fail_ex+0x265/0x280
[  232.245896][T15111]  should_failslab+0x8c/0xb0
[  232.245993][T15111]  __kmalloc_node_noprof+0xa9/0x410
[  232.246021][T15111]  ? __vmalloc_node_range_noprof+0x3f9/0xe00
[  232.246056][T15111]  __vmalloc_node_range_noprof+0x3f9/0xe00
[  232.246165][T15111]  ? sel_write_load+0x158/0x380
[  232.246209][T15111]  vmalloc_noprof+0x82/0xc0
[  232.246239][T15111]  ? sel_write_load+0x158/0x380
[  232.246328][T15111]  sel_write_load+0x158/0x380
[  232.246354][T15111]  ? __pfx_sel_write_load+0x10/0x10
[  232.246379][T15111]  vfs_write+0x269/0x960
[  232.246402][T15111]  ? __rcu_read_unlock+0x4f/0x70
[  232.246425][T15111]  ? __fget_files+0x184/0x1c0
[  232.246482][T15111]  ksys_write+0xda/0x1a0
[  232.246507][T15111]  __x64_sys_write+0x40/0x50
[  232.246530][T15111]  x64_sys_call+0x27fe/0x2ff0
[  232.246552][T15111]  do_syscall_64+0xd2/0x200
[  232.246612][T15111]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  232.246637][T15111]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  232.246667][T15111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.246722][T15111] RIP: 0033:0x7f865375eba9
[  232.246739][T15111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.246758][T15111] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  232.246779][T15111] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  232.246818][T15111] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  232.246831][T15111] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  232.246843][T15111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.246855][T15111] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  232.246945][T15111]  </TASK>
[  232.246953][T15111] warn_alloc: 2 callbacks suppressed
[  232.246964][T15111] syz.2.3386: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null)
[  232.252308][T15002] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.255036][T15111] ,cpuset=/,mems_allowed=0
[  232.722979][T15049] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.726307][T15111] CPU: 0 UID: 0 PID: 15111 Comm: syz.2.3386 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  232.726339][T15111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  232.726471][T15111] Call Trace:
[  232.726478][T15111]  <TASK>
[  232.726487][T15111]  __dump_stack+0x1d/0x30
[  232.726518][T15111]  dump_stack_lvl+0xe8/0x140
[  232.726538][T15111]  dump_stack+0x15/0x1b
[  232.726564][T15111]  warn_alloc+0x12b/0x1a0
[  232.726638][T15111]  __vmalloc_node_range_noprof+0x497/0xe00
[  232.726681][T15111]  ? sel_write_load+0x158/0x380
[  232.726744][T15111]  vmalloc_noprof+0x82/0xc0
[  232.726776][T15111]  ? sel_write_load+0x158/0x380
[  232.726801][T15111]  sel_write_load+0x158/0x380
[  232.726827][T15111]  ? __pfx_sel_write_load+0x10/0x10
[  232.726884][T15111]  vfs_write+0x269/0x960
[  232.726906][T15111]  ? __rcu_read_unlock+0x4f/0x70
[  232.726928][T15111]  ? __fget_files+0x184/0x1c0
[  232.726956][T15111]  ksys_write+0xda/0x1a0
[  232.726980][T15111]  __x64_sys_write+0x40/0x50
[  232.727126][T15111]  x64_sys_call+0x27fe/0x2ff0
[  232.727223][T15111]  do_syscall_64+0xd2/0x200
[  232.727254][T15111]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  232.727278][T15111]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  232.727308][T15111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.727387][T15111] RIP: 0033:0x7f865375eba9
[  232.727404][T15111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.727423][T15111] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  232.727444][T15111] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  232.727458][T15111] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  232.727471][T15111] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  232.727539][T15111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.727552][T15111] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  232.727571][T15111]  </TASK>
[  232.727624][T15111] Mem-Info:
[  232.939228][T15111] active_anon:24123 inactive_anon:7 isolated_anon:0
[  232.939228][T15111]  active_file:25418 inactive_file:2368 isolated_file:0
[  232.939228][T15111]  unevictable:0 dirty:463 writeback:0
[  232.939228][T15111]  slab_reclaimable:2641 slab_unreclaimable:18499
[  232.939228][T15111]  mapped:30897 shmem:19973 pagetables:1405
[  232.939228][T15111]  sec_pagetables:0 bounce:0
[  232.939228][T15111]  kernel_misc_reclaimable:0
[  232.939228][T15111]  free:1852015 free_pcp:17107 free_cma:0
[  232.984533][T15111] Node 0 active_anon:96492kB inactive_anon:28kB active_file:101672kB inactive_file:9472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123588kB dirty:1852kB writeback:0kB shmem:79892kB kernel_stack:4816kB pagetables:5620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  233.012152][T15111] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  233.040778][T15111] lowmem_reserve[]: 0 2883 7862 7862
[  233.046181][T15111] Node 0 DMA32 free:2949292kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB
[  233.076576][T15111] lowmem_reserve[]: 0 0 4978 4978
[  233.081686][T15111] Node 0 Normal free:4443408kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96492kB inactive_anon:28kB active_file:101672kB inactive_file:9472kB unevictable:0kB writepending:1852kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:64896kB local_pcp:24640kB free_cma:0kB
[  233.114017][T15111] lowmem_reserve[]: 0 0 0 0
[  233.118548][T15111] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  233.131256][T15111] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949292kB
[  233.147292][T15111] Node 0 Normal: 608*4kB (UME) 2402*8kB (UME) 1678*16kB (UME) 1233*32kB (UME) 1034*64kB (UME) 596*128kB (UME) 233*256kB (UME) 180*512kB (UM) 136*1024kB (UM) 75*2048kB (UM) 920*4096kB (UM) = 4443408kB
[  233.167175][T15111] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  233.176476][T15111] 47762 total pagecache pages
[  233.181145][T15111] 7 pages in swap cache
[  233.185467][T15111] Free swap  = 124968kB
[  233.189615][T15111] Total swap = 124996kB
[  233.193839][T15111] 2097051 pages RAM
[  233.197813][T15111] 0 pages HighMem/MovableOnly
[  233.202519][T15111] 80445 pages reserved
[  233.209092][   T29] kauditd_printk_skb: 636 callbacks suppressed
[  233.209108][   T29] audit: type=1326 audit(1758045649.267:17429): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58ac49d510 code=0x7ffc0000
[  233.240061][   T29] audit: type=1326 audit(1758045649.267:17430): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58ac49e7ab code=0x7ffc0000
[  233.263949][   T29] audit: type=1326 audit(1758045649.267:17431): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58ac49d80a code=0x7ffc0000
[  233.287980][   T29] audit: type=1326 audit(1758045649.267:17432): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ac49eba9 code=0x7ffc0000
[  233.319207][   T29] audit: type=1326 audit(1758045649.278:17433): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ac49eba9 code=0x7ffc0000
[  233.343709][   T29] audit: type=1326 audit(1758045649.278:17434): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ac49eba9 code=0x7ffc0000
[  233.367987][   T29] audit: type=1326 audit(1758045649.278:17435): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ac49eba9 code=0x7ffc0000
[  233.392105][   T29] audit: type=1326 audit(1758045649.278:17436): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ac49eba9 code=0x7ffc0000
[  233.393532][T15121] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3387'.
[  233.416432][   T29] audit: type=1326 audit(1758045649.278:17437): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ac49eba9 code=0x7ffc0000
[  233.449918][   T29] audit: type=1326 audit(1758045649.278:17438): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15001 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ac49eba9 code=0x7ffc0000
[  233.495980][T15049] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.539773][T15130] loop3: detected capacity change from 0 to 512
[  233.557554][T15130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  233.557993][ T9178] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.581873][T15132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  233.583320][ T9178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.609387][ T9178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.619137][T15130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.628468][T15156] FAULT_INJECTION: forcing a failure.
[  233.628468][T15156] name failslab, interval 1, probability 0, space 0, times 0
[  233.634097][T15130] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.644849][T15156] CPU: 1 UID: 0 PID: 15156 Comm: syz.0.3391 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  233.644880][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  233.644893][T15156] Call Trace:
[  233.644963][T15156]  <TASK>
[  233.644972][T15156]  __dump_stack+0x1d/0x30
[  233.644997][T15156]  dump_stack_lvl+0xe8/0x140
[  233.645017][T15156]  dump_stack+0x15/0x1b
[  233.645035][T15156]  should_fail_ex+0x265/0x280
[  233.645059][T15156]  should_failslab+0x8c/0xb0
[  233.645131][T15156]  kmem_cache_alloc_noprof+0x50/0x310
[  233.645159][T15156]  ? alloc_empty_file+0x76/0x200
[  233.645190][T15156]  alloc_empty_file+0x76/0x200
[  233.645334][T15156]  path_openat+0x68/0x2170
[  233.645360][T15156]  ? kernelmode_fixup_or_oops+0x59/0xb0
[  233.645394][T15156]  ? _parse_integer_limit+0x170/0x190
[  233.645421][T15156]  ? kstrtoull+0x111/0x140
[  233.645444][T15156]  ? kstrtouint+0x76/0xc0
[  233.645480][T15156]  do_filp_open+0x109/0x230
[  233.645508][T15156]  do_sys_openat2+0xa6/0x110
[  233.645542][T15156]  __x64_sys_openat+0xf2/0x120
[  233.645574][T15156]  x64_sys_call+0x2e9c/0x2ff0
[  233.645596][T15156]  do_syscall_64+0xd2/0x200
[  233.645676][T15156]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  233.645701][T15156]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  233.645731][T15156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.645800][T15156] RIP: 0033:0x7fb9a761eba9
[  233.645817][T15156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.645835][T15156] RSP: 002b:00007fb9a6087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  233.645856][T15156] RAX: ffffffffffffffda RBX: 00007fb9a7865fa0 RCX: 00007fb9a761eba9
[  233.645870][T15156] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  233.645911][T15156] RBP: 00007fb9a6087090 R08: 0000000000000000 R09: 0000000000000000
[  233.645924][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.645937][T15156] R13: 00007fb9a7866038 R14: 00007fb9a7865fa0 R15: 00007ffcba2f06f8
[  233.646030][T15156]  </TASK>
[  233.693335][ T9178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.733955][T15130] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, 
[  233.758133][T14514] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  233.758309][T15130] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  233.898875][T15130] EXT4-fs (loop3): Remounting filesystem read-only
[  233.916652][T14514] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  233.926168][T14514] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  233.944720][T14514] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  233.966395][T15174] vhci_hcd: invalid port number 96
[  233.971573][T15174] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  234.021300][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.036932][T15198] bond1: entered promiscuous mode
[  234.042133][T15198] bond1: entered allmulticast mode
[  234.047619][T15198] 8021q: adding VLAN 0 to HW filter on device bond1
[  234.062354][T15198] bond1 (unregistering): Released all slaves
[  234.104850][T14514] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.143872][T15270] random: crng reseeded on system resumption
[  234.153011][T15276] FAULT_INJECTION: forcing a failure.
