last executing test programs: 4m44.553292906s ago: executing program 32 (id=232): inotify_init() iopl(0x3) ioperm(0xe5b, 0x9, 0x200000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) getpgrp(0x0) iopl(0x0) 3m38.983653932s ago: executing program 33 (id=974): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x38, &(0x7f00000004c0)=ANY=[@ANYBLOB="a3ab8790f5998dba366771f0b7ac8ef8c1c9c4bb17eb58ab5ce02cb0f10c8f43b8e68206f0059bb28d66b22b58a8312bf408c333132900d39d7893cf18393ed03d63deb9aee379a8ab623cc0278deb602ff27cb48fdb3cd7229ba66a55c82fdc82831aedbf5fbd5038dafb48680d6d0c4bc3059efe98b8c2872ae12325f7a2c85960263955791acfc8af5d9e3a19f01d27d492f600817c9264debb3f87d2c72d19f0d469c6d6a0282f1629933fed27403d", @ANYRES16=r0, @ANYRES32=r1], 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040002, 0x1, @perf_config_ext={0xf60, 0xff}, 0x1100, 0x3, 0x0, 0x5, 0xffffffffffffffff, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0xbc8c}, 0x0, 0x9, 0xffffffffffffffff, 0x3) socket$rds(0x15, 0x5, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00008fa33a0000080100000800004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000800ff53000000c0a416817bddb41639a69bae92000000be5f8a44c0880c97b62c000000000000000000000000000000000ad89ef5f61efc4744"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) 3m21.916761906s ago: executing program 34 (id=1198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {0x0, 0x0, 0x300}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) 3m21.175150655s ago: executing program 35 (id=1207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) 3m20.666081871s ago: executing program 36 (id=1215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 2m48.263023958s ago: executing program 37 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x2f, 0x0, &(0x7f0000000780)=0x700) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1804000000000000000000000000000018bb46257760908d07ec1153ec32840f71010000696c000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20003, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60cb763e00183afffe800000000000000000000000000041ff020200000000000000000000000001860090780000000000000000020000001801007c4de2027892875cb877163e98d705da42eb425927e893e9b056158df3fc5b57d0bfa116bcd03b642b8a93ea520e59294ec91332bbd34285bf6b3ce144a60b4b80d826eb6766d392ab7d5a01e52130d57cd4935bcb36eba0411e50855bc20a35349799402c179daeca00caa47e55668b92a56cdbbf7686471633e63aa5f643225c8f56e8d259c235e0469e"], 0x0) 2m48.255706048s ago: executing program 38 (id=1669): close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 2m47.227341221s ago: executing program 39 (id=1683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c00198008000100ad040000300001802c000180140003400000000000000000000000000000000014000400fe8000000000000000000000000000bb"], 0x50}}, 0x0) 2m46.079226185s ago: executing program 40 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100020000000400"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000a00000000000000000000000800010002"], 0x20}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) 2m35.184160602s ago: executing program 41 (id=1784): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzsz7GtwjAUBdDrRMn/CNEwQSoK1kHsk4Yp2IAJ6JiLKghbSEwAFOcU70n32pYcvmpMMnXJ8v9KNnWe9+vnGso8JtuS3JdWz23V413GTKcuKe2hd391Hlb9UFpXg6XPbdeuJtccLx/4IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8vEcAAAD//86+Cfs=") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x4c, 0x4}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000500)=""/146, 0x1c, 0x92, 0x1, 0xa, 0x0, @void, @value}, 0xfffffffffffffdf3) socketpair(0x5, 0x5, 0xef2, &(0x7f0000000780)) socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x11c, &(0x7f00000008c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r7, @ANYBLOB="31fa3996febc2220edecfad38e84ee71d14e716f6b993ec348594efe0ff24777a3381fac60f4a27e0b28fcb080cff53bba66", @ANYRESHEX=r3, @ANYRESHEX=r5, @ANYBLOB="b750d8962c306861a1cb9ec97cbc89791ada527f742b45da8dad4d0b777c8b5a222c3ff795455a32703ba0823e7f6cc55f960e4ebaa967970c0943d2f7a9a22ce5a8fa53295beb245c3d3fd910b2260111125a753e959bda7a389ac277d938c828d55e7513227ebb316458192438e2dfd6ec011337d92303d53944ef81319696d25f579ca295fd210a571ab9ed9b09f1d3fa33927c824c43406fbf4e051c3f545572b07f2b52b6138d418e6924771a37c7ea7f19c51e06df390e1a24dd8869734eb1ab95ad618cfa62e8cb3c2c03f7", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)={0x0, 0xfb, 0x96, 0x4, 0x42, "3cdef62c71f0d68a6b81528306b11125", "78eb8ebec040cd2728665903bbf2a5625208a66ff05feb526789e315dc5c7418394a2e3339ad0d13ab5825b73fc62c71fa872045c2c4eb75643924820cf95ce40a7160be160294ffac9c86e9a6aca3850a043e98b29510dfb3ee747ff77d7479bf79a8d9ecef58db31f23f2fac175a8a515ce2b52a3aa866bc287bdcab7a3f0bf6"}, 0x96, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) ioctl$TCFLSH(r0, 0x5608, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 2m34.629148599s ago: executing program 42 (id=1792): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x72, 0x0) 2m33.75245476s ago: executing program 5 (id=1798): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc0590, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x6c48, 0x5, 0x4, 0x1, 0xc, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000"], 0xd4}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x11, 0x1e, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x15, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x1, 0x200000000000004}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m33.585203592s ago: executing program 5 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) r6 = io_uring_setup(0x723f, &(0x7f0000000300)={0x0, 0x2754, 0x800, 0x3, 0x1f3}) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000400)="b7e4d99cb257bcd499fecc56b86953c1bd4215a740f2", &(0x7f0000000480)=@udp=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa4ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x3, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendto$inet6(r8, &(0x7f0000000b80)="bea0bfc82b", 0x5, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x4}, 0x1c) shutdown(r8, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_bp={0x0, 0xb}, 0x11d08, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r11 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x10000) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_SET_RESERVED_SIZE(r12, 0x2275, &(0x7f0000000180)=0xc92b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 2m33.460318844s ago: executing program 5 (id=1801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 2m33.423595124s ago: executing program 5 (id=1802): io_setup(0x8, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x6, 0x1ff) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000680)="73239de3abe82b110e4046574dbf369728009982fb4929df910b897ea8aba7c581d786d180139cc51843c746f6d1d149fe7e35a7916e5c6d43722a6db24ec7685d8f2989e09c73d7871927257de079899c0b95d8f501e40ced7116afde1e3593fdff29a3efd9e76ea1060ab920cfcd6721439bc442a96e737abbdab403052a88f292aeb1404829d915d365048598f4676e027b2fec48692674ec208534bff2da73f024562c0831d9004ee84e6068d013fd", 0xb1}, {&(0x7f0000000780)="3cfc7024b21bbc45c5a38eb9af0ad396ba9a8a61140ba7d53d7eee7322b0bf2933156f668e167c4e8dd2d54f19f98949bd93fae8723cc3e3fb36956aeac8e6da191185d61a52a0abe1dad0c3af0961f695689c929d70dbadd06927215a7769075a6369b377", 0x65}, {&(0x7f0000000800)="cd7bb37211aac2cecbaa7abb22ba652072d289ce8d7607c0a66f5c9d7cb0ee6db4da50667749d9400ca3fd4813a1c8d07e6508dcfaa447d798cf3b13c2c4a9027464325b25d7d7e39b69d89c4b496ca1de70a337b9bde277c123bbc4d9c6ecd5ac3a10adb1d48218b00bcd90756cbbb50305507c4cc61914757c24d7bd215b8c7540430117b0273180e798f857924368635b864dd0d98419648cba60a51083797966b730738843bb7744f93de6f2e6fa4ad78e057bd2736cb20379c95de392d86d2cd857afe8926e7a400c1b2919b9e2206ece45", 0xd4}, {&(0x7f0000000580)="b13adb8da3f3b8ab6e67ffa79a383e75f6894f", 0x13}, {&(0x7f0000000600)="3af491998974c3314cb8b779765650dec4e64a5e06dc73891b132e60a302eba47061710e249cb2a8f6ba77606a37495dd1", 0x31}, {&(0x7f0000000980)="ad3738a6743fa3df92064cf80921a6af056b9e9dc691b1674a5e53e702ce58238d167b009887f2bfc4e04953091cf6c1abfc5b5cbe5ad22cc4496aa8d4c8144c8536240f408f628a5ee8d307a10ce3a67e840e2ce67b13860d781002", 0x5c}], 0x6, 0xa, 0x9) ioperm(0x0, 0x82, 0x1e) ioprio_get$uid(0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000340)=0x8) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e205cb1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c786ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21108f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56", 0x84}, {&(0x7f00000001c0)="23bb52f2a4", 0x5}], 0x2}, 0x240048d0) eventfd2(0x0, 0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff", @ANYBLOB], 0x50) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="856b1f3400442f01fc000000000000000000000000000000ff0200000000000000000000a80000000000000800000086dd080088be00000003100000000100000000000000080022eb00000000200000090200000004000000000000000800655800"/115], 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2m32.515724975s ago: executing program 5 (id=1807): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/udplite6\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x200, 0x0, 0x0) preadv(r4, &(0x7f0000000a00)=[{&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f00000004c0)=""/38, 0x26}, {&(0x7f0000000840)=""/149, 0x95}, {&(0x7f0000000900)=""/190, 0xbe}, {&(0x7f0000000700)=""/46, 0x2e}], 0x8, 0x6657ecb2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)={0x2000000b}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000340)={0x2, 0x80, 0x8, 0x6, 0x6, 0x5, 0x0, 0x2, 0x24008, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240)}, 0x20, 0x6, 0x800, 0x1, 0x5, 0x4, 0x9, 0x0, 0x8, 0x0, 0x3}) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, &(0x7f0000000140)='usrjquota=') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x8dc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000480)={0x20, 0xe, 0xd, 0x7, 0x5, 0xb, &(0x7f0000000d80)="4268132352"}) 2m32.194599319s ago: executing program 5 (id=1810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)=@rc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000140)=""/54, 0x36}, {0x0}], 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x88805) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet_udplite(0x2, 0x2, 0x88) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b4}) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x204000, 0x67) faccessat2(r0, 0x0, 0x2, 0x1300) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x103fe, 0x2}) 2m29.216697587s ago: executing program 2 (id=1841): io_setup(0x8, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x6, 0x1ff) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000680)="73239de3abe82b110e4046574dbf369728009982fb4929df910b897ea8aba7c581d786d180139cc51843c746f6d1d149fe7e35a7916e5c6d43722a6db24ec7685d8f2989e09c73d7871927257de079899c0b95d8f501e40ced7116afde1e3593fdff29a3efd9e76ea1060ab920cfcd6721439bc442a96e737abbdab403052a88f292aeb1404829d915d365048598f4676e027b2fec48692674ec208534bff2da73f024562c0831d9004ee84e6068d013fd", 0xb1}, {&(0x7f0000000780)="3cfc7024b21bbc45c5a38eb9af0ad396ba9a8a61140ba7d53d7eee7322b0bf2933156f668e167c4e8dd2d54f19f98949bd93fae8723cc3e3fb36956aeac8e6da191185d61a52a0abe1dad0c3af0961f695689c929d70dbadd06927215a7769075a6369b377", 0x65}, {&(0x7f0000000800)="cd7bb37211aac2cecbaa7abb22ba652072d289ce8d7607c0a66f5c9d7cb0ee6db4da50667749d9400ca3fd4813a1c8d07e6508dcfaa447d798cf3b13c2c4a9027464325b25d7d7e39b69d89c4b496ca1de70a337b9bde277c123bbc4d9c6ecd5ac3a10adb1d48218b00bcd90756cbbb50305507c4cc61914757c24d7bd215b8c7540430117b0273180e798f857924368635b864dd0d98419648cba60a51083797966b730738843bb7744f93de6f2e6fa4ad78e057bd2736cb20379c95de392d86d2cd857afe8926e7a400c1b2919b9e2206ece45", 0xd4}, {&(0x7f0000000580)="b13adb8da3f3b8ab6e67ffa79a383e75f6894f", 0x13}, {&(0x7f0000000600)="3af491998974c3314cb8b779765650dec4e64a5e06dc73891b132e60a302eba47061710e249cb2a8f6ba77606a37495dd1", 0x31}, {&(0x7f0000000980)="ad3738a6743fa3df92064cf80921a6af056b9e9dc691b1674a5e53e702ce58238d167b009887f2bfc4e04953091cf6c1abfc5b5cbe5ad22cc4496aa8d4c8144c8536240f408f628a5ee8d307a10ce3a67e840e2ce67b13860d781002", 0x5c}], 0x6, 0xa, 0x9) ioperm(0x0, 0x82, 0x1e) ioprio_get$uid(0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000340)=0x8) socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) eventfd2(0x0, 0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff", @ANYBLOB], 0x50) syz_emit_ethernet(0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="856b1f3400442f01fc000000000000000000000000000000ff0200000000000000000000a80000000000000800000086dd080088be00000003100000000100000000000000080022eb00000000200000090200000004000000000000000800655800"/115], 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 2m28.2107934s ago: executing program 2 (id=1853): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m27.332028011s ago: executing program 2 (id=1860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xc}, 0x4c58, 0x5, 0x2b6, 0x1, 0xc, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000380)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 2m27.319438791s ago: executing program 4 (id=1861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 2m27.136891003s ago: executing program 2 (id=1862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004000001c00010000f4d5fb486ea28d5de70a6ac0c0203930db38684a1f9b937c5b451a9cf87d43bd337b7c9d8613cd285691c79a16e8a7df20b6bfda7fa97a1c3814aeb803e076a4396d048ecadd0cdb40bd99c691e2c3b7ac71a4462b48c1a3e5e5", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r3, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES8, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES32, @ANYRES32, @ANYRES32], 0xe8, 0x200400d1}, 0x80) r6 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRESHEX=r6], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000003c0)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x6efabeaea90cffbd, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r11}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2m27.063281164s ago: executing program 4 (id=1863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x6}, 0x10800, 0x0, 0x0, 0x0, 0x4, 0xfffffc00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x90, 0x10, 0xe0000, 0x3, 0x10, "fc76e5dc5318792aaeffc08993ada88f1dcf9a", 0x4ef}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x3e, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x5}, 0x1bf5c, 0x7fffffffffffffff, 0x1, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x143000, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0080) 2m27.028895334s ago: executing program 2 (id=1864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m26.726323138s ago: executing program 2 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 2m26.709536869s ago: executing program 43 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 2m26.444751152s ago: executing program 4 (id=1871): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'gre0\x00', 0x4}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffa}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x8090) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 2m26.397578622s ago: executing program 4 (id=1872): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004000001c00010000f4d5fb486ea28d5de70a6ac0c0203930db38684a1f9b937c5b451a9cf87d43bd337b7c9d8613cd285691c79a16e8a7df20b6bfda7fa97a1c3814aeb803e076a4396d048ecadd0cdb40bd99c691e2c3b7ac71a4462b48c1a3e5e5", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r3, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES8, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES32, @ANYRES32, @ANYRES32], 0xe8, 0x200400d1}, 0x80) r6 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRESHEX=r6], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000003c0)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x6efabeaea90cffbd, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r11}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2m26.254966184s ago: executing program 4 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 2m25.720723491s ago: executing program 4 (id=1874): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) 