last executing test programs: 8m15.858210954s ago: executing program 3 (id=1009): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20100, 0x0) 8m15.389413593s ago: executing program 3 (id=1012): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 8m14.503400751s ago: executing program 3 (id=1027): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000007c0)=0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000023c0)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001fc0)={r5, 0xd, 0x9}) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0xff07000000000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) 8m13.654209577s ago: executing program 3 (id=1045): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0xe, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x6d}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) (fail_nth: 1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x100000000}, 0x18) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) fcntl$getown(r2, 0x9) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x2, 0x9}}, 0x20) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000280)='exofs\x00', 0x4, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz3\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) creat(&(0x7f0000000340)='./file0\x00', 0x100) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) 8m13.246739175s ago: executing program 3 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="120100020000000866660288400000fe030109022d000101f200320804000e020301010509210500020122dc070905810340000801610905021a100007087dadb5d117c83202db532faa01b15f60f434492b632e40d0232d196aa907a7a6d983e4d1be4f8bb2c19255ae6cb41dcdba79a28a0f6905fe882b6514410749ea347ddf42db4113caf30c0e063426f8062a81705f6366bc7e3375f02d02012b9b93440f30c91efa00da50c44022464ed285ba8f6f71eadfa0c37341f7495f6186b800"/208], &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe6, 0x0, 0x2, 0x40, 0xff}, 0x9a, &(0x7f0000000580)={0x5, 0xf, 0x9a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x6, 0x6, 0x4, 0xa6, 0xb830, 0x8}, @generic={0x8a, 0x10, 0x1, "ee8f8d726d444f20e5b435cc0087ccb70821f68ffd11bdb2c25766d18f1d615a078e59f9cee5802c95d28a7287ca1ec9ecceed342f6f93f7aadc32ea38ceff00504cb7e2a4d293bc93fa17a6109ab137f33638106dd28ddd20bc8e695555741d375a1d18b615a47f9b70087a036ac75d576474473f520838f6609b11a79a9952067c7498f1b90f"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="4e03741194273e84940047b732120da539d0075fc2beb509d137d61faa8e80f6e6d2304bba131a87239e03ff9fe227b97b7cd9ee6e9b56a88d0fd22877c429a49d5458f111e6bac030f3359320bd"]}, {0x3a, &(0x7f0000000400)=@string={0x3a, 0x3, "38bee9ea5440656b9a189434f1b43ed2510e8242acaa70434798b9033237295dec4854644000b8bc22c0b5076e73560875e41a40ab0c254f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x441}}, {0x0, 0x0}, {0x2, &(0x7f00000007c0)=@string={0x2}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rt_sigpending(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) 8m13.085215339s ago: executing program 3 (id=1051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x80, 0x1, 0x11b}) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="08004ae13b001a2c9cf3d61100000200"], 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000480)=""/96) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x5, 0xe, 0x6}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x16, 0x14, &(0x7f0000000080)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000020eadfa56a23af7cf6cdfb1700160200"/40], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r5 = memfd_create(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) fallocate(r5, 0x0, 0x400000000000000, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, 0x0, 0x0}, 0x20) r7 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x7) syz_open_procfs(r7, &(0x7f0000000200)='net/rpc\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x0) listen(r1, 0x4) 8m13.055756149s ago: executing program 32 (id=1051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x80, 0x1, 0x11b}) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="08004ae13b001a2c9cf3d61100000200"], 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000480)=""/96) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x5, 0xe, 0x6}) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x16, 0x14, &(0x7f0000000080)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000020eadfa56a23af7cf6cdfb1700160200"/40], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r5 = memfd_create(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) fallocate(r5, 0x0, 0x400000000000000, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, 0x0, 0x0}, 0x20) r7 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x7) syz_open_procfs(r7, &(0x7f0000000200)='net/rpc\x00') prctl$PR_SET_THP_DISABLE(0x29, 0x0) listen(r1, 0x4) 5m31.145045902s ago: executing program 4 (id=3540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x85081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x5, 0xa}, 0x5a14, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000003c0)) getgroups(0x1, &(0x7f0000007780)=[0xffffffffffffffff]) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000080)={0x6, 'pimreg\x00', {0x1ff}, 0xfffa}) close_range(r2, 0xffffffffffffffff, 0x0) 5m30.298073998s ago: executing program 4 (id=3560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 5m30.294709198s ago: executing program 4 (id=3561): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xd, 0x4, 0x6, 0xf, 0x0, 0x6, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_lifetime={0x4, 0x4, 0xfffffff8, 0x5, 0x6, 0x3ff}, @sadb_address={0x5, 0x17, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x9b, 0x8, 0xb0, 0x2, 0x40000001}]}, 0x78}}, 0x8040) 5m30.233330579s ago: executing program 4 (id=3562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) wait4(r6, 0x0, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r0, 0x80, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x4, 0x1}}, 0x0, 0x0, 0x0, {0x0, r9}}) 5m29.841155417s ago: executing program 4 (id=3568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f00000003c0)=ANY=[@ANYBLOB="636865636b3d72656c617865642c6d61703d6f66662c686964652c6d61703d6e66382c686964652c646d6f64653d30783030303030303030303030301a51caa0a7b856e5e8d9613830302c73657373696f6e3d3078303030303030303030303030303035342c636865636b"], 0x1, 0x543, &(0x7f0000001040)="$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") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='xprtrdma_post_recvs_err\x00', r2, 0x0, 0x1}, 0x18) 5m27.554496812s ago: executing program 5 (id=3604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001"], 0x110}}, 0x0) 5m27.504532953s ago: executing program 5 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x8000002}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000230a010400000000000000000100000008000b40000000000900020073797a32000000000900010073797a30000000000800054000000004300000001e0a05020000000000000000010000000900020073797a3200000000040003800900010073797a300000000014000000100001fabcc9b9542cfe29000000000a"], 0xb4}}, 0x0) 5m27.474229404s ago: executing program 5 (id=3608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffd5, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCSBRK(r4, 0x5427) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) unshare(0x22020600) socket$netlink(0x10, 0x3, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 5m27.390136765s ago: executing program 5 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) wait4(r6, 0x0, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000000)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r0, 0x80, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x4, 0x1}}, 0x0, 0x0, 0x0, {0x0, r9}}) 5m27.14351604s ago: executing program 5 (id=3614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 5m26.198137608s ago: executing program 5 (id=3624): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4"], 0x0, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a5e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000be000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1af5, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x1, 0x348}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x5) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='+cYu '], 0x5) io_uring_enter(r2, 0x2cbc, 0x366, 0x12, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r11}, 0x10) 5m26.197958948s ago: executing program 33 (id=3624): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4"], 0x0, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a5e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000be000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1af5, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x1, 0x348}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x5) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='+cYu '], 0x5) io_uring_enter(r2, 0x2cbc, 0x366, 0x12, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x4ffe2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r11}, 0x10) 5m26.197682159s ago: executing program 4 (id=3627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000ef450dcd0000b7020000b80000108500000086000000bc451c428706370233df8316c5ebca3fc03f110a6b99a889221af8d555dc9e8498b07b6182cb00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00025400d90441abdcd5f126a24000000000000800030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000001900010073797a30000000001c0003800c"], 0xf8}, 0x1, 0x0, 0x0, 0x40095}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x180, 0xfffd, 0x8, 0x1, 0x8, 0xd, 0xb, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x0) getpgrp(0x0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r12 = socket$qrtr(0x2a, 0x2, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x82) write$binfmt_aout(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0a00000004000000f2ff00000c"], 0x50) sendmsg$sock(r12, &(0x7f0000000000)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0xfffe, @remote, 'wlan1\x00'}}, 0x80, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000064c4f4a6bd6e4b9fce83bb3e724142090dc9ce1736f1ebca3cace28ae086f44c1ad8dec1"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r15}, 0x10) 5m26.159448239s ago: executing program 34 (id=3627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000ef450dcd0000b7020000b80000108500000086000000bc451c428706370233df8316c5ebca3fc03f110a6b99a889221af8d555dc9e8498b07b6182cb00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00025400d90441abdcd5f126a24000000000000800030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000001900010073797a30000000001c0003800c"], 0xf8}, 0x1, 0x0, 0x0, 0x40095}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x180, 0xfffd, 0x8, 0x1, 0x8, 0xd, 0xb, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x0) getpgrp(0x0) r11 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) r12 = socket$qrtr(0x2a, 0x2, 0x0) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x82) write$binfmt_aout(r13, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0a00000004000000f2ff00000c"], 0x50) sendmsg$sock(r12, &(0x7f0000000000)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0xfffe, @remote, 'wlan1\x00'}}, 0x80, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000064c4f4a6bd6e4b9fce83bb3e724142090dc9ce1736f1ebca3cace28ae086f44c1ad8dec1"], 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r15}, 0x10) 5m17.551748248s ago: executing program 6 (id=3765): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) 5m17.406365161s ago: executing program 6 (id=3766): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000000)=0x80000001, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000000580)={0x0, 0x1064, 0x1000, 0x200003, 0x1c}, &(0x7f0000000340), &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000740)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000680000000100007f0000017f00000100186371ae9b1c03c45f380536c43e20f891e12da109763a43ffce8d5eccedbf425f996bf8fb41e7788faf79ac1be6815e662e9890fb7a24a25548485c266a5946de58cbe2acb55881a2f7a8e9100c14953556dd055ac121de2e413b4222db4819c23fd79fefb7e0592c2dcbce2931fbf985ce524630d4ba6442dcb99417fd9da0a213e3949b59a418c8674e348ce46e0b31db75cc94e8dc6ef4ec21adeb00f208"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) timer_create(0x3, 0x0, &(0x7f0000001b40)=0x0) timer_gettime(r4, &(0x7f00000000c0)) 5m17.296962793s ago: executing program 6 (id=3767): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r0) 5m17.259554633s ago: executing program 6 (id=3770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="cf21", 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x8000) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f0000000040), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000680)="2428004cd19a1fc612da5a0e54cc88e7b9a167874f02ab9a0775849c2a14c151daf5d8e02854f5194942deaf0005fcef05cd7baeeeaae14dab345a9c3cb7431f421faeaea77495483341295ba6e6f145a56518dd2058a9aebb93c6014cdd42c99470224d25f62df767735e49e4c3230edb601876403586d1176cb3e2e29d1bb1cae06f192d1ae32fc115d579a69b87310e0c6460acc8f1f24b4164169ee354042033cd78532fc6de00e34df9e8aa5c5149cb8f08a198301fb70755c3adb8969eb4b53c69339fbbcbb1bf5993e4b5476f38b4104fecd9f6fe7e7db65fb8338a862c83d413c6d266") ptrace$cont(0x20, r6, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r8, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r8], 0x1000f) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 5m17.178540625s ago: executing program 6 (id=3771): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 5m16.651908675s ago: executing program 6 (id=3786): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r0) 5m16.637520506s ago: executing program 35 (id=3786): setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r0) 5.10521946s ago: executing program 0 (id=9959): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x3) 4.332736955s ago: executing program 0 (id=9964): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="120100020000000866660288400000fe030109022d000101f200320804000e020301010509210500020122dc070905810340000801610905021a100007087dadb5d117c83202db532faa01b15f60f434492b632e40d0232d196aa907a7a6d983e4d1be4f8bb2c19255ae6cb41dcdba79a28a0f6905fe882b6514410749ea347ddf42db4113caf30c0e063426f8062a81705f6366bc7e3375f02d02012b9b93440f30c91efa00da50c44022464ed285ba8f6f71eadfa0c37341f7495f6186b800"/208], &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe6, 0x0, 0x2, 0x40, 0xff}, 0x9a, &(0x7f0000000580)={0x5, 0xf, 0x9a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x6, 0x6, 0x4, 0xa6, 0xb830, 0x8}, @generic={0x8a, 0x10, 0x1, "ee8f8d726d444f20e5b435cc0087ccb70821f68ffd11bdb2c25766d18f1d615a078e59f9cee5802c95d28a7287ca1ec9ecceed342f6f93f7aadc32ea38ceff00504cb7e2a4d293bc93fa17a6109ab137f33638106dd28ddd20bc8e695555741d375a1d18b615a47f9b70087a036ac75d576474473f520838f6609b11a79a9952067c7498f1b90f"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB]}, {0x3a, &(0x7f0000000400)=@string={0x3a, 0x3, "38bee9ea5440656b9a189434f1b43ed2510e8242acaa70434798b9033237295dec4854644000b8bc22c0b5076e73560875e41a40ab0c254f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2876908d425bb2df}}, {0x2, &(0x7f00000007c0)=@string={0x2}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rt_sigpending(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) 4.331933605s ago: executing program 7 (id=9965): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="120100020000000866660288400000fe030109022d000101f200320804000e020301010509210500020122dc070905810340000801610905021a100007087dadb5d117c83202db532faa01b15f60f434492b632e40d0232d196aa907a7a6d983e4d1be4f8bb2c19255ae6cb41dcdba79a28a0f6905fe882b6514410749ea347ddf42db4113caf30c0e063426f8062a81705f6366bc7e3375f02d02012b9b93440f30c91efa00da50c44022464ed285ba8f6f71eadfa0c37341f7495f6186b800"/208], &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe6, 0x0, 0x2, 0x40, 0xff}, 0x9a, &(0x7f0000000580)={0x5, 0xf, 0x9a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x6, 0x6, 0x4, 0xa6, 0xb830, 0x8}, @generic={0x8a, 0x10, 0x1, "ee8f8d726d444f20e5b435cc0087ccb70821f68ffd11bdb2c25766d18f1d615a078e59f9cee5802c95d28a7287ca1ec9ecceed342f6f93f7aadc32ea38ceff00504cb7e2a4d293bc93fa17a6109ab137f33638106dd28ddd20bc8e695555741d375a1d18b615a47f9b70087a036ac75d576474473f520838f6609b11a79a9952067c7498f1b90f"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB]}, {0x3a, &(0x7f0000000400)=@string={0x3a, 0x3, "38bee9ea5440656b9a189434f1b43ed2510e8242acaa70434798b9033237295dec4854644000b8bc22c0b5076e73560875e41a40ab0c254f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2876908d425bb2df}}, {0x2, &(0x7f00000007c0)=@string={0x2}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rt_sigpending(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) 2.784743636s ago: executing program 1 (id=9974): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x3) 2.738246466s ago: executing program 1 (id=9976): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000040)=""/92, 0x5c}], 0x1}}], 0x48}, 0x0) 2.641593838s ago: executing program 1 (id=9978): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) creat(0x0, 0xec) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x401ff, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x3, 0x27d50a2aa12aa55d, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xd, &(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="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"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x69d9b450c1fb548c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001900010900000000200000000218000071b7931bb1a7ce7d0855352342e0db0002fd010000000008000100ac1414000800050064010100100016800c000100039266f68211bbd25c"], 