[  234.153011][T15276] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.157984][T14514] 8021q: adding VLAN 0 to HW filter on device team0
[  234.166303][T15276] CPU: 0 UID: 0 PID: 15276 Comm: syz.3.3400 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  234.166332][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  234.166345][T15276] Call Trace:
[  234.166351][T15276]  <TASK>
[  234.166359][T15276]  __dump_stack+0x1d/0x30
[  234.166383][T15276]  dump_stack_lvl+0xe8/0x140
[  234.166434][T15276]  dump_stack+0x15/0x1b
[  234.166451][T15276]  should_fail_ex+0x265/0x280
[  234.166477][T15276]  should_fail+0xb/0x20
[  234.166498][T15276]  should_fail_usercopy+0x1a/0x20
[  234.166534][T15276]  _copy_from_user+0x1c/0xb0
[  234.166565][T15276]  kstrtouint_from_user+0x69/0xf0
[  234.166592][T15276]  ? 0xffffffff81000000
[  234.166606][T15276]  ? selinux_file_permission+0x1e4/0x320
[  234.166631][T15276]  proc_fail_nth_write+0x50/0x160
[  234.166733][T15276]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  234.166760][T15276]  vfs_write+0x269/0x960
[  234.166782][T15276]  ? vfs_read+0x4e6/0x770
[  234.166803][T15276]  ? __rcu_read_unlock+0x4f/0x70
[  234.166841][T15276]  ? __fget_files+0x184/0x1c0
[  234.166874][T15276]  ksys_write+0xda/0x1a0
[  234.166974][T15276]  __x64_sys_write+0x40/0x50
[  234.166997][T15276]  x64_sys_call+0x27fe/0x2ff0
[  234.167076][T15276]  do_syscall_64+0xd2/0x200
[  234.167153][T15276]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  234.167177][T15276]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  234.167242][T15276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.167264][T15276] RIP: 0033:0x7f58ac49d65f
[  234.167281][T15276] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  234.167343][T15276] RSP: 002b:00007f58aaeff030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  234.167364][T15276] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58ac49d65f
[  234.167378][T15276] RDX: 0000000000000001 RSI: 00007f58aaeff0a0 RDI: 0000000000000004
[  234.167391][T15276] RBP: 00007f58aaeff090 R08: 0000000000000000 R09: 0000000000000000
[  234.167404][T15276] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  234.167418][T15276] R13: 00007f58ac6e6038 R14: 00007f58ac6e5fa0 R15: 00007ffe72e693f8
[  234.167437][T15276]  </TASK>
[  234.226954][T15280] loop3: detected capacity change from 0 to 2048
[  234.245027][T14514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  234.276629][T15282] netlink: 'syz.0.3398': attribute type 4 has an invalid length.
[  234.279951][T14514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.404462][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.431842][ T9163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.443887][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.451109][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.451793][T15280]  loop3: p1 < > p4
[  234.468592][T15286] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3401'.
[  234.478912][T15280] loop3: p4 size 8388608 extends beyond EOD, truncated
[  234.524529][T15298] loop3: detected capacity change from 0 to 512
[  234.534545][T15298] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  234.558460][T15298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.579418][T14514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.592251][T15310] FAULT_INJECTION: forcing a failure.
[  234.592251][T15310] name failslab, interval 1, probability 0, space 0, times 0
[  234.597810][T15298] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.605047][T15310] CPU: 1 UID: 0 PID: 15310 Comm: syz.0.3408 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  234.605117][T15310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  234.605166][T15310] Call Trace:
[  234.605174][T15310]  <TASK>
[  234.605183][T15310]  __dump_stack+0x1d/0x30
[  234.605207][T15310]  dump_stack_lvl+0xe8/0x140
[  234.605228][T15310]  dump_stack+0x15/0x1b
[  234.605245][T15310]  should_fail_ex+0x265/0x280
[  234.605337][T15310]  should_failslab+0x8c/0xb0
[  234.605363][T15310]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  234.605391][T15310]  ? shmem_alloc_inode+0x34/0x50
[  234.605465][T15310]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  234.605487][T15310]  shmem_alloc_inode+0x34/0x50
[  234.605508][T15310]  alloc_inode+0x40/0x170
[  234.605532][T15310]  new_inode+0x1d/0xe0
[  234.605556][T15310]  shmem_get_inode+0x244/0x750
[  234.605659][T15310]  __shmem_file_setup+0x113/0x210
[  234.605692][T15310]  shmem_file_setup+0x3b/0x50
[  234.605712][T15310]  __se_sys_memfd_create+0x2c3/0x590
[  234.605735][T15310]  __x64_sys_memfd_create+0x31/0x40
[  234.605769][T15310]  x64_sys_call+0x2abe/0x2ff0
[  234.605791][T15310]  do_syscall_64+0xd2/0x200
[  234.605822][T15310]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  234.605921][T15310]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  234.606023][T15310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.606045][T15310] RIP: 0033:0x7fb9a761eba9
[  234.606064][T15310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.606083][T15310] RSP: 002b:00007fb9a6086e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  234.606104][T15310] RAX: ffffffffffffffda RBX: 0000000000000473 RCX: 00007fb9a761eba9
[  234.606125][T15310] RDX: 00007fb9a6086ef0 RSI: 0000000000000000 RDI: 00007fb9a76a27e8
[  234.606191][T15310] RBP: 0000200000000940 R08: 00007fb9a6086bb7 R09: 00007fb9a6086e40
[  234.606203][T15310] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  234.606216][T15310] R13: 00007fb9a6086ef0 R14: 00007fb9a6086eb0 R15: 00002000000000c0
[  234.606236][T15310]  </TASK>
[  234.805546][T14514] veth0_vlan: entered promiscuous mode
[  234.847483][T15298] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  234.872344][T15298] EXT4-fs (loop3): Remounting filesystem read-only
[  234.872770][T14514] veth1_vlan: entered promiscuous mode
[  234.911130][T14514] veth0_macvtap: entered promiscuous mode
[  234.939962][T14514] veth1_macvtap: entered promiscuous mode
[  234.962000][T14514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.974701][T14514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.987681][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.989800][   T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.065890][   T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.086682][T15345] FAULT_INJECTION: forcing a failure.
[  235.086682][T15345] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.099905][T15345] CPU: 1 UID: 0 PID: 15345 Comm: syz.5.3415 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  235.099938][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  235.099952][T15345] Call Trace:
[  235.099959][T15345]  <TASK>
[  235.100009][T15345]  __dump_stack+0x1d/0x30
[  235.100089][T15345]  dump_stack_lvl+0xe8/0x140
[  235.100109][T15345]  dump_stack+0x15/0x1b
[  235.100126][T15345]  should_fail_ex+0x265/0x280
[  235.100236][T15345]  should_fail+0xb/0x20
[  235.100256][T15345]  should_fail_usercopy+0x1a/0x20
[  235.100302][T15345]  _copy_to_user+0x20/0xa0
[  235.100339][T15345]  simple_read_from_buffer+0xb5/0x130
[  235.100365][T15345]  proc_fail_nth_read+0x10e/0x150
[  235.100411][T15345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  235.100435][T15345]  vfs_read+0x1a8/0x770
[  235.100488][T15345]  ? __rcu_read_unlock+0x4f/0x70
[  235.100512][T15345]  ? __fget_files+0x184/0x1c0
[  235.100543][T15345]  ksys_read+0xda/0x1a0
[  235.100565][T15345]  __x64_sys_read+0x40/0x50
[  235.100588][T15345]  x64_sys_call+0x27bc/0x2ff0
[  235.100674][T15345]  do_syscall_64+0xd2/0x200
[  235.100705][T15345]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  235.100733][T15345]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  235.100804][T15345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.100829][T15345] RIP: 0033:0x7fde76bfd5bc
[  235.100846][T15345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  235.100866][T15345] RSP: 002b:00007fde75667030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  235.100888][T15345] RAX: ffffffffffffffda RBX: 00007fde76e45fa0 RCX: 00007fde76bfd5bc
[  235.100902][T15345] RDX: 000000000000000f RSI: 00007fde756670a0 RDI: 0000000000000005
[  235.100989][T15345] RBP: 00007fde75667090 R08: 0000000000000000 R09: 0000000000000000
[  235.101004][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.101047][T15345] R13: 00007fde76e46038 R14: 00007fde76e45fa0 R15: 00007ffc4beff5e8
[  235.101068][T15345]  </TASK>
[  235.109243][   T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.322624][   T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.401193][T15379] FAULT_INJECTION: forcing a failure.