2m25.707875711s ago: executing program 44 (id=1874): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) 2m17.141103899s ago: executing program 45 (id=1810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)=@rc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000140)=""/54, 0x36}, {0x0}], 0x3}, 0x0) ftruncate(0xffffffffffffffff, 0x88805) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet_udplite(0x2, 0x2, 0x88) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b4}) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x204000, 0x67) faccessat2(r0, 0x0, 0x2, 0x1300) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x103fe, 0x2}) 2m3.715530637s ago: executing program 7 (id=2155): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)={0x1c, r2, 0xb97534d5fe9704cf, 0x800003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x800) 2m3.683071737s ago: executing program 7 (id=2156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x7fff, 0x9, 0x100, 0x5, 0x2400000}) 2m3.651714018s ago: executing program 7 (id=2157): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m3.565423719s ago: executing program 7 (id=2158): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 2m3.47492626s ago: executing program 7 (id=2161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xb}]}}}}}}}, 0x0) 2m3.279760332s ago: executing program 7 (id=2168): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m3.254450003s ago: executing program 46 (id=2168): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1m31.802655828s ago: executing program 3 (id=2643): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) r1 = eventfd(0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m31.735398338s ago: executing program 3 (id=2644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m31.507460181s ago: executing program 3 (id=2646): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) 1m30.507110783s ago: executing program 3 (id=2655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r4, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="004000001c00010000f4d5fb486ea28d5de70a6ac0c0203930db38684a1f9b937c5b451a9cf87d43bd337b7c9d8613cd285691c79a16e8a7df20b6bfda7fa97a1c3814aeb803e076a4396d048ecadd0cdb40bd99c691e2c3b7ac71a4462b48c1a3e5e5", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r3, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES8, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRESHEX=r5, @ANYRES32, @ANYRES32, @ANYRES32], 0xe8, 0x200400d1}, 0x80) r6 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRESDEC, @ANYRESHEX=r6], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000480), 0x1020, &(0x7f0000000840)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000003c0)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x6efabeaea90cffbd, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000002c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1m30.412565465s ago: executing program 3 (id=2658): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x1055, &(0x7f0000001080)="$eJzsz7GtwjAUBdDrRMn/CNEwQSoK1kHsk4Yp2IAJ6JiLKghbSEwAFOcU70n32pYcvmpMMnXJ8v9KNnWe9+vnGso8JtuS3JdWz23V413GTKcuKe2hd391Hlb9UFpXg6XPbdeuJtccLx/4IgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8vEcAAAD//86+Cfs=") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x4c, 0x4}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000500)=""/146, 0x1c, 0x92, 0x1, 0xa, 0x0, @void, @value}, 0xfffffffffffffdf3) socketpair(0x5, 0x5, 0xef2, &(0x7f0000000780)) socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x11c, &(0x7f00000008c0)=ANY=[@ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRES16=r7, @ANYBLOB="31fa3996febc2220edecfad38e84ee71d14e716f6b993ec348594efe0ff24777a3381fac60f4a27e0b28fcb080cff53bba66", @ANYRESHEX=r3, @ANYRESHEX=r5, @ANYBLOB="b750d8962c306861a1cb9ec97cbc89791ada527f742b45da8dad4d0b777c8b5a222c3ff795455a32703ba0823e7f6cc55f960e4ebaa967970c0943d2f7a9a22ce5a8fa53295beb245c3d3fd910b2260111125a753e959bda7a389ac277d938c828d55e7513227ebb316458192438e2dfd6ec011337d92303d53944ef81319696d25f579ca295fd210a571ab9ed9b09f1d3fa33927c824c43406fbf4e051c3f545572b07f2b52b6138d418e6924771a37c7ea7f19c51e06df390e1a24dd8869734eb1ab95ad618cfa62e8cb3c2c03f7", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0, @void, @value}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0xfb, 0x96, 0x4, 0x42, "3cdef62c71f0d68a6b81528306b11125", "78eb8ebec040cd2728665903bbf2a5625208a66ff05feb526789e315dc5c7418394a2e3339ad0d13ab5825b73fc62c71fa872045c2c4eb75643924820cf95ce40a7160be160294ffac9c86e9a6aca3850a043e98b29510dfb3ee747ff77d7479bf79a8d9ecef58db31f23f2fac175a8a515ce2b52a3aa866bc287bdcab7a3f0bf6"}, 0x96, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) ioctl$TCFLSH(r0, 0x5608, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 1m30.205118368s ago: executing program 3 (id=2663): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}, {&(0x7f0000000400)=""/161, 0xa1}], 0x7}, 0x1000}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x8042, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 1m30.176561428s ago: executing program 47 (id=2663): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}, {&(0x7f0000000400)=""/161, 0xa1}], 0x7}, 0x1000}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x8042, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 3.464767286s ago: executing program 6 (id=3781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3.464312006s ago: executing program 6 (id=3782): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x3e1}, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 3.393241977s ago: executing program 6 (id=3784): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x32, 0x80800) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000280000000800008000000000", @ANYRES32, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4) 2.407641999s ago: executing program 6 (id=3800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x8090) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 2.3648881s ago: executing program 6 (id=3801): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) 1.57261536s ago: executing program 1 (id=3807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.54359767s ago: executing program 1 (id=3808): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x800}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 1.370499512s ago: executing program 8 (id=3810): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 948.191588ms ago: executing program 0 (id=3812): mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 941.929398ms ago: executing program 1 (id=3813): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 881.577499ms ago: executing program 0 (id=3814): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getresgid(&(0x7f00000001c0), &(0x7f0000000280), 0x0) 860.430219ms ago: executing program 0 (id=3815): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fbdbdf25250000000a0001007770616e33000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040014}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x1600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x80003, 0x2}) 838.206629ms ago: executing program 0 (id=3816): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 821.320329ms ago: executing program 1 (id=3817): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(0x3) syz_usbip_server_init(0x0) r1 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 789.78776ms ago: executing program 0 (id=3818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 766.72738ms ago: executing program 9 (id=3819): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 737.28529ms ago: executing program 0 (id=3820): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x281, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f0000000a00)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 709.029841ms ago: executing program 6 (id=3821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close(0x3) syz_usbip_server_init(0x0) r1 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 687.132091ms ago: executing program 9 (id=3822): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xd348}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030303030302c70726976700f72742c00"]) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0), 0x4) 584.788072ms ago: executing program 9 (id=3823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000000c0004400000000000000000e0000a80480002800800034000000003080003400000000308000340000000020900020073797a31000000000800034000000001080003400000000108000180fffffffb08000180fffffffe3a000100d5867498a18a515bfa0df242b8dd5cc3eb5106a4f3109f9909cb0aa08db584ba5ee6d4bbb45478287310a5b3a2d6b9d7dcb8abfa1d100000580002800900020073797a3200000000080003400000000408000180fffffffc080003400000000408000180ffffffff0900020073797a320000000008000180fffffffe08000340000000030900020073797a30000000000600064019d20000040201802400028008000340000000000800034000000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073797a31000000000900020073797a320000000008000340000000003400028008000180000000000900020073797a310000000008000340000000000900020073797a3200000000080003400000000004000280440002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a320000000008000180000000000900020073797a3200000000fc000100789be1642f"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 483.622633ms ago: executing program 8 (id=3824): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x158}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 418.318674ms ago: executing program 9 (id=3825): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getresgid(&(0x7f00000001c0), &(0x7f0000000280), 0x0) 296.643306ms ago: executing program 8 (id=3826): syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x84d8, 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 265.899097ms ago: executing program 9 (id=3827): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018", 0x5a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000000000000033", 0x58}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689", 0xc5}, {&(0x7f0000000e80)="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", 0x12f}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 187.453617ms ago: executing program 8 (id=3828): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 102.918038ms ago: executing program 9 (id=3829): r0 = syz_open_dev$sg(0x0, 0x32, 0x80800) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000280000000800008000000000", @ANYRES32, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000300)={0x62, "a4395026f7fca8f411d271a8ac0352f02647be56f7af5c020d00a854bde7a3a2e42c1c5fcac45b88f2eb03642b134fd8e5b9bfd57889164508e1794a753cea7f"}) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000040)={0x4, "11988c7ba5bb888131cac156c94e0a000000000000df5be03664724d1dd748c3fa198dcd95bf761a3a4c868b46327ff700000000000000005026b76100"}) write$UHID_DESTROY(r3, &(0x7f00000001c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x42, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 96.281928ms ago: executing program 8 (id=3830): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='pwc_handler_exit\x00', r1}, 0x18) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000780)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x4}}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x40800) accept4(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000500)) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440), 0x400) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=unix,access=client,cache=loose,debug=0x000000000000096a,access=any,dfltgid=', @ANYRESHEX=0x0, @ANYRES64=r0]) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0xb, 0x9, 0x7, 0x0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) 55.956049ms ago: executing program 1 (id=3831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 12.297769ms ago: executing program 8 (id=3832): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fbdbdf25250000000a0001007770616e33000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040014}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x1600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x88) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x5}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r4, 0x4, 0x0) 0s ago: executing program 1 (id=3833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500100001a00010000000000000000007f00000100000000000000000000000000000000000000000000000000000001000000000000", @ANYRES32=0x0], 0x150}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000001680)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x80, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000200)="7ca668286d80590eaea5c915", 0xc}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x4004000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) kernel console output (not intermixed with test programs): iscuous mode [ 258.110724][ T3553] veth1_vlan: left promiscuous mode [ 258.110783][ T3553] veth0_vlan: left promiscuous mode [ 258.291677][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 258.294518][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 258.486846][T11027] chnl_net:caif_netlink_parms(): no params data found [ 258.570163][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.577447][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.594220][T11027] bridge_slave_0: entered allmulticast mode [ 258.600990][T11027] bridge_slave_0: entered promiscuous mode [ 258.608259][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.615649][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.622887][ T6456] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 258.622953][T11027] bridge_slave_1: entered allmulticast mode [ 258.637145][T11027] bridge_slave_1: entered promiscuous mode [ 258.677999][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.697572][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.722658][T11027] team0: Port device team_slave_0 added [ 258.731594][T11027] team0: Port device team_slave_1 added [ 258.737520][ T6456] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.754593][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.761746][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.787825][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.801113][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.808165][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.834339][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.855854][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 258.855875][ T29] audit: type=1326 audit(1748436644.862:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 258.885801][ T29] audit: type=1326 audit(1748436644.862:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 258.909439][ T29] audit: type=1326 audit(1748436644.862:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 258.933004][ T29] audit: type=1326 audit(1748436644.862:4377): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 258.957033][ T29] audit: type=1326 audit(1748436644.862:4378): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 258.981038][ T29] audit: type=1326 audit(1748436644.862:4379): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 259.004952][ T29] audit: type=1326 audit(1748436644.862:4380): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 259.028898][ T29] audit: type=1326 audit(1748436644.862:4381): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 259.052749][ T29] audit: type=1326 audit(1748436644.862:4382): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 259.076715][ T29] audit: type=1326 audit(1748436644.862:4383): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.1.