0x44}}, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x2) 2.489472461s ago: executing program 8 (id=9980): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 2.450013202s ago: executing program 8 (id=9981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x2a) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) 2.445714462s ago: executing program 8 (id=9982): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x68f2, &(0x7f00000002c0)={0x0, 0x48c2, 0x2, 0x4000, 0x1000168, 0x0, r0}) r1 = syz_usbip_server_init(0x3) write$usbip_server(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000002"], 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001640), 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) 2.437655072s ago: executing program 2 (id=9983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 2.372906044s ago: executing program 2 (id=9984): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}], 0x10, 0xfffffff7}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$kcm(0x10, 0x3, 0x10) semget$private(0x0, 0x3, 0x642) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.372544043s ago: executing program 2 (id=9985): eventfd2(0xb, 0x800) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) unshare(0x64000600) inotify_init() 1.859035574s ago: executing program 8 (id=9986): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.839170894s ago: executing program 8 (id=9987): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_open_dev$sg(&(0x7f0000000340), 0x8, 0x24102) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20100, 0x0) 1.826218215s ago: executing program 1 (id=9988): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_open_dev$sg(&(0x7f0000000340), 0x8, 0x24102) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20100, 0x0) 1.453459982s ago: executing program 2 (id=9989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) unshare(0x26000400) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.452350862s ago: executing program 2 (id=9990): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000020000000000180100002020702500000000002020207b1af8ff00000000bf49eeb49e6602aebdf9a100000000000007010000f8ffc43520b0000000000000b703000000720000009500000000000000be05110c"], &(0x7f0000000240)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x97a3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newlink={0x8c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bond={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0xffff7fff}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xfefffffc}, @IFLA_BOND_ARP_IP_TARGET={0x14, 0x8, 0x0, 0x1, [@local, @multicast2, @rand_addr=0x64010101, @multicast1]}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "f4f90370cc98b3e912f45257c0a71d"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000400)={'nat\x00', 0x3b, "45dd285dcf1b69a706c089178d8ebdaecc5b2aa0e2bec314fa0e0e9518142bd6be6b52efcd62703595a8e6c263c6a09c23fdd3970a16673b42dcec"}, &(0x7f0000000040)=0x5f) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b", 0x11) sendfile(r6, r5, 0x0, 0x3ffff) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x44}}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84) sendfile(r6, r5, 0x0, 0x7fffeffd) socket$rds(0x15, 0x5, 0x0) 1.235842366s ago: executing program 0 (id=9991): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) 1.234385396s ago: executing program 7 (id=9992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x2a) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)) 1.166115497s ago: executing program 0 (id=9993): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@user_xattr}]}, 0xfd, 0x573, &(0x7f0000000ec0)="$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") r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xee8, 0x9, 0x2, 0x4cc, 0x2, 0x1, "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"}}, 0x1000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) set_mempolicy(0x3, &(0x7f0000000000)=0x2, 0x1) (async, rerun: 64) futex_waitv(&(0x7f0000000d00)=[{0xd, 0x0, 0x6}, {0x4, 0x0, 0x2}], 0x2, 0x0, 0x0, 0x1) (rerun: 64) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0x800, 0xffffffffffffffff, 0x6, 0x2}) 1.165720687s ago: executing program 7 (id=9994): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 1.104578668s ago: executing program 0 (id=9995): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x4e, 0x0) bind$phonet(r2, &(0x7f0000000300)={0x23, 0xe, 0xfc, 0x1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0x7) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x1, 0x35c}, 0x0, &(0x7f0000000580)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x4, 0x0, 0x2, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r6, 0x54, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r5, 0x30, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0, 0x4}, 0x38) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='macvlan1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f08000140f5000000340005800c0001007061796c6f61640024000280080004010000002708020340000000b9080002400000000208000140000000080900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.086776659s ago: executing program 7 (id=9996): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xed, 0xa, 0x40, 0x7, 0x0, 0x4, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8000000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) capget(&(0x7f0000002a80)={0x19980330}, &(0x7f0000002ac0)={0x3, 0x7, 0x3a8c, 0xc18, 0x3, 0xffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x6}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x74) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r8, 0x5608) 967.784201ms ago: executing program 8 (id=9997): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x68f2, &(0x7f00000002c0)={0x0, 0x48c2, 0x2, 0x4000, 0x1000168, 0x0, r0}) r1 = syz_usbip_server_init(0x3) write$usbip_server(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000002"], 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001640), 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) 931.042802ms ago: executing program 1 (id=9998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) 874.002383ms ago: executing program 7 (id=9999): eventfd2(0xb, 0x800) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x58, r5, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x41, 0x1, '\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x02\x00\x00\v\"\xd6\xdc\xb5\xf9\rt\x85\xfb\x03\x80\xa8\x9f\x88\x0e\xab\x9d\xa4J\x86\xf5\x12\xed\x83\xfaAp\r(\xed\xdft\xec\xcf\xde\xfa\xf3?5\xe5c\xd0\xcf'}]}, 0x58}}, 0x20008000) 499.32655ms ago: executing program 1 (id=10000): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x4e, 0x0) bind$phonet(r2, &(0x7f0000000300)={0x23, 0xe, 0xfc, 0x1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0x7) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x1, 0x35c}, 0x0, &(0x7f0000000580)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x4, 0x0, 0x2, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r6, 0x54, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r5, 0x30, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0, 0x4}, 0x38) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='macvlan1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f08000140f5000000340005800c0001007061796c6f61640024000280080004010000002708020340000000b9080002400000000208000140000000080900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 311.031894ms ago: executing program 2 (id=10001): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="120100020000000866660288400000fe030109022d000101f200320804000e020301010509210500020122dc070905810340000801610905021a100007087dadb5d117c83202db532faa01b15f60f434492b632e40d0232d196aa907a7a6d983e4d1be4f8bb2c19255ae6cb41dcdba79a28a0f6905fe882b6514410749ea347ddf42db4113caf30c0e063426f8062a81705f6366bc7e3375f02d02012b9b93440f30c91efa00da50c44022464ed285ba8f6f71eadfa0c37341f7495f6186b800"/208], &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe6, 0x0, 0x2, 0x40, 0xff}, 0x9a, &(0x7f0000000580)={0x5, 0xf, 0x9a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x6, 0x6, 0x4, 0xa6, 0xb830, 0x8}, @generic={0x8a, 0x10, 0x1, "ee8f8d726d444f20e5b435cc0087ccb70821f68ffd11bdb2c25766d18f1d615a078e59f9cee5802c95d28a7287ca1ec9ecceed342f6f93f7aadc32ea38ceff00504cb7e2a4d293bc93fa17a6109ab137f33638106dd28ddd20bc8e695555741d375a1d18b615a47f9b70087a036ac75d576474473f520838f6609b11a79a9952067c7498f1b90f"}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="4e03741194273e84940047b732120da539d0075fc2beb509d137d61faa8e80f6e6d2304bba131a"]}, {0x3a, &(0x7f0000000400)=@string={0x3a, 0x3, "38bee9ea5440656b9a189434f1b43ed2510e8242acaa70434798b9033237295dec4854644000b8bc22c0b5076e73560875e41a40ab0c254f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2876908d425bb2df}}, {0x2, &(0x7f00000007c0)=@string={0x2}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) rt_sigpending(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) 204.255406ms ago: executing program 0 (id=10002): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0xa0}}, 0x8840) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000380)={@loopback, 0x7f}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES8=0xffffffffffffffff, @ANYBLOB="0000000000000000b7048b352f226240d04866f79712d5d129000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='generic_add_lease\x00', r5}, 0xfffffffffffffdf0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYRES16=r5, @ANYRESDEC, @ANYBLOB, @ANYBLOB="6d3557891870fdedbeb057952f3fcc3676ef1912cffc11ad6d7bb6da2d9fbd3f53ef0cd6a1e8f16958b26ec36ca09942a5f26a0872a08c0a28130dd5e239ac0a2e35fcd1dc1ec38d1017c075867515e75c2cc0486fc1f2df32d777214a0fd8fc0c74d5083934298ceae952679a5857e36d9921028e9a8a5d6880930f9441e458e3ced1590beca1682ea1e22da6e93de2cf2643d92e9a49875afb239e22375ecb5eea7175169e1101ff29bfb85396b0250812d80c92405552b4623453969a8dcbca4e7ec5b53e311c1b019d623600c51f", @ANYBLOB="b8724987f51cd830f40e95f575c9f0ccd263d14fea92b37f0d1e29957de209300d559b02b86aa2b4253966030b288a3c041a9120c47ee017a7ac3f984c918c7fb46c0287c79ed374aa356c57fe6a9fc085e02afa7632adfa8af8f39053541d726f80e61ab4c81fb47e816ee7e160f0ea30098db8cf6e3246ab6ba2a9993bddd7073158f0538baf9cd953206ec3cf245e63f9872735063bf6eae391482ffdb37bec8c2086bb4f5f67900542defaaaa33c42dc1e572cc6d5058437bc5b9ab101d63d31500a76e56e3977b2777eeb6a413893663ca4f7aa7ff334fa27c3fcf8ec357f7263daa9d7a2549027b3123dd329f7d3f1942aa9dad958d3dd3ff4b762a963093b206c275a0db0795830a33c3c6e367e055f2cc6d36ad0b4442c8a161915e0234da7518bfdbd4f134e22282fe245cc38e00aaaa44e9ffc0b667ffa88f286b30c936bbf44ee690d73445ac85db6d6f6cb41e6a2f6cd7bb5a3c590b2d6d2c759439ced8247cbfa03c83e9b6a7f27065c2af6d6f0129deaa2328a1225b2b950e3cac2d5d7b91f6af2da1402dade108dfd3c315f26e8a23046d29a1f8e967462fe5c3aa80bcbe6e1e078ff9fa9f727fd3e8d88c28d8149716eda4560062cfb3ce71f1b9d6ce2ab9a645c11d67130ba90722946d8e8e1a6ae42c8ccee41dd82dc5cb09e9356832bb2f1ac0177e7c546a621cb003947df239d4d042df15ca9f063cc95e6734bcc2f72ddabdc93c8a571ea8c64d2caa34407992925995e0fac5c8673a65988065834c0937d94de9bb9bf90488e6199e173555854a5d6619a7c97b007c35d1dd66363713bd8711fac04e5b32c7810a85d6765a075f1f40f6ade01fb8f6815c9dbbfcefe6fc439bb057cc79e99bd14ebd714fb4a0822f2d3184d885713b1c5f98f5ab45210dc988d1e4d3df654fe5be39a559a36119f1aad4f6b6b9042693eb926c5bb16db7c3ff21ef93534e8de87341e3d79e06cd86b90f2fe149a6dbe74a37756a0fdeff0492d41661de66df0add46ddb15f146cffebb70ac0d9197a382362c7391428795e83ab21002e13f5538c5c85cbe229cd53e49a6e478c192adec86f4963e8b2e53460cec074d2da5a8b33d9f12a135f61468382e7aa64827beb4dc4089b34010dc9d184a7aed951ad9e2fd7fb1d728f48da458da94a6f40fbbf23b42b815a9e97b58e89f6da58f84f85888c6b03cbc44181865d60fad48bc67987dd0b875161acd21974ba64c387995c8418faf299fb2b4f0c3d11f91a7c1e6646676d5d14a5d56451a03fa925590f3bc709dddfab05d775c921611d4f003e76a1b2888bfa7aa55f9e20b0542625c844fe1aff44070b9a00cf1c8f0c18f7784cc097ce9377da9ab73d60f1a0470c4639564b51540432f79036edffbb700b130c5848d8c4507cc5ad2d89a813a0acec903a91ecea4d71422b577d12673003d7afe4391af3e9e9b9c75e740cee2b64f1b707a073e08ad6574b34c39e743344cc0461f204bac069108ebda69e80b19726e979dbee737f608dccadff5cc564a46b86d3981ab63c9d5f6058b1d203bc7c00ff4391b665663ad176cb5928fd172246a6ba354f6231a6721abe10b47f93aac8e323bc1d7519e3cb42c3144a82cbfded21dce99c46fbc1c47928c7d90afda35238046d9cb2e25ef33b8df979bab9918ed1092d3014e3589cf960896fbc400681390c7838e2935989f6463c10c00d1ca714d2ba17ef2b034f35b116e908e5a4c8c70a41d7734409f9b7f8b23987117228a5c25bf6a67501fc80721bc1cf10cff0d1360d927c356a6e608214406117d740d82296edae47f535314d370065a5bdec4af1d800a90aa77072c67e555684f75c3bee7d0a73cf79eaea1f5b356ceb125f995b4fa363cf2d690c35c87767aa2bcf4a5c3104f29be8bf1167deff7ae969f7e7e35963fce009f1340ab7095e2cd75ad95e9d05af185b6f32458bcdfbd761bd7a80bb5f62b192fcf5ad95bb29021f9606b73c47518627ad9cc76ac323d4699c1d09d7f71ec644ac19f6d212385be96285fc3feef7517a1481c574d3c2a2f927076d74310bd934ea1346d184443806801916180f8a44403ba36b00a0e447a6792b2dddaca1da56425b62d30ff375041b1f3e679eec19197e5b58386b6ed020bdefaf902ba1ac4c87c5a1d32900df4f369293ce899cf6eaca0c9132787686e01c4ee321eaf4b9e206045ddc33196d2e0aace2b06b8873955eadd3c81eac62db20b2874fd10eb6b71a11d80f06a5780e1eb7d22413f3d094da8695eddc181486bbf9dc491b5273ee04068e8a363f8eb119ec20fe4d4de6a9c14fb8179524c31e8e5279d28d80757f969405d400014093761f6c85662fcbd221ba9c3c266cb028f90fd295afc6b213e45b8c243037c83ff06fb5149e33ac15a504dbd8e5cea45ce8a617a295552222e0dfdaee71eaf4e9afe14cbcd662b24b5fa8240b5117fef0e9b3d5339d297e0f82feb7b5837cd234d84614ca14a8739ecf7b233bde0da6d73c1f7ccb2a714b1c54fc54c1e314f06f01b70cefa51f0a4935e84f118f79176088431acca12ce670d10048a1f285932df4fef8fb0115f80917c72b36d528ce25f504eeba33bf827d4d47501d4f301e8b70e30e8de64610b3478c3d99de277578df54b574a0496e4f056caad64ef3ff655eee90c9e76357b92f514d9eefebfd6b0c0bb431a747e5571c97be1d6e2a1c2f5a6ccf74564d0a6059a5ef4b30fb23903cc16f1fe9354d34de677313a3c0988f635540e7884baf71255c2a8baf1991c027d3c919117e3d9d59afbbd52702a5ff2647432d41bda09165266ba8ea595ca254309c9c1f87f5af40fd3def245327850790e02c8513411bac5a697ad957d67e41d22e1bd8eaed2fa8c64d457429e7095d384f6bc27bfb5f9e1a713894861e17666f3b3dfb7e53e45c8cc9c365b77fa7799e5b1a56f56d12144c10f9864a2c0c5922dca5aceb6c4a648a9a3b3a5a2cd945237c8da65cc900d8a57fcb7c2f60cc6b20833a2f82929878e96f66aaad76ac0b63134f11a724285b969f135cc5d41ba442108bbe91455dbd7d3d70b84d19f817fecc2fba2aed43f4f05fdcb9c0f54ce1d1aca0830cf4247221b4f5f0b90932481ef57313c9da27bb64455f2bb85754893f9e5c49fc39b387b3e660cb2ddabbac58d216570827feed01c75109fa2124519019c0bdc72d37356afa7bba2afcc2c1c0c602bbeb6a2759ed29644be47c2084ea369fe347273577388e99a29197d6edf6f6bc5f85009224749f33142886dfbf74dae4b0f4aedc3f7908f323997fcdf8a31c0190adc9a38c80981aeb54b8695b4ed1e843c4f4f010dbf19466687f04527decf14e207a3bb587c67838d13168f8b1fe970ef1692dfd3d7762e06c8e62836800385939dbd880c80aeedfc20e0eff263fc47bf8180538a4489198eff3c91a9d4d21a1b6aa6d24d8b412a986730f0d06b8ffdf4ca83a9b550daf1cc84c763fe05f92e6a3c03bb0afcb832d6621d8870d93a5bc7218df84664a84432b1db6432a0975cf91a55914c552c65cb898d6b7508a896e4c5f34869b1f258b16297b912114600dc82786ed14a63b76ddbb299420d0bf480910388edcf0cd34d463df75c5c1beeb82c85c91a1b42da34461cfaaa710183a8d225a41e059c645ba27bd16f2a21ca2618604029b11e34c703bd3fe954f3b99965d1a90ca6fbc6e02e9b00a3b6b56fb94e0914a7a56cafc4ce6c0e67099c5dc3b50230202dd3aa22fea9e91481db112fa40f7487e661bf90e83f4c1bea5fba6ad2e28554a8b70a64f6987ad4a4086b9d91a3c41499ddedbc4ec4cfbe742ea0d0e010ee7cf13ee7cc66fb83279945f5c984d70d01b2079de7d94b796b32a8f25793c39251006763094123d4baa4ca54ce0aa74762379975a1736c1f853a5c81714ff62d642461b1376b0b0d5737044a44b905424e677d8f680630b4d4dc1977d01ec99b8a21a96f4701003488993e4791230dbacd42c2c858c38fd1f14220bbb1546401078127f5b7df00e287ccd6710528c0f5c093153c066ee795d20c35fd3df98bb7f0d16dc0e4942fd94b4a80b16f3cda6f7ca3ebba0ea337e9a30db4eae22da57d9d904096c9413c4c7dd3ce94adccd84a79145e15328ff9a136c3cdea5b1c67060416189a568cc8ca7edc046a97040aab8fd6566d55eb8b4d67f32844bbed93b1832edf4475ac93ecad8e8911a8749b686be374ccfae3f687a21009340b5c64aae577e00e65cd0282f96fb73b8f151ccf13ffee6384ea301537b7eb8ad54f5e328ceb512874de0415f4575477eb172144b8a64ef919685bdc78e734f915c762bb9329584a142f692fbace0a83b3d4d9d497425480d1648a700dc2f506691f1b531f7586f47a3427c172889e1ad607e5b15634e7f37f454b75eb2f62ba36f9702aa7b3ecc79e9e28f9a6190d127fb5685d015388db9c972d72e7563f004273c5c83f887639014b9b9446bffb6d1668f6c098df6b75dce63be7bd7e577666d371f6501678bab7ad6069cb588ef303bb5c91b8224be09e13cbb21e71959ecf68ad17518a9c379bf1ec2f031d63e192c4013a57f0dda412e1bafaf549eb4cc6aba4bc963e8d96caa4cd0a097d2238d91bd0eb91473770f7a41a1d6c592a210d729a7078cb0a53591c6405b94022891c791373cc69d90d7639adc38a23f72558fb069d35f78d1b6015eb8275bdddfe7eecd5646d9bc640235fa9d56163c0621776672ad5fea65dc1f4394515d716c41011667e8bb9ea2868e654acfcce0a0f69cc354ad6b8e61e5e8b52a3adef7aa7743c3cbf91244354cdce52fdd5c090dd304950f27fabc3cfdd9dcbb50b269ed123502d920a0251cffc901d8cd6677badc17b69fe41c0d52255ddc8c3b393ef5d9e27c9318a65527f299e4332750155cbed8e734c6326e33074ceed17fd9e2204dbaad829ba3d45aadbd3db903db807460f38429ecb9787a7e54f2d38cec3de99199ef51ed0f453c025c44503ced6687e554122d402aae28dfdc06e98f971c4c125181d2946cf38603ee569cbf8e184dd76af2b97a1abae4eba0a255b5113349f9af4647181a9c387ff569c8e937ef2e85be297bbdc4ea92b0e26e2a244189f4f7833467b2ac3622a48f10a71fc0162ec136f43f26adce15f076dfc48045146f6278a11edf025b1ff87b967ca8be2e98f6ed6f7cfe8ea6e578437fd0dcbe04443b10a1ee835d32b9434670ed978012c08f03fa34d0891f6cb0323528f15758152b5a72cc03328b45568a052b3f3164e26560f5170e5762cf01d5198e94b8213d58056ec74a0eb0180c7a240d46d3c9e6578a07217b2307646f67667214f39251dae05f8da7e360d648d2136eab6253a456c8a95453449ae0b6e862d115c5cca6b39b2d2dbf74e8a80a1c8728d0a8f10942ad3306fb4e307d4512a156de85bc317a278ea82887f50c13074051ba53d5ffb4a3fb0fab00e408d2ccc61a50cb5b6cb042bce290213bfa1d028444efc6e39acc112a4be463417bc46acf6c3b11e8b7e6627e20f5c43ea5898b531866bfb779ef22e2846e47d411114723bdc8868e1677c443a656aae2b92b72d0d5f708b435bb91935f4e7db31ed896eac24", @ANYRES16=r4], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) 0s ago: executing program 7 (id=10003): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000800), 0x2}, 0x1, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) syz_open_dev$usbfs(&(0x7f00000001c0), 0x276, 0xc0641) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @empty, 0x40000000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x94) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): m_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 525.298258][ T29] audit: type=1326 audit(2000002850.218:74783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31642 comm="syz.2.