[  235.401193][T15379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.414496][T15379] CPU: 1 UID: 0 PID: 15379 Comm: syz.4.3419 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  235.414530][T15379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  235.414543][T15379] Call Trace:
[  235.414550][T15379]  <TASK>
[  235.414559][T15379]  __dump_stack+0x1d/0x30
[  235.414582][T15379]  dump_stack_lvl+0xe8/0x140
[  235.414678][T15379]  dump_stack+0x15/0x1b
[  235.414696][T15379]  should_fail_ex+0x265/0x280
[  235.414747][T15379]  should_fail+0xb/0x20
[  235.414769][T15379]  should_fail_usercopy+0x1a/0x20
[  235.414795][T15379]  _copy_from_user+0x1c/0xb0
[  235.414887][T15379]  ___sys_sendmsg+0xc1/0x1d0
[  235.414932][T15379]  __x64_sys_sendmsg+0xd4/0x160
[  235.414968][T15379]  x64_sys_call+0x191e/0x2ff0
[  235.414993][T15379]  do_syscall_64+0xd2/0x200
[  235.415029][T15379]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  235.415056][T15379]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  235.415169][T15379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.415193][T15379] RIP: 0033:0x7fcde174eba9
[  235.415210][T15379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.415229][T15379] RSP: 002b:00007fcde01b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.415252][T15379] RAX: ffffffffffffffda RBX: 00007fcde1995fa0 RCX: 00007fcde174eba9
[  235.415281][T15379] RDX: 0000000000008044 RSI: 0000200000000200 RDI: 0000000000000003
[  235.415296][T15379] RBP: 00007fcde01b7090 R08: 0000000000000000 R09: 0000000000000000
[  235.415310][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.415386][T15379] R13: 00007fcde1996038 R14: 00007fcde1995fa0 R15: 00007ffcde767b48
[  235.415408][T15379]  </TASK>
[  235.902928][T15407] netlink: 'syz.0.3427': attribute type 13 has an invalid length.
[  236.022142][T15407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.125332][T15420] FAULT_INJECTION: forcing a failure.
[  236.125332][T15420] name failslab, interval 1, probability 0, space 0, times 0
[  236.138094][T15420] CPU: 1 UID: 0 PID: 15420 Comm: syz.4.3433 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  236.138124][T15420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  236.138198][T15420] Call Trace:
[  236.138205][T15420]  <TASK>
[  236.138213][T15420]  __dump_stack+0x1d/0x30
[  236.138238][T15420]  dump_stack_lvl+0xe8/0x140
[  236.138326][T15420]  dump_stack+0x15/0x1b
[  236.138346][T15420]  should_fail_ex+0x265/0x280
[  236.138374][T15420]  should_failslab+0x8c/0xb0
[  236.138440][T15420]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  236.138492][T15420]  ? __d_alloc+0x3d/0x340
[  236.138523][T15420]  __d_alloc+0x3d/0x340
[  236.138556][T15420]  d_alloc+0x2e/0x100
[  236.138587][T15420]  lookup_one_qstr_excl+0x99/0x250
[  236.138661][T15420]  filename_create+0x149/0x230
[  236.138687][T15420]  do_mkdirat+0x52/0x3f0
[  236.138713][T15420]  __x64_sys_mkdirat+0x4c/0x60
[  236.138735][T15420]  x64_sys_call+0x2b7/0x2ff0
[  236.138755][T15420]  do_syscall_64+0xd2/0x200
[  236.138850][T15420]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  236.138873][T15420]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  236.139035][T15420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.139055][T15420] RIP: 0033:0x7fcde174eba9
[  236.139071][T15420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.139093][T15420] RSP: 002b:00007fcde01b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  236.139115][T15420] RAX: ffffffffffffffda RBX: 00007fcde1995fa0 RCX: 00007fcde174eba9
[  236.139201][T15420] RDX: 00000000000001c1 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  236.139214][T15420] RBP: 00007fcde01b7090 R08: 0000000000000000 R09: 0000000000000000
[  236.139230][T15420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  236.139245][T15420] R13: 00007fcde1996038 R14: 00007fcde1995fa0 R15: 00007ffcde767b48
[  236.139264][T15420]  </TASK>
[  236.442512][T15432] netlink: 'syz.4.3436': attribute type 1 has an invalid length.
[  236.517001][T15438] bridge0: entered promiscuous mode
[  236.522306][T15438] bridge0: entered allmulticast mode
[  236.538255][T15427] vhci_hcd: invalid port number 96
[  236.543515][T15427] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  236.612693][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3436'.
[  236.640570][T15409] Set syz1 is full, maxelem 65536 reached
[  236.898378][T15483] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3448'.
[  236.922578][T15485] tmpfs: Unknown parameter 'mpo'
[  237.239146][T15522] FAULT_INJECTION: forcing a failure.
[  237.239146][T15522] name failslab, interval 1, probability 0, space 0, times 0
[  237.252136][T15522] CPU: 0 UID: 0 PID: 15522 Comm: syz.2.3461 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  237.252245][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  237.252260][T15522] Call Trace:
[  237.252269][T15522]  <TASK>
[  237.252279][T15522]  __dump_stack+0x1d/0x30
[  237.252307][T15522]  dump_stack_lvl+0xe8/0x140
[  237.252332][T15522]  dump_stack+0x15/0x1b
[  237.252352][T15522]  should_fail_ex+0x265/0x280
[  237.252457][T15522]  should_failslab+0x8c/0xb0
[  237.252485][T15522]  __kmalloc_noprof+0xa5/0x3e0
[  237.252515][T15522]  ? copy_splice_read+0xc2/0x660
[  237.252564][T15522]  copy_splice_read+0xc2/0x660
[  237.252588][T15522]  ? __pfx_copy_splice_read+0x10/0x10
[  237.252611][T15522]  splice_direct_to_actor+0x26f/0x680
[  237.252637][T15522]  ? __pfx_direct_splice_actor+0x10/0x10
[  237.252660][T15522]  do_splice_direct+0xda/0x150
[  237.252741][T15522]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  237.252806][T15522]  do_sendfile+0x380/0x650
[  237.252841][T15522]  __x64_sys_sendfile64+0x105/0x150
[  237.252877][T15522]  x64_sys_call+0x2bb0/0x2ff0
[  237.252899][T15522]  do_syscall_64+0xd2/0x200
[  237.252952][T15522]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  237.252982][T15522]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  237.253029][T15522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.253050][T15522] RIP: 0033:0x7f865375eba9
[  237.253069][T15522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.253092][T15522] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  237.253117][T15522] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  237.253132][T15522] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  237.253179][T15522] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  237.253191][T15522] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[  237.253203][T15522] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  237.253221][T15522]  </TASK>
[  237.499104][T15528] FAULT_INJECTION: forcing a failure.
[  237.499104][T15528] name failslab, interval 1, probability 0, space 0, times 0
[  237.511970][T15528] CPU: 1 UID: 0 PID: 15528 Comm: syz.2.3465 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  237.511998][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  237.512009][T15528] Call Trace:
[  237.512014][T15528]  <TASK>
[  237.512022][T15528]  __dump_stack+0x1d/0x30
[  237.512043][T15528]  dump_stack_lvl+0xe8/0x140
[  237.512066][T15528]  dump_stack+0x15/0x1b
[  237.512082][T15528]  should_fail_ex+0x265/0x280
[  237.512168][T15528]  should_failslab+0x8c/0xb0
[  237.512190][T15528]  __kmalloc_noprof+0xa5/0x3e0
[  237.512255][T15528]  ? sock_kmalloc+0x85/0xc0
[  237.512279][T15528]  ? iovec_from_user+0x5e/0x210
[  237.512330][T15528]  sock_kmalloc+0x85/0xc0
[  237.512360][T15528]  ____sys_sendmsg+0xf8/0x4e0
[  237.512388][T15528]  ___sys_sendmsg+0x17b/0x1d0
[  237.512442][T15528]  __x64_sys_sendmsg+0xd4/0x160
[  237.512474][T15528]  x64_sys_call+0x191e/0x2ff0
[  237.512494][T15528]  do_syscall_64+0xd2/0x200
[  237.512528][T15528]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  237.512569][T15528]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  237.512596][T15528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.512617][T15528] RIP: 0033:0x7f865375eba9
[  237.512655][T15528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.512675][T15528] RSP: 002b:00007f86521bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.512756][T15528] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  237.512803][T15528] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  237.512815][T15528] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  237.512827][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.512839][T15528] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  237.512857][T15528]  </TASK>
[  237.768044][T15529] lo speed is unknown, defaulting to 1000
[  237.927758][T15530] netlink: 'syz.0.3460': attribute type 4 has an invalid length.
[  237.935578][T15530] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3460'.
[  237.949646][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3460'.
[  238.095151][   T29] kauditd_printk_skb: 1529 callbacks suppressed
[  238.095170][   T29] audit: type=1400 audit(1758045654.401:18964): avc:  denied  { sys_module } for  pid=15518 comm="syz.0.3460" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  238.140569][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3466'.
[  238.177455][   T29] audit: type=1400 audit(1758045654.443:18965): avc:  denied  { read } for  pid=15534 comm="syz.4.3463" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  238.201198][   T29] audit: type=1400 audit(1758045654.443:18966): avc:  denied  { open } for  pid=15534 comm="syz.4.3463" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  238.225296][   T29] audit: type=1400 audit(1758045654.464:18967): avc:  denied  { ioctl } for  pid=15534 comm="syz.4.3463" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  238.250627][   T29] audit: type=1400 audit(1758045654.474:18968): avc:  denied  { sqpoll } for  pid=15534 comm="syz.4.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  238.648931][T15479] vhci_hcd: invalid port number 96
[  238.654274][T15479] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  238.704905][   T29] audit: type=1400 audit(1758045654.611:18969): avc:  denied  { setopt } for  pid=15534 comm="syz.4.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  238.724928][   T29] audit: type=1400 audit(1758045654.611:18970): avc:  denied  { prog_load } for  pid=15532 comm="syz.2.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  238.744240][   T29] audit: type=1400 audit(1758045654.611:18971): avc:  denied  { bpf } for  pid=15532 comm="syz.2.3466" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  238.764976][   T29] audit: type=1400 audit(1758045654.621:18972): avc:  denied  { perfmon } for  pid=15532 comm="syz.2.3466" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  238.786240][   T29] audit: type=1400 audit(1758045654.621:18973): avc:  denied  { prog_run } for  pid=15532 comm="syz.2.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  238.839398][T15515] loop3: detected capacity change from 0 to 512
[  239.555215][T15515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.601073][T15515] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.659356][T15605] 8021q: adding VLAN 0 to HW filter on device $Hÿ
[  239.669011][T15605] 8021q: adding VLAN 0 to HW filter on device team0
[  239.717071][T15605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.733654][ T7327] lo speed is unknown, defaulting to 1000
[  239.739551][ T7327] s
z1: Port: 1 Link ACTIVE
[  239.749132][ T7327] lo speed is unknown, defaulting to 1000
[  239.815537][T15580] vhci_hcd: invalid port number 96
[  239.820797][T15580] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  239.917802][T12352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.037182][T15608] vhci_hcd: invalid port number 96
[  240.042364][T15608] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  240.323524][T15643] ieee802154 phy0 wpan0: encryption failed: -22
[  240.373925][T15644] vhci_hcd: invalid port number 96
[  240.379109][T15644] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  240.560593][T15647] lo speed is unknown, defaulting to 1000
[  240.843125][T15646] lo speed is unknown, defaulting to 1000
[  241.366279][T15639] Set syz1 is full, maxelem 65536 reached
[  241.560999][T15713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.886869][T15705] binfmt_misc: register: failed to install interpreter file ./file2
[  241.984453][T15733] netlink: 'syz.4.3490': attribute type 3 has an invalid length.