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 259.176356][T11084] bond3 (unregistering): Released all slaves [ 259.216602][T11027] hsr_slave_0: entered promiscuous mode [ 259.222966][T11027] hsr_slave_1: entered promiscuous mode [ 259.223930][T11086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2680'. [ 259.232114][T11088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=11088 comm=syz.6.2681 [ 259.238346][T11027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.261835][T11027] Cannot create hsr debugfs directory [ 259.306175][T11093] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.2684'. [ 259.316230][T11093] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.2684'. [ 259.471765][T11110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=11110 comm=syz.0.2691 [ 259.602376][T11027] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 259.613235][T11027] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 259.622812][T11027] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 259.632741][T11027] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 259.688200][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.704794][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.717351][T11137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=11137 comm=syz.1.2702 [ 259.720895][ T4003] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.737517][ T4003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.743254][T11139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 259.751471][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.759188][T11139] vhci_hcd vhci_hcd.0: Device attached [ 259.766489][T11139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 259.777726][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.784933][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.796034][T11139] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 259.802745][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.810280][T11139] vhci_hcd vhci_hcd.0: Device attached [ 259.824469][T11139] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 259.831132][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 259.838830][T11139] vhci_hcd vhci_hcd.0: Device attached [ 259.845958][T11139] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 259.852612][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 259.860265][T11139] vhci_hcd vhci_hcd.0: Device attached [ 259.866368][T11139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 259.871698][T11027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.895072][T11139] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 259.923240][T11148] vhci_hcd: connection closed [ 259.923525][ T3553] vhci_hcd: stop threads [ 259.929185][T11142] vhci_hcd: connection closed [ 259.932569][ T3553] vhci_hcd: release socket [ 259.941799][ T3553] vhci_hcd: disconnect device [ 259.946523][ T6456] vhci_hcd: vhci_device speed not set [ 259.952127][T11140] vhci_hcd: connection closed [ 259.952812][T11146] vhci_hcd: connection closed [ 259.960416][ T3553] vhci_hcd: stop threads [ 259.969452][ T3553] vhci_hcd: release socket [ 259.973992][ T3553] vhci_hcd: disconnect device [ 259.980783][ T3553] vhci_hcd: stop threads [ 259.985141][ T3553] vhci_hcd: release socket [ 259.989616][ T3553] vhci_hcd: disconnect device [ 259.995104][ T3553] vhci_hcd: stop threads [ 259.998873][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.999415][ T3553] vhci_hcd: release socket [ 259.999487][ T3553] vhci_hcd: disconnect device [ 260.015642][ T6456] usb 1-1: new full-speed USB device number 4 using vhci_hcd [ 260.023282][ T6456] usb 1-1: enqueue for inactive port 0 [ 260.028863][ T6456] usb 1-1: enqueue for inactive port 0 [ 260.034451][ T6456] usb 1-1: enqueue for inactive port 0 [ 260.081426][T11178] blktrace: Concurrent blktraces are not allowed on loop3 [ 260.109174][ T6456] vhci_hcd: vhci_device speed not set [ 260.167958][T11027] veth0_vlan: entered promiscuous mode [ 260.178425][T11027] veth1_vlan: entered promiscuous mode [ 260.196522][T11027] veth0_macvtap: entered promiscuous mode [ 260.205237][T11027] veth1_macvtap: entered promiscuous mode [ 260.216569][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.228969][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.237762][T11027] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.246616][T11027] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.255525][T11027] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.264360][T11027] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.368989][T11199] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2665'. [ 260.510145][T11208] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.2719'. [ 260.618472][T11210] blktrace: Concurrent blktraces are not allowed on loop19 [ 260.626944][T11208] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.2719'. [ 260.875270][T11227] tmpfs: Bad value for 'mpol' [ 260.913260][T11230] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2729'. [ 260.946671][T11235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.957767][T11235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.248034][T11243] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 261.524595][T11250] blktrace: Concurrent blktraces are not allowed on loop19 [ 261.698842][T11259] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2742'. [ 262.804554][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2750'. [ 262.838835][T11284] 9pnet_fd: p9_fd_create_unix (11284): problem connecting socket: ./file0: -111 [ 262.915300][T11288] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2753'. [ 262.936735][T11281] SELinux: failed to load policy [ 263.963516][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 263.963533][ T29] audit: type=1326 audit(1748436649.292:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fab5cea1225 code=0x7ffc0000 [ 263.993299][ T29] audit: type=1326 audit(1748436649.872:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 264.016837][ T29] audit: type=1326 audit(1748436649.872:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 264.040469][ T29] audit: type=1326 audit(1748436649.872:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 264.064211][ T29] audit: type=1326 audit(1748436649.932:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11283 comm="syz.0.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 264.087970][ T29] audit: type=1326 audit(1748436649.972:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.1.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 264.736235][T11325] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 265.065958][T11339] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2775'. [ 265.079935][T11339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.098363][ T3395] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 265.111870][T11339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.121004][ T3395] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.132557][T11339] bond0 (unregistering): Released all slaves [ 265.682914][T11377] block device autoloading is deprecated and will be removed. [ 265.690782][T11377] syz.0.2789: attempt to access beyond end of device [ 265.690782][T11377] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 265.703620][T11377] FAT-fs (loop1): unable to read boot sector [ 265.729081][ T29] audit: type=1326 audit(1748436651.682:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 265.752766][ T29] audit: type=1326 audit(1748436651.682:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 265.776379][ T29] audit: type=1326 audit(1748436651.682:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 265.799924][ T29] audit: type=1326 audit(1748436651.682:4693): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11371 comm="syz.0.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 266.047015][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2795'. [ 266.193178][T11407] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 266.199768][T11407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.207364][T11407] vhci_hcd vhci_hcd.0: Device attached [ 266.215846][T11407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.224837][T11407] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(12) [ 266.231481][T11407] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.238998][T11407] vhci_hcd vhci_hcd.0: Device attached [ 266.299132][T11407] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(14) [ 266.305895][T11407] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 266.313622][T11407] vhci_hcd vhci_hcd.0: Device attached [ 266.370520][T11407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.389444][ T1039] vhci_hcd: vhci_device speed not set [ 266.403813][T11425] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(17) [ 266.410570][T11425] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 266.418339][T11425] vhci_hcd vhci_hcd.0: Device attached [ 266.430316][T11407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 266.449121][ T1039] usb 19-1: new full-speed USB device number 3 using vhci_hcd [ 266.484463][T11428] vhci_hcd: connection closed [ 266.484463][T11421] vhci_hcd: connection closed [ 266.489499][ T3554] vhci_hcd: stop threads [ 266.498503][ T3554] vhci_hcd: release socket [ 266.503055][ T3554] vhci_hcd: disconnect device [ 266.509128][T11415] vhci_hcd: connection closed [ 266.509442][T11408] vhci_hcd: connection reset by peer [ 266.530641][ T3554] vhci_hcd: stop threads [ 266.534096][T11451] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2817'. [ 266.534939][ T3554] vhci_hcd: release socket [ 266.548552][ T3554] vhci_hcd: disconnect device [ 266.557339][ T3554] vhci_hcd: stop threads [ 266.561750][ T3554] vhci_hcd: release socket [ 266.566386][ T3554] vhci_hcd: disconnect device [ 266.574378][ T3554] vhci_hcd: stop threads [ 266.578781][ T3554] vhci_hcd: release socket [ 266.583285][ T3554] vhci_hcd: disconnect device [ 267.064990][T11469] bond0 (unregistering): Released all slaves [ 267.121956][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2823'. [ 267.267825][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.277225][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.358016][T11485] syz.6.2824: attempt to access beyond end of device [ 267.358016][T11485] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 267.371169][T11485] FAT-fs (loop13): unable to read boot sector [ 268.049969][T11509] netlink: 'syz.6.2839': attribute type 1 has an invalid length. [ 268.313507][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2843'. [ 268.505250][T11529] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2846'. [ 268.596234][T11533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2848'. [ 268.675144][T11537] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 268.681729][T11537] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.689483][T11537] vhci_hcd vhci_hcd.0: Device attached [ 268.713433][T11537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.815053][T11537] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(12) [ 268.821752][T11537] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.829454][T11537] vhci_hcd vhci_hcd.0: Device attached [ 268.847340][T11546] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(15) [ 268.854021][T11546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.861736][T11546] vhci_hcd vhci_hcd.0: Device attached [ 268.888747][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2855'. [ 268.897857][T11554] loop1: detected capacity change from 0 to 2048 [ 268.907112][T11552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.915973][T11537] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(14) [ 268.922701][T11537] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.930390][T11537] vhci_hcd vhci_hcd.0: Device attached [ 268.938493][T11552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.979907][T11537] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 268.988531][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 268.988551][ T29] audit: type=1326 audit(1748436654.992:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafbc115927 code=0x7ffc0000 [ 269.051179][T11567] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2858'. [ 269.090089][ T29] audit: type=1326 audit(1748436654.992:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafbc0bab39 code=0x7ffc0000 [ 269.113702][ T29] audit: type=1326 audit(1748436654.992:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafbc115927 code=0x7ffc0000 [ 269.137278][ T29] audit: type=1326 audit(1748436654.992:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafbc0bab39 code=0x7ffc0000 [ 269.160759][ T29] audit: type=1326 audit(1748436654.992:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 269.184750][ T29] audit: type=1326 audit(1748436654.992:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 269.208526][ T29] audit: type=1326 audit(1748436655.002:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 269.214644][T11546] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 269.232286][ T29] audit: type=1326 audit(1748436655.032:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafbc115927 code=0x7ffc0000 [ 269.232324][ T29] audit: type=1326 audit(1748436655.032:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fafbc0bab39 code=0x7ffc0000 [ 269.287820][ T29] audit: type=1326 audit(1748436655.032:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fafbc115927 code=0x7ffc0000 [ 269.337924][T11555] vhci_hcd: connection closed [ 269.338020][T11544] vhci_hcd: connection closed [ 269.338075][T11548] vhci_hcd: connection closed [ 269.347681][T11540] vhci_hcd: connection closed [ 269.352496][ T2133] vhci_hcd: stop threads [ 269.361712][ T2133] vhci_hcd: release socket [ 269.366175][ T2133] vhci_hcd: disconnect device [ 269.457544][ T2133] vhci_hcd: stop threads [ 269.461881][ T2133] vhci_hcd: release socket [ 269.466321][ T2133] vhci_hcd: disconnect device [ 269.575426][ T2133] vhci_hcd: stop threads [ 269.579783][ T2133] vhci_hcd: release socket [ 269.584371][ T2133] vhci_hcd: disconnect device [ 269.671278][ T2133] vhci_hcd: stop threads [ 269.675681][ T2133] vhci_hcd: release socket [ 269.680328][ T2133] vhci_hcd: disconnect device [ 269.857347][T11582] SELinux: failed to load policy [ 269.898372][T11586] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 269.931375][T11588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2866'. [ 270.057144][T11606] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2875'. [ 270.076456][T11606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.088769][T11606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.140681][T11606] bond0 (unregistering): Released all slaves [ 270.574287][T11627] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 271.028254][T11641] bond3 (unregistering): Released all slaves [ 271.065867][T11647] __nla_validate_parse: 3 callbacks suppressed [ 271.065888][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2890'. [ 271.193574][T11655] wireguard0: entered promiscuous mode [ 271.199183][T11655] wireguard0: entered allmulticast mode [ 271.303885][T11662] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2899'. [ 271.323371][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2900'. [ 271.332440][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2900'. [ 271.510093][T11675] 9pnet_fd: p9_fd_create_unix (11675): problem connecting socket: ./file0: -111 [ 271.581047][T11680] batadv_slave_1: entered promiscuous mode [ 271.603672][T11680] batadv_slave_1: left promiscuous mode [ 271.695835][T11692] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2913'. [ 271.788770][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2916'. [ 271.797942][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2916'. [ 271.922669][T11704] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2918'. [ 271.941910][ T1039] usb 19-1: enqueue for inactive port 0 [ 271.947534][ T1039] usb 19-1: enqueue for inactive port 0 [ 272.015413][T11713] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 272.024051][ T1039] vhci_hcd: vhci_device speed not set [ 272.165882][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2931'. [ 272.180063][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2930'. [ 272.214418][T11729] bond0 (unregistering): Released all slaves [ 272.333850][T11748] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 272.381922][T11754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.402727][T11754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.561154][T11764] bond0 (unregistering): Released all slaves [ 272.786516][T11784] wireguard0: entered