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 525.321948][ T29] audit: type=1326 audit(2000002850.218:74784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31642 comm="syz.2.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 525.345720][ T29] audit: type=1326 audit(2000002850.218:74785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31642 comm="syz.2.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 525.370673][ T29] audit: type=1326 audit(2000002850.348:74786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31642 comm="syz.2.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 525.394359][ T29] audit: type=1326 audit(2000002850.348:74787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31642 comm="syz.2.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 525.418255][ T29] audit: type=1326 audit(2000002850.348:74788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31642 comm="syz.2.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 525.442367][ T29] audit: type=1326 audit(2000002850.378:74789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31642 comm="syz.2.9209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 525.469664][T31650] smc: net device bond0 applied user defined pnetid SYZ0 [ 525.477168][T31650] smc: net device bond0 erased user defined pnetid SYZ0 [ 525.489333][T31647] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 526.166148][T31701] smc: net device bond0 applied user defined pnetid SYZ0 [ 526.185068][T31701] smc: net device bond0 erased user defined pnetid SYZ0 [ 526.482116][T31709] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 526.576072][T31722] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 526.631722][T31724] lo speed is unknown, defaulting to 1000 [ 526.667389][T31739] FAULT_INJECTION: forcing a failure. [ 526.667389][T31739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.680541][T31739] CPU: 0 UID: 0 PID: 31739 Comm: syz.1.9232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 526.680573][T31739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.680588][T31739] Call Trace: [ 526.680596][T31739] [ 526.680604][T31739] __dump_stack+0x1d/0x30 [ 526.680651][T31739] dump_stack_lvl+0xe8/0x140 [ 526.680675][T31739] dump_stack+0x15/0x1b [ 526.680696][T31739] should_fail_ex+0x265/0x280 [ 526.680726][T31739] should_fail+0xb/0x20 [ 526.680817][T31739] should_fail_usercopy+0x1a/0x20 [ 526.680851][T31739] _copy_from_user+0x1c/0xb0 [ 526.680886][T31739] perf_copy_attr+0x145/0x610 [ 526.680916][T31739] __se_sys_perf_event_open+0x67/0x11c0 [ 526.680989][T31739] ? vfs_write+0x7e8/0x960 [ 526.681018][T31739] ? __rcu_read_unlock+0x4f/0x70 [ 526.681089][T31739] __x64_sys_perf_event_open+0x67/0x80 [ 526.681204][T31739] x64_sys_call+0x7bd/0x2ff0 [ 526.681226][T31739] do_syscall_64+0xd2/0x200 [ 526.681263][T31739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 526.681396][T31739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 526.681440][T31739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.681465][T31739] RIP: 0033:0x7fbf412eeba9 [ 526.681483][T31739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.681546][T31739] RSP: 002b:00007fbf3fd2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 526.681589][T31739] RAX: ffffffffffffffda RBX: 00007fbf41536090 RCX: 00007fbf412eeba9 [ 526.681605][T31739] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000a40 [ 526.681620][T31739] RBP: 00007fbf3fd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 526.681636][T31739] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 526.681651][T31739] R13: 00007fbf41536128 R14: 00007fbf41536090 R15: 00007fffcccbaba8 [ 526.681707][T31739] [ 526.970760][T31758] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 527.010407][T31764] __nla_validate_parse: 15 callbacks suppressed [ 527.010427][T31764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9237'. [ 527.026013][T31764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9237'. [ 527.035011][T31764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9237'. [ 527.044184][T31764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9237'. [ 527.053285][T31764] validate_nla: 4 callbacks suppressed [ 527.053301][T31764] netlink: 'syz.1.9237': attribute type 6 has an invalid length. [ 527.097628][T31767] sch_fq: defrate 9 ignored. [ 527.142984][T31774] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 527.222605][T31780] lo speed is unknown, defaulting to 1000 [ 527.326018][T31780] netlink: 'syz.0.9235': attribute type 1 has an invalid length. [ 527.857819][T31817] netlink: 'syz.7.9246': attribute type 2 has an invalid length. [ 527.865765][T31817] netlink: 'syz.7.9246': attribute type 1 has an invalid length. [ 527.873565][T31817] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.9246'. [ 527.973036][T31828] sch_fq: defrate 9 ignored. [ 528.023799][T31830] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 528.334765][T31862] netlink: 'syz.0.9259': attribute type 2 has an invalid length. [ 528.342646][T31862] netlink: 'syz.0.9259': attribute type 1 has an invalid length. [ 528.350484][T31862] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.9259'. [ 528.502085][T31874] sch_fq: defrate 9 ignored. [ 528.565988][T31880] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 528.581813][T31882] smc: net device bond0 applied user defined pnetid SYZ0 [ 528.589414][T31882] smc: net device bond0 erased user defined pnetid SYZ0 [ 528.699222][T31895] netlink: 'syz.8.9271': attribute type 2 has an invalid length. [ 528.707015][T31895] netlink: 'syz.8.9271': attribute type 1 has an invalid length. [ 528.714906][T31895] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.9271'. [ 528.897534][T31906] net_ratelimit: 482 callbacks suppressed [ 528.897579][T31906] netlink: zone id is out of range [ 528.908544][T31906] netlink: zone id is out of range [ 528.913735][T31906] netlink: zone id is out of range [ 528.918882][T31906] netlink: zone id is out of range [ 528.923998][T31906] netlink: zone id is out of range [ 528.929392][T31906] netlink: zone id is out of range [ 528.934688][T31906] netlink: zone id is out of range [ 528.939840][T31906] netlink: zone id is out of range [ 528.944988][T31906] netlink: zone id is out of range [ 528.950172][T31906] netlink: zone id is out of range [ 529.522757][T31919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9276'. [ 529.539967][T31919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9276'. [ 529.572186][T31919] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9276'. [ 529.694493][T31932] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 529.720882][T31937] netlink: 'syz.8.9281': attribute type 1 has an invalid length. [ 529.747747][T31937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 529.777711][T31974] netlink: 'syz.0.9282': attribute type 2 has an invalid length. [ 529.890735][T31979] lo speed is unknown, defaulting to 1000 [ 529.895989][T31983] smc: net device bond0 applied user defined pnetid SYZ0 [ 529.917322][T31983] smc: net device bond0 erased user defined pnetid SYZ0 [ 529.996961][T32012] program syz.2.9288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.008203][T32012] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 530.114178][T32023] FAULT_INJECTION: forcing a failure. [ 530.114178][T32023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.127315][T32023] CPU: 0 UID: 0 PID: 32023 Comm: syz.2.9291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 530.127351][T32023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 530.127444][T32023] Call Trace: [ 530.127468][T32023] [ 530.127478][T32023] __dump_stack+0x1d/0x30 [ 530.127506][T32023] dump_stack_lvl+0xe8/0x140 [ 530.127538][T32023] dump_stack+0x15/0x1b [ 530.127561][T32023] should_fail_ex+0x265/0x280 [ 530.127644][T32023] should_fail+0xb/0x20 [ 530.127671][T32023] should_fail_usercopy+0x1a/0x20 [ 530.127704][T32023] _copy_from_user+0x1c/0xb0 [ 530.127749][T32023] ___sys_sendmsg+0xc1/0x1d0 [ 530.127801][T32023] __x64_sys_sendmsg+0xd4/0x160 [ 530.127896][T32023] x64_sys_call+0x191e/0x2ff0 [ 530.127920][T32023] do_syscall_64+0xd2/0x200 [ 530.127987][T32023] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 530.128021][T32023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 530.128059][T32023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.128081][T32023] RIP: 0033:0x7ff46c90eba9 [ 530.128097][T32023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.128214][T32023] RSP: 002b:00007ff46b377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.128234][T32023] RAX: ffffffffffffffda RBX: 00007ff46cb55fa0 RCX: 00007ff46c90eba9 [ 530.128246][T32023] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 530.128267][T32023] RBP: 00007ff46b377090 R08: 0000000000000000 R09: 0000000000000000 [ 530.128284][T32023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.128300][T32023] R13: 00007ff46cb56038 R14: 00007ff46cb55fa0 R15: 00007fff9356a6e8 [ 530.128320][T32023] [ 530.337041][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 530.337055][ T29] audit: type=1326 audit(2000002855.308:75220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32026 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 530.405832][ T29] audit: type=1326 audit(2000002855.348:75221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32026 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 530.429691][ T29] audit: type=1326 audit(2000002855.348:75222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32026 comm="syz.2.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46c90eba9 code=0x7ffc0000 [ 530.717021][ T29] audit: type=1326 audit(2000002855.649:75223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.1.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 530.844317][T32043] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 531.556079][T32070] program syz.2.9302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.569406][T32070] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 531.767539][T32080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.996054][T32114] lo speed is unknown, defaulting to 1000 [ 532.404338][T32141] siw: device registration error -23 [ 532.843864][ T29] audit: type=1326 audit(2000002857.819:75224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32144 comm="syz.7.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37b1eeba9 code=0x7ffc0000 [ 532.867564][ T29] audit: type=1326 audit(2000002857.819:75225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32144 comm="syz.7.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37b1eeba9 code=0x7ffc0000 [ 532.891257][ T29] audit: type=1326 audit(2000002857.819:75226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32144 comm="syz.7.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe37b1eeba9 code=0x7ffc0000 [ 532.914853][ T29] audit: type=1326 audit(2000002857.819:75227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32144 comm="syz.7.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37b1eeba9 code=0x7ffc0000 [ 532.938476][ T29] audit: type=1326 audit(2000002857.819:75228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32144 comm="syz.7.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37b1eeba9 code=0x7ffc0000 [ 532.962136][ T29] audit: type=1326 audit(2000002857.819:75229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32144 comm="syz.7.9306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe37b1eeba9 code=0x7ffc0000 [ 533.206121][T32168] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 533.295272][T32171] smc: net device bond0 applied user defined pnetid SYZ0 [ 533.306442][T32177] validate_nla: 2 callbacks suppressed [ 533.306525][T32177] netlink: 'syz.0.9319': attribute type 1 has an invalid length. [ 533.320786][T32171] smc: net device bond0 erased user defined pnetid SYZ0 [ 533.339362][T32177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 533.351775][T32212] netlink: 'syz.1.9320': attribute type 1 has an invalid length. [ 533.512738][T32217] lo speed is unknown, defaulting to 1000 [ 533.676323][T32245] serio: Serial port ptm0 [ 533.722162][T32255] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 533.728750][T32255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 533.736456][T32255] vhci_hcd vhci_hcd.0: Device attached [ 533.760232][T32257] vhci_hcd: unknown pdu 2 [ 533.809506][T32259] siw: device registration error -23 [ 533.830499][T17386] vhci_hcd: stop threads [ 533.834796][T17386] vhci_hcd: release socket [ 533.839343][T17386] vhci_hcd: disconnect device [ 534.277253][T32277] netlink: 'syz.1.9332': attribute type 1 has an invalid length. [ 534.290003][T32272] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 534.321619][T32281] smc: net device bond0 applied user defined pnetid SYZ0 [ 534.330466][T32281] smc: net device bond0 erased user defined pnetid SYZ0 [ 534.367493][T32287] __nla_validate_parse: 1 callbacks suppressed [ 534.367513][T32287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9334'. [ 534.371767][T32286] smc: net device bond0 applied user defined pnetid SYZ0 [ 534.377101][T32287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9334'. [ 534.406937][T32287] FAULT_INJECTION: forcing a failure. [ 534.406937][T32287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.420219][T32287] CPU: 1 UID: 0 PID: 32287 Comm: syz.2.9334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 534.420303][T32287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 534.420316][T32287] Call Trace: [ 534.420322][T32287] [ 534.420329][T32287] __dump_stack+0x1d/0x30 [ 534.420360][T32287] dump_stack_lvl+0xe8/0x140 [ 534.420386][T32287] dump_stack+0x15/0x1b [ 534.420409][T32287] should_fail_ex+0x265/0x280 [ 534.420479][T32287] should_fail+0xb/0x20 [ 534.420501][T32287] should_fail_usercopy+0x1a/0x20 [ 534.420590][T32287] _copy_from_user+0x1c/0xb0 [ 534.420625][T32287] ____sys_sendmsg+0x1c5/0x4e0 [ 534.420657][T32287] ___sys_sendmsg+0x17b/0x1d0 [ 534.420701][T32287] __x64_sys_sendmsg+0xd4/0x160 [ 534.420774][T32287] x64_sys_call+0x191e/0x2ff0 [ 534.420798][T32287] do_syscall_64+0xd2/0x200 [ 534.420865][T32287] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 534.420891][T32287] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 534.420961][T32287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.420984][T32287] RIP: 0033:0x7ff46c90eba9 [ 534.421000][T32287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.421020][T32287] RSP: 002b:00007ff46b377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.421040][T32287] RAX: ffffffffffffffda RBX: 00007ff46cb55fa0 RCX: 00007ff46c90eba9 [ 534.421129][T32287] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000007 [ 534.421142][T32287] RBP: 00007ff46b377090 R08: 0000000000000000 R09: 0000000000000000 [ 534.421155][T32287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.421169][T32287] R13: 00007ff46cb56038 R14: 00007ff46cb55fa0 R15: 00007fff9356a6e8 [ 534.421188][T32287] [ 534.423654][T32286] smc: net device bond0 erased user defined pnetid SYZ0 [ 534.676548][T32310] netlink: 'syz.0.9340': attribute type 1 has an invalid length. [ 534.693557][T32310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.064777][T32350] lo speed is unknown, defaulting to 1000 [ 535.199217][T32359] lo speed is unknown, defaulting to 1000 [ 535.275927][T32370] netlink: 'syz.2.9346': attribute type 2 has an invalid length. [ 535.283855][T32370] netlink: 'syz.2.9346': attribute type 1 has an invalid length. [ 535.291756][T32370] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.9346'. [ 535.389295][T32415] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 535.395945][T32415] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 535.403669][T32415] vhci_hcd vhci_hcd.0: Device attached [ 535.410636][T32421] vhci_hcd: unknown pdu 2 [ 535.444691][T17425] vhci_hcd: stop threads [ 535.449096][T17425] vhci_hcd: release socket [ 535.453531][T17425] vhci_hcd: disconnect device [ 535.558429][T32427] siw: device registration error -23 [ 535.594681][T32428] netlink: 'syz.0.9350': attribute type 1 has an invalid length. [ 535.637094][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 535.637109][ T29] audit: type=1326 audit(2000002860.609:75358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.671204][T32430] smc: net