[  241.992503][T15733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3490'.
[  242.072888][T15730] vhci_hcd: invalid port number 96
[  242.078214][T15730] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  242.140626][T15753] lo speed is unknown, defaulting to 1000
[  242.821977][T15787] Set syz1 is full, maxelem 65536 reached
[  242.939572][   T29] kauditd_printk_skb: 408 callbacks suppressed
[  242.939591][   T29] audit: type=1400 audit(1758045659.492:19382): avc:  denied  { egress } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  242.969520][   T29] audit: type=1400 audit(1758045659.492:19383): avc:  denied  { sendto } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1
[  243.024058][   T29] audit: type=1326 audit(1758045659.492:19384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.047802][   T29] audit: type=1326 audit(1758045659.492:19385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.071496][   T29] audit: type=1326 audit(1758045659.492:19386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.095379][   T29] audit: type=1326 audit(1758045659.492:19387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.119136][   T29] audit: type=1326 audit(1758045659.492:19388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.119254][   T29] audit: type=1326 audit(1758045659.492:19389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.119286][   T29] audit: type=1326 audit(1758045659.492:19390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.119353][   T29] audit: type=1326 audit(1758045659.492:19391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a761eba9 code=0x7ffc0000
[  243.225419][T15810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.501284][T15845] FAULT_INJECTION: forcing a failure.
[  243.501284][T15845] name failslab, interval 1, probability 0, space 0, times 0
[  243.513122][T15830] vhci_hcd: invalid port number 96
[  243.514198][T15845] CPU: 1 UID: 0 PID: 15845 Comm: syz.0.3526 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  243.514266][T15845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  243.514279][T15845] Call Trace:
[  243.514285][T15845]  <TASK>
[  243.514292][T15845]  __dump_stack+0x1d/0x30
[  243.514316][T15845]  dump_stack_lvl+0xe8/0x140
[  243.514337][T15845]  dump_stack+0x15/0x1b
[  243.514355][T15845]  should_fail_ex+0x265/0x280
[  243.514416][T15845]  ? __se_sys_mount+0xef/0x2e0
[  243.514439][T15845]  should_failslab+0x8c/0xb0
[  243.514515][T15845]  __kmalloc_cache_noprof+0x4c/0x320
[  243.514545][T15845]  ? memdup_user+0x99/0xd0
[  243.514572][T15845]  __se_sys_mount+0xef/0x2e0
[  243.514610][T15845]  ? fput+0x8f/0xc0
[  243.514639][T15845]  ? ksys_write+0x192/0x1a0
[  243.514663][T15845]  __x64_sys_mount+0x67/0x80
[  243.514700][T15845]  x64_sys_call+0x2b4d/0x2ff0
[  243.514801][T15845]  do_syscall_64+0xd2/0x200
[  243.514832][T15845]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  243.514870][T15845]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  243.514900][T15845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  243.514933][T15845] RIP: 0033:0x7fb9a761eba9
[  243.514949][T15845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.514968][T15845] RSP: 002b:00007fb9a6087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  243.514990][T15845] RAX: ffffffffffffffda RBX: 00007fb9a7865fa0 RCX: 00007fb9a761eba9
[  243.515013][T15845] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000
[  243.515097][T15845] RBP: 00007fb9a6087090 R08: 0000200000000000 R09: 0000000000000000
[  243.515110][T15845] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000001
[  243.515123][T15845] R13: 00007fb9a7866038 R14: 00007fb9a7865fa0 R15: 00007ffcba2f06f8
[  243.515142][T15845]  </TASK>
[  243.705141][T15830] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  244.175969][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'.
[  244.242820][T15856] Set syz1 is full, maxelem 65536 reached
[  244.457819][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3546'.
[  244.514180][T15908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'.
[  244.691461][T15921] bond1: entered promiscuous mode
[  244.712396][T15921] 8021q: adding VLAN 0 to HW filter on device bond1
[  244.944355][T15973] netlink: 'syz.5.3559': attribute type 10 has an invalid length.
[  244.962926][T15973] team0: Device dummy0 is up. Set it down before adding it as a team port
[  244.996734][T15902] vhci_hcd: invalid port number 96
[  245.001898][T15902] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  245.016827][T15965] netlink: 'syz.5.3559': attribute type 10 has an invalid length.
[  245.046866][T15965] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link
[  245.147864][T15983] netlink: 9004 bytes leftover after parsing attributes in process `syz.2.3565'.
[  245.178038][T15991] pim6reg1: entered promiscuous mode
[  245.183453][T15991] pim6reg1: entered allmulticast mode
[  245.220651][T15995] netlink: 9004 bytes leftover after parsing attributes in process `syz.2.3569'.
[  245.343383][T16009] atomic_op ffff88811d09ad28 conn xmit_atomic 0000000000000000
[  246.061666][T16045] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3586'.
[  246.070722][T16045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.217403][T16042] vhci_hcd: invalid port number 96
[  246.222619][T16042] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  246.267681][T16067] sd 0:0:1:0: device reset
[  246.385867][T16079] SELinux:  policydb magic number 0x10 does not match expected magic number 0xf97cff8c
[  246.398134][T16079] SELinux: failed to load policy
[  246.791218][T16114] FAULT_INJECTION: forcing a failure.
[  246.791218][T16114] name failslab, interval 1, probability 0, space 0, times 0
[  246.803918][T16114] CPU: 0 UID: 0 PID: 16114 Comm: syz.0.3611 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  246.803983][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  246.803997][T16114] Call Trace:
[  246.804005][T16114]  <TASK>
[  246.804015][T16114]  __dump_stack+0x1d/0x30
[  246.804042][T16114]  dump_stack_lvl+0xe8/0x140
[  246.804062][T16114]  dump_stack+0x15/0x1b
[  246.804108][T16114]  should_fail_ex+0x265/0x280
[  246.804207][T16114]  should_failslab+0x8c/0xb0
[  246.804318][T16114]  __kvmalloc_node_noprof+0x123/0x4e0
[  246.804348][T16114]  ? traverse+0x9d/0x3a0
[  246.804483][T16114]  ? audit_log_end+0x1d7/0x1f0
[  246.804522][T16114]  traverse+0x9d/0x3a0
[  246.804559][T16114]  seq_read_iter+0x853/0x940
[  246.804623][T16114]  ? __seccomp_filter+0x69d/0x10d0
[  246.804643][T16114]  ? avc_policy_seqno+0x15/0x30
[  246.804683][T16114]  proc_reg_read_iter+0x110/0x180
[  246.804765][T16114]  ? __pfx_proc_reg_read_iter+0x10/0x10
[  246.804793][T16114]  vfs_read+0x649/0x770
[  246.804832][T16114]  ? __pfx_proc_reg_read_iter+0x10/0x10
[  246.805023][T16114]  __x64_sys_pread64+0xfd/0x150
[  246.805053][T16114]  x64_sys_call+0x29e2/0x2ff0
[  246.805076][T16114]  do_syscall_64+0xd2/0x200
[  246.805131][T16114]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  246.805160][T16114]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  246.805248][T16114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.805292][T16114] RIP: 0033:0x7fb9a761eba9
[  246.805311][T16114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.805332][T16114] RSP: 002b:00007fb9a6087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  246.805358][T16114] RAX: ffffffffffffffda RBX: 00007fb9a7865fa0 RCX: 00007fb9a761eba9
[  246.805375][T16114] RDX: 0000000000000023 RSI: 00002000000024c0 RDI: 0000000000000007
[  246.805389][T16114] RBP: 00007fb9a6087090 R08: 0000000000000000 R09: 0000000000000000
[  246.805401][T16114] R10: 0000000000000697 R11: 0000000000000246 R12: 0000000000000001
[  246.805414][T16114] R13: 00007fb9a7866038 R14: 00007fb9a7865fa0 R15: 00007ffcba2f06f8
[  246.805451][T16114]  </TASK>
[  247.199461][T16107] vhci_hcd: invalid port number 96
[  247.204656][T16107] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  247.438525][T16148] netlink: 'syz.5.3623': attribute type 19 has an invalid length.
[  247.446459][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3623'.
[  247.460501][T16148] netlink: 'syz.5.3623': attribute type 19 has an invalid length.
[  247.461610][ T9187] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.468419][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3623'.
[  247.546377][ T9187] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  247.589412][ T9187] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  247.608374][ T9187] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.684485][T16125] vhci_hcd: invalid port number 96
[  247.689636][T16125] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  247.921235][   T29] kauditd_printk_skb: 795 callbacks suppressed
[  247.921253][   T29] audit: type=1326 audit(1758045664.720:20187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  247.931621][T16188] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  248.006421][   T29] audit: type=1326 audit(1758045664.720:20188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.011734][T16191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3636'.