promiscuous mode [ 272.792109][T11784] wireguard0: entered allmulticast mode [ 272.855181][ T23] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 272.867874][T11795] random: crng reseeded on system resumption [ 273.048445][ T23] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.345128][T11810] bond0 (unregistering): Released all slaves [ 273.365398][T11803] SELinux: failed to load policy [ 273.848976][T11832] loop9: detected capacity change from 0 to 2048 [ 274.247041][T11849] bond0 (unregistering): Released all slaves [ 274.902176][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 274.902194][ T29] audit: type=1326 audit(1748436660.912:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 274.967340][ T29] audit: type=1326 audit(1748436660.952:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 274.990939][ T29] audit: type=1326 audit(1748436660.952:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 275.014442][ T29] audit: type=1326 audit(1748436660.952:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 275.037969][ T29] audit: type=1326 audit(1748436660.952:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 275.061655][ T29] audit: type=1326 audit(1748436660.952:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 275.085162][ T29] audit: type=1326 audit(1748436660.952:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab5ce6e9a3 code=0x7ffc0000 [ 275.108537][ T29] audit: type=1326 audit(1748436660.962:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab5ce6d41f code=0x7ffc0000 [ 275.132178][ T29] audit: type=1326 audit(1748436660.962:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fab5ce6e9f7 code=0x7ffc0000 [ 275.155688][ T29] audit: type=1326 audit(1748436660.962:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.0.2980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab5ce6d2d0 code=0x7ffc0000 [ 276.047410][T11897] 9pnet_fd: p9_fd_create_unix (11897): problem connecting socket: ./file0: -111 [ 276.082699][T11899] __nla_validate_parse: 16 callbacks suppressed [ 276.082721][T11899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2995'. [ 276.419266][T11920] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.3003'. [ 276.428795][T11920] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.3003'. [ 276.638316][T11923] batadv_slave_1: entered promiscuous mode [ 276.666247][T11923] batadv_slave_1: left promiscuous mode [ 276.699361][T11901] loop1: detected capacity change from 0 to 8192 [ 276.772839][T11901] loop1: p3 < > p4 [ 276.807722][T11901] loop1: p4 start 131072 is beyond EOD, truncated [ 276.928392][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3008'. [ 277.146398][T11938] syz.9.3011: attempt to access beyond end of device [ 277.146398][T11938] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 277.159487][T11938] FAT-fs (loop19): unable to read boot sector [ 277.183310][ T1039] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 277.192433][ T1039] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.673752][T11963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3021'. [ 278.764533][T12004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.766010][T12008] netlink: 'syz.6.3040': attribute type 1 has an invalid length. [ 278.782318][T12004] bond0: (slave bond1): Enslaving as an active interface with an up link [ 278.801203][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3038'. [ 278.814107][T12011] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.3041'. [ 278.824988][T12004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.843226][T12011] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.3041'. [ 278.844983][T12008] 8021q: adding VLAN 0 to HW filter on device bond9 [ 278.862727][T12008] bond8: (slave bond9): making interface the new active one [ 278.871804][T12008] bond8: (slave bond9): Enslaving as an active interface with an up link [ 278.893327][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3040'. [ 278.956229][T12020] loop9: detected capacity change from 0 to 2048 [ 279.422418][T12045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 279.436901][T12045] bond10: (slave bond11): Enslaving as an active interface with an up link [ 279.448425][T12045] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3055'. [ 279.459688][T12045] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.490529][T12050] loop1: detected capacity change from 0 to 256 [ 279.515406][T12050] vfat: Unknown parameter 'shor†name' [ 279.556905][T12057] batadv_slave_1: entered promiscuous mode [ 279.584862][T12057] batadv_slave_1: left promiscuous mode [ 280.251412][T12079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.323054][T12079] bond0: (slave bond1): Enslaving as an active interface with an up link [ 280.390711][T12079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.624865][T12099] syz.0.3071: attempt to access beyond end of device [ 280.624865][T12099] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 280.637856][T12099] FAT-fs (loop1): unable to read boot sector [ 280.646524][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 280.646543][ T29] audit: type=1326 audit(1748436666.632:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.676573][ T29] audit: type=1326 audit(1748436666.632:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.700363][ T29] audit: type=1326 audit(1748436666.632:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.724053][ T29] audit: type=1326 audit(1748436666.632:5417): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.747993][ T29] audit: type=1326 audit(1748436666.632:5418): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.771999][ T29] audit: type=1326 audit(1748436666.632:5419): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.796036][ T29] audit: type=1326 audit(1748436666.632:5420): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.820007][ T29] audit: type=1326 audit(1748436666.632:5421): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.843931][ T29] audit: type=1326 audit(1748436666.632:5422): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 280.867759][ T29] audit: type=1326 audit(1748436666.632:5423): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 281.527977][T12118] 8021q: adding VLAN 0 to HW filter on device bond13 [ 281.625244][T12123] __nla_validate_parse: 5 callbacks suppressed [ 281.625287][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3084'. [ 281.738514][T12118] bond12: (slave bond13): Enslaving as an active interface with an up link [ 281.748771][T12123] 8021q: adding VLAN 0 to HW filter on device bond12 [ 281.881706][T12140] netlink: 'syz.6.3093': attribute type 1 has an invalid length. [ 281.923420][T12140] 8021q: adding VLAN 0 to HW filter on device bond15 [ 281.945884][T12140] bond14: (slave bond15): making interface the new active one [ 281.979369][T12140] bond14: (slave bond15): Enslaving as an active interface with an up link [ 282.027137][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3093'. [ 282.624711][T12167] netlink: 'syz.9.3102': attribute type 1 has an invalid length. [ 282.836125][T12167] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3102'. [ 282.858422][T12170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.870364][T12170] bond2: (slave bond3): Enslaving as an active interface with an up link [ 282.926433][T12167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.006767][T12184] loop1: detected capacity change from 0 to 256 [ 283.027881][T12184] vfat: Unknown parameter 'shor†name' [ 283.064233][T12180] SELinux: failed to load policy [ 283.133795][T12195] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3111'. [ 283.194214][T12206] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 283.625812][T12225] SELinux: failed to load policy [ 283.695466][T12235] loop9: detected capacity change from 0 to 512 [ 283.712065][T12235] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.3127: corrupted inode contents [ 283.724566][T12235] EXT4-fs error (device loop9): ext4_dirty_inode:6103: inode #16: comm syz.9.3127: mark_inode_dirty error [ 283.736609][T12235] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.3127: corrupted inode contents [ 283.748934][T12235] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.3127: mark_inode_dirty error [ 283.763692][T12235] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.3127: corrupted inode contents [ 283.775991][T12235] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 283.786210][T12235] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.3127: corrupted inode contents [ 283.798525][T12235] EXT4-fs error (device loop9): ext4_truncate:4255: inode #16: comm syz.9.3127: mark_inode_dirty error [ 283.826217][T12235] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 283.837243][T12235] EXT4-fs (loop9): 1 truncate cleaned up [ 283.845762][T12235] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.858633][ T37] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 283.866527][T12235] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.884691][T12242] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.3129'. [ 283.895492][T12242] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.3129'. [ 283.923723][ T8855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.951775][T12251] 9pnet_fd: p9_fd_create_unix (12251): problem connecting socket: ./file0: -111 [ 283.964859][ T1039] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 283.973272][ T1039] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.657989][T12277] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.3143'. [ 284.671514][T12277] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.3143'. [ 285.002537][T12285] batadv_slave_1: entered promiscuous mode [ 285.017697][T12285] batadv_slave_1: left promiscuous mode [ 286.102231][T12316] batadv_slave_1: entered promiscuous mode [ 286.108866][T12316] batadv_slave_1: left promiscuous mode [ 286.207609][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'. [ 286.268171][T12323] syz.8.3163: attempt to access beyond end of device [ 286.268171][T12323] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 286.281150][T12323] FAT-fs (loop17): unable to read boot sector [ 286.281235][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 286.281249][ T29] audit: type=1326 audit(1748436672.272:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.317092][ T29] audit: type=1326 audit(1748436672.272:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.340759][ T29] audit: type=1326 audit(1748436672.272:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.364468][ T29] audit: type=1326 audit(1748436672.272:5570): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.388563][ T29] audit: type=1326 audit(1748436672.272:5571): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.412721][ T29] audit: type=1326 audit(1748436672.272:5572): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.436870][ T29] audit: type=1326 audit(1748436672.272:5573): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.461030][ T29] audit: type=1326 audit(1748436672.272:5574): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.485264][ T29] audit: type=1326 audit(1748436672.272:5575): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 286.509541][ T29] audit: type=1326 audit(1748436672.272:5576): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.8.3163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 287.641957][T12366] netlink: 'syz.9.3178': attribute type 178 has an invalid length. [ 288.117751][T12389] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3187'. [ 288.285178][T12396] syz_tun: entered allmulticast mode [ 288.307057][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3187'. [ 288.326594][T12388] syz_tun: left allmulticast mode [ 289.501478][T12406] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3195'. [ 290.439694][T12453] random: crng reseeded on system resumption [ 291.417269][T12472] loop9: detected capacity change from 0 to 512 [ 291.559295][T12478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.569059][T12475] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 291.575617][T12475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 291.583138][T12475] vhci_hcd vhci_hcd.0: Device attached [ 291.589421][T12478] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(13) [ 291.596147][T12478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 291.603590][T12478] vhci_hcd vhci_hcd.0: Device attached [ 291.611606][T12475] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 291.618238][T12475] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.625889][T12475] vhci_hcd vhci_hcd.0: Device attached [ 291.690861][T12472] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.703471][T12472] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.779075][ T3395] vhci_hcd: vhci_device speed not set [ 291.848804][T12475] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(16) [ 291.855564][T12475] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.863492][T12475] vhci_hcd vhci_hcd.0: Device attached [ 291.882062][ T3395] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 291.928663][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 291.928685][ T29] audit: type=1107 audit(1748436677.932:5663): pid=12494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 292.041341][T12478] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 292.073642][ T1039] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 292.163138][ T1039] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.187334][T12475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 292.228055][T12489] vhci_hcd: connection closed [ 292.228313][ T37] vhci_hcd: stop threads [ 292.237444][ T37] vhci_hcd: release socket [ 292.241903][ T37] vhci_hcd: disconnect device [ 292.249696][T12481] vhci_hcd: connection closed [ 292.251237][T12477] vhci_hcd: connection reset by peer [ 292.269141][T12483] vhci_hcd: connection closed [ 292.287854][ T37] vhci_hcd: stop threads [ 292.296995][ T37] vhci_hcd: release socket [ 292.301663][ T37] vhci_hcd: disconnect device [ 292.309656][T12511] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.3232'. [ 292.324374][T12511] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.3232'. [ 292.342128][ T37] vhci_hcd: stop threads [ 292.346442][ T37] vhci_hcd: release socket [ 292.351083][ T37] vhci_hcd: disconnect device [ 292.376756][ T37] vhci_hcd: stop threads [ 292.381169][ T37] vhci_hcd: release socket [ 292.385622][ T37] vhci_hcd: disconnect device [ 292.531088][T12519] SELinux: failed to load policy [ 292.603396][T12533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3242'. [ 292.640083][ T29] audit: type=1107 audit(1748436678.652:5664): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 292.815206][T12543] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.3246'. [ 292.834048][T12543] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.3246'. [ 292.912783][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3250'. [ 292.960921][T12549] bond2 (unregistering): Released all slaves [ 292.994809][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3250'. [ 293.118593][T12561] batadv_slave_1: entered promiscuous mode [ 293.145485][T12561] batadv_slave_1: left promiscuous mode [ 293.166167][T12565] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 293.172764][T12565] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 293.180419][T12565] vhci_hcd vhci_hcd.0: Device attached [ 293.188473][T12565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.197368][ T8855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.197839][T12565] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 293.213111][T12565] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 293.220747][T12565] vhci_hcd vhci_hcd.0: Device attached [ 293.280598][T12565] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 293.287293][T12565] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 293.295123][T12565] vhci_hcd vhci_hcd.0: Device attached [ 293.311173][T12585] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 293.317882][T12585] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 293.326073][T12585] vhci_hcd vhci_hcd.0: Device attached [ 293.331219][ T29] audit: type=1326 audit(1748436679.342:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.9.