device bond0 applied user defined pnetid SYZ0 [ 535.672247][T32433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9352'. [ 535.678756][T32430] smc: net device bond0 erased user defined pnetid SYZ0 [ 535.687365][T32433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9352'. [ 535.708334][ T29] audit: type=1326 audit(2000002860.649:75359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.732014][ T29] audit: type=1326 audit(2000002860.649:75360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.755821][ T29] audit: type=1326 audit(2000002860.649:75361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.779547][ T29] audit: type=1326 audit(2000002860.649:75362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.803149][ T29] audit: type=1326 audit(2000002860.649:75363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.826914][ T29] audit: type=1326 audit(2000002860.649:75364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.850714][ T29] audit: type=1326 audit(2000002860.649:75365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.874469][ T29] audit: type=1326 audit(2000002860.649:75366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.898177][ T29] audit: type=1326 audit(2000002860.649:75367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32432 comm="syz.1.9352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 535.980216][T32438] bridge0: entered promiscuous mode [ 535.985614][T32438] macsec1: entered promiscuous mode [ 535.995595][T32438] bridge0: port 1(macsec1) entered blocking state [ 536.002278][T32438] bridge0: port 1(macsec1) entered disabled state [ 536.009408][T32438] macsec1: entered allmulticast mode [ 536.014879][T32438] bridge0: entered allmulticast mode [ 536.021127][T32438] macsec1: left allmulticast mode [ 536.026191][T32438] bridge0: left allmulticast mode [ 536.034449][T32438] bridge0: left promiscuous mode [ 536.068737][T32447] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 536.236783][T32467] smc: net device bond0 applied user defined pnetid SYZ0 [ 536.246420][T32467] smc: net device bond0 erased user defined pnetid SYZ0 [ 536.306630][T32476] smc: net device bond0 applied user defined pnetid SYZ0 [ 536.320485][T32476] smc: net device bond0 erased user defined pnetid SYZ0 [ 536.375986][T32484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9366'. [ 536.385071][T32484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9366'. [ 536.428267][T32490] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9368'. [ 536.449447][T32492] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 536.456030][T32492] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 536.463756][T32492] vhci_hcd vhci_hcd.0: Device attached [ 536.517573][T32493] vhci_hcd: unknown pdu 2 [ 536.537519][T17386] vhci_hcd: stop threads [ 536.541900][T17386] vhci_hcd: release socket [ 536.546415][T17386] vhci_hcd: disconnect device [ 536.586480][T32502] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 536.788220][T32512] siw: device registration error -23 [ 537.125840][T32514] netlink: 'syz.8.9371': attribute type 2 has an invalid length. [ 537.133692][T32514] netlink: 'syz.8.9371': attribute type 1 has an invalid length. [ 537.141453][T32514] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.9371'. [ 537.644267][T32554] net_ratelimit: 482 callbacks suppressed [ 537.644287][T32554] netlink: zone id is out of range [ 537.655228][T32554] netlink: zone id is out of range [ 537.660453][T32554] netlink: zone id is out of range [ 537.665573][T32554] netlink: zone id is out of range [ 537.670735][T32554] netlink: zone id is out of range [ 537.675895][T32554] netlink: zone id is out of range [ 537.681039][T32554] netlink: zone id is out of range [ 537.686166][T32554] netlink: zone id is out of range [ 537.691307][T32554] netlink: zone id is out of range [ 537.696515][T32554] netlink: zone id is out of range [ 537.829952][T32558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9384'. [ 537.930486][T32561] netlink: 'syz.0.9385': attribute type 2 has an invalid length. [ 538.525039][T32578] siw: device registration error -23 [ 538.970555][T32598] serio: Serial port ptm0 [ 539.186495][ T23] hid_parser_main: 28 callbacks suppressed [ 539.186518][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.200253][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.208876][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.216313][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.223798][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.231254][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.238714][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.246121][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.253567][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.261052][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 539.319654][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 539.611088][T32633] siw: device registration error -23 [ 539.833410][T32641] program syz.7.9410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.845292][T32641] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 540.329962][T32655] lo speed is unknown, defaulting to 1000 [ 540.372918][T17425] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.454150][T17425] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.598350][T17425] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.621125][T32655] chnl_net:caif_netlink_parms(): no params data found [ 540.749141][ T304] validate_nla: 1 callbacks suppressed [ 540.749235][ T304] netlink: 'syz.0.9415': attribute type 1 has an invalid length. [ 541.033211][ T303] lo speed is unknown, defaulting to 1000 [ 541.076092][T17425] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.166935][T32655] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.174284][T32655] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.188433][T32655] bridge_slave_0: entered allmulticast mode [ 541.198358][T32655] bridge_slave_0: entered promiscuous mode [ 541.205427][T32655] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.212635][T32655] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.221595][T32655] bridge_slave_1: entered allmulticast mode [ 541.228339][T32655] bridge_slave_1: entered promiscuous mode [ 541.251905][ T394] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 541.260602][T17425] bridge_slave_1: left allmulticast mode [ 541.266297][T17425] bridge_slave_1: left promiscuous mode [ 541.272052][T17425] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.333018][T17425] bridge_slave_0: left allmulticast mode [ 541.338784][T17425] bridge_slave_0: left promiscuous mode [ 541.344676][T17425] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.375934][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 541.375953][ T29] audit: type=1326 audit(2000002866.350:75643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.405667][ T29] audit: type=1326 audit(2000002866.350:75644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.406003][ T29] audit: type=1326 audit(2000002866.350:75645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.452767][ T29] audit: type=1326 audit(2000002866.350:75646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.476339][ T29] audit: type=1326 audit(2000002866.350:75647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.499994][ T29] audit: type=1326 audit(2000002866.350:75648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.523422][ T29] audit: type=1326 audit(2000002866.350:75649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.546954][ T29] audit: type=1326 audit(2000002866.350:75650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.570456][ T29] audit: type=1326 audit(2000002866.350:75651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.570533][ T29] audit: type=1326 audit(2000002866.350:75652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=425 comm="syz.8.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 541.720382][T17425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.733149][T17425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.743634][T17425] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 541.754749][T17425] bond0 (unregistering): Released all slaves [ 541.764763][T17425] bond1 (unregistering): Released all slaves [ 541.774562][T17425] bond2 (unregistering): Released all slaves [ 541.784553][T17425] bond3 (unregistering): Released all slaves [ 541.795138][T17425] bond4 (unregistering): Released all slaves [ 541.816370][ T427] __nla_validate_parse: 3 callbacks suppressed [ 541.816409][ T427] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9424'. [ 541.831771][ T427] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9424'. [ 541.841822][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9425'. [ 541.850919][ T431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9425'. [ 541.860128][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9425'. [ 541.872505][ T433] geneve2: entered promiscuous mode [ 541.892652][T32655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.912121][T17425] hsr_slave_0: left promiscuous mode [ 541.924549][T17425] hsr_slave_1: left promiscuous mode [ 541.936167][T17425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.943744][T17425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.953836][T17425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.961290][T17425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.975674][T17425] batman_adv: batadv0: Interface deactivated: macsec1 [ 541.982556][T17425] batman_adv: batadv0: Removing interface: macsec1 [ 542.116999][T17425] batadv_slave_1: left promiscuous mode [ 542.126623][T17425] veth1_macvtap: left promiscuous mode [ 542.136784][T17425] veth0_macvtap: left promiscuous mode [ 542.146784][T17425] veth1_vlan: left promiscuous mode [ 542.152400][T17425] veth0_vlan: left promiscuous mode [ 542.523093][T17425] team0 (unregistering): Port device team_slave_1 removed [ 542.579910][T17425] team0 (unregistering): Port device team_slave_0 removed [ 542.641025][ T485] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 542.647624][ T485] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 542.655335][ T485] vhci_hcd vhci_hcd.0: Device attached [ 542.676488][T32655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.694922][ T477] lo speed is unknown, defaulting to 1000 [ 542.718872][ T487] vhci_hcd: unknown pdu 2 [ 542.732769][T17393] vhci_hcd: stop threads [ 542.737135][T17393] vhci_hcd: release socket [ 542.741632][T17393] vhci_hcd: disconnect device [ 542.799995][T32655] team0: Port device team_slave_0 added [ 542.807022][T32655] team0: Port device team_slave_1 added [ 542.900719][T32655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.907750][T32655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.933779][T32655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.030328][T32655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.037391][T32655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.063314][T32655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.137173][T32655] hsr_slave_0: entered promiscuous mode [ 543.147463][T32655] hsr_slave_1: entered promiscuous mode [ 543.157458][T32655] debugfs: 'hsr0' already exists in 'hsr' [ 543.163215][T32655] Cannot create hsr debugfs directory [ 543.255993][ T600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9437'. [ 543.265032][ T600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9437'. [ 543.333910][T17425] IPVS: stop unused estimator thread 0... [ 544.039368][ T708] net_ratelimit: 728 callbacks suppressed [ 544.039389][ T708] netlink: zone id is out of range [ 544.050345][ T708] netlink: zone id is out of range [ 544.055455][ T708] netlink: zone id is out of range [ 544.060621][ T708] netlink: zone id is out of range [ 544.065738][ T708] netlink: zone id is out of range [ 544.070866][ T708] netlink: zone id is out of range [ 544.076145][ T708] netlink: zone id is out of range [ 544.081348][ T708] netlink: zone id is out of range [ 544.086608][ T708] netlink: zone id is out of range [ 544.091780][ T708] netlink: zone id is out of range [ 544.099834][ T710] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9449'. [ 544.108951][ T710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9449'. [ 544.488224][T32655] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.541342][T32655] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.551106][T32655] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.565182][T32655] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.694102][ T749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9453'. [ 544.750578][T32655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.786245][T32655] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.914888][T17393] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.922083][T17393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.937731][T17393] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.944818][T17393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.743231][ T777] FAULT_INJECTION: forcing a failure. [ 545.743231][ T777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.756373][ T777] CPU: 0 UID: 0 PID: 777 Comm: syz.2.9460 Not tainted syzkaller #0 PREEMPT(voluntary) [ 545.756412][ T777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 545.756430][ T777] Call Trace: [ 545.756438][ T777] [ 545.756446][ T777] __dump_stack+0x1d/0x30 [ 545.756550][ T777] dump_stack_lvl+0xe8/0x140 [ 545.756619][ T777] dump_stack+0x15/0x1b [ 545.756685][ T777] should_fail_ex+0x265/0x280 [ 545.756712][ T777] should_fail+0xb/0x20 [ 545.756743][ T777] should_fail_usercopy+0x1a/0x20 [ 545.756775][ T777] _copy_from_iter+0xd2/0xe80 [ 545.756813][ T777] ? __build_skb_around+0x1a0/0x200 [ 545.756840][ T777] ? __alloc_skb+0x223/0x320 [ 545.756941][ T777] netlink_sendmsg+0x471/0x6b0 [ 545.756978][ T777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.757005][ T777] __sock_sendmsg+0x142/0x180 [ 545.757063][ T777] ____sys_sendmsg+0x31e/0x4e0 [ 545.757166][ T777] ___sys_sendmsg+0x17b/0x1d0 [ 545.757288][ T777] __x64_sys_sendmsg+0xd4/0x160 [ 545.757354][ T777] x64_sys_call+0x191e/0x2ff0 [ 545.757389][ T777] do_syscall_64+0xd2/0x200 [ 545.757431][ T777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 545.757501][ T777] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 545.757540][ T777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.757593][ T777] RIP: 0033:0x7ff46c90eba9 [ 545.757613][ T777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.757636][ T777] RSP: 002b:00007ff46b377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.757682][ T777] RAX: ffffffffffffffda RBX: 00007ff46cb55fa0 RCX: 00007ff46c90eba9 [ 545.757695][ T777] RDX: 0000000000040840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 545.757762][ T777] RBP: 00007ff46b377090 R08: 0000000000000000 R09: 0000000000000000 [ 545.757774][ T777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.757790][ T777] R13: 00007ff46cb56038 R14: 00007ff46cb55fa0 R15: 00007fff9356a6e8 [ 545.757815][ T777] [ 545.998637][ T783] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 546.045995][T32655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.220209][ T808] netlink: 'syz.0.9467': attribute type 2 has an invalid length. [ 546.228037][ T808] netlink: 'syz.0.9467': attribute type 1 has an invalid length. [ 546.304008][ T814] lo speed is unknown, defaulting to 1000 [ 546.404640][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 546.404727][ T29] audit: type=1326 audit(2000002871.350:75818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.434550][ T29] audit: type=1326 audit(2000002871.350:75819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.457972][ T29] audit: type=1326 audit(2000002871.350:75820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24876ed65f code=0x7ffc0000 [ 546.481414][ T29] audit: type=1326 audit(2000002871.350:75821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.504848][ T29] audit: type=1326 audit(2000002871.350:75822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.528521][ T29] audit: type=1326 audit(2000002871.350:75823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.551927][ T29] audit: type=1326 audit(2000002871.350:75824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.575346][ T29] audit: type=1326 audit(2000002871.350:75825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.598865][ T29] audit: type=1326 audit(2000002871.350:75826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.622448][ T29] audit: type=1326 audit(2000002871.350:75827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=807 comm="syz.0.9467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24876eeba9 code=0x7ffc0000 [ 546.694028][ T845] netlink: 'syz.0.9469': attribute type 2 has an invalid length. [ 546.702047][ T845] netlink: 'syz.0.9469': attribute type 1 has an invalid length. [ 546.712023][T32655] veth0_vlan: entered promiscuous mode [ 546.722346][T32655] veth1_vlan: entered promiscuous mode [ 546.737430][T32655] veth0_macvtap: entered promiscuous mode [ 546.745345][T32655] veth1_macvtap: entered promiscuous mode [ 546.767627][T32655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.782864][T32655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.794726][T17422] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.821123][T17422] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.836399][T17422] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.860337][T17422] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.873824][ T851] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 546.966793][ T864] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 547.021142][ T869] __nla_validate_parse: 3 callbacks suppressed [ 547.021158][ T869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9476'. [ 547.036522][ T869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9476'. [ 547.085080][ T879] serio: Serial port ptm0 [ 547.211543][T17425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.212852][ T901] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 547.228394][ T901] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 547.236069][ T901] vhci_hcd vhci_hcd.0: Device attached [ 547.245424][ T874] lo speed is unknown, defaulting to 1000 [ 547.302967][ T909] vhci_hcd: connection closed [ 547.303276][T17396] vhci_hcd: stop threads [ 547.312297][T17396] vhci_hcd: release socket [ 547.316814][T17396] vhci_hcd: disconnect device [ 547.355079][T17425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.395085][ T874] chnl_net:caif_netlink_parms(): no params data found [ 547.490295][T17425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.571625][ T1041] lo speed is unknown, defaulting to 1000 [ 547.682780][T17425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.750783][ T874] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.758012][ T874] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.772844][ T874] bridge_slave_0: entered allmulticast mode [ 547.787487][ T874] bridge_slave_0: entered promiscuous mode [ 547.804268][ T874] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.811553][ T874] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.826400][ T874] bridge_slave_1: entered allmulticast mode [ 547.832940][ T874] bridge_slave_1: entered promiscuous mode [ 547.855705][ T874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.875718][ T874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.922692][ T874] team0: Port device team_slave_0 added [ 547.930795][ T874] team0: Port device team_slave_1 added [ 547.976015][ T874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.983099][ T874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.009071][ T874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.164241][ T1199] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 548.363818][ T1208] FAULT_INJECTION: forcing a failure. [ 548.363818][ T1208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.376975][ T1208] CPU: 1 UID: 0 PID: 1208 Comm: syz.1.9492 Not tainted syzkaller #0 PREEMPT(voluntary) [ 548.377006][ T1208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.377023][ T1208] Call Trace: [ 548.377032][ T1208] [ 548.377042][ T1208] __dump_stack+0x1d/0x30 [ 548.377162][ T1208] dump_stack_lvl+0xe8/0x140 [ 548.377218][ T1208] dump_stack+0x15/0x1b [ 548.377241][ T1208] should_fail_ex+0x265/0x280 [ 548.377274][ T1208] should_fail+0xb/0x20 [ 548.377299][ T1208] should_fail_usercopy+0x1a/0x20 [ 548.377371][ T1208] _copy_from_user+0x1c/0xb0 [ 548.377414][ T1208] memdup_user+0x5e/0xd0 [ 548.377473][ T1208] bpf_prog_test_run_raw_tp+0x22d/0x400 [ 548.377503][ T1208] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 548.377534][ T1208] bpf_prog_test_run+0x227/0x390 [ 548.377640][ T1208] __sys_bpf+0x4b9/0x7b0 [ 548.377676][ T1208] __x64_sys_bpf+0x41/0x50 [ 548.377731][ T1208] x64_sys_call+0x2aea/0x2ff0 [ 548.377762][ T1208] do_syscall_64+0xd2/0x200 [ 548.377823][ T1208] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 548.377928][ T1208] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 548.377966][ T1208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.378059][ T1208] RIP: 0033:0x7fbf412eeba9 [ 548.378077][ T1208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.378107][ T1208] RSP: 002b:00007fbf3fd4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.378133][ T1208] RAX: ffffffffffffffda RBX: 00007fbf41535fa0 RCX: 00007fbf412eeba9 [ 548.378150][ T1208] RDX: 0000000000000031 RSI: 0000200000000600 RDI: 000000000000000a [ 548.378168][ T1208] RBP: 00007fbf3fd4f090 R08: 0000000000000000 R09: 0000000000000000 [ 548.378226][ T1208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.378240][ T1208] R13: 00007fbf41536038 R14: 00007fbf41535fa0 R15: 00007fffcccbaba8 [ 548.378261][ T1208] [ 548.597886][T17425] bond0 (unregistering): Released all slaves [ 548.607761][T17425] bond1 (unregistering): Released all slaves [ 548.629769][T17425] bond2 (unregistering): Released all slaves [ 548.650019][T17425] bond3 (unregistering): Released all slaves [ 548.684670][T17425] bond4 (unregistering): Released all slaves [ 548.700693][ T874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.707738][ T874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.733692][ T874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.843325][ T874] hsr_slave_0: entered promiscuous mode [ 548.858278][ T874] hsr_slave_1: entered promiscuous mode [ 548.865388][ T874] debugfs: 'hsr0' already exists in 'hsr' [ 548.871172][ T874] Cannot create hsr debugfs directory [ 549.032708][T17425] veth0_macvtap: left promiscuous mode [ 549.044931][T17425] veth1_vlan: left promiscuous mode [ 549.071706][T17425] veth0_vlan: left promiscuous mode [ 549.183377][ T1285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9495'. [ 549.413793][ T1327] serio: Serial port ptm0 [ 549.424456][ T1329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9497'. [ 549.502599][ T23] hid_parser_main: 17 callbacks suppressed [ 549.502710][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.516050][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.525556][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.533091][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.540598][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.548044][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.555491][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.562960][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.570398][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.577858][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 549.593609][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 549.687637][ T1349] FAULT_INJECTION: forcing a failure. [ 549.687637][ T1349] name failslab, interval 1, probability 0, space 0, times 0 [ 549.700346][ T1349] CPU: 0 UID: 0 PID: 1349 Comm: syz.1.9500 Not tainted syzkaller #0 PREEMPT(voluntary) [ 549.700381][ T1349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.700399][ T1349] Call Trace: [ 549.700407][ T1349] [ 549.700434][ T1349] __dump_stack+0x1d/0x30 [ 549.700462][ T1349] dump_stack_lvl+0xe8/0x140 [ 549.700556][ T1349] dump_stack+0x15/0x1b [ 549.700607][ T1349] should_fail_ex+0x265/0x280 [ 549.700640][ T1349] should_failslab+0x8c/0xb0 [ 549.700672][ T1349] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 549.700709][ T1349] ? __d_alloc+0x3d/0x340 [ 549.700799][ T1349] __d_alloc+0x3d/0x340 [ 549.700827][ T1349] ? mpol_shared_policy_init+0xbd/0x4c0 [ 549.700849][ T1349] d_alloc_pseudo+0x1e/0x80 [ 549.700885][ T1349] alloc_file_pseudo+0x71/0x160 [ 549.701029][ T1349] __shmem_file_setup+0x1de/0x210 [ 549.701072][ T1349] shmem_file_setup+0x3b/0x50 [ 549.701166][ T1349] __se_sys_memfd_create+0x2c3/0x590 [ 549.701241][ T1349] __x64_sys_memfd_create+0x31/0x40 [ 549.701301][ T1349] x64_sys_call+0x2abe/0x2ff0 [ 549.701323][ T1349] do_syscall_64+0xd2/0x200 [ 549.701361][ T1349] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 549.701387][ T1349] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 549.701434][ T1349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.701488][ T1349] RIP: 0033:0x7fbf412eeba9 [ 549.701504][ T1349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.701593][ T1349] RSP: 002b:00007fbf3fd4ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 549.701612][ T1349] RAX: ffffffffffffffda RBX: 000000000000044d RCX: 00007fbf412eeba9 [ 549.701624][ T1349] RDX: 00007fbf3fd4eef0 RSI: 0000000000000000 RDI: 00007fbf413727e8 [ 549.701665][ T1349] RBP: 0000200000000a40 R08: 00007fbf3fd4ebb7 R09: 00007fbf3fd4ee40 [ 549.701697][ T1349] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000680 [ 549.701713][ T1349] R13: 00007fbf3fd4eef0 R14: 00007fbf3fd4eeb0 R15: 0000200000000280 [ 549.701835][ T1349] [ 549.940758][ T3413] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 550.114766][ T874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.124276][ T874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.135953][ T874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.151273][ T874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.190107][ T874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.205518][ T874] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.215121][T17422] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.222274][T17422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.233672][T17393] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.240797][T17393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.344173][ T1413] netlink: 'syz.7.9511': attribute type 10 has an invalid length. [ 550.356799][ T1413] team0: Port device dummy0 added [ 550.363555][ T1413] FAULT_INJECTION: forcing a failure. [ 550.363555][ T1413] name failslab, interval 1, probability 0, space 0, times 0 [ 550.376354][ T1413] CPU: 1 UID: 0 PID: 1413 Comm: syz.7.9511 Not tainted syzkaller #0 PREEMPT(voluntary) [ 550.376449][ T1413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.376465][ T1413] Call Trace: [ 550.376473][ T1413] [ 550.376535][ T1413] __dump_stack+0x1d/0x30 [ 550.376599][ T1413] dump_stack_lvl+0xe8/0x140 [ 550.376620][ T1413] dump_stack+0x15/0x1b [ 550.376637][ T1413] should_fail_ex+0x265/0x280 [ 550.376679][ T1413] should_failslab+0x8c/0xb0 [ 550.376708][ T1413] kmem_cache_alloc_node_noprof+0x57/0x320 [ 550.376806][ T1413] ? __alloc_skb+0x101/0x320 [ 550.376838][ T1413] __alloc_skb+0x101/0x320 [ 550.376868][ T1413] netlink_alloc_large_skb+0xba/0xf0 [ 550.376970][ T1413] netlink_sendmsg+0x3cf/0x6b0 [ 550.377065][ T1413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.377101][ T1413] __sock_sendmsg+0x142/0x180 [ 550.377176][ T1413] ____sys_sendmsg+0x31e/0x4e0 [ 550.377238][ T1413] ___sys_sendmsg+0x17b/0x1d0 [ 550.377281][ T1413] __x64_sys_sendmsg+0xd4/0x160 [ 550.377314][ T1413] x64_sys_call+0x191e/0x2ff0 [ 550.377343][ T1413] do_syscall_64+0xd2/0x200 [ 550.377428][ T1413] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 550.377460][ T1413] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 550.377499][ T1413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.377558][ T1413] RIP: 0033:0x7fce942beba9 [ 550.377621][ T1413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.377650][ T1413] RSP: 002b:00007fce92d1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.377675][ T1413] RAX: ffffffffffffffda RBX: 00007fce94505fa0 RCX: 00007fce942beba9 [ 550.377691][ T1413] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000007 [ 550.377704][ T1413] RBP: 00007fce92d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 550.377736][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.377752][ T1413] R13: 00007fce94506038 R14: 00007fce94505fa0 R15: 00007ffcb35a8a78 [ 550.377777][ T1413] [ 550.651672][ T874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.784247][ T874] veth0_vlan: entered promiscuous mode [ 550.798090][ T874] veth1_vlan: entered promiscuous mode [ 550.821564][ T874] veth0_macvtap: entered promiscuous mode [ 550.830997][ T874] veth1_macvtap: entered promiscuous mode [ 550.842958][ T874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.854482][ T874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.891935][T17386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.921792][T17386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.932254][T17386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.954692][T17386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.049232][T10577] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 551.137700][ T1436] siw: device registration error -23 [ 551.254668][ T1451] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 551.366095][ T1461] infiniband syz!: set active [ 551.370836][ T1461] infiniband syz!: added team_slave_0 [ 551.382482][ T1461] RDS/IB: syz!: added [ 551.387571][ T1461] smc: adding ib device syz! with port count 1 [ 551.393834][ T1461] smc: ib device syz! port 1 has pnetid [ 551.421173][ T1471] serio: Serial port ptm0 [ 551.683107][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 551.683126][ T29] audit: type=1326 audit(2000002876.661:76130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.717309][ T1477] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9521'. [ 551.726562][ T1477] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9521'. [ 551.747676][ T29] audit: type=1326 audit(2000002876.691:76131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.771311][ T29] audit: type=1326 audit(2000002876.691:76132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.794989][ T29] audit: type=1326 audit(2000002876.691:76133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.818686][ T29] audit: type=1326 audit(2000002876.691:76134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.842342][ T29] audit: type=1326 audit(2000002876.691:76135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.865979][ T29] audit: type=1326 audit(2000002876.691:76136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.889525][ T29] audit: type=1326 audit(2000002876.691:76137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.913098][ T29] audit: type=1326 audit(2000002876.691:76138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 551.937086][ T29] audit: type=1326 audit(2000002876.691:76139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1476 comm="syz.8.9521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 552.414174][ T1500] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 553.138747][ T1524] FAULT_INJECTION: forcing a failure. [ 553.138747][ T1524] name failslab, interval 1, probability 0, space 0, times 0 [ 553.151445][ T1524] CPU: 0 UID: 0 PID: 1524 Comm: syz.8.9532 Not tainted syzkaller #0 PREEMPT(voluntary) [ 553.151516][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.151529][ T1524] Call Trace: [ 553.151536][ T1524] [ 553.151547][ T1524] __dump_stack+0x1d/0x30 [ 553.151590][ T1524] dump_stack_lvl+0xe8/0x140 [ 553.151654][ T1524] dump_stack+0x15/0x1b [ 553.151671][ T1524] should_fail_ex+0x265/0x280 [ 553.151776][ T1524] should_failslab+0x8c/0xb0 [ 553.151801][ T1524] __kmalloc_noprof+0xa5/0x3e0 [ 553.151894][ T1524] ? cond_policydb_dup+0xa3/0x4e0 [ 553.151935][ T1524] cond_policydb_dup+0xa3/0x4e0 [ 553.151970][ T1524] security_set_bools+0xa0/0x340 [ 553.151999][ T1524] sel_commit_bools_write+0x1ea/0x270 [ 553.152079][ T1524] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 553.152147][ T1524] vfs_write+0x269/0x960 [ 553.152212][ T1524] ? __rcu_read_unlock+0x4f/0x70 [ 553.152239][ T1524] ? __fget_files+0x184/0x1c0 [ 553.152276][ T1524] ksys_write+0xda/0x1a0 [ 553.152301][ T1524] __x64_sys_write+0x40/0x50 [ 553.152356][ T1524] x64_sys_call+0x27fe/0x2ff0 [ 553.152379][ T1524] do_syscall_64+0xd2/0x200 [ 553.152421][ T1524] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 553.152472][ T1524] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 553.152547][ T1524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.152577][ T1524] RIP: 0033:0x7fd091a8eba9 [ 553.152597][ T1524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.152627][ T1524] RSP: 002b:00007fd0904ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.152651][ T1524] RAX: ffffffffffffffda RBX: 00007fd091cd5fa0 RCX: 00007fd091a8eba9 [ 553.152666][ T1524] RDX: 0000000000000003 RSI: 0000200000000800 RDI: 0000000000000006 [ 553.152681][ T1524] RBP: 00007fd0904ef090 R08: 0000000000000000 R09: 0000000000000000 [ 553.152768][ T1524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.152783][ T1524] R13: 00007fd091cd6038 R14: 00007fd091cd5fa0 R15: 00007ffdfddb7728 [ 553.152820][ T1524] [ 553.757334][ T1536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9534'. [ 553.766439][ T1536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9534'. [ 553.891937][ T1553] lo speed is unknown, defaulting to 1000 [ 554.062491][ T1560] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 554.121188][ T1559] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 554.430598][ T23] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 554.461915][ T1623] FAULT_INJECTION: forcing a failure. [ 554.461915][ T1623] name failslab, interval 1, probability 0, space 0, times 0 [ 554.474580][ T1623] CPU: 0 UID: 0 PID: 1623 Comm: syz.7.9546 Not tainted syzkaller #0 PREEMPT(voluntary) [ 554.474671][ T1623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 554.474688][ T1623] Call Trace: [ 554.474698][ T1623] [ 554.474706][ T1623] __dump_stack+0x1d/0x30 [ 554.474725][ T1623] dump_stack_lvl+0xe8/0x140 [ 554.474742][ T1623] dump_stack+0x15/0x1b [ 554.474802][ T1623] should_fail_ex+0x265/0x280 [ 554.474825][ T1623] should_failslab+0x8c/0xb0 [ 554.474848][ T1623] kmem_cache_alloc_noprof+0x50/0x310 [ 554.474874][ T1623] ? security_inode_alloc+0x37/0x100 [ 554.474921][ T1623] security_inode_alloc+0x37/0x100 [ 554.474961][ T1623] inode_init_always_gfp+0x4b7/0x500 [ 554.474985][ T1623] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 554.475006][ T1623] alloc_inode+0x58/0x170 [ 554.475027][ T1623] new_inode+0x1d/0xe0 [ 554.475113][ T1623] shmem_get_inode+0x244/0x750 [ 554.475135][ T1623] shmem_mknod+0x46/0x180 [ 554.475211][ T1623] shmem_mkdir+0x33/0x70 [ 554.475233][ T1623] vfs_mkdir+0x210/0x340 [ 554.475265][ T1623] do_mkdirat+0x132/0x3f0 [ 554.475285][ T1623] __x64_sys_mkdirat+0x4c/0x60 [ 554.475308][ T1623] x64_sys_call+0x2b7/0x2ff0 [ 554.475329][ T1623] do_syscall_64+0xd2/0x200 [ 554.475383][ T1623] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 554.475406][ T1623] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 554.475434][ T1623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.475503][ T1623] RIP: 0033:0x7fce942beba9 [ 554.475525][ T1623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.475547][ T1623] RSP: 002b:00007fce92d1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 554.475572][ T1623] RAX: ffffffffffffffda RBX: 00007fce94505fa0 RCX: 00007fce942beba9 [ 554.475590][ T1623] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 554.475606][ T1623] RBP: 00007fce92d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.475622][ T1623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.475663][ T1623] R13: 00007fce94506038 R14: 00007fce94505fa0 R15: 00007ffcb35a8a78 [ 554.475688][ T1623] [ 554.886584][ T1634] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 554.948341][ T1643] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 554.993652][ T1650] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9553'. [ 555.005383][ T1650] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9553'. [ 555.041482][ T1655] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9553'. [ 555.293379][ T1670] siw: device registration error -23 [ 555.555734][ T1673] lo speed is unknown, defaulting to 1000 [ 556.107397][ T1704] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 556.114042][ T1704] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 556.121770][ T1704] vhci_hcd vhci_hcd.0: Device attached [ 556.205889][ T1711] vhci_hcd: connection closed [ 556.209882][T17396] vhci_hcd: stop threads [ 556.218890][T17396] vhci_hcd: release socket [ 556.223317][T17396] vhci_hcd: disconnect device [ 556.906977][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 556.906993][ T29] audit: type=1326 audit(2000002881.892:76473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.8.