[  248.097905][   T29] audit: type=1326 audit(1758045664.720:20189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.154479][   T29] audit: type=1326 audit(1758045664.720:20190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.178145][   T29] audit: type=1326 audit(1758045664.720:20191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.201860][   T29] audit: type=1326 audit(1758045664.720:20192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.217882][T16163] vhci_hcd: invalid port number 96
[  248.225658][   T29] audit: type=1326 audit(1758045664.720:20193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.230711][T16163] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  248.254395][   T29] audit: type=1326 audit(1758045664.720:20194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.285185][   T29] audit: type=1326 audit(1758045664.720:20195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.308862][   T29] audit: type=1326 audit(1758045664.720:20196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  248.852186][T16200] vhci_hcd: invalid port number 96
[  248.857683][T16200] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  249.126547][T16243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3654'.
[  249.189156][T16228] vhci_hcd: invalid port number 96
[  249.194353][T16228] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  249.704908][T16289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3670'.
[  250.100061][T16310] infiniband syz!: set active
[  250.104087][T16318] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  250.104870][T16310] infiniband syz!: added team_slave_0
[  250.141858][T16310] RDS/IB: syz!: added
[  250.146027][T16310] smc: adding ib device syz! with port count 1
[  250.153743][T16310] smc:    ib device syz! port 1 has pnetid 
[  250.171930][T16279] vhci_hcd: invalid port number 96
[  250.177085][T16279] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  250.632360][T16337] vhci_hcd: invalid port number 96
[  250.637518][T16337] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  250.674894][T16351] lo speed is unknown, defaulting to 1000
[  250.951388][T16356] lo speed is unknown, defaulting to 1000
[  252.196010][T16476] vhci_hcd: invalid port number 96
[  252.201207][T16476] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  252.395223][T16494] program syz.3.3706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  252.607215][T16498] lo speed is unknown, defaulting to 1000
[  252.712922][   T29] kauditd_printk_skb: 428 callbacks suppressed
[  252.712940][   T29] audit: type=1326 audit(260.902:20625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.808470][   T29] audit: type=1326 audit(260.933:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.831710][   T29] audit: type=1326 audit(260.933:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.854826][   T29] audit: type=1326 audit(260.933:20628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.877835][   T29] audit: type=1326 audit(260.933:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.900868][   T29] audit: type=1326 audit(260.933:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.923913][   T29] audit: type=1326 audit(260.933:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.947145][   T29] audit: type=1326 audit(260.933:20632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.970164][   T29] audit: type=1326 audit(260.944:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  252.993175][   T29] audit: type=1326 audit(260.944:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16519 comm="syz.2.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f865375d510 code=0x7ffc0000
[  253.033420][T16555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16555 comm=syz.2.3721
[  253.255666][T16572] netlink: 'syz.2.3727': attribute type 21 has an invalid length.
[  253.289768][T16572] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3727'.
[  253.298990][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3727'.
[  253.437042][T16559] vhci_hcd: invalid port number 96
[  253.442322][T16559] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  253.519788][T16590] SELinux:  Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped).
[  253.554113][T16590] team0 (unregistering): Port device team_slave_0 removed
[  253.579530][T16590] team0 (unregistering): Port device team_slave_1 removed
[  253.608159][T16594] bridge0: entered promiscuous mode
[  253.613847][T16594] macvtap1: entered allmulticast mode
[  253.619336][T16594] bridge0: entered allmulticast mode
[  253.628201][T16594] bridge0: port 3(macvtap1) entered blocking state
[  253.634877][T16594] bridge0: port 3(macvtap1) entered disabled state
[  253.661936][T16594] bridge0: left allmulticast mode
[  253.667209][T16594] bridge0: left promiscuous mode
[  253.737898][T16592] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3737'.
[  253.798366][T16650] netlink: 'syz.4.3742': attribute type 21 has an invalid length.
[  253.810982][T16648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'.
[  253.820007][T16648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'.
[  253.849142][T16650] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3742'.
[  253.858657][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3742'.
[  253.944153][T16662] FAULT_INJECTION: forcing a failure.
[  253.944153][T16662] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  253.957507][T16662] CPU: 1 UID: 0 PID: 16662 Comm: syz.4.3748 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  253.957537][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  253.957552][T16662] Call Trace:
[  253.957559][T16662]  <TASK>
[  253.957575][T16662]  __dump_stack+0x1d/0x30
[  253.957657][T16662]  dump_stack_lvl+0xe8/0x140
[  253.957699][T16662]  dump_stack+0x15/0x1b
[  253.957717][T16662]  should_fail_ex+0x265/0x280
[  253.957747][T16662]  should_fail_alloc_page+0xf2/0x100
[  253.957845][T16662]  __alloc_frozen_pages_noprof+0xff/0x360
[  253.957884][T16662]  alloc_pages_mpol+0xb3/0x250
[  253.957969][T16662]  vma_alloc_folio_noprof+0x1aa/0x300
[  253.958008][T16662]  do_wp_page+0x5db/0x24e0
[  253.958030][T16662]  ? css_rstat_updated+0xb7/0x240
[  253.958167][T16662]  ? __rcu_read_lock+0x37/0x50
[  253.958194][T16662]  handle_mm_fault+0x77d/0x2c20
[  253.958220][T16662]  ? __rcu_read_unlock+0x4f/0x70
[  253.958253][T16662]  do_user_addr_fault+0x3fe/0x1090
[  253.958352][T16662]  exc_page_fault+0x62/0xa0
[  253.958387][T16662]  asm_exc_page_fault+0x26/0x30
[  253.958411][T16662] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  253.958495][T16662] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  253.958517][T16662] RSP: 0018:ffffc90008fc7b48 EFLAGS: 00050206
[  253.958536][T16662] RAX: ffff88812cde9b20 RBX: ffffc90008fc7ce0 RCX: 0000000000000e80
[  253.958551][T16662] RDX: 0000000000000000 RSI: ffff888008e07180 RDI: 000020000000d000
[  253.958571][T16662] RBP: 000000000000cb80 R08: 0000000000000d65 R09: 0000000000000000
[  253.958585][T16662] R10: 0001888008e07000 R11: 0001888008e07fff R12: ffffc90008fc7cc8
[  253.958638][T16662] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000
[  253.958656][T16662]  _copy_to_iter+0x2df/0xe70
[  253.958743][T16662]  ? should_fail_ex+0xdb/0x280
[  253.958787][T16662]  copy_page_to_iter+0x18f/0x2d0
[  253.958814][T16662]  process_vm_rw+0x672/0x960
[  253.958892][T16662]  __x64_sys_process_vm_readv+0x78/0x90
[  253.958920][T16662]  x64_sys_call+0x1874/0x2ff0
[  253.959019][T16662]  do_syscall_64+0xd2/0x200
[  253.959097][T16662]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  253.959121][T16662]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  253.959148][T16662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.959243][T16662] RIP: 0033:0x7fcde174eba9
[  253.959258][T16662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.959276][T16662] RSP: 002b:00007fcde01b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  253.959298][T16662] RAX: ffffffffffffffda RBX: 00007fcde1995fa0 RCX: 00007fcde174eba9
[  253.959322][T16662] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000000a4
[  253.959337][T16662] RBP: 00007fcde01b7090 R08: 0000000000000286 R09: 0000000000000000
[  253.959352][T16662] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002
[  253.959366][T16662] R13: 00007fcde1996038 R14: 00007fcde1995fa0 R15: 00007ffcde767b48
[  253.959388][T16662]  </TASK>
[  254.414886][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3752'.
[  254.424223][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3752'.
[  254.706640][T16679] lo speed is unknown, defaulting to 1000
[  254.747049][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3756'.
[  254.966632][T16689] vhci_hcd: invalid port number 96
[  254.971821][T16689] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  255.005647][T16740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.182730][T16740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.208021][T16752] vhci_hcd: invalid port number 255
[  255.213366][T16752] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  255.277581][T16740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.346627][T16679] chnl_net:caif_netlink_parms(): no params data found
[  255.368944][T16740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.432061][T16679] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.439314][T16679] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.449067][T16679] bridge_slave_0: entered allmulticast mode
[  255.456945][T16679] bridge_slave_0: entered promiscuous mode
[  255.470670][ T9182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.485387][T16679] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.492473][T16679] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.500815][T16679] bridge_slave_1: entered allmulticast mode
[  255.507654][T16679] bridge_slave_1: entered promiscuous mode
[  255.515245][ T9182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.542968][   T55] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.557976][T16679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.567778][   T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.587185][T16679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.613770][T16679] team0: Port device team_slave_0 added
[  255.622813][T16679] team0: Port device team_slave_1 added
[  255.648446][T16679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.655516][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.681490][T16679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.693725][T16679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.700706][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.726977][T16679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.772267][T16679] hsr_slave_0: entered promiscuous mode
[  255.780094][T16679] hsr_slave_1: entered promiscuous mode
[  255.793946][T16679] debugfs: 'hsr0' already exists in 'hsr'
[  255.799807][T16679] Cannot create hsr debugfs directory
[  255.898996][T16679] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.961201][T16679] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.028036][T16679] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.077586][T16679] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.173657][T16679] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  256.198061][T16679] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  256.216901][T16679] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  256.234672][T16679] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  256.383253][   T55] dvmrp0 (unregistering): left allmulticast mode
[  256.455609][T17092] vhci_hcd: invalid port number 96
[  256.460792][T17092] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  256.482685][   T55] $Hÿ (unregistering): (slave dummy0): Releasing backup interface
[  256.501574][   T55] $Hÿ (unregistering): Released all slaves
[  256.558512][   T55] tipc: Disabling bearer <udp:syz2>
[  256.563897][   T55] tipc: Left network mode
[  256.640644][T16679] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.704295][T16679] 8021q: adding VLAN 0 to HW filter on device team0
[  256.733362][   T55] hsr_slave_0: left promiscuous mode
[  256.739165][   T55] hsr_slave_1: left promiscuous mode
[  256.758005][   T55] batman_adv: batadv0: Removing interface: veth1_vlan
[  256.872604][ T9178] smc: removing ib device !yz!