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 293.355190][ T29] audit: type=1326 audit(1748436679.342:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12589 comm="syz.9.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 293.383324][ T1039] vhci_hcd: vhci_device speed not set [ 293.389294][ T29] audit: type=1326 audit(1748436679.342:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 293.412974][ T29] audit: type=1326 audit(1748436679.342:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 293.430236][T12565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.436575][ T29] audit: type=1326 audit(1748436679.342:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 293.468275][ T29] audit: type=1326 audit(1748436679.342:5670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 293.492019][ T29] audit: type=1326 audit(1748436679.342:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 293.515649][ T29] audit: type=1326 audit(1748436679.342:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12584 comm="syz.8.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 293.516475][T12594] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.539849][ T1039] usb 1-1: new full-speed USB device number 5 using vhci_hcd [ 293.631107][T12603] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.3268'. [ 293.642485][T12592] bond16 (unregistering): Released all slaves [ 293.654005][T12603] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.3268'. [ 293.666857][T12586] vhci_hcd: connection closed [ 293.667146][ T3555] vhci_hcd: stop threads [ 293.676411][ T3555] vhci_hcd: release socket [ 293.678006][T12568] vhci_hcd: connection closed [ 293.680900][ T3555] vhci_hcd: disconnect device [ 293.690769][T12579] vhci_hcd: connection closed [ 293.690888][T12566] vhci_hcd: connection reset by peer [ 293.699399][ T3555] vhci_hcd: stop threads [ 293.705370][ T3555] vhci_hcd: release socket [ 293.709870][ T3555] vhci_hcd: disconnect device [ 293.717882][ T3555] vhci_hcd: stop threads [ 293.722271][ T3555] vhci_hcd: release socket [ 293.726766][ T3555] vhci_hcd: disconnect device [ 293.734370][ T3555] vhci_hcd: stop threads [ 293.738685][ T3555] vhci_hcd: release socket [ 293.743261][ T3555] vhci_hcd: disconnect device [ 294.178701][T12618] SELinux: failed to load policy [ 295.645687][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3283'. [ 296.004674][T12656] random: crng reseeded on system resumption [ 297.639566][ T3395] usb 13-1: enqueue for inactive port 0 [ 297.645245][ T3395] usb 13-1: enqueue for inactive port 0 [ 297.962950][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 297.962965][ T29] audit: type=1326 audit(1748436683.972:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.096337][ T3395] vhci_hcd: vhci_device speed not set [ 298.102428][ T29] audit: type=1326 audit(1748436684.002:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.125979][ T29] audit: type=1326 audit(1748436684.002:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.149588][ T29] audit: type=1326 audit(1748436684.002:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.173910][ T29] audit: type=1326 audit(1748436684.002:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.197544][ T29] audit: type=1326 audit(1748436684.002:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.221312][ T29] audit: type=1326 audit(1748436684.002:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.244952][ T29] audit: type=1326 audit(1748436684.002:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.268549][ T29] audit: type=1326 audit(1748436684.012:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.292163][ T29] audit: type=1326 audit(1748436684.012:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12674 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 298.454962][T12693] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3298'. [ 298.464339][T12693] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3298'. [ 298.909296][ T1039] usb 1-1: enqueue for inactive port 0 [ 299.357653][ T1039] usb 1-1: enqueue for inactive port 0 [ 299.420191][T12704] 9pnet_fd: p9_fd_create_unix (12704): problem connecting socket: ./file0: -111 [ 299.421797][ T3400] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 299.438225][ T3400] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.459260][ T1039] vhci_hcd: vhci_device speed not set [ 299.474733][T12710] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3305'. [ 299.605230][T12722] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3309'. [ 299.633756][T12724] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.3310'. [ 299.643289][T12724] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.3310'. [ 299.783035][ T3389] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 299.791326][ T3389] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 300.202871][T12742] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3318'. [ 300.230011][ T6456] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 300.237795][ T6456] hid-generic 0000:0000:0000.0027: hidraw1: HID v0.00 Device [syz1] on syz0 [ 300.277670][T12748] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3321'. [ 300.292303][T12748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.303811][T12748] bond_slave_0: left promiscuous mode [ 300.310924][T12748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.320051][T12748] bond_slave_1: left promiscuous mode [ 300.326705][T12748] bond0 (unregistering): Released all slaves [ 300.476811][T12756] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 300.688836][T12761] 9pnet_fd: p9_fd_create_unix (12761): problem connecting socket: ./file0: -111 [ 301.363415][ T1039] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 301.439462][ T1039] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.514117][T12784] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3335'. [ 301.786013][T12794] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 301.818331][T12794] SELinux: failed to load policy [ 302.281130][T12819] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3350'. [ 302.454072][T12832] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 302.577474][T12842] 9pnet_fd: p9_fd_create_unix (12842): problem connecting socket: ./file0: -111 [ 302.856891][T12870] SELinux: failed to load policy [ 303.536227][T12876] syz.0.3376 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 303.550871][T12876] CPU: 0 UID: 0 PID: 12876 Comm: syz.0.3376 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(voluntary) [ 303.550974][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.550995][T12876] Call Trace: [ 303.551003][T12876] [ 303.551013][T12876] __dump_stack+0x1d/0x30 [ 303.551044][T12876] dump_stack_lvl+0xe8/0x140 [ 303.551071][T12876] dump_stack+0x15/0x1b [ 303.551095][T12876] dump_header+0x81/0x220 [ 303.551202][T12876] oom_kill_process+0x334/0x3f0 [ 303.551240][T12876] out_of_memory+0x979/0xb80 [ 303.551345][T12876] ? css_next_descendant_pre+0x138/0x160 [ 303.551377][T12876] mem_cgroup_out_of_memory+0x13d/0x190 [ 303.551484][T12876] try_charge_memcg+0x5e2/0x870 [ 303.551530][T12876] obj_cgroup_charge_pages+0xb7/0x1a0 [ 303.551566][T12876] __memcg_kmem_charge_page+0x9f/0x170 [ 303.551601][T12876] __alloc_frozen_pages_noprof+0x188/0x360 [ 303.551720][T12876] alloc_pages_mpol+0xb3/0x250 [ 303.551750][T12876] alloc_pages_noprof+0x90/0x130 [ 303.551779][T12876] __vmalloc_node_range_noprof+0x6d5/0xe40 [ 303.551843][T12876] __kvmalloc_node_noprof+0x312/0x4f0 [ 303.551875][T12876] ? ip_set_alloc+0x1f/0x30 [ 303.551893][T12876] ? ip_set_alloc+0x1f/0x30 [ 303.551910][T12876] ? __kmalloc_cache_noprof+0x189/0x320 [ 303.551937][T12876] ip_set_alloc+0x1f/0x30 [ 303.551955][T12876] hash_netiface_create+0x282/0x740 [ 303.551979][T12876] ? __pfx_hash_netiface_create+0x10/0x10 [ 303.552032][T12876] ip_set_create+0x3c9/0x960 [ 303.552064][T12876] ? __nla_parse+0x40/0x60 [ 303.552161][T12876] nfnetlink_rcv_msg+0x4c3/0x590 [ 303.552212][T12876] netlink_rcv_skb+0x120/0x220 [ 303.552266][T12876] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 303.552348][T12876] nfnetlink_rcv+0x16b/0x1690 [ 303.552380][T12876] ? __kfree_skb+0x109/0x150 [ 303.552430][T12876] ? nlmon_xmit+0x4f/0x60 [ 303.552456][T12876] ? consume_skb+0x49/0x150 [ 303.552534][T12876] ? nlmon_xmit+0x4f/0x60 [ 303.552559][T12876] ? dev_hard_start_xmit+0x39e/0x3d0 [ 303.552589][T12876] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 303.552685][T12876] ? __dev_queue_xmit+0x182/0x1fb0 [ 303.552714][T12876] ? ref_tracker_free+0x37d/0x3e0 [ 303.552784][T12876] ? __netlink_deliver_tap+0x4dc/0x500 [ 303.552814][T12876] netlink_unicast+0x59e/0x670 [ 303.552838][T12876] netlink_sendmsg+0x58b/0x6b0 [ 303.552866][T12876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.552973][T12876] __sock_sendmsg+0x145/0x180 [ 303.553009][T12876] ____sys_sendmsg+0x31e/0x4e0 [ 303.553054][T12876] ___sys_sendmsg+0x17b/0x1d0 [ 303.553080][T12876] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 303.553117][T12876] __x64_sys_sendmsg+0xd4/0x160 [ 303.553148][T12876] x64_sys_call+0x2999/0x2fb0 [ 303.553249][T12876] do_syscall_64+0xd2/0x200 [ 303.553299][T12876] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 303.553328][T12876] ? clear_bhb_loop+0x40/0x90 [ 303.553350][T12876] ? clear_bhb_loop+0x40/0x90 [ 303.553446][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.553468][T12876] RIP: 0033:0x7fab5ce6e969 [ 303.553485][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.553505][T12876] RSP: 002b:00007fab5b4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.553526][T12876] RAX: ffffffffffffffda RBX: 00007fab5d095fa0 RCX: 00007fab5ce6e969 [ 303.553539][T12876] RDX: 0000000000000800 RSI: 0000200000000340 RDI: 0000000000000004 [ 303.553607][T12876] RBP: 00007fab5cef0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 303.553619][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.553631][T12876] R13: 0000000000000000 R14: 00007fab5d095fa0 R15: 00007ffe311faa38 [ 303.553650][T12876] [ 303.553844][T12876] memory: usage 307200kB, limit 307200kB, failcnt 251 [ 303.921693][T12876] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 303.929667][T12876] kmem: usage 306692kB, limit 9007199254740988kB, failcnt 0 [ 303.936990][T12876] Memory cgroup stats for /syz0: [ 303.937816][T12876] cache 135168 [ 303.946523][T12876] rss 131072 [ 303.949893][T12876] shmem 0 [ 303.952848][T12876] mapped_file 135168 [ 303.956808][T12876] dirty 135168 [ 303.960232][T12876] writeback 253952 [ 303.963974][T12876] workingset_refault_anon 0 [ 303.968504][T12876] workingset_refault_file 119 [ 303.973293][T12876] swap 0 [ 303.976157][T12876] swapcached 253952 [ 303.980078][T12876] nr_memmap_boot_pages 201925 [ 303.985145][T12876] pgpgin 201798 [ 303.988660][T12876] pglazyfree 209799 [ 303.992788][T12876] pgfault 15 [ 303.996105][T12876] a_other 229376 [ 303.999720][T12876] inactive_anon 0 [ 304.003644][T12876] active_anon 135168 [ 304.007575][T12876] inactive_file 0 [ 304.011375][T12876] active_file 0 [ 304.014947][T12876] hierarchical_memory_limit 314572800 [ 304.020509][T12876] hierarchical_memsw_limit 9223372036854771712 [ 304.027029][T12876] total_cache 135168 [ 304.031018][T12876] total_rss 131072 [ 304.035045][T12876] total_shmem 0 [ 304.038700][T12876] total_mapped_file 135168 [ 304.043207][T12876] total_dirty 135168 [ 304.047444][T12876] total_writeback 253952 [ 304.051797][T12876] total_workingset_refault_anon 0 [ 304.057049][T12876] total_workingset_refault_file 150 [ 304.062848][T12876] total_swap 0 [ 304.066841][T12876] total_swapcached 253952 [ 304.072004][T12876] total_nr_memmap_boot_pages 201987 [ 304.077704][T12876] total_pgpgin 201860 [ 304.081705][T12876] total_pglazyfree 209811 [ 304.086267][T12876] total_pgfault 17 [ 304.090170][T12876] total_a_other 229376 [ 304.094238][T12876] total_inactive_anon 0 [ 304.098397][T12876] total_active_anon 135168 [ 304.102894][T12876] total_inactive_file 0 [ 304.107113][T12876] total_active_file 0 [ 304.111164][T12876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0/syz1,task=syz.0.3376,pid=12875,uid=0 [ 304.126322][T12876] Memory cgroup out of memory: Killed process 12876 (syz.0.3376) total-vm:93748kB, anon-rss:936kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 304.248754][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 304.248776][ T29] audit: type=1326 audit(1748436690.252:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.278663][ T29] audit: type=1326 audit(1748436690.252:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.310362][ T29] audit: type=1326 audit(1748436690.272:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.334024][ T29] audit: type=1326 audit(1748436690.272:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.357786][ T29] audit: type=1326 audit(1748436690.272:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.381733][ T29] audit: type=1326 audit(1748436690.272:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.405344][ T29] audit: type=1326 audit(1748436690.312:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.429058][ T29] audit: type=1326 audit(1748436690.312:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 304.452589][ T29] audit: type=1326 audit(1748436690.312:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fafbc11e9a3 code=0x7ffc0000 [ 304.476061][ T29] audit: type=1326 audit(1748436690.312:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12893 comm="syz.6.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafbc11d41f code=0x7ffc0000 [ 304.733450][T12904] syz.9.3384: attempt to access beyond end of device [ 304.733450][T12904] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 304.746572][T12904] FAT-fs (loop19): unable to read boot sector [ 305.301786][T12909] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3387'. [ 305.533763][T12915] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.3389'. [ 305.658520][T12915] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.3389'. [ 306.722004][T12946] syz.9.3400: attempt to access beyond end of device [ 306.722004][T12946] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 306.735078][T12946] FAT-fs (loop19): unable to read boot sector [ 307.957121][T12958] SELinux: failed to load policy [ 308.059083][T12970] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3411'. [ 308.091903][T12974] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 308.110023][T12970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.136518][T12970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.166578][T12970] bond0 (unregistering): Released all slaves [ 308.566443][T12981] syz.9.3415: attempt to access beyond end of device [ 308.566443][T12981] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 308.579463][T12981] FAT-fs (loop19): unable to read boot sector [ 309.119526][T12987] netlink: 'syz.1.3417': attribute type 178 has an invalid length. [ 310.146175][T13002] batadv_slave_1: entered promiscuous mode [ 310.178408][T13001] batadv_slave_1: left promiscuous mode [ 310.643666][T13012] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 310.675286][T13014] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 310.703831][T13016] wireguard0: entered promiscuous mode [ 310.709434][T13016] wireguard0: entered allmulticast mode [ 310.871995][T13027] batadv_slave_1: entered promiscuous mode [ 310.878787][T13026] batadv_slave_1: left promiscuous mode [ 310.933562][T13030] wireguard0: entered promiscuous mode [ 310.939132][T13030] wireguard0: entered allmulticast mode [ 310.953672][T13033] tmpfs: Bad value for 'mpol' [ 311.002858][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 311.002877][ T29] audit: type=1326 audit(1748436697.012:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.009557][T13034] syz.9.3432: attempt to access beyond end of device [ 311.009557][T13034] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 311.032755][ T29] audit: type=1326 audit(1748436697.012:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.069216][ T29] audit: type=1326 