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 556.958184][ T29] audit: type=1326 audit(2000002881.922:76474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.8.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 556.981903][ T29] audit: type=1326 audit(2000002881.922:76475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.8.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 557.005721][ T29] audit: type=1326 audit(2000002881.922:76476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.8.9564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 557.044881][ T1736] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 557.110544][ T1735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9566'. [ 557.121914][ T29] audit: type=1326 audit(2000002882.102:76477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1741 comm="syz.7.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 557.145531][ T29] audit: type=1326 audit(2000002882.102:76478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1741 comm="syz.7.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 557.169950][ T29] audit: type=1326 audit(2000002882.152:76479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1741 comm="syz.7.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 557.193555][ T29] audit: type=1326 audit(2000002882.152:76480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1741 comm="syz.7.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 557.217179][ T29] audit: type=1326 audit(2000002882.152:76481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1741 comm="syz.7.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 557.241009][ T29] audit: type=1326 audit(2000002882.152:76482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1741 comm="syz.7.9567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 557.529491][ T1751] lo speed is unknown, defaulting to 1000 [ 557.889556][ T1753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9570'. [ 557.898716][ T1753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9570'. [ 558.236443][ T1782] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 558.305446][ T1805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9579'. [ 558.366421][ T1801] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 558.727869][ T1825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9583'. [ 558.728955][ T1827] netlink: 'syz.8.9584': attribute type 6 has an invalid length. [ 559.685339][ T1843] siw: device registration error -23 [ 560.164030][ T1857] __nla_validate_parse: 4 callbacks suppressed [ 560.164049][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9590'. [ 560.209099][ T1859] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 560.227185][ T1864] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9590'. [ 560.277466][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9596'. [ 560.468124][ T1876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9597'. [ 560.477188][ T1876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9597'. [ 560.567229][ T1874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.576309][ T1874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.051111][ T1895] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 561.382915][ T1909] siw: device registration error -23 [ 561.629595][ T1919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9608'. [ 561.729253][ T1923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9609'. [ 561.759324][ T1926] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9610'. [ 561.768385][ T1926] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9610'. [ 561.925311][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 561.925329][ T29] audit: type=1326 audit(2000000000.840:76838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce942bd65f code=0x7ffc0000 [ 561.954999][ T29] audit: type=1326 audit(2000000000.840:76839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fce942bec37 code=0x7ffc0000 [ 561.978449][ T29] audit: type=1326 audit(2000000000.840:76840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce942bd510 code=0x7ffc0000 [ 562.002131][ T29] audit: type=1326 audit(2000000000.840:76841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fce942bd80a code=0x7ffc0000 [ 562.025544][ T29] audit: type=1326 audit(2000000000.840:76842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 562.049058][ T29] audit: type=1326 audit(2000000000.840:76843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 562.072706][ T29] audit: type=1326 audit(2000000000.840:76844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 562.096284][ T29] audit: type=1326 audit(2000000000.840:76845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 562.119848][ T29] audit: type=1326 audit(2000000000.840:76846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.7.9610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 562.347590][ T29] audit: type=1326 audit(2000000000.010:76847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1943 comm="syz.7.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 562.535001][ T1955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9613'. [ 562.558253][ T1947] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 562.593398][ T1957] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 562.709275][ T1965] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 562.799216][ T1035] hid_parser_main: 98 callbacks suppressed [ 562.799235][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.812595][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.821812][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.829272][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.836895][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.844328][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.852035][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.859604][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.867097][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.874502][ T1035] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 562.884362][ T1035] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 563.014593][ T2004] lo speed is unknown, defaulting to 1000 [ 563.131047][ T2030] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 563.316919][ T3394] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 563.797375][ T2087] serio: Serial port ptm0 [ 563.879327][ T2093] netlink: 'syz.7.9644': attribute type 4 has an invalid length. [ 564.267829][ T2099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.276442][ T2099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.700219][ T2118] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 565.877486][ T2144] lo speed is unknown, defaulting to 1000 [ 565.957068][ T2141] lo speed is unknown, defaulting to 1000 [ 565.994765][ T2143] netlink: 'syz.1.9655': attribute type 1 has an invalid length. [ 566.088141][ T2191] __nla_validate_parse: 17 callbacks suppressed [ 566.088161][ T2191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9661'. [ 566.103457][ T2191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9661'. [ 566.345172][ T2206] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 566.449923][ T2218] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 566.456483][ T2218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 566.464197][ T2218] vhci_hcd vhci_hcd.0: Device attached [ 566.508802][ T2227] usbip_core: unknown command [ 566.513590][ T2227] vhci_hcd: unknown pdu 0 [ 566.518021][ T2227] usbip_core: unknown command [ 566.572301][T17393] vhci_hcd: stop threads [ 566.576709][T17393] vhci_hcd: release socket [ 566.581205][T17393] vhci_hcd: disconnect device [ 566.808366][ T2238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9670'. [ 566.863966][ T2240] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9671'. [ 566.873062][ T2240] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9671'. [ 566.882065][ T2240] netlink: 'syz.2.9671': attribute type 6 has an invalid length. [ 566.889839][ T2240] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9671'. [ 566.942551][ T2244] netlink: 'syz.1.9673': attribute type 4 has an invalid length. [ 567.161516][ T2248] siw: device registration error -23 [ 567.450917][ T2262] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9677'. [ 567.544262][ T29] kauditd_printk_skb: 685 callbacks suppressed [ 567.544280][ T29] audit: type=1326 audit(2000000005.210:77533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.603140][ T29] audit: type=1326 audit(2000000005.210:77534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.626850][ T29] audit: type=1326 audit(2000000005.210:77535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.650390][ T29] audit: type=1326 audit(2000000005.210:77536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.673904][ T29] audit: type=1326 audit(2000000005.210:77537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.697455][ T29] audit: type=1326 audit(2000000005.220:77538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.720953][ T29] audit: type=1326 audit(2000000005.220:77539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.744548][ T29] audit: type=1326 audit(2000000005.220:77540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.768108][ T29] audit: type=1326 audit(2000000005.220:77541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 567.791560][ T29] audit: type=1326 audit(2000000005.220:77542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2267 comm="syz.8.9680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd091a8eba9 code=0x7ffc0000 [ 568.043406][ T2282] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 568.413318][ T2296] netlink: 'syz.2.9684': attribute type 4 has an invalid length. [ 568.674137][ T2306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.682852][ T2306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.834163][ T2314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9690'. [ 569.128113][ T2322] siw: device registration error -23 [ 569.646782][ T2330] netlink: 'syz.8.9696': attribute type 4 has an invalid length. [ 569.710597][ T2335] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 569.717232][ T2335] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 569.724876][ T2335] vhci_hcd vhci_hcd.0: Device attached [ 569.731399][ T2342] usbip_core: unknown command [ 569.736268][ T2342] vhci_hcd: unknown pdu 0 [ 569.740658][ T2342] usbip_core: unknown command [ 569.802554][T17395] vhci_hcd: stop threads [ 569.807000][T17395] vhci_hcd: release socket [ 569.811425][T17395] vhci_hcd: disconnect device [ 569.837275][ T2352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9701'. [ 569.926760][ T2357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 569.933402][ T2357] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 569.941114][ T2357] vhci_hcd vhci_hcd.0: Device attached [ 569.949244][ T2365] usbip_core: unknown command [ 569.953955][ T2365] vhci_hcd: unknown pdu 0 [ 569.958332][ T2365] usbip_core: unknown command [ 569.963136][T17395] vhci_hcd: stop threads [ 569.967492][T17395] vhci_hcd: release socket [ 569.971936][T17395] vhci_hcd: disconnect device [ 571.039725][ T2389] netlink: 'syz.8.9708': attribute type 4 has an invalid length. [ 571.462062][ T2397] siw: device registration error -23 [ 572.103141][ T2418] netlink: 'syz.1.9714': attribute type 1 has an invalid length. [ 572.933198][ T2420] lo speed is unknown, defaulting to 1000 [ 573.054965][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 573.054987][ T29] audit: type=1400 audit(2000000000.080:77721): avc: denied { prog_load } for pid=2427 comm="syz.0.9720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.080369][ T29] audit: type=1400 audit(2000000000.080:77722): avc: denied { bpf } for pid=2427 comm="syz.0.9720" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 573.101206][ T29] audit: type=1400 audit(2000000000.100:77723): avc: denied { map_create } for pid=2427 comm="syz.0.9720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.120744][ T29] audit: type=1400 audit(2000000000.100:77724): avc: denied { map_read map_write } for pid=2427 comm="syz.0.9720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.140705][ T29] audit: type=1400 audit(2000000000.100:77725): avc: denied { create } for pid=2427 comm="syz.0.9720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 573.216382][ T29] audit: type=1400 audit(2000000000.180:77726): avc: denied { egress } for pid=29 comm="kauditd" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 573.239676][ T29] audit: type=1400 audit(2000000000.180:77727): avc: denied { sendto } for pid=29 comm="kauditd" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 573.280710][ T2455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.289341][ T2455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.304655][ T29] audit: type=1400 audit(2000000000.300:77728): avc: denied { recv } for pid=17425 comm="kworker/u8:63" saddr=10.128.0.163 src=30036 daddr=10.128.1.180 dest=60652 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 573.330762][ T29] audit: type=1400 audit(2000000000.340:77729): avc: denied { read write } for pid=2448 comm="syz.1.9722" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.354389][ T29] audit: type=1400 audit(2000000000.340:77730): avc: denied { open } for pid=2448 comm="syz.1.9722" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.292838][ T2505] lo speed is unknown, defaulting to 1000 [ 576.762619][ T2568] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 577.220959][ T2590] lo speed is unknown, defaulting to 1000 [ 578.114868][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 578.114885][ T29] audit: type=1400 audit(2000000003.640:77894): avc: denied { read } for pid=2624 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 578.142688][ T29] audit: type=1400 audit(2000000003.640:77895): avc: denied { open } for pid=2624 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 578.205412][ T29] audit: type=1400 audit(2000000003.700:77896): avc: denied { mounton } for pid=2624 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 578.227123][ T29] audit: type=1400 audit(2000000003.710:77897): avc: denied { module_request } for pid=2624 comm="syz-executor" kmod="netdev-nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 578.249385][ T29] audit: type=1400 audit(2000000003.720:77898): avc: denied { sys_module } for pid=2624 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 578.407578][ T2637] netlink: 'syz.2.9755': attribute type 1 has an invalid length. [ 578.437317][ T2637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.449348][ T2624] lo speed is unknown, defaulting to 1000 [ 578.511334][T17386] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.781688][ T2680] lo speed is unknown, defaulting to 1000 [ 578.795638][ T29] audit: type=1400 audit(2000000004.280:77899): avc: denied { create } for pid=2636 comm="syz.2.9755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.832885][T17386] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.908325][T17386] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.997914][ T29] audit: type=1326 audit(2000000004.520:77900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2688 comm="syz.1.