[  256.927907][ T9187] smc: removing ib device s
z1
[  256.954704][   T23] lo speed is unknown, defaulting to 1000
[  256.960648][   T23] s
z1: Port: 1 Link DOWN
[  256.971449][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.978638][ T9144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.998650][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.005812][ T9144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.041381][T16679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  257.051841][T16679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.300682][T16679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.512179][T17196] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.545792][   T29] kauditd_printk_skb: 497 callbacks suppressed
[  257.545888][   T29] audit: type=1326 audit(265.972:21132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.567343][T16679] veth0_vlan: entered promiscuous mode
[  257.575377][   T29] audit: type=1326 audit(265.972:21133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.599007][T16679] veth1_vlan: entered promiscuous mode
[  257.612051][   T29] audit: type=1326 audit(265.972:21134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.635221][   T29] audit: type=1326 audit(265.972:21135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.658344][   T29] audit: type=1326 audit(265.972:21136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.668595][T16679] veth0_macvtap: entered promiscuous mode
[  257.681333][   T29] audit: type=1326 audit(265.972:21137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.710159][   T29] audit: type=1326 audit(265.972:21138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.733410][   T29] audit: type=1326 audit(265.972:21139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.745580][T16679] veth1_macvtap: entered promiscuous mode
[  257.756646][   T29] audit: type=1326 audit(265.972:21140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.785518][   T29] audit: type=1326 audit(265.972:21141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17200 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  257.844158][T17196] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.873150][T17221] random: crng reseeded on system resumption
[  257.915947][T17196] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.936450][T16679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.948504][T16679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.961655][ T9163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.973498][T17196] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.006718][ T9163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.025817][ T9163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.050443][ T9163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.079521][ T9163] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.148956][ T9163] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.157800][T17260] __nla_validate_parse: 9 callbacks suppressed
[  258.157823][T17260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3815'.
[  258.181443][T17260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3815'.
[  258.219518][ T9163] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.232016][ T9163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.335910][T17237] FAULT_INJECTION: forcing a failure.
[  258.335910][T17237] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  258.349276][T17237] CPU: 1 UID: 0 PID: 17237 Comm: syz.0.3811 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  258.349311][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  258.349324][T17237] Call Trace:
[  258.349347][T17237]  <TASK>
[  258.349356][T17237]  __dump_stack+0x1d/0x30
[  258.349379][T17237]  dump_stack_lvl+0xe8/0x140
[  258.349398][T17237]  dump_stack+0x15/0x1b
[  258.349413][T17237]  should_fail_ex+0x265/0x280
[  258.349436][T17237]  should_fail_alloc_page+0xf2/0x100
[  258.349489][T17237]  __alloc_frozen_pages_noprof+0xff/0x360
[  258.349541][T17237]  alloc_pages_mpol+0xb3/0x250
[  258.349571][T17237]  folio_alloc_mpol_noprof+0x39/0x80
[  258.349631][T17237]  __read_swap_cache_async+0x10e/0x350
[  258.349688][T17237]  swap_cluster_readahead+0x277/0x3e0
[  258.349722][T17237]  shmem_swapin_folio+0xa2f/0x13e0
[  258.349747][T17237]  ? xas_load+0x413/0x430
[  258.349776][T17237]  ? xas_load+0x413/0x430
[  258.349879][T17237]  shmem_get_folio_gfp+0x26c/0xd60
[  258.349926][T17237]  shmem_fault+0xf6/0x250
[  258.349950][T17237]  __do_fault+0xb9/0x200
[  258.349994][T17237]  handle_mm_fault+0xf78/0x2c20
[  258.350016][T17237]  ? __rcu_read_lock+0x37/0x50
[  258.350042][T17237]  ? __pte_offset_map_lock+0x1d4/0x230
[  258.350166][T17237]  __get_user_pages+0x102e/0x1fa0
[  258.350250][T17237]  __mm_populate+0x243/0x3a0
[  258.350290][T17237]  __se_sys_remap_file_pages+0x39b/0x600
[  258.350314][T17237]  ? fput+0x8f/0xc0
[  258.350345][T17237]  __x64_sys_remap_file_pages+0x67/0x80
[  258.350410][T17237]  x64_sys_call+0x23af/0x2ff0
[  258.350430][T17237]  do_syscall_64+0xd2/0x200
[  258.350501][T17237]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  258.350526][T17237]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  258.350553][T17237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.350576][T17237] RIP: 0033:0x7fb9a761eba9
[  258.350595][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.350683][T17237] RSP: 002b:00007fb9a6066038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  258.350708][T17237] RAX: ffffffffffffffda RBX: 00007fb9a7866090 RCX: 00007fb9a761eba9
[  258.350722][T17237] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 000020000051c000
[  258.350737][T17237] RBP: 00007fb9a6066090 R08: 0000000000000000 R09: 0000000000000000
[  258.350752][T17237] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002
[  258.350767][T17237] R13: 00007fb9a7866128 R14: 00007fb9a7866090 R15: 00007ffcba2f06f8
[  258.350789][T17237]  </TASK>
[  258.640257][T17313] 9pnet_fd: Insufficient options for proto=fd
[  258.781764][T17327] vlan2: entered allmulticast mode
[  259.020766][T17295] vhci_hcd: invalid port number 96
[  259.025964][T17295] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  259.119081][T17370] program syz.5.3836 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  259.469986][T17418] FAULT_INJECTION: forcing a failure.
[  259.469986][T17418] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.477658][T17419] qrtr: Invalid version 0
[  259.483286][T17418] CPU: 0 UID: 0 PID: 17418 Comm: syz.5.3854 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  259.483354][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  259.483367][T17418] Call Trace:
[  259.483374][T17418]  <TASK>
[  259.483382][T17418]  __dump_stack+0x1d/0x30
[  259.483459][T17418]  dump_stack_lvl+0xe8/0x140
[  259.483479][T17418]  dump_stack+0x15/0x1b
[  259.483497][T17418]  should_fail_ex+0x265/0x280
[  259.483529][T17418]  should_fail+0xb/0x20
[  259.483680][T17418]  should_fail_usercopy+0x1a/0x20
[  259.483706][T17418]  _copy_from_user+0x1c/0xb0
[  259.483736][T17418]  __copy_msghdr+0x244/0x300
[  259.483764][T17418]  ___sys_sendmsg+0x109/0x1d0
[  259.483846][T17418]  __sys_sendmmsg+0x178/0x300
[  259.483882][T17418]  __x64_sys_sendmmsg+0x57/0x70
[  259.483982][T17418]  x64_sys_call+0x1c4a/0x2ff0
[  259.484004][T17418]  do_syscall_64+0xd2/0x200
[  259.484035][T17418]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  259.484060][T17418]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  259.484128][T17418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.484219][T17418] RIP: 0033:0x7f2ab6e0eba9
[  259.484243][T17418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.484262][T17418] RSP: 002b:00007f2ab5877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  259.484284][T17418] RAX: ffffffffffffffda RBX: 00007f2ab7055fa0 RCX: 00007f2ab6e0eba9
[  259.484332][T17418] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003
[  259.484345][T17418] RBP: 00007f2ab5877090 R08: 0000000000000000 R09: 0000000000000000
[  259.484358][T17418] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001
[  259.484466][T17418] R13: 00007f2ab7056038 R14: 00007f2ab7055fa0 R15: 00007fff22543448
[  259.484486][T17418]  </TASK>
[  259.776406][T17453] FAULT_INJECTION: forcing a failure.
[  259.776406][T17453] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.789576][T17453] CPU: 1 UID: 0 PID: 17453 Comm: syz.4.3867 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  259.789608][T17453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  259.789623][T17453] Call Trace:
[  259.789631][T17453]  <TASK>
[  259.789640][T17453]  __dump_stack+0x1d/0x30
[  259.789665][T17453]  dump_stack_lvl+0xe8/0x140
[  259.789684][T17453]  dump_stack+0x15/0x1b
[  259.789709][T17453]  should_fail_ex+0x265/0x280
[  259.789733][T17453]  should_fail+0xb/0x20
[  259.789756][T17453]  should_fail_usercopy+0x1a/0x20
[  259.789780][T17453]  _copy_from_user+0x1c/0xb0
[  259.789837][T17453]  kstrtouint_from_user+0x69/0xf0
[  259.789871][T17453]  ? 0xffffffff81000000
[  259.789888][T17453]  ? selinux_file_permission+0x1e4/0x320
[  259.789916][T17453]  proc_fail_nth_write+0x50/0x160
[  259.789945][T17453]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  259.790025][T17453]  vfs_write+0x269/0x960
[  259.790049][T17453]  ? vfs_read+0x4e6/0x770
[  259.790068][T17453]  ? __rcu_read_unlock+0x4f/0x70
[  259.790152][T17453]  ? __fget_files+0x184/0x1c0
[  259.790183][T17453]  ksys_write+0xda/0x1a0
[  259.790247][T17453]  __x64_sys_write+0x40/0x50
[  259.790274][T17453]  x64_sys_call+0x27fe/0x2ff0
[  259.790297][T17453]  do_syscall_64+0xd2/0x200
[  259.790334][T17453]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  259.790397][T17453]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  259.790463][T17453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.790487][T17453] RIP: 0033:0x7fcde174d65f
[  259.790513][T17453] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  259.790536][T17453] RSP: 002b:00007fcde01b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  259.790557][T17453] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcde174d65f
[  259.790570][T17453] RDX: 0000000000000001 RSI: 00007fcde01b70a0 RDI: 0000000000000005
[  259.790584][T17453] RBP: 00007fcde01b7090 R08: 0000000000000000 R09: 0000000000000000
[  259.790618][T17453] R10: 000000000000000a R11: 0000000000000293 R12: 0000000000000002
[  259.790631][T17453] R13: 00007fcde1996038 R14: 00007fcde1995fa0 R15: 00007ffcde767b48
[  259.790653][T17453]  </TASK>
[  260.147702][T17477] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.155278][T17477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.166609][T17477] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.174246][T17477] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.339259][T17497] futex_wake_op: syz.5.3882 tries to shift op by -1; fix this program
[  260.343256][T17449] vhci_hcd: invalid port number 96
[  260.352645][T17449] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  260.485906][T17504] usb usb8: usbfs: process 17504 (syz.5.3884) did not claim interface 0 before use
[  260.744069][T17528] FAULT_INJECTION: forcing a failure.