audit(1748436697.012:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.092878][ T29] audit: type=1326 audit(1748436697.012:6176): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.152176][T13034] FAT-fs (loop19): unable to read boot sector [ 311.234641][ T29] audit: type=1326 audit(1748436697.012:6177): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.258759][ T29] audit: type=1326 audit(1748436697.012:6178): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.282648][ T29] audit: type=1326 audit(1748436697.012:6179): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.306550][ T29] audit: type=1326 audit(1748436697.012:6180): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.330532][ T29] audit: type=1326 audit(1748436697.012:6181): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.354500][ T29] audit: type=1326 audit(1748436697.012:6182): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.9.3432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe69d94e969 code=0x7ffc0000 [ 311.472921][T13044] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 312.542405][T13059] batadv_slave_1: entered promiscuous mode [ 312.548976][T13058] batadv_slave_1: left promiscuous mode [ 312.633575][T13069] 9pnet_fd: p9_fd_create_unix (13069): problem connecting socket: ./file0: -111 [ 313.696315][T13101] 9pnet_fd: p9_fd_create_unix (13101): problem connecting socket: ./file0: -111 [ 313.758892][T13108] random: crng reseeded on system resumption [ 314.113811][T13116] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 314.216728][ T2972] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 314.226793][ T2972] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.608633][T13123] 9pnet_fd: p9_fd_create_unix (13123): problem connecting socket: ./file0: -111 [ 314.934908][T13127] netlink: 'syz.8.3470': attribute type 1 has an invalid length. [ 314.960036][T13127] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3470'. [ 314.971391][T13127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.081600][T13141] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 315.088188][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.095832][T13141] vhci_hcd vhci_hcd.0: Device attached [ 315.104311][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.112924][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.137701][T13141] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.155419][T13141] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(12) [ 315.162081][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.169846][T13141] vhci_hcd vhci_hcd.0: Device attached [ 315.184525][T13141] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(14) [ 315.191178][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.198884][T13141] vhci_hcd vhci_hcd.0: Device attached [ 315.206753][T13141] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.218752][T13141] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 315.234208][T13151] vhci_hcd: connection closed [ 315.234330][T13143] vhci_hcd: connection closed [ 315.234502][T13154] vhci_hcd: connection closed [ 315.240749][ T4004] vhci_hcd: stop threads [ 315.252941][ T4004] vhci_hcd: release socket [ 315.257411][ T4004] vhci_hcd: disconnect device [ 315.262723][ T4004] vhci_hcd: stop threads [ 315.267058][ T4004] vhci_hcd: release socket [ 315.271552][ T4004] vhci_hcd: disconnect device [ 315.276610][ T4004] vhci_hcd: stop threads [ 315.280951][ T4004] vhci_hcd: release socket [ 315.285716][ T4004] vhci_hcd: disconnect device [ 315.299067][ T3397] vhci_hcd: vhci_device speed not set [ 315.371053][T13173] batadv_slave_1: entered promiscuous mode [ 315.377419][T13172] batadv_slave_1: left promiscuous mode [ 315.400781][T13175] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3486'. [ 315.410087][T13175] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3486'. [ 315.506540][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.515106][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.672426][T13200] batadv_slave_1: entered promiscuous mode [ 315.678694][T13199] batadv_slave_1: left promiscuous mode [ 315.734326][T13205] batadv_slave_1: entered promiscuous mode [ 315.750480][T13205] batadv_slave_1: left promiscuous mode [ 316.092719][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 316.092738][ T29] audit: type=1326 audit(1748436702.102:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.332027][ T29] audit: type=1326 audit(1748436702.132:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.355677][ T29] audit: type=1326 audit(1748436702.142:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.379351][ T29] audit: type=1326 audit(1748436702.142:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.403013][ T29] audit: type=1326 audit(1748436702.142:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.426678][ T29] audit: type=1326 audit(1748436702.142:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.450343][ T29] audit: type=1326 audit(1748436702.142:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.473989][ T29] audit: type=1326 audit(1748436702.142:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.497551][ T29] audit: type=1326 audit(1748436702.142:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 316.521071][ T29] audit: type=1326 audit(1748436702.142:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fab5ce6e9a3 code=0x7ffc0000 [ 317.003560][T13226] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 317.081445][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.121778][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.778422][T13244] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.3516'. [ 317.813916][T13244] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.3516'. [ 318.033784][T13256] netlink: 'syz.9.3522': attribute type 1 has an invalid length. [ 318.070726][T13256] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3522'. [ 318.081940][T13256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.298228][T13260] SELinux: failed to load policy [ 320.419628][T13325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.464338][T13325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.482724][T13326] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 320.526649][T13326] SELinux: failed to load policy [ 320.641210][T13328] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3552'. [ 320.827997][ T1039] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 320.845688][ T1039] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.011280][T13342] batadv_slave_1: entered promiscuous mode [ 321.031681][ T3978] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.067944][T13342] batadv_slave_1: left promiscuous mode [ 321.124806][ T3978] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.177055][ T3978] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.242980][ T3978] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.372070][T13351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.409724][ T3978] bridge_slave_1: left allmulticast mode [ 321.415436][ T3978] bridge_slave_1: left promiscuous mode [ 321.421280][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.444995][T13351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.465647][ T3978] bridge_slave_0: left allmulticast mode [ 321.471531][ T3978] bridge_slave_0: left promiscuous mode [ 321.477280][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.592484][T13356] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3564'. [ 321.723477][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.734697][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.763284][ T3978] bond0 (unregistering): Released all slaves [ 321.912414][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.932908][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.266517][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 322.266536][ T29] audit: type=1326 audit(1748436708.272:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.540594][ T29] audit: type=1326 audit(1748436708.302:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.564318][ T29] audit: type=1326 audit(1748436708.302:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.588293][ T29] audit: type=1326 audit(1748436708.302:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.611960][ T29] audit: type=1326 audit(1748436708.312:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.635405][ T29] audit: type=1326 audit(1748436708.312:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.659162][ T29] audit: type=1326 audit(1748436708.312:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.683054][ T29] audit: type=1326 audit(1748436708.312:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.683274][ T29] audit: type=1326 audit(1748436708.312:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.730707][ T29] audit: type=1326 audit(1748436708.312:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13380 comm="syz.8.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 322.836876][T13387] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3578'. [ 323.139952][ T3978] hsr_slave_0: left promiscuous mode [ 323.176094][ T3978] hsr_slave_1: left promiscuous mode [ 323.240887][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.248618][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.358589][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.366120][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.538871][ T3978] veth1_macvtap: left promiscuous mode [ 323.572148][ T3978] veth0_macvtap: left promiscuous mode [ 323.598361][ T3978] veth1_vlan: left promiscuous mode [ 323.598410][ T3978] veth0_vlan: left promiscuous mode [ 323.977404][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 323.993153][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 324.197203][T13420] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3591'. [ 325.796009][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3601'. [ 326.356370][T13463] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 326.384803][T13463] SELinux: failed to load policy [ 326.389778][ T3400] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 326.399552][ T3400] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.342874][T13498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.353502][T13498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.384794][ T10] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 327.404019][ T10] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.493644][T13503] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 327.504942][T13503] SELinux: failed to load policy [ 328.281468][T13521] random: crng reseeded on system resumption [ 328.656997][T13524] syz.8.3631: attempt to access beyond end of device [ 328.656997][T13524] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 328.670081][T13524] FAT-fs (loop17): unable to read boot sector [ 328.679625][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 328.679659][ T29] audit: type=1326 audit(1748436714.662:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.709461][ T29] audit: type=1326 audit(1748436714.662:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.733043][ T29] audit: type=1326 audit(1748436714.662:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.756707][ T29] audit: type=1326 audit(1748436714.662:6547): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.758309][T13511] syz.1.3627 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 328.780637][ T29] audit: type=1326 audit(1748436714.662:6548): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.780704][ T29] audit: type=1326 audit(1748436714.662:6549): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.780731][ T29] audit: type=1326 audit(1748436714.662:6550): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.795198][T13511] CPU: 0 UID: 0 PID: 13511 Comm: syz.1.3627 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(voluntary) [ 328.795241][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.795261][T13511] Call Trace: [ 328.795270][T13511] [ 328.795282][T13511] __dump_stack+0x1d/0x30 [ 328.795313][T13511] dump_stack_lvl+0xe8/0x140 [ 328.795361][T13511] dump_stack+0x15/0x1b [ 328.795386][T13511] dump_header+0x81/0x220 [ 328.795550][T13511] oom_kill_process+0x334/0x3f0 [ 328.795660][T13511] out_of_memory+0x979/0xb80 [ 328.795698][T13511] ? css_next_descendant_pre+0x138/0x160 [ 328.795731][T13511] mem_cgroup_out_of_memory+0x13d/0x190 [ 328.795765][T13511] try_charge_memcg+0x5e2/0x870 [ 328.795869][T13511] obj_cgroup_charge_pages+0xb7/0x1a0 [ 328.795907][T13511] __memcg_kmem_charge_page+0x9f/0x170 [ 328.796007][T13511] __alloc_frozen_pages_noprof+0x188/0x360 [ 328.796047][T13511] alloc_pages_mpol+0xb3/0x250 [ 328.796075][T13511] alloc_pages_noprof+0x90/0x130 [ 328.796147][T13511] __vmalloc_node_range_noprof+0x6d5/0xe40 [ 328.796201][T13511] __kvmalloc_node_noprof+0x312/0x4f0 [ 328.796237][T13511] ? ip_set_alloc+0x1f/0x30 [ 328.796261][T13511] ? ip_set_alloc+0x1f/0x30 [ 328.796284][T13511] ? __kmalloc_cache_noprof+0x189/0x320 [ 328.796489][T13511] ip_set_alloc+0x1f/0x30 [ 328.796515][T13511] hash_netiface_create+0x282/0x740 [ 328.796545][T13511] ? __pfx_hash_netiface_create+0x10/0x10 [ 328.796574][T13511] ip_set_create+0x3c9/0x960 [ 328.796615][T13511] ? __nla_parse+0x40/0x60 [ 328.796719][T13511] nfnetlink_rcv_msg+0x4c3/0x590 [ 328.796785][T13511] netlink_rcv_skb+0x120/0x220 [ 328.796833][T13511] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 328.796884][T13511] nfnetlink_rcv+0x16b/0x1690 [ 328.796929][T13511] ? __kfree_skb+0x109/0x150 [ 328.796968][T13511] ? nlmon_xmit+0x4f/0x60 [ 328.797005][T13511] ? consume_skb+0x49/0x150 [ 328.797039][T13511] ? nlmon_xmit+0x4f/0x60 [ 328.797116][T13511] ? dev_hard_start_xmit+0x39e/0x3d0 [ 328.797247][T13511] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 328.797286][T13511] ? __dev_queue_xmit+0x182/0x1fb0 [ 328.797327][T13511] ? ref_tracker_free+0x37d/0x3e0 [ 328.797397][T13511] ? __netlink_deliver_tap+0x4dc/0x500 [ 328.797441][T13511] netlink_unicast+0x59e/0x670 [ 328.797474][T13511] netlink_sendmsg+0x58b/0x6b0 [ 328.797515][T13511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.797552][T13511] __sock_sendmsg+0x145/0x180 [ 328.797771][T13511] ____sys_sendmsg+0x31e/0x4e0 [ 328.797813][T13511] ___sys_sendmsg+0x17b/0x1d0 [ 328.797903][T13511] __x64_sys_sendmsg+0xd4/0x160 [ 328.797946][T13511] x64_sys_call+0x2999/0x2fb0 [ 328.798039][T13511] do_syscall_64+0xd2/0x200 [ 328.798083][T13511] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 328.798123][T13511] ? clear_bhb_loop+0x40/0x90 [ 328.798169][T13511] ? clear_bhb_loop+0x40/0x90 [ 328.798199][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.798229][T13511] RIP: 0033:0x7eff6d9ee969 [ 328.798253][T13511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.798301][T13511] RSP: 002b:00007eff6c057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.798329][T13511] RAX: ffffffffffffffda RBX: 00007eff6dc15fa0 RCX: 00007eff6d9ee969 [ 328.798347][T13511] RDX: 0000000000000800 RSI: 0000200000000340 RDI: 0000000000000004 [ 328.798442][T13511] RBP: 00007eff6da70ab1 R08: 0000000000000000 R09: 0000000000000000 [ 328.798476][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.798494][T13511] R13: 0000000000000000 R14: 00007eff6dc15fa0 R15: 00007ffdbc4d7f48 [ 328.798519][T13511] [ 328.798529][T13511] memory: usage 307200kB, limit 307200kB, failcnt 239 [ 328.819061][ T29] audit: type=1326 audit(1748436714.662:6551): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.842829][T13511] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 328.842846][T13511] kmem: usage 306808kB, limit 9007199254740988kB, failcnt 0 [ 328.842858][T13511] Memory cgroup stats for /syz1: [ 328.866691][ T29] audit: type=1326 audit(1748436714.662:6552): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.900616][T13511] cache 86016 [ 328.904282][ T29] audit: type=1326 audit(1748436714.662:6553): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.8.