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 579.021584][ T29] audit: type=1326 audit(2000000004.520:77901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2688 comm="syz.1.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 579.045184][ T29] audit: type=1326 audit(2000000004.520:77902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2688 comm="syz.1.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 579.068741][ T29] audit: type=1326 audit(2000000004.520:77903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2688 comm="syz.1.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 579.283458][T17386] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.542467][ T2624] chnl_net:caif_netlink_parms(): no params data found [ 579.630755][T17386] bridge_slave_1: left allmulticast mode [ 579.636586][T17386] bridge_slave_1: left promiscuous mode [ 579.642323][T17386] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.671618][T17386] bridge_slave_0: left allmulticast mode [ 579.677542][T17386] bridge_slave_0: left promiscuous mode [ 579.683334][T17386] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.958807][T17386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.977547][T17386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.987126][T17386] bond0 (unregistering): Released all slaves [ 579.996171][T17386] bond1 (unregistering): Released all slaves [ 580.004788][T17386] bond2 (unregistering): Released all slaves [ 580.019218][T17386] bond3 (unregistering): Released all slaves [ 580.028700][T17386] bond4 (unregistering): Released all slaves [ 580.118027][ T2624] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.125590][ T2624] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.140411][ T2624] bridge_slave_0: entered allmulticast mode [ 580.147199][ T2624] bridge_slave_0: entered promiscuous mode [ 580.182589][T17386] hsr_slave_0: left promiscuous mode [ 580.189754][T17386] hsr_slave_1: left promiscuous mode [ 580.197439][T17386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.204850][T17386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.222692][T17386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.230281][T17386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.252691][T17386] veth1_macvtap: left promiscuous mode [ 580.260131][T17386] veth0_macvtap: left promiscuous mode [ 580.266965][T17386] veth1_vlan: left promiscuous mode [ 580.272199][T17386] veth0_vlan: left promiscuous mode [ 580.376834][T17386] team0 (unregistering): Port device team_slave_1 removed [ 580.389254][T17386] team0 (unregistering): Port device team_slave_0 removed [ 580.398210][T17395] smc: removing ib device syz! [ 580.433046][ T2624] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.440276][ T2624] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.451520][ T2624] bridge_slave_1: entered allmulticast mode [ 580.460770][ T2624] bridge_slave_1: entered promiscuous mode [ 580.468613][ T2895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9761'. [ 580.506817][ T2896] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9761'. [ 580.546238][ T2624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.555456][ T2897] lo speed is unknown, defaulting to 1000 [ 580.566679][ T2624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.650837][ T2624] team0: Port device team_slave_0 added [ 580.687756][ T2624] team0: Port device team_slave_1 added [ 580.757227][ T2624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.764387][ T2624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.790625][ T2624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.820431][ T2624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.827488][ T2624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.853501][ T2624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.883696][ T3009] netlink: 'syz.1.9763': attribute type 4 has an invalid length. [ 580.920181][ T2624] hsr_slave_0: entered promiscuous mode [ 580.926617][ T2624] hsr_slave_1: entered promiscuous mode [ 580.971081][ T3066] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 580.977661][ T3066] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 580.985290][ T3066] vhci_hcd vhci_hcd.0: Device attached [ 580.991413][ T3074] vhci_hcd: unknown pdu 2 [ 581.008643][ T3067] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 581.018689][T17395] vhci_hcd: stop threads [ 581.023043][T17395] vhci_hcd: release socket [ 581.027509][T17395] vhci_hcd: disconnect device [ 581.396779][ T2624] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 581.412707][ T2624] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 581.426616][ T2624] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 581.440393][ T2624] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 581.505655][ T2624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.524936][ T2624] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.534598][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.541737][T17395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.562814][ T2624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.573428][ T2624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.590458][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.597570][T17395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.664119][ T2624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.833246][ T2624] veth0_vlan: entered promiscuous mode [ 581.846989][ T2624] veth1_vlan: entered promiscuous mode [ 581.869597][ T2624] veth0_macvtap: entered promiscuous mode [ 581.877575][ T2624] veth1_macvtap: entered promiscuous mode [ 581.899465][ T2624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.912412][ T2624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.924561][T17395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.936406][T17395] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.958392][T17395] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.970862][T17395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.107093][ T3227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9777'. [ 582.116158][ T3227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9777'. [ 582.558998][ T3414] hid_parser_main: 44 callbacks suppressed [ 582.559074][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x5 [ 582.572429][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.579919][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.587385][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.594777][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x1 [ 582.602257][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.609707][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.617160][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.624559][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.632032][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 582.886689][ T3414] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 583.086205][ T3275] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9789'. [ 583.095340][ T3275] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9789'. [ 583.161573][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 583.161590][ T29] audit: type=1326 audit(2000000008.690:78164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3274 comm="syz.8.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.211229][ T29] audit: type=1326 audit(2000000008.720:78165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3274 comm="syz.8.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.256889][ T3282] net_ratelimit: 236 callbacks suppressed [ 583.256909][ T3282] netlink: zone id is out of range [ 583.262970][ T29] audit: type=1326 audit(2000000008.790:78166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3274 comm="syz.8.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.276101][ T3282] netlink: zone id is out of range [ 583.291435][ T29] audit: type=1326 audit(2000000008.790:78167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3274 comm="syz.8.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.296641][ T3282] netlink: zone id is out of range [ 583.296650][ T3282] netlink: zone id is out of range [ 583.296656][ T3282] netlink: zone id is out of range [ 583.296662][ T3282] netlink: zone id is out of range [ 583.296668][ T3282] netlink: zone id is out of range [ 583.296675][ T3282] netlink: zone id is out of range [ 583.296680][ T3282] netlink: zone id is out of range [ 583.296687][ T3282] netlink: zone id is out of range [ 583.320317][ T29] audit: type=1326 audit(2000000008.790:78168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3274 comm="syz.8.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.401939][ T29] audit: type=1400 audit(2000000008.930:78169): avc: denied { create } for pid=3292 comm="syz.8.9791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.425423][ T3295] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9791'. [ 583.446031][ T29] audit: type=1400 audit(2000000008.950:78170): avc: denied { create } for pid=3292 comm="syz.8.9791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 583.466444][ T29] audit: type=1326 audit(2000000008.950:78171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3292 comm="syz.8.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.490030][ T29] audit: type=1326 audit(2000000008.950:78172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3292 comm="syz.8.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.513558][ T29] audit: type=1326 audit(2000000008.950:78173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3292 comm="syz.8.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 583.919515][ T3299] 9pnet_fd: Insufficient options for proto=fd [ 584.126163][ T3313] FAULT_INJECTION: forcing a failure. [ 584.126163][ T3313] name failslab, interval 1, probability 0, space 0, times 0 [ 584.138993][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz.1.9795 Not tainted syzkaller #0 PREEMPT(voluntary) [ 584.139097][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 584.139110][ T3313] Call Trace: [ 584.139118][ T3313] [ 584.139126][ T3313] __dump_stack+0x1d/0x30 [ 584.139155][ T3313] dump_stack_lvl+0xe8/0x140 [ 584.139174][ T3313] dump_stack+0x15/0x1b [ 584.139191][ T3313] should_fail_ex+0x265/0x280 [ 584.139223][ T3313] should_failslab+0x8c/0xb0 [ 584.139253][ T3313] __kmalloc_noprof+0xa5/0x3e0 [ 584.139350][ T3313] ? usb_alloc_urb+0x42/0xc0 [ 584.139387][ T3313] usb_alloc_urb+0x42/0xc0 [ 584.139422][ T3313] alloc_async+0x41/0x90 [ 584.139476][ T3313] proc_do_submiturb+0x76d/0x1d20 [ 584.139504][ T3313] proc_submiturb+0x7b/0xa0 [ 584.139604][ T3313] usbdev_ioctl+0xcc2/0x1710 [ 584.139649][ T3313] ? __pfx_usbdev_ioctl+0x10/0x10 [ 584.139680][ T3313] __se_sys_ioctl+0xce/0x140 [ 584.139702][ T3313] __x64_sys_ioctl+0x43/0x50 [ 584.139732][ T3313] x64_sys_call+0x1816/0x2ff0 [ 584.139756][ T3313] do_syscall_64+0xd2/0x200 [ 584.139870][ T3313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 584.139897][ T3313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 584.139930][ T3313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.139954][ T3313] RIP: 0033:0x7fbf412eeba9 [ 584.139972][ T3313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.140062][ T3313] RSP: 002b:00007fbf3fd4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.140082][ T3313] RAX: ffffffffffffffda RBX: 00007fbf41535fa0 RCX: 00007fbf412eeba9 [ 584.140095][ T3313] RDX: 0000200000000280 RSI: 000000008038550a RDI: 0000000000000003 [ 584.140108][ T3313] RBP: 00007fbf3fd4f090 R08: 0000000000000000 R09: 0000000000000000 [ 584.140121][ T3313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.140135][ T3313] R13: 00007fbf41536038 R14: 00007fbf41535fa0 R15: 00007fffcccbaba8 [ 584.140154][ T3313] [ 584.435451][ T3321] netlink: 'syz.8.9799': attribute type 1 has an invalid length. [ 584.591942][ T3324] siw: device registration error -23 [ 584.627821][ T3323] lo speed is unknown, defaulting to 1000 [ 585.013538][ T3353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9802'. [ 585.022688][ T3353] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9802'. [ 585.122338][ T3364] FAULT_INJECTION: forcing a failure. [ 585.122338][ T3364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.135491][ T3364] CPU: 1 UID: 0 PID: 3364 Comm: syz.2.9805 Not tainted syzkaller #0 PREEMPT(voluntary) [ 585.135525][ T3364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 585.135538][ T3364] Call Trace: [ 585.135545][ T3364] [ 585.135586][ T3364] __dump_stack+0x1d/0x30 [ 585.135611][ T3364] dump_stack_lvl+0xe8/0x140 [ 585.135638][ T3364] dump_stack+0x15/0x1b [ 585.135657][ T3364] should_fail_ex+0x265/0x280 [ 585.135695][ T3364] should_fail+0xb/0x20 [ 585.135788][ T3364] should_fail_usercopy+0x1a/0x20 [ 585.135881][ T3364] _copy_from_iter+0xd2/0xe80 [ 585.136030][ T3364] ? __build_skb_around+0x1a0/0x200 [ 585.136054][ T3364] ? __alloc_skb+0x223/0x320 [ 585.136083][ T3364] netlink_sendmsg+0x471/0x6b0 [ 585.136175][ T3364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.136203][ T3364] __sock_sendmsg+0x142/0x180 [ 585.136297][ T3364] ____sys_sendmsg+0x31e/0x4e0 [ 585.136327][ T3364] ___sys_sendmsg+0x17b/0x1d0 [ 585.136382][ T3364] __x64_sys_sendmsg+0xd4/0x160 [ 585.136456][ T3364] x64_sys_call+0x191e/0x2ff0 [ 585.136479][ T3364] do_syscall_64+0xd2/0x200 [ 585.136532][ T3364] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 585.136564][ T3364] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 585.136678][ T3364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.136706][ T3364] RIP: 0033:0x7ff46c90eba9 [ 585.136757][ T3364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.136780][ T3364] RSP: 002b:00007ff46b377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.136802][ T3364] RAX: ffffffffffffffda RBX: 00007ff46cb55fa0 RCX: 00007ff46c90eba9 [ 585.136819][ T3364] RDX: 0000000004002010 RSI: 00002000000010c0 RDI: 0000000000000005 [ 585.136836][ T3364] RBP: 00007ff46b377090 R08: 0000000000000000 R09: 0000000000000000 [ 585.136852][ T3364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.136913][ T3364] R13: 00007ff46cb56038 R14: 00007ff46cb55fa0 R15: 00007fff9356a6e8 [ 585.136938][ T3364] [ 585.473782][ T3375] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9809'. [ 585.764660][ T3382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9810'. [ 585.782751][ T3382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9810'. [ 586.346568][ T3410] block device autoloading is deprecated and will be removed. [ 586.607143][ T3431] sctp: [Deprecated]: syz.8.9819 (pid 3431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.607143][ T3431] Use struct sctp_sack_info instead [ 586.752932][ T3435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9820'. [ 586.763044][ T3435] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9820'. [ 586.923629][ T3444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9822'. [ 586.989665][ T3451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9822'. [ 586.998794][ T3451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9822'. [ 587.020759][ T3444] lo speed is unknown, defaulting to 1000 [ 587.064829][ T3444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9822'. [ 587.104968][ T3477] netlink: 'syz.2.9823': attribute type 4 has an invalid length. [ 587.139828][ T3479] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 588.291345][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9834'. [ 588.428225][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 588.428244][ T29] audit: type=1326 audit(2000000013.960:78668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.494959][ T29] audit: type=1326 audit(2000000013.990:78669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.518572][ T29] audit: type=1326 audit(2000000013.990:78670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.542227][ T29] audit: type=1326 audit(2000000013.990:78671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.565788][ T29] audit: type=1326 audit(2000000013.990:78672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.589351][ T29] audit: type=1326 audit(2000000013.990:78673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.612866][ T29] audit: type=1326 audit(2000000013.990:78674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.636529][ T29] audit: type=1326 audit(2000000014.000:78675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.660070][ T29] audit: type=1326 audit(2000000014.000:78676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.684105][ T29] audit: type=1326 audit(2000000014.000:78677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3531 comm="syz.8.9836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf1eba9 code=0x7ffc0000 [ 588.719140][ T3535] netlink: 'syz.8.9837': attribute type 4 has an invalid length. [ 588.775614][ T3526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9834'. [ 588.981327][ T3414] hid_parser_main: 20 callbacks suppressed [ 588.981348][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 588.994674][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.004183][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.011837][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.019366][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.026892][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.034331][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.041744][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.049295][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.056738][ T3414] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 589.066821][ T3568] siw: device registration error -23 [ 589.082673][ T3414] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 589.312277][ T3584] netlink: 'syz.7.9849': attribute type 4 has an invalid length. [ 589.701515][ T3619] rdma_op ffff8881034c0980 conn xmit_rdma 0000000000000000 [ 589.926510][ T3627] netlink: 'syz.2.9861': attribute type 4 has an invalid length. [ 590.182478][ T3639] bond3: entered promiscuous mode [ 590.187677][ T3639] bond3: entered allmulticast mode [ 590.209238][ T3639] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.274013][ T3678] siw: device registration error -23 [ 590.443917][ T3639] bond3 (unregistering): Released all slaves [ 590.814130][ T3721] FAULT_INJECTION: forcing a failure. [ 590.814130][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 590.826957][ T3721] CPU: 0 UID: 0 PID: 3721 Comm: syz.2.9870 Not tainted syzkaller #0 PREEMPT(voluntary) [ 590.827099][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 590.827116][ T3721] Call Trace: [ 590.827124][ T3721] [ 590.827134][ T3721] __dump_stack+0x1d/0x30 [ 590.827161][ T3721] dump_stack_lvl+0xe8/0x140 [ 590.827214][ T3721] dump_stack+0x15/0x1b [ 590.827234][ T3721] should_fail_ex+0x265/0x280 [ 590.827259][ T3721] should_failslab+0x8c/0xb0 [ 590.827326][ T3721] kmem_cache_alloc_noprof+0x50/0x310 [ 590.827414][ T3721] ? security_inode_alloc+0x37/0x100 [ 590.827447][ T3721] security_inode_alloc+0x37/0x100 [ 590.827474][ T3721] inode_init_always_gfp+0x4b7/0x500 [ 590.827557][ T3721] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 590.827588][ T3721] alloc_inode+0x58/0x170 [ 590.827617][ T3721] new_inode+0x1d/0xe0 [ 590.827692][ T3721] shmem_get_inode+0x244/0x750 [ 590.827713][ T3721] ? __se_sys_memfd_create+0x1cc/0x590 [ 590.827745][ T3721] __shmem_file_setup+0x113/0x210 [ 590.827826][ T3721] shmem_file_setup+0x3b/0x50 [ 590.827846][ T3721] __se_sys_memfd_create+0x2c3/0x590 [ 590.827875][ T3721] __x64_sys_memfd_create+0x31/0x40 [ 590.827963][ T3721] x64_sys_call+0x2abe/0x2ff0 [ 590.827985][ T3721] do_syscall_64+0xd2/0x200 [ 590.828018][ T3721] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 590.828051][ T3721] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 590.828137][ T3721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.828164][ T3721] RIP: 0033:0x7ff46c90eba9 [ 590.828185][ T3721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.828217][ T3721] RSP: 002b:00007ff46b376e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 590.828317][ T3721] RAX: ffffffffffffffda RBX: 0000000000000473 RCX: 00007ff46c90eba9 [ 590.828335][ T3721] RDX: 00007ff46b376ef0 RSI: 0000000000000000 RDI: 00007ff46c9927e8 [ 590.828348][ T3721] RBP: 0000200000000bc0 R08: 00007ff46b376bb7 R09: 00007ff46b376e40 [ 590.828360][ T3721] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 590.828375][ T3721] R13: 00007ff46b376ef0 R14: 00007ff46b376eb0 R15: 0000200000000680 [ 590.828400][ T3721] [ 591.357361][ T3739] netlink: 'syz.8.9877': attribute type 4 has an invalid length. [ 591.382720][ T3736] lo speed is unknown, defaulting to 1000 [ 591.694044][ T3786] siw: device registration error -23 [ 591.769593][ T3788] net_ratelimit: 239 callbacks suppressed [ 591.769625][ T3788] netlink: zone id is out of range [ 591.780633][ T3788] netlink: zone id is out of range [ 591.785855][ T3788] netlink: zone id is out of range [ 591.790971][ T3788] netlink: zone id is out of range [ 591.796112][ T3788] netlink: zone id is out of range [ 591.801228][ T3788] netlink: zone id is out of range [ 591.806396][ T3788] netlink: zone id is out of range [ 591.811508][ T3788] netlink: zone id is out of range [ 591.816637][ T3788] netlink: zone id is out of range [ 591.821857][ T3788] netlink: zone id is out of range [ 592.517299][ T3807] netlink: 'syz.0.9888': attribute type 4 has an invalid length. [ 592.564526][ T3806] lo speed is unknown, defaulting to 1000 [ 592.726532][ T3838] FAULT_INJECTION: forcing a failure. [ 592.726532][ T3838] name failslab, interval 1, probability 0, space 0, times 0 [ 592.739254][ T3838] CPU: 0 UID: 0 PID: 3838 Comm: syz.0.9892 Not tainted syzkaller #0 PREEMPT(voluntary) [ 592.739282][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.739297][ T3838] Call Trace: [ 592.739307][ T3838] [ 592.739317][ T3838] __dump_stack+0x1d/0x30 [ 592.739344][ T3838] dump_stack_lvl+0xe8/0x140 [ 592.739422][ T3838] dump_stack+0x15/0x1b [ 592.739438][ T3838] should_fail_ex+0x265/0x280 [ 592.739501][ T3838] should_failslab+0x8c/0xb0 [ 592.739534][ T3838] __kmalloc_noprof+0xa5/0x3e0 [ 592.739568][ T3838] ? rds_message_alloc+0x45/0x120 [ 592.739665][ T3838] rds_message_alloc+0x45/0x120 [ 592.739703][ T3838] rds_sendmsg+0x860/0x14a0 [ 592.739763][ T3838] ? __pfx_rds_sendmsg+0x10/0x10 [ 592.739863][ T3838] __sock_sendmsg+0x142/0x180 [ 592.739901][ T3838] ____sys_sendmsg+0x31e/0x4e0 [ 592.740009][ T3838] ___sys_sendmsg+0x17b/0x1d0 [ 592.740065][ T3838] __x64_sys_sendmsg+0xd4/0x160 [ 592.740105][ T3838] x64_sys_call+0x191e/0x2ff0 [ 592.740205][ T3838] do_syscall_64+0xd2/0x200 [ 592.740245][ T3838] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 592.740277][ T3838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 592.740317][ T3838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.740380][ T3838] RIP: 0033:0x7fa16847eba9 [ 592.740447][ T3838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.740469][ T3838] RSP: 002b:00007fa166edf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.740493][ T3838] RAX: ffffffffffffffda RBX: 00007fa1686c5fa0 RCX: 00007fa16847eba9 [ 592.740524][ T3838] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000003 [ 592.740536][ T3838] RBP: 00007fa166edf090 R08: 0000000000000000 R09: 0000000000000000 [ 592.740548][ T3838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.740560][ T3838] R13: 00007fa1686c6038 R14: 00007fa1686c5fa0 R15: 00007ffd47894dd8 [ 592.740579][ T3838] [ 593.310557][ T3859] siw: device registration error -23 [ 593.435325][ T3863] netlink: 'syz.0.9901': attribute type 4 has an invalid length. [ 593.669748][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 593.669765][ T29] audit: type=1326 audit(2000000003.730:78877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.725147][ T29] audit: type=1326 audit(2000000003.770:78878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.748710][ T29] audit: type=1326 audit(2000000003.770:78879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.772273][ T29] audit: type=1326 audit(2000000003.770:78880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.795889][ T29] audit: type=1326 audit(2000000003.770:78881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.819500][ T29] audit: type=1326 audit(2000000003.770:78882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.843076][ T29] audit: type=1326 audit(2000000003.770:78883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.866721][ T29] audit: type=1326 audit(2000000003.770:78884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.883551][ T36] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 593.890260][ T29] audit: type=1326 audit(2000000003.770:78885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 593.923280][ T29] audit: type=1326 audit(2000000003.770:78886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.0.9903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16847eba9 code=0x7ffc0000 [ 594.130950][ T3890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3890 comm=syz.7.9908 [ 594.291232][ T3902] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9910'. [ 594.300451][ T3902] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9910'. [ 594.354098][ T3886] loop0: detected capacity change from 0 to 2048 [ 594.433772][ T3886] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.9905: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 594.472145][ T3886] EXT4-fs (loop0): get root inode failed [ 594.477925][ T3886] EXT4-fs (loop0): mount failed [ 594.496066][ T3909] lo speed is unknown, defaulting to 1000 [ 595.592125][ T3982] lo speed is unknown, defaulting to 1000 [ 595.853217][ T4014] lo speed is unknown, defaulting to 1000 [ 596.384231][ T4063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 596.390898][ T4063] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 596.398666][ T4063] vhci_hcd vhci_hcd.0: Device attached [ 596.408202][ T4072] vhci_hcd: unknown pdu 2 [ 596.412883][T17425] vhci_hcd: stop threads [ 596.417205][T17425] vhci_hcd: release socket [ 596.421655][T17425] vhci_hcd: disconnect device [ 596.616081][ T4092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 596.622648][ T4092] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 596.630329][ T4092] vhci_hcd vhci_hcd.0: Device attached [ 596.639918][ T4099] vhci_hcd: unknown pdu 2 [ 596.644524][T17393] vhci_hcd: stop threads [ 596.649058][T17393] vhci_hcd: release socket [ 596.653540][T17393] vhci_hcd: disconnect device [ 596.820368][ T4107] siw: device registration error -23 [ 596.940930][ T4109] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9941'. [ 596.985766][ T4109] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9941'. [ 597.300032][ T36] kernel write not supported for file /770/gid_map (pid: 36 comm: kworker/1:1) [ 597.386271][ T4123] lo speed is unknown, defaulting to 1000 [ 597.598524][ T4154] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 597.722952][ T4159] lo speed is unknown, defaulting to 1000 [ 598.008888][ T4193] loop0: detected capacity change from 0 to 512 [ 598.094243][ T4195] lo speed is unknown, defaulting to 1000 [ 598.146391][ T4195] netlink: 'syz.7.9952': attribute type 1 has an invalid length. [ 598.478169][ T4193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.507164][ T4193] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.675430][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 598.675476][ T29] audit: type=1400 audit(2000000002.450:79484): avc: denied { write } for pid=4237 comm="syz.1.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 598.805079][ T874] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.821241][ T29] audit: type=1400 audit(2000000002.480:79485): avc: denied { unmount } for pid=874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 598.841125][ T29] audit: type=1400 audit(2000000002.480:79486): avc: denied { create } for pid=4237 comm="syz.1.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 598.861930][ T29] audit: type=1400 audit(2000000002.480:79487): avc: denied { execmem } for pid=4237 comm="syz.1.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 598.881484][ T29] audit: type=1400 audit(2000000002.600:79488): avc: denied { append } for pid=4198 comm="syz.8.9955" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 598.973501][ T4246] siw: device registration error -23 [ 599.285100][ T29] audit: type=1400 audit(2000000002.750:79489): avc: denied { create } for pid=4237 comm="syz.1.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 599.305539][ T29] audit: type=1400 audit(2000000002.750:79490): avc: denied { write } for pid=4237 comm="syz.1.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 599.313766][ T4257] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9963'. [ 599.330170][ T29] audit: type=1326 audit(2000000003.050:79491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.7.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 599.330256][ T29] audit: type=1326 audit(2000000003.050:79492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.7.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 599.330283][ T29] audit: type=1326 audit(2000000003.050:79493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4256 comm="syz.7.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce942beba9 code=0x7ffc0000 [ 599.339397][ T4257] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9963'. [ 599.748550][ T4271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.757147][ T4271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.834002][ T4274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.842829][ T4274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.063841][ T4280] lo speed is unknown, defaulting to 1000 [ 600.103443][ T4303] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 601.094289][ T4329] rdma_op ffff888159b9dd80 conn xmit_rdma 0000000000000000 [ 601.142871][ T4334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9978'. [ 601.375139][ T4345] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 601.381711][ T4345] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 601.389379][ T4345] vhci_hcd vhci_hcd.0: Device attached [ 601.398821][ T4353] vhci_hcd: unknown pdu 2 [ 601.406103][T17425] vhci_hcd: stop threads [ 601.410438][T17425] vhci_hcd: release socket [ 601.414960][T17425] vhci_hcd: disconnect device [ 601.595704][ T4362] lo speed is unknown, defaulting to 1000 [ 602.087261][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9987'. [ 602.102339][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9988'. [ 602.112068][ T4392] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9987'. [ 602.124622][ T4393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9988'. [ 602.447508][ T4399] lo speed is unknown, defaulting to 1000 [ 602.609444][ T4427] loop0: detected capacity change from 0 to 1024 [ 602.640475][ T4427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.654561][ T4427] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.701523][ T874] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.999009][ T4507] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 603.005637][ T4507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 603.013345][ T4507] vhci_hcd vhci_hcd.0: Device attached [ 603.022034][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9998'. [ 603.031713][ T4518] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9998'. [ 603.040794][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9998'. [ 603.116200][ T4519] lo speed is unknown, defaulting to 1000 [ 603.166838][ T4519] netlink: 'syz.7.9999': attribute type 1 has an invalid length. [ 603.384952][ T4515] vhci_hcd: connection closed [ 603.415223][T17380] vhci_hcd: stop threads [ 603.424249][T17380] vhci_hcd: release socket [ 603.428769][T17380] vhci_hcd: disconnect device [ 603.696867][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.705592][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.714827][ T29] kauditd_printk_skb: 704 callbacks suppressed [ 603.714845][ T29] audit: type=1400 audit(2000000002.310:80198): avc: denied { ioctl } for pid=4548 comm="syz.2.10001" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 603.820364][ T29] audit: type=1400 audit(2000000002.430:80199): avc: denied { name_bind } for pid=4559 comm="syz.7.10003" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 603.929105][ T3294] ================================================================== [ 603.937383][ T3294] BUG: KCSAN: data-race in __mark_inode_dirty / move_expired_inodes [ 603.945508][ T3294] [ 603.947839][ T3294] read-write to 0xffff888107589758 of 4 bytes by task 17380 on cpu 0: [ 603.956087][ T3294] move_expired_inodes+0x17a/0x400 [ 603.961224][ T3294] queue_io+0xd9/0x2c0 [ 603.965314][ T3294] wb_writeback+0x226/0x5c0 [ 603.969836][ T3294] wb_workfn+0x4c9/0x910 [ 603.974095][ T3294] process_scheduled_works+0x4cb/0x9d0 [ 603.979575][ T3294] worker_thread+0x582/0x770 [ 603.984188][ T3294] kthread+0x489/0x510 [ 603.988266][ T3294] ret_from_fork+0x11f/0x1b0 [ 603.992875][ T3294] ret_from_fork_asm+0x1a/0x30 [ 603.997653][ T3294] [ 603.999982][ T3294] read to 0xffff888107589758 of 4 bytes by task 3294 on cpu 1: [ 604.007526][ T3294] __mark_inode_dirty+0x191/0x750 [ 604.012571][ T3294] mark_buffer_dirty+0x133/0x210 [ 604.017526][ T3294] block_page_mkwrite+0x287/0x3d0 [ 604.022570][ T3294] ext4_page_mkwrite+0x859/0xb90 [ 604.027518][ T3294] do_wp_page+0xddb/0x24e0 [ 604.031971][ T3294] handle_mm_fault+0x77d/0x2c20 [ 604.036925][ T3294] do_user_addr_fault+0x636/0x1090 [ 604.042062][ T3294] exc_page_fault+0x62/0xa0 [ 604.046581][ T3294] asm_exc_page_fault+0x26/0x30 [ 604.051443][ T3294] [ 604.053768][ T3294] value changed: 0x00000008 -> 0x0001000a [ 604.059486][ T3294] [ 604.061809][ T3294] Reported by Kernel Concurrency Sanitizer on: [ 604.067967][ T3294] CPU: 1 UID: 0 PID: 3294 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 604.077872][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.088111][ T3294] ================================================================== [ 604.199838][ T29] audit: type=1326 audit(2000000002.810:80200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.1.10000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 604.223531][ T29] audit: type=1326 audit(2000000002.810:80201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4542 comm="syz.1.10000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf412eeba9 code=0x7ffc0000 [ 604.435414][ T4553] loop0: detected capacity change from 0 to 2048 [ 604.458980][ T4553] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.10002: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 604.478433][ T4553] EXT4-fs (loop0): get root inode failed [ 604.484111][ T4553] EXT4-fs (loop0): mount failed