[  260.744069][T17528] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.757283][T17528] CPU: 1 UID: 0 PID: 17528 Comm: syz.3.3895 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  260.757334][T17528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  260.757347][T17528] Call Trace:
[  260.757355][T17528]  <TASK>
[  260.757365][T17528]  __dump_stack+0x1d/0x30
[  260.757388][T17528]  dump_stack_lvl+0xe8/0x140
[  260.757409][T17528]  dump_stack+0x15/0x1b
[  260.757499][T17528]  should_fail_ex+0x265/0x280
[  260.757524][T17528]  should_fail+0xb/0x20
[  260.757545][T17528]  should_fail_usercopy+0x1a/0x20
[  260.757626][T17528]  strncpy_from_user+0x25/0x230
[  260.757723][T17528]  strncpy_from_user_nofault+0x68/0xf0
[  260.757779][T17528]  bpf_probe_read_user_str+0x2a/0x70
[  260.757818][T17528]  bpf_prog_02a70dbeb5f742df+0x43/0x49
[  260.757915][T17528]  bpf_trace_run2+0x107/0x1c0
[  260.757941][T17528]  ? nfnetlink_rcv+0xcf0/0x1690
[  260.757962][T17528]  ? should_fail_ex+0xdb/0x280
[  260.757986][T17528]  ? nfnetlink_rcv+0xcf0/0x1690
[  260.758005][T17528]  __traceiter_kfree+0x2b/0x50
[  260.758065][T17528]  ? nfnetlink_rcv+0xcf0/0x1690
[  260.758111][T17528]  kfree+0x27b/0x320
[  260.758138][T17528]  nfnetlink_rcv+0xcf0/0x1690
[  260.758195][T17528]  netlink_unicast+0x5c0/0x690
[  260.758222][T17528]  netlink_sendmsg+0x58b/0x6b0
[  260.758252][T17528]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.758291][T17528]  __sock_sendmsg+0x142/0x180
[  260.758333][T17528]  ____sys_sendmsg+0x31e/0x4e0
[  260.758392][T17528]  ___sys_sendmsg+0x17b/0x1d0
[  260.758432][T17528]  __x64_sys_sendmsg+0xd4/0x160
[  260.758464][T17528]  x64_sys_call+0x191e/0x2ff0
[  260.758488][T17528]  do_syscall_64+0xd2/0x200
[  260.758628][T17528]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  260.758654][T17528]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  260.758699][T17528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.758774][T17528] RIP: 0033:0x7f58ac49eba9
[  260.758791][T17528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.758812][T17528] RSP: 002b:00007f58aaeff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.758833][T17528] RAX: ffffffffffffffda RBX: 00007f58ac6e5fa0 RCX: 00007f58ac49eba9
[  260.758906][T17528] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  260.758919][T17528] RBP: 00007f58aaeff090 R08: 0000000000000000 R09: 0000000000000000
[  260.758933][T17528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.758946][T17528] R13: 00007f58ac6e6038 R14: 00007f58ac6e5fa0 R15: 00007ffe72e693f8
[  260.758966][T17528]  </TASK>
[  261.114110][T17552] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  261.503829][T17587] netlink: 'syz.3.3919': attribute type 3 has an invalid length.
[  261.522055][T17587] netlink: 'syz.3.3919': attribute type 3 has an invalid length.
[  261.606937][T17608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.615577][T17608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.625728][T17608] netlink: 'syz.2.3927': attribute type 13 has an invalid length.
[  261.633618][T17608] netlink: 'syz.2.3927': attribute type 17 has an invalid length.
[  261.681218][T17608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.863139][ T7327] IPVS: starting estimator thread 0...
[  261.864300][T17628] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  261.904702][T17628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.913204][T17628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.961006][T17629] IPVS: using max 2496 ests per chain, 124800 per kthread
[  262.342670][   T29] kauditd_printk_skb: 941 callbacks suppressed
[  262.342710][   T29] audit: type=1326 audit(271.001:22083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.4.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  262.372098][   T29] audit: type=1326 audit(271.011:22084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.395359][   T29] audit: type=1326 audit(271.011:22085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.419218][   T29] audit: type=1326 audit(271.095:22086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.442546][   T29] audit: type=1326 audit(271.095:22087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.465588][   T29] audit: type=1326 audit(271.095:22088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.489138][   T29] audit: type=1326 audit(271.095:22089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.512265][   T29] audit: type=1326 audit(271.095:22090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.535754][   T29] audit: type=1326 audit(271.095:22091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.559213][   T29] audit: type=1326 audit(271.095:22092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17704 comm="syz.2.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865375eba9 code=0x7ffc0000
[  262.598915][T17711] FAULT_INJECTION: forcing a failure.
[  262.598915][T17711] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  262.612260][T17711] CPU: 1 UID: 0 PID: 17711 Comm: syz.5.3946 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  262.612315][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  262.612329][T17711] Call Trace:
[  262.612337][T17711]  <TASK>
[  262.612345][T17711]  __dump_stack+0x1d/0x30
[  262.612383][T17711]  dump_stack_lvl+0xe8/0x140
[  262.612404][T17711]  dump_stack+0x15/0x1b
[  262.612423][T17711]  should_fail_ex+0x265/0x280
[  262.612449][T17711]  should_fail_alloc_page+0xf2/0x100
[  262.612479][T17711]  __alloc_frozen_pages_noprof+0xff/0x360
[  262.612687][T17711]  alloc_pages_mpol+0xb3/0x250
[  262.612787][T17711]  folio_alloc_mpol_noprof+0x39/0x80
[  262.612826][T17711]  shmem_get_folio_gfp+0x3cf/0xd60
[  262.612884][T17711]  shmem_write_begin+0xa8/0x190
[  262.612904][T17711]  generic_perform_write+0x181/0x490
[  262.612938][T17711]  shmem_file_write_iter+0xc5/0xf0
[  262.612997][T17711]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  262.613093][T17711]  vfs_write+0x52a/0x960
[  262.613123][T17711]  ksys_write+0xda/0x1a0
[  262.613145][T17711]  __x64_sys_write+0x40/0x50
[  262.613166][T17711]  x64_sys_call+0x27fe/0x2ff0
[  262.613191][T17711]  do_syscall_64+0xd2/0x200
[  262.613302][T17711]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  262.613329][T17711]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  262.613364][T17711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.613449][T17711] RIP: 0033:0x7f2ab6e0d65f
[  262.613469][T17711] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  262.613490][T17711] RSP: 002b:00007f2ab5876d40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  262.613516][T17711] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f2ab6e0d65f
[  262.613532][T17711] RDX: 0000000000100000 RSI: 00007f2aad457000 RDI: 0000000000000007
[  262.613547][T17711] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000058d
[  262.613560][T17711] R10: 00000000000003f4 R11: 0000000000000293 R12: 0000000000000007
[  262.613578][T17711] R13: 00007f2ab5876dec R14: 00007f2ab5876df0 R15: 00007f2aad457000
[  262.613596][T17711]  </TASK>
[  262.938115][T17714] bond2: entered promiscuous mode
[  262.943412][T17714] bond2: entered allmulticast mode
[  262.953056][T17714] 8021q: adding VLAN 0 to HW filter on device bond2
[  262.968348][T17714] bond2 (unregistering): Released all slaves
[  263.176340][T17813] netlink: 'syz.0.3959': attribute type 1 has an invalid length.
[  263.184244][T17813] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3959'.
[  263.194709][T17813] netlink: 'syz.0.3959': attribute type 1 has an invalid length.
[  263.202521][T17813] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3959'.
[  263.216524][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3958'.
[  263.239108][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3958'.
[  263.264128][T17823] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3962'.
[  263.316061][T17808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3958'.
[  263.660636][T17868] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3977'.
[  263.694332][T17870] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  263.742967][T17870] SELinux: failed to load policy
[  263.813300][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3981'.
[  264.083423][T17941] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3991'.
[  264.160386][T17952] FAULT_INJECTION: forcing a failure.
[  264.160386][T17952] name failslab, interval 1, probability 0, space 0, times 0
[  264.173269][T17952] CPU: 1 UID: 0 PID: 17952 Comm: syz.2.3994 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  264.173297][T17952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  264.173310][T17952] Call Trace:
[  264.173318][T17952]  <TASK>
[  264.173326][T17952]  __dump_stack+0x1d/0x30
[  264.173352][T17952]  dump_stack_lvl+0xe8/0x140
[  264.173375][T17952]  dump_stack+0x15/0x1b
[  264.173395][T17952]  should_fail_ex+0x265/0x280
[  264.173423][T17952]  should_failslab+0x8c/0xb0
[  264.173449][T17952]  kmem_cache_alloc_noprof+0x50/0x310
[  264.173479][T17952]  ? vm_area_dup+0x33/0x2c0
[  264.173514][T17952]  vm_area_dup+0x33/0x2c0
[  264.173548][T17952]  dup_mmap+0x501/0xf20
[  264.173579][T17952]  copy_mm+0x11a/0x370
[  264.173609][T17952]  copy_process+0xd08/0x2000
[  264.173645][T17952]  kernel_clone+0x16c/0x5c0
[  264.173674][T17952]  ? vfs_write+0x7e8/0x960
[  264.173702][T17952]  __x64_sys_clone+0xe6/0x120
[  264.173738][T17952]  x64_sys_call+0x119c/0x2ff0
[  264.173763][T17952]  do_syscall_64+0xd2/0x200
[  264.173799][T17952]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  264.173827][T17952]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  264.173855][T17952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.173876][T17952] RIP: 0033:0x7f865375eba9
[  264.173895][T17952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.173916][T17952] RSP: 002b:00007f86521befe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  264.173936][T17952] RAX: ffffffffffffffda RBX: 00007f86539a5fa0 RCX: 00007f865375eba9
[  264.173949][T17952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  264.173961][T17952] RBP: 00007f86521bf090 R08: 0000000000000000 R09: 0000000000000000
[  264.173974][T17952] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[  264.173988][T17952] R13: 00007f86539a6038 R14: 00007f86539a5fa0 R15: 00007ffe44b87c88
[  264.174006][T17952]  </TASK>
[  264.619773][T17967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3999'.