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 328.908461][T13511] rss 315392 [ 328.908473][T13511] shmem 0 [ 329.331165][T13511] mapped_file 86016 [ 329.335000][T13511] dirty 40960 [ 329.338303][T13511] writeback 0 [ 329.341870][T13511] workingset_refault_anon 0 [ 329.346392][T13511] workingset_refault_file 112 [ 329.351244][T13511] swap 0 [ 329.354128][T13511] swapcached 0 [ 329.357553][T13511] nr_memmap_boot_pages 295286 [ 329.362335][T13511] pgpgin 295188 [ 329.365887][T13511] pglazyfree 304943 [ 329.369729][T13511] pgfault 18 [ 329.372969][T13511] a_other 151552 [ 329.376564][T13511] inactive_anon 163840 [ 329.380687][T13511] active_anon 0 [ 329.384169][T13511] inactive_file 86016 [ 329.388221][T13511] active_file 0 [ 329.391741][T13511] hierarchical_memory_limit 314572800 [ 329.397243][T13511] hierarchical_memsw_limit 9223372036854771712 [ 329.403492][T13511] total_cache 86016 [ 329.407323][T13511] total_rss 315392 [ 329.411094][T13511] total_shmem 0 [ 329.414637][T13511] total_mapped_file 86016 [ 329.419095][T13511] total_dirty 40960 [ 329.422914][T13511] total_writeback 0 [ 329.426752][T13511] total_workingset_refault_anon 0 [ 329.431818][T13511] total_workingset_refault_file 112 [ 329.437034][T13511] total_swap 0 [ 329.440477][T13511] total_swapcached 0 [ 329.444391][T13511] total_nr_memmap_boot_pages 295318 [ 329.449664][T13511] total_pgpgin 295220 [ 329.453700][T13511] total_pglazyfree 304957 [ 329.458044][T13511] total_pgfault 18 [ 329.461812][T13511] total_a_other 151552 [ 329.466002][T13511] total_inactive_anon 163840 [ 329.470710][T13511] total_active_anon 0 [ 329.474722][T13511] total_inactive_file 86016 [ 329.479273][T13511] total_active_file 0 [ 329.483374][T13511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1/syz1,task=syz.1.3627,pid=13510,uid=0 [ 329.498694][T13511] Memory cgroup out of memory: Killed process 13511 (syz.1.3627) total-vm:93748kB, anon-rss:1064kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 329.654360][T13537] netlink: 'syz.6.3636': attribute type 1 has an invalid length. [ 329.674512][T13537] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3636'. [ 329.684207][T13537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.774911][T13569] netlink: 'syz.6.3648': attribute type 1 has an invalid length. [ 330.798812][T13569] 8021q: adding VLAN 0 to HW filter on device bond17 [ 330.807158][T13569] bond16: (slave bond17): making interface the new active one [ 330.815421][T13569] bond16: (slave bond17): Enslaving as an active interface with an up link [ 330.846557][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3648'. [ 332.339826][T13610] netlink: 'syz.0.3663': attribute type 1 has an invalid length. [ 332.363169][T13610] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.372568][T13610] bond0: (slave bond3): making interface the new active one [ 332.380930][T13610] bond0: (slave bond3): Enslaving as an active interface with an up link [ 332.391355][T13610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3663'. [ 332.624253][T13621] batadv_slave_1: entered promiscuous mode [ 332.633091][T13621] batadv_slave_1: left promiscuous mode [ 332.777037][T13624] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3667'. [ 332.788070][T13624] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.3667'. [ 333.351751][T13646] netlink: 'syz.6.3676': attribute type 1 has an invalid length. [ 333.445307][T13651] 8021q: adding VLAN 0 to HW filter on device bond19 [ 333.455029][T13651] bond18: (slave bond19): making interface the new active one [ 333.468041][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3676'. [ 333.477762][T13651] bond18: (slave bond19): Enslaving as an active interface with an up link [ 333.744409][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 333.744427][ T29] audit: type=1326 audit(1748436719.752:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 333.774336][ T29] audit: type=1326 audit(1748436719.752:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 333.855918][ T29] audit: type=1326 audit(1748436719.842:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 333.879515][ T29] audit: type=1326 audit(1748436719.842:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 333.903193][ T29] audit: type=1326 audit(1748436719.842:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 333.926742][ T29] audit: type=1326 audit(1748436719.842:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13656 comm="syz.6.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 333.950647][ T29] audit: type=1326 audit(1748436719.852:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 333.974836][ T29] audit: type=1326 audit(1748436719.852:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13629 comm="syz.0.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5ce6e969 code=0x7ffc0000 [ 334.030903][ T3400] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 334.038802][ T3400] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.363712][ T29] audit: type=1326 audit(1748436720.372:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 334.387337][ T29] audit: type=1326 audit(1748436720.372:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.1.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6d9ee969 code=0x7ffc0000 [ 334.514747][T13699] batadv_slave_1: entered promiscuous mode [ 334.523505][T13699] batadv_slave_1: left promiscuous mode [ 334.661724][ T3400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 334.681023][ T3400] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 334.932121][T13721] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 334.938764][T13721] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.946334][T13721] vhci_hcd vhci_hcd.0: Device attached [ 334.954970][T13721] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 334.964434][T13721] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 334.971086][T13721] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 334.978781][T13721] vhci_hcd vhci_hcd.0: Device attached [ 334.989244][T13721] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 334.995941][T13721] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.003634][T13721] vhci_hcd vhci_hcd.0: Device attached [ 335.012524][T13721] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 335.019263][T13721] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.027051][T13721] vhci_hcd vhci_hcd.0: Device attached [ 335.035211][T13721] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 335.049381][T13721] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 335.202189][ T3400] vhci_hcd: vhci_device speed not set [ 335.279113][ T3400] usb 1-1: new full-speed USB device number 6 using vhci_hcd [ 335.286661][T13731] vhci_hcd: connection closed [ 335.286839][T13728] vhci_hcd: connection closed [ 335.286917][ T4004] vhci_hcd: stop threads [ 335.293263][T13726] vhci_hcd: connection closed [ 335.296427][ T4004] vhci_hcd: release socket [ 335.301471][T13722] vhci_hcd: connection reset by peer [ 335.305383][ T4004] vhci_hcd: disconnect device [ 335.399407][ T4004] vhci_hcd: stop threads [ 335.403951][ T4004] vhci_hcd: release socket [ 335.408485][ T4004] vhci_hcd: disconnect device [ 335.413421][ T4004] vhci_hcd: stop threads [ 335.417770][ T4004] vhci_hcd: release socket [ 335.422328][ T4004] vhci_hcd: disconnect device [ 335.427357][ T4004] vhci_hcd: stop threads [ 335.431655][ T4004] vhci_hcd: release socket [ 335.436141][ T4004] vhci_hcd: disconnect device [ 336.322971][ T10] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 336.349330][ T10] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.392630][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.401309][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.588752][T13781] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 336.595335][T13781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 336.603090][T13781] vhci_hcd vhci_hcd.0: Device attached [ 336.609703][T13781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 336.620170][T13781] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(12) [ 336.626829][T13781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 336.634326][T13781] vhci_hcd vhci_hcd.0: Device attached [ 336.642184][T13781] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(14) [ 336.648894][T13781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 336.656560][T13781] vhci_hcd vhci_hcd.0: Device attached [ 336.663934][T13781] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(16) [ 336.670577][T13781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 336.678269][T13781] vhci_hcd vhci_hcd.0: Device attached [ 336.685011][T13781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 336.699381][T13781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 336.715996][T13785] vhci_hcd: connection closed [ 336.716124][ T3438] vhci_hcd: stop threads [ 336.716142][T13790] vhci_hcd: connection closed [ 336.716153][ T3438] vhci_hcd: release socket [ 336.716211][ T3438] vhci_hcd: disconnect device [ 336.720896][T13787] vhci_hcd: connection closed [ 336.741307][ T3438] vhci_hcd: stop threads [ 336.741536][T13782] vhci_hcd: connection closed [ 336.746122][ T3438] vhci_hcd: release socket [ 336.746144][ T3438] vhci_hcd: disconnect device [ 336.765130][ T3438] vhci_hcd: stop threads [ 336.769572][ T3438] vhci_hcd: release socket [ 336.774064][ T3438] vhci_hcd: disconnect device [ 336.780737][ T3438] vhci_hcd: stop threads [ 336.785035][ T3438] vhci_hcd: release socket [ 336.789537][ T3438] vhci_hcd: disconnect device [ 336.809060][ T10] vhci_hcd: vhci_device speed not set [ 337.522300][T13815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.540056][T13815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.851075][T13824] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3732'. [ 338.309241][ T3389] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 338.317205][ T3389] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 339.302639][T13842] 9pnet_fd: p9_fd_create_unix (13842): problem connecting socket: ./file0: -111 [ 339.319093][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 339.319118][ T29] audit: type=1326 audit(1748436725.302:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.348936][ T29] audit: type=1326 audit(1748436725.302:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.372535][ T29] audit: type=1326 audit(1748436725.302:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.395967][ T29] audit: type=1326 audit(1748436725.302:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.419676][ T29] audit: type=1326 audit(1748436725.302:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.443459][ T29] audit: type=1326 audit(1748436725.312:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.467028][ T29] audit: type=1326 audit(1748436725.312:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.490728][ T29] audit: type=1326 audit(1748436725.312:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.515785][ T29] audit: type=1326 audit(1748436725.312:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 339.539473][ T29] audit: type=1326 audit(1748436725.312:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13841 comm="syz.6.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbc11e969 code=0x7ffc0000 [ 340.301264][ T3400] usb 1-1: enqueue for inactive port 0 [ 340.346155][ T3400] usb 1-1: enqueue for inactive port 0 [ 340.489217][ T3400] vhci_hcd: vhci_device speed not set [ 341.383075][ T10] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 341.391423][ T10] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.650533][T13875] SELinux: failed to load policy [ 341.725264][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.734559][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.768204][T13883] batadv_slave_1: entered promiscuous mode [ 341.789976][T13883] batadv_slave_1: left promiscuous mode [ 342.027321][T13894] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 342.033907][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 342.041456][T13894] vhci_hcd vhci_hcd.0: Device attached [ 342.049637][T13894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.058706][T13894] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(10) [ 342.065463][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 342.073082][T13894] vhci_hcd vhci_hcd.0: Device attached [ 342.117794][T13894] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(12) [ 342.117824][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 342.117862][T13894] vhci_hcd vhci_hcd.0: Device attached [ 342.118880][T13894] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(14) [ 342.118922][T13894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 342.118949][T13894] vhci_hcd vhci_hcd.0: Device attached [ 342.120360][T13894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.123870][T13894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.131621][T13904] vhci_hcd: connection closed [ 342.190347][T13895] vhci_hcd: connection closed [ 342.219065][ T3400] vhci_hcd: vhci_device speed not set [ 342.280882][T13901] vhci_hcd: connection closed [ 342.281906][T13897] vhci_hcd: connection closed [ 342.289150][ T3400] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 342.327506][T13896] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 342.402787][T13920] netlink: 'syz.6.3763': attribute type 1 has an invalid length. [ 342.489058][ T10] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 342.496891][T13920] 8021q: adding VLAN 0 to HW filter on device bond21 [ 342.510725][T13920] bond20: (slave bond21): making interface the new active one [ 342.518690][T13920] bond20: (slave bond21): Enslaving as an active interface with an up link [ 342.528048][ T3438] vhci_hcd: stop threads [ 342.532381][ T3438] vhci_hcd: release socket [ 342.536925][ T3438] vhci_hcd: disconnect device [ 342.542516][ T10] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.544837][ T3438] vhci_hcd: stop threads [ 342.556432][ T3438] vhci_hcd: release socket [ 342.561007][ T3438] vhci_hcd: disconnect device [ 342.568138][ T3438] vhci_hcd: stop threads [ 342.572497][ T3438] vhci_hcd: release socket [ 342.577199][ T3438] vhci_hcd: disconnect device [ 342.601871][ T3438] vhci_hcd: stop threads [ 342.606255][ T3438] vhci_hcd: release socket [ 342.610753][ T3438] vhci_hcd: disconnect device [ 342.812279][T13946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.822182][T13946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.600690][T13964] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 343.607250][T13964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 343.614803][T13964] vhci_hcd vhci_hcd.0: Device attached [ 343.623953][T13964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.640423][T13964] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(11) [ 343.647111][T13964] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 343.654684][T13964] vhci_hcd vhci_hcd.0: Device attached [ 343.666141][T13964] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(13) [ 343.672824][T13964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 343.680612][T13964] vhci_hcd vhci_hcd.0: Device attached [ 343.704402][T13964] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(15) [ 343.711136][T13964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 343.718837][T13964] vhci_hcd vhci_hcd.0: Device attached [ 343.724942][T13964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.761653][T13964] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.772415][ T3397] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 343.780709][ T3397] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.797265][T13978] vhci_hcd: connection closed [ 343.797379][T13968] vhci_hcd: connection closed [ 343.797578][T13973] vhci_hcd: connection closed [ 343.802521][T13965] vhci_hcd: connection closed [ 343.811865][ T3991] vhci_hcd: stop threads [ 343.820869][ T3991] vhci_hcd: release socket [ 343.825315][ T3991] vhci_hcd: disconnect device [ 343.836518][ T3991] vhci_hcd: stop threads [ 343.840876][ T3991] vhci_hcd: release socket [ 343.845381][ T3991] vhci_hcd: disconnect device [ 343.850710][ T3991] vhci_hcd: stop threads [ 343.855111][ T3991] vhci_hcd: release socket [ 343.859596][ T3991] vhci_hcd: disconnect device [ 343.864622][ T3991] vhci_hcd: stop threads [ 343.868968][ T3991] vhci_hcd: release socket [ 343.873482][ T3991] vhci_hcd: disconnect device [ 344.087621][T14001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.096437][T14001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.412251][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 344.412283][ T29] audit: type=1326 audit(1748436730.392:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.442146][ T29] audit: type=1326 audit(1748436730.392:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.465778][ T29] audit: type=1326 audit(1748436730.392:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.489387][ T29] audit: type=1326 audit(1748436730.402:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.512919][ T29] audit: type=1326 audit(1748436730.402:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.536570][ T29] audit: type=1326 audit(1748436730.402:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.560142][ T29] audit: type=1326 audit(1748436730.402:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.583714][ T29] audit: type=1326 audit(1748436730.402:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.607247][ T29] audit: type=1326 audit(1748436730.402:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.630834][ T29] audit: type=1326 audit(1748436730.402:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14015 comm="syz.8.