[  264.761002][T17984] SELinux: failed to load policy
[  265.204515][T18039] 9pnet: Could not find request transport: viþºd
[  265.770998][T18072] vhci_hcd: invalid port number 96
[  265.776240][T18072] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  266.140834][T18080] vhci_hcd: invalid port number 96
[  266.146274][T18080] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  266.813202][T18161] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  266.832188][T18161] SELinux: failed to load policy
[  266.944399][T18154] vhci_hcd: invalid port number 96
[  266.949582][T18154] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  267.044597][T18173] 9pnet_fd: Insufficient options for proto=fd
[  267.220104][   T29] kauditd_printk_skb: 1189 callbacks suppressed
[  267.220121][   T29] audit: type=1326 audit(276.134:23282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.288730][   T29] audit: type=1326 audit(276.166:23283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.311801][   T29] audit: type=1326 audit(276.166:23284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.335073][   T29] audit: type=1326 audit(276.166:23285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.358129][   T29] audit: type=1326 audit(276.166:23286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.381221][   T29] audit: type=1326 audit(276.166:23287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.404297][   T29] audit: type=1326 audit(276.166:23288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.427666][   T29] audit: type=1326 audit(276.166:23289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.450698][   T29] audit: type=1326 audit(276.166:23290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.473697][   T29] audit: type=1326 audit(276.166:23291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.4.4077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcde174eba9 code=0x7ffc0000
[  267.693268][T18172] vhci_hcd: invalid port number 96
[  267.698491][T18172] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  267.812020][T18215] FAULT_INJECTION: forcing a failure.
[  267.812020][T18215] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  267.825488][T18215] CPU: 0 UID: 0 PID: 18215 Comm: syz.5.4087 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  267.825587][T18215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  267.825601][T18215] Call Trace:
[  267.825607][T18215]  <TASK>
[  267.825614][T18215]  __dump_stack+0x1d/0x30
[  267.825640][T18215]  dump_stack_lvl+0xe8/0x140
[  267.825662][T18215]  dump_stack+0x15/0x1b
[  267.825682][T18215]  should_fail_ex+0x265/0x280
[  267.825733][T18215]  should_fail_alloc_page+0xf2/0x100
[  267.825758][T18215]  __alloc_frozen_pages_noprof+0xff/0x360
[  267.825798][T18215]  alloc_pages_mpol+0xb3/0x250
[  267.825882][T18215]  vma_alloc_folio_noprof+0x1aa/0x300
[  267.825916][T18215]  do_wp_page+0x5db/0x24e0
[  267.825937][T18215]  ? css_rstat_updated+0xb7/0x240
[  267.825977][T18215]  ? __rcu_read_lock+0x37/0x50
[  267.826003][T18215]  handle_mm_fault+0x77d/0x2c20
[  267.826024][T18215]  ? __rcu_read_unlock+0x4f/0x70
[  267.826051][T18215]  do_user_addr_fault+0x3fe/0x1090
[  267.826150][T18215]  exc_page_fault+0x62/0xa0
[  267.826178][T18215]  asm_exc_page_fault+0x26/0x30
[  267.826197][T18215] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  267.826226][T18215] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  267.826248][T18215] RSP: 0018:ffffc9000d583b48 EFLAGS: 00050206
[  267.826274][T18215] RAX: ffff8881033e8aa0 RBX: ffffc9000d583ce0 RCX: 0000000000000e80
[  267.826287][T18215] RDX: 0000000000000000 RSI: ffff888008e07180 RDI: 000020000000d000
[  267.826299][T18215] RBP: 000000000000cb80 R08: 00000000000004b2 R09: 0000000000000000
[  267.826311][T18215] R10: 0001888008e07000 R11: 0001888008e07fff R12: ffffc9000d583cc8
[  267.826323][T18215] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000
[  267.826344][T18215]  _copy_to_iter+0x2df/0xe70
[  267.826387][T18215]  ? should_fail_ex+0xdb/0x280
[  267.826410][T18215]  copy_page_to_iter+0x18f/0x2d0
[  267.826447][T18215]  process_vm_rw+0x672/0x960
[  267.826547][T18215]  __x64_sys_process_vm_readv+0x78/0x90
[  267.826575][T18215]  x64_sys_call+0x1874/0x2ff0
[  267.826595][T18215]  do_syscall_64+0xd2/0x200
[  267.826669][T18215]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  267.826693][T18215]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  267.826722][T18215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.826747][T18215] RIP: 0033:0x7f2ab6e0eba9
[  267.826811][T18215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.826828][T18215] RSP: 002b:00007f2ab5877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[  267.826846][T18215] RAX: ffffffffffffffda RBX: 00007f2ab7055fa0 RCX: 00007f2ab6e0eba9
[  267.826860][T18215] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000093
[  267.826875][T18215] RBP: 00007f2ab5877090 R08: 0000000000000286 R09: 0000000000000000
[  267.826895][T18215] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000002
[  267.826910][T18215] R13: 00007f2ab7056038 R14: 00007f2ab7055fa0 R15: 00007fff22543448
[  267.826930][T18215]  </TASK>
[  268.774751][T18237] vhci_hcd: invalid port number 96
[  268.779922][T18237] vhci_hcd: default hub control req: 200e vfffa i0060 l0
[  268.820223][T18280] SELinux:  Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped).
[  269.080972][T18328] netlink: 'syz.3.4121': attribute type 21 has an invalid length.
[  269.089176][T18328] netlink: 'syz.3.4121': attribute type 1 has an invalid length.
[  269.097018][T18328] __nla_validate_parse: 7 callbacks suppressed
[  269.097032][T18328] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4121'.
[  269.154276][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4124'.
[  269.235603][T18328] 9pnet_fd: Insufficient options for proto=fd
[  269.254572][T18341] ipvlan2: entered promiscuous mode
[  269.254611][ T9178] ==================================================================
[  269.262432][T18341] bridge0: port 3(ipvlan2) entered blocking state
[  269.267892][ T9178] BUG: KCSAN: data-race in ipvlan_open / is_upper_ndev_bond_master_filter
[  269.274476][T18341] bridge0: port 3(ipvlan2) entered disabled state
[  269.282820][ T9178] 
[  269.282831][ T9178] read-write to 0xffff888109cd10b0 of 4 bytes by task 18341 on cpu 0:
[  269.282851][ T9178]  ipvlan_open+0x72/0xf0
[  269.282873][ T9178]  __dev_open+0x2d2/0x530
[  269.289579][T18341] ipvlan2: entered allmulticast mode
[  269.291622][ T9178]  __dev_change_flags+0x163/0x400
[  269.299791][T18341] bridge0: entered allmulticast mode
[  269.303992][ T9178]  rtnl_newlink_create+0x36b/0x620
[  269.309783][T18341] ipvlan2: left allmulticast mode
[  269.313586][ T9178]  rtnl_newlink+0xf29/0x12d0
[  269.318621][T18341] bridge0: left allmulticast mode
[  269.323871][ T9178]  rtnetlink_rcv_msg+0x5fb/0x6d0
[  269.348548][ T9178]  netlink_rcv_skb+0x120/0x220
[  269.353332][ T9178]  rtnetlink_rcv+0x1c/0x30
[  269.357769][ T9178]  netlink_unicast+0x5c0/0x690
[  269.362542][ T9178]  netlink_sendmsg+0x58b/0x6b0
[  269.367313][ T9178]  __sock_sendmsg+0x142/0x180
[  269.372002][ T9178]  ____sys_sendmsg+0x31e/0x4e0
[  269.376775][ T9178]  ___sys_sendmsg+0x17b/0x1d0
[  269.381462][ T9178]  __x64_sys_sendmsg+0xd4/0x160
[  269.386319][ T9178]  x64_sys_call+0x191e/0x2ff0
[  269.390999][ T9178]  do_syscall_64+0xd2/0x200
[  269.395518][ T9178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.401416][ T9178] 
[  269.403742][ T9178] read to 0xffff888109cd10b0 of 4 bytes by task 9178 on cpu 1:
[  269.411370][ T9178]  is_upper_ndev_bond_master_filter+0x2b/0xb0
[  269.417455][ T9178]  ib_enum_roce_netdev+0x11f/0x1d0
[  269.422575][ T9178]  ib_enum_all_roce_netdevs+0x89/0x100
[  269.428037][ T9178]  netdevice_event_work_handler+0x15d/0x3d0
[  269.433933][ T9178]  process_scheduled_works+0x4cb/0x9d0
[  269.439406][ T9178]  worker_thread+0x582/0x770
[  269.444006][ T9178]  kthread+0x489/0x510
[  269.448077][ T9178]  ret_from_fork+0x11f/0x1b0
[  269.452672][ T9178]  ret_from_fork_asm+0x1a/0x30
[  269.457439][ T9178] 
[  269.459757][ T9178] value changed: 0x00001002 -> 0x00001083
[  269.465480][ T9178] 
[  269.467798][ T9178] Reported by Kernel Concurrency Sanitizer on:
[  269.473945][ T9178] CPU: 1 UID: 0 PID: 9178 Comm: kworker/u8:50 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  269.483926][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  269.493984][ T9178] Workqueue: gid-cache-wq netdevice_event_work_handler
[  269.500839][ T9178] ==================================================================