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f688e969 code=0x7ffc0000 [ 344.880669][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.889342][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.171658][T14039] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 345.178255][T14039] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 345.185883][T14039] vhci_hcd vhci_hcd.0: Device attached [ 345.192547][T14039] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 345.201318][T14039] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 345.207999][T14039] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 345.215583][T14039] vhci_hcd vhci_hcd.0: Device attached [ 345.221995][T14039] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 345.228746][T14039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 345.236379][T14039] vhci_hcd vhci_hcd.0: Device attached [ 345.242811][T14039] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 345.249496][T14039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 345.257128][T14039] vhci_hcd vhci_hcd.0: Device attached [ 345.263153][T14039] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 345.274005][T14039] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 345.288904][T14046] vhci_hcd: connection closed [ 345.289110][T14044] vhci_hcd: connection closed [ 345.290590][ T3991] vhci_hcd: stop threads [ 345.294191][T14040] vhci_hcd: connection closed [ 345.298682][ T3991] vhci_hcd: release socket [ 345.303108][T14042] vhci_hcd: connection closed [ 345.307604][ T3991] vhci_hcd: disconnect device [ 345.321662][ T3991] vhci_hcd: stop threads [ 345.326036][ T3991] vhci_hcd: release socket [ 345.330594][ T3991] vhci_hcd: disconnect device [ 345.338367][ T3991] vhci_hcd: stop threads [ 345.342691][ T3991] vhci_hcd: release socket [ 345.347136][ T3991] vhci_hcd: disconnect device [ 345.354986][ T3991] vhci_hcd: stop threads [ 345.359343][ T3991] vhci_hcd: release socket [ 345.363801][ T3991] vhci_hcd: disconnect device [ 345.389144][ T10] vhci_hcd: vhci_device speed not set [ 345.489939][ T6456] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 345.497881][ T6456] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.499649][T14029] syz.6.3801 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 345.522175][T14029] CPU: 0 UID: 0 PID: 14029 Comm: syz.6.3801 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(voluntary) [ 345.522281][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.522298][T14029] Call Trace: [ 345.522308][T14029] [ 345.522318][T14029] __dump_stack+0x1d/0x30 [ 345.522348][T14029] dump_stack_lvl+0xe8/0x140 [ 345.522376][T14029] dump_stack+0x15/0x1b [ 345.522445][T14029] dump_header+0x81/0x220 [ 345.522520][T14029] oom_kill_process+0x334/0x3f0 [ 345.522552][T14029] out_of_memory+0x979/0xb80 [ 345.522580][T14029] ? css_next_descendant_pre+0x138/0x160 [ 345.522642][T14029] mem_cgroup_out_of_memory+0x13d/0x190 [ 345.522669][T14029] try_charge_memcg+0x5e2/0x870 [ 345.522746][T14029] obj_cgroup_charge_pages+0xb7/0x1a0 [ 345.522780][T14029] __memcg_kmem_charge_page+0x9f/0x170 [ 345.522806][T14029] __alloc_frozen_pages_noprof+0x188/0x360 [ 345.522879][T14029] alloc_pages_mpol+0xb3/0x250 [ 345.522907][T14029] alloc_pages_noprof+0x90/0x130 [ 345.522939][T14029] __vmalloc_node_range_noprof+0x6d5/0xe40 [ 345.523014][T14029] __kvmalloc_node_noprof+0x312/0x4f0 [ 345.523040][T14029] ? ip_set_alloc+0x1f/0x30 [ 345.523064][T14029] ? ip_set_alloc+0x1f/0x30 [ 345.523268][T14029] ? __kmalloc_cache_noprof+0x189/0x320 [ 345.523302][T14029] ip_set_alloc+0x1f/0x30 [ 345.523319][T14029] hash_netiface_create+0x282/0x740 [ 345.523358][T14029] ? __pfx_hash_netiface_create+0x10/0x10 [ 345.523429][T14029] ip_set_create+0x3c9/0x960 [ 345.523459][T14029] ? __nla_parse+0x40/0x60 [ 345.523491][T14029] nfnetlink_rcv_msg+0x4c3/0x590 [ 345.523549][T14029] netlink_rcv_skb+0x120/0x220 [ 345.523569][T14029] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 345.523643][T14029] nfnetlink_rcv+0x16b/0x1690 [ 345.523678][T14029] ? __kfree_skb+0x109/0x150 [ 345.523735][T14029] ? nlmon_xmit+0x4f/0x60 [ 345.523757][T14029] ? consume_skb+0x49/0x150 [ 345.523778][T14029] ? nlmon_xmit+0x4f/0x60 [ 345.523818][T14029] ? dev_hard_start_xmit+0x39e/0x3d0 [ 345.523974][T14029] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 345.524042][T14029] ? __dev_queue_xmit+0x182/0x1fb0 [ 345.524075][T14029] ? ref_tracker_free+0x37d/0x3e0 [ 345.524121][T14029] ? __netlink_deliver_tap+0x4dc/0x500 [ 345.524149][T14029] netlink_unicast+0x59e/0x670 [ 345.524171][T14029] netlink_sendmsg+0x58b/0x6b0 [ 345.524254][T14029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.524279][T14029] __sock_sendmsg+0x145/0x180 [ 345.524351][T14029] ____sys_sendmsg+0x31e/0x4e0 [ 345.524387][T14029] ___sys_sendmsg+0x17b/0x1d0 [ 345.524425][T14029] __x64_sys_sendmsg+0xd4/0x160 [ 345.524465][T14029] x64_sys_call+0x2999/0x2fb0 [ 345.524560][T14029] do_syscall_64+0xd2/0x200 [ 345.524589][T14029] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 345.524615][T14029] ? clear_bhb_loop+0x40/0x90 [ 345.524713][T14029] ? clear_bhb_loop+0x40/0x90 [ 345.524735][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.524754][T14029] RIP: 0033:0x7fafbc11e969 [ 345.524768][T14029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.524785][T14029] RSP: 002b:00007fafba787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.524802][T14029] RAX: ffffffffffffffda RBX: 00007fafbc345fa0 RCX: 00007fafbc11e969 [ 345.524814][T14029] RDX: 0000000000000800 RSI: 0000200000000340 RDI: 0000000000000004 [ 345.524901][T14029] RBP: 00007fafbc1a0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 345.524912][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.524924][T14029] R13: 0000000000000000 R14: 00007fafbc345fa0 R15: 00007ffdaadc92d8 [ 345.524941][T14029] [ 345.524978][T14029] memory: usage 307200kB, limit 307200kB, failcnt 145 [ 345.888805][T14029] memory+swap: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 345.896874][T14029] kmem: usage 306900kB, limit 9007199254740988kB, failcnt 0 [ 345.904278][T14029] Memory cgroup stats for /syz6: [ 345.905347][T14029] cache 69632 [ 345.913667][T14029] rss 204800 [ 345.916887][T14029] shmem 0 [ 345.919861][T14029] mapped_file 4096 [ 345.923590][T14029] dirty 4096 [ 345.926783][T14029] writeback 0 [ 345.930087][T14029] workingset_refault_anon 0 [ 345.934583][T14029] workingset_refault_file 48 [ 345.939213][T14029] swap 0 [ 345.942144][T14029] swapcached 0 [ 345.945527][T14029] nr_memmap_boot_pages 187165 [ 345.950275][T14029] pgpgin 187098 [ 345.953877][T14029] pglazyfree 240802 [ 345.957715][T14029] pgfault 8 [ 345.960875][T14029] a_other 40960 [ 345.964331][T14029] inactive_anon 163840 [ 345.968393][T14029] active_anon 0 [ 345.971880][T14029] inactive_file 69632 [ 345.975894][T14029] active_file 0 [ 345.979405][T14029] hierarchical_memory_limit 314572800 [ 345.984879][T14029] hierarchical_memsw_limit 9223372036854771712 [ 345.991061][T14029] total_cache 69632 [ 345.994869][T14029] total_rss 204800 [ 345.998598][T14029] total_shmem 0 [ 346.002099][T14029] total_mapped_file 4096 [ 346.006413][T14029] total_dirty 4096 [ 346.010188][T14029] total_writeback 0 [ 346.014091][T14029] total_workingset_refault_anon 0 [ 346.019157][T14029] total_workingset_refault_file 48 [ 346.024311][T14029] total_swap 0 [ 346.027685][T14029] total_swapcached 0 [ 346.031617][T14029] total_nr_memmap_boot_pages 187165 [ 346.036923][T14029] total_pgpgin 187098 [ 346.041047][T14029] total_pglazyfree 240810 [ 346.045911][T14029] total_pgfault 8 [ 346.049595][T14029] total_a_other 40960 [ 346.053595][T14029] total_inactive_anon 163840 [ 346.058274][T14029] total_active_anon 0 [ 346.062405][T14029] total_inactive_file 69632 [ 346.067026][T14029] total_active_file 0 [ 346.071041][T14029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3801,pid=14028,uid=0 [ 346.085785][T14029] Memory cgroup out of memory: Killed process 14029 (syz.6.3801) total-vm:93748kB, anon-rss:1064kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 346.357409][T14084] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 346.364042][T14084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.371581][T14084] vhci_hcd vhci_hcd.0: Device attached [ 346.390265][T14084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 346.410244][T14084] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 346.416923][T14084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.424417][T14084] vhci_hcd vhci_hcd.0: Device attached [ 346.436231][T14084] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 346.442924][T14084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 346.450583][T14084] vhci_hcd vhci_hcd.0: Device attached [ 346.468899][T14084] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16) [ 346.475557][T14084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 346.483295][T14084] vhci_hcd vhci_hcd.0: Device attached [ 346.492322][T14084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 346.503159][T14084] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 346.524341][T14101] vhci_hcd: connection closed [ 346.524722][ T3545] vhci_hcd: stop threads [ 346.533932][ T3545] vhci_hcd: release socket [ 346.538397][ T3545] vhci_hcd: disconnect device [ 346.556670][T14085] vhci_hcd: connection closed [ 346.562608][T14091] vhci_hcd: connection closed [ 346.565554][T14111] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.3823'. [ 346.568834][T14095] vhci_hcd: connection closed [ 346.572536][ T3545] vhci_hcd: stop threads [ 346.582961][T14106] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 346.585961][ T3545] vhci_hcd: release socket [ 346.590609][T14098] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 346.598294][ T3545] vhci_hcd: disconnect device [ 346.602702][T14098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.602808][T14098] vhci_hcd vhci_hcd.0: Device attached [ 346.611573][T14111] netlink: 4280 bytes leftover after parsing attributes in process `syz.9.3823'. [ 346.632961][T14106] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(12) [ 346.637249][ T3389] vhci_hcd: vhci_device speed not set [ 346.643274][T14106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.656346][T14106] vhci_hcd vhci_hcd.0: Device attached [ 346.732312][ T3545] vhci_hcd: stop threads [ 346.736675][ T3545] vhci_hcd: release socket [ 346.741227][ T3545] vhci_hcd: disconnect device [ 346.762672][T14106] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 346.769323][T14106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 346.777046][T14106] vhci_hcd vhci_hcd.0: Device attached [ 346.789497][ T3545] vhci_hcd: stop threads [ 346.793820][ T3545] vhci_hcd: release socket [ 346.798369][ T3545] vhci_hcd: disconnect device [ 346.895028][T14098] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(9) [ 346.901740][T14098] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 346.909414][T14098] vhci_hcd vhci_hcd.0: Device attached [ 347.017327][T14131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 347.081804][T14134] 9pnet_fd: p9_fd_create_unix (14134): problem connecting socket: ./file0: -111 [ 347.094085][T14098] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 347.094662][ T1039] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 347.121267][ T1039] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.134875][T14119] vhci_hcd: connection closed [ 347.135044][ T3519] vhci_hcd: stop threads [ 347.144107][ T3519] vhci_hcd: release socket [ 347.148622][ T3519] vhci_hcd: disconnect device [ 347.153432][ T6456] vhci_hcd: vhci_device speed not set [ 347.161383][T14118] vhci_hcd: connection closed [ 347.161543][T14108] vhci_hcd: connection closed [ 347.161591][T14113] vhci_hcd: connection closed [ 347.161682][T14108] ================================================================== [ 347.166336][T14108] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 347.166364][T14108] [ 347.166372][T14108] write to 0xffffffff88e4cf88 of 29 bytes by task 14113 on cpu 1: [ 347.166390][T14108] vsnprintf+0x2ce/0x890 [ 347.166415][T14108] vscnprintf+0x41/0x90 [ 347.166443][T14108] printk_sprint+0x30/0x2d0 [ 347.166467][T14108] vprintk_store+0x599/0x860 [ 347.166490][T14108] vprintk_emit+0x178/0x650 [ 347.166514][T14108] vprintk_default+0x26/0x30 [ 347.166542][T14108] vprintk+0x1d/0x30 [ 347.166573][T14108] _printk+0x79/0xa0 [ 347.166608][T14108] vhci_rx_loop+0x4a5/0x5f0 [ 347.166636][T14108] kthread+0x486/0x510 [ 347.166661][T14108] ret_from_fork+0xda/0x150 [ 347.166688][T14108] ret_from_fork_asm+0x1a/0x30 [ 347.166717][T14108] [ 347.166726][T14108] read to 0xffffffff88e4cf98 of 8 bytes by task 14108 on cpu 0: [ 347.166747][T14108] data_push_tail+0xfd/0x420 [ 347.166769][T14108] data_alloc+0xbf/0x2b0 [ 347.166806][T14108] prb_reserve+0x808/0xaf0 [ 347.166843][T14108] vprintk_store+0x56d/0x860 [ 347.166869][T14108] vprintk_emit+0x178/0x650 [ 347.166895][T14108] vprintk_default+0x26/0x30 [ 347.166922][T14108] vprintk+0x1d/0x30 [ 347.166957][T14108] _printk+0x79/0xa0 [ 347.166992][T14108] vhci_rx_loop+0x4a5/0x5f0 [ 347.167019][T14108] kthread+0x486/0x510 [ 347.167044][T14108] ret_from_fork+0xda/0x150 [ 347.167070][T14108] ret_from_fork_asm+0x1a/0x30 [ 347.167106][T14108] [ 347.167113][T14108] value changed: 0x00000000fffff456 -> 0x6f6c63206e6f6974 [ 347.167128][T14108] [ 347.167134][T14108] Reported by Kernel Concurrency Sanitizer on: [ 347.167149][T14108] CPU: 0 UID: 0 PID: 14108 Comm: vhci_rx Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(voluntary) [ 347.167181][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.167197][T14108] ================================================================== [ 347.168179][T14147] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3833'. [ 347.198964][ T3519] vhci_hcd: stop threads [ 347.222763][ T6456] usb 13-1: new full-speed USB device number 5 using vhci_hcd [ 347.224396][ T3519] vhci_hcd: release socket [ 347.231354][T14112] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 347.232930][ T3519] vhci_hcd: disconnect device [ 347.339704][ T3400] usb 17-1: enqueue for inactive port 0 [ 347.407686][ T3519] vhci_hcd: stop threads [ 347.412006][ T3519] vhci_hcd: release socket [ 347.416449][ T3519] vhci_hcd: disconnect device [ 347.425698][T14147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.435155][ T3400] usb 17-1: enqueue for inactive port 0 [ 347.441268][ T3519] vhci_hcd: stop threads [ 347.445648][ T3519] vhci_hcd: release socket [ 347.450167][ T3519] vhci_hcd: disconnect device [ 347.457146][T14147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.468918][T14147] bond0 (unregistering): Released all slaves [ 347.509440][ T3400] vhci_hcd: vhci_device speed not set [ 352.379135][ T6456] usb 13-1: enqueue for inactive port 0 [ 352.384741][ T6456] usb 13-1: enqueue for inactive port 0 [ 352.459079][ T6456] vhci_hcd: vhci_device speed not set