last executing test programs: 6m3.046014623s ago: executing program 32 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88", 0x96}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed", 0x24}, {0x0}], 0x6, &(0x7f0000001480)}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce7", 0xa}], 0x1}, 0x0) 5m55.811073881s ago: executing program 33 (id=340): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xf7d4, 0x8, 0x1, 0x8001, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d697400"], 0x290}}, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kvm_fpu\x00', r4, 0x0, 0x4804}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) io_setup(0x7, &(0x7f0000000080)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r7, r6, &(0x7f0000002700)=0x23, 0x1c) 5m40.914134496s ago: executing program 34 (id=502): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r0, 0xffffffffffffffff, 0x0) 5m13.508477759s ago: executing program 35 (id=890): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xfff, 0x0, 0x1, 0xfffffffe}]}) flistxattr(r0, 0x0, 0x0) 4m35.920333778s ago: executing program 36 (id=1509): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000200000005000000ff01000040000000", @ANYRES32, @ANYBLOB="0100000000000000000000000000010000000000", @ANYRES32, @ANYRES32, @ANYBLOB="03000000020000000300"/28], 0x50) 4m12.502161925s ago: executing program 37 (id=1783): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000074c0)=[{{&(0x7f0000000340)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="22029d3f34478dd7c6b4bd558580024dd4f3ed025977593fc8e4fc4340ed1a6612d271302e2b6f5f27b6da7bc441df1c08989d0e13e86549d437c61da3460c0ada77dbc3c34e7b469e25f86a8add71df58a707341eb74dc1f5224bee25a1be1747", 0x61}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x138}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)}}], 0x2, 0x8044) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0xe000, &(0x7f00000003c0)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0xffffff40}, 0x0, 0x0, 0xd5b, 0x3, 0x4, 0x83e, 0x12, 0x101}}], 0x58}, 0x0) 3m42.219132594s ago: executing program 38 (id=2095): getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000000180)='smaps_rollup\x00') lseek(r4, 0x10000000005, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x0, 0x2}, 0x14) 3m42.114253596s ago: executing program 39 (id=2097): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x7fffffff, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x100}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8000}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) modify_ldt$write2(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfb7}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001200010100", @ANYRES32, @ANYBLOB="54000080"], 0x70}}, 0x0) (fail_nth: 5) 3m32.744139144s ago: executing program 40 (id=2216): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0xffffffffffffffff, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000040)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={&(0x7f0000000580)={0x5, 0x133, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "b395ac5160fbdac3"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) getpid() gettid() syz_clone3(&(0x7f0000000400)={0x800000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) fallocate(r1, 0x0, 0x0, 0x1000f4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 3m22.218649696s ago: executing program 41 (id=2356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x4, 0x0, 0x0, 0x8000002, 0x0, 0x7e154a0b, 0x0, 0x5, 0x0, 0x100, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffc, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x7fc, 0x2000009, 0x800, 0x0, 0x8001, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa23, 0x0, 0xfffffffd, 0x80000, 0x0, 0xd819ac7, 0x1, 0x802, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x200000, 0x20000040, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x132}}]}}]}, 0x45c}}, 0x0) r10 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fchdir(r11) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="8000000000000000b7080000000098c6e7598550b05a0000bfa20000000000213d150000f8ffffffb703000800003d090f89eda24f7e008500000016000000950000cb1bf0ffffffffff284395b6f4fd97e6261fa8812a8805003c89e6c7bbe6348587262d193079749a3347d4cce309c4263607a1b94e64aec6ba79e3d3c684db1fdd9d0921b19fd6637cbfe641f36d7a1319b095b466c6a26c4721cec71800406a0e22a637f2cabca674871505bdf04c7e5047c79c720122f7345025669adbb9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/28], 0x48) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="0018110000", @ANYRES32=r13, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0), &(0x7f0000000240)) 3m13.927730474s ago: executing program 42 (id=2467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x300, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000001b80)={0xa, 0x4e20, 0x6, @local, 0xc000000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0xffffffffffffffb9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r3, &(0x7f0000001a40)={&(0x7f0000001200)=@nl=@unspec, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000001280)=""/52, 0x34}, {&(0x7f00000012c0)=""/51, 0x33}, {&(0x7f0000001300)=""/168, 0xa8}, {&(0x7f00000014c0)=""/73, 0x49}, {&(0x7f0000001540)=""/14, 0xe}, {&(0x7f0000001580)=""/153, 0x99}, {&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/205, 0xcd}, {&(0x7f0000001840)=""/91, 0x5b}], 0xa, &(0x7f0000001980)=""/179, 0xb3}, 0x320a2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0xfe, "0006000000df0066952e0d16c708db720800"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='rss_stat\x00', r6, 0x0, 0x1000000000000}, 0x18) chroot(&(0x7f0000001b40)='./file0\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b00)={{r5}, &(0x7f0000001a80), &(0x7f0000001ac0)='%-010d \x00'}, 0x20) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0xfffffffa) r8 = syz_open_pts(r4, 0x42) r9 = dup3(r8, r4, 0x0) write$UHID_INPUT(r9, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 2m29.955201015s ago: executing program 3 (id=3195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='spmi_read_begin\x00', r3, 0x0, 0x1000}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000000)=0x746) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000300)={[{0x2b, 'net'}, {0x2b, 'io'}, {0x2b, 'pids'}, {0x2b, 'cpuset'}]}, 0x17) r8 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r8, 0x3516, 0x0, 0x4, 0x0, 0x0) 2m29.787688527s ago: executing program 3 (id=3198): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) timer_create(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @private2, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x10) socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES8=r4, @ANYRES16=r2, @ANYBLOB="cfeebec675536f8b04906eab7acd9c16c9008379bcb1d5bc3ccbc0670d8294aa21c6f865aa4fc88971d838b6fda67b06753c4ef1a929143e9e0816a82574c88027", @ANYBLOB="e280bbbe5ed6773d997d837000c44569b4880ccc01f3178db2a668f06db39722e8cad43b0fd8deb80f172cdbaa696c41d14b467cd5537016723d57c12d0cd8a5462d46f6afffb0f9f546da3f2c1884675edff010197c6f66d873185e5adebdb22f73c1c0f08e4720614c79419eb2f4dcc4ed06dfe1d6add4918075a4e4fbf19a7553ef4e3e340185294260785e9ecdf0e8106786324cec183330563641e7f60191968236274dcf93af1d6ceff541c913a42ad45037036b578cc6a8acb472eb04edb81f6cbbb1ecc24c71b63b698586777686"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) 2m29.702337009s ago: executing program 3 (id=3200): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000900)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@private0, 0x0}, &(0x7f0000000140)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r7, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14) 2m29.64764397s ago: executing program 3 (id=3203): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[], 0x1, 0x1205, &(0x7f00000001c0)="$eJzs3M+LG2UYB/Bn17pbt+4PtVZbEF/0opehuwcvellkC9KA0naFVhCm7kRDxiRkwkJErJ68+neIIII3QbzpZS/+B4K3vXisII5sYn9E08OKdEr5fC554Hm/4X0TEniHeefwtS8+7LarrJ2PYnFhIRYHEelmihSLccun8fKrP/703OWr1y5ut1o7l1K6sH1l85WU0trz37/z8Vcv/DA69fa3a98tx8HGu4e/bf16cObg7OGfVz7oVKlTpV5/lPJ0vd8f5dfLIu11qm6W0ltlkVdF6vSqYjjTb5f9wWCc8t7e6spgWFRVynvj1C3GadRPo+E45e/nnV7KsiytrgTHd+J2tfvlzbquI+r60ViKuq7rx2IlTi3d6m/EE/FkPBWn4+k4E8/Es/HNL1+PjxIAAAAAAAAAAAAAAAAAAADA/2fu+f94PFZjLdbnnP8/OxnV9KwBAAAAAAAAAAAAAAAAAADg4XL56rWL263WzqWUTkaUn+/v7u9OX6f97XZ0oowizsd6/BGT0/9T0/rCG62d82liIz4rb/ydv7G/+8hsfnPyOIG5+c1pPs3ml2Pl7vxWrMfp+fmtufmT8dKLd+WzWI+f34t+lLEXR9k7+U82U3r9zdY/8ucm4wAAAOBhkKXb5u7fs+xe/Wn+GNcHZvbXR9lzJxpdOhFRjT/q5mVZDBUPfLHU7DR+r+u6+Q+hoeLev5TliPjP77wQEQ/GAv9VNP3PxP1w50tveiYAAAAAAAAAAAAcx/24nbDpNQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+xA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KsAAAD//5sv0u0=") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x42800, 0x186) getdents64(r0, &(0x7f00000031c0)=""/4105, 0xffffffffffffffd1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3}]}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000002040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@const={0x9, 0x0, 0x0, 0xa, 0x5}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @fwd={0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x6614}}, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @fwd={0xf}, @ptr={0x5, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e]}}, &(0x7f0000002100)=""/189, 0x87, 0xbd, 0x1, 0xfff}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = syz_clone(0x80100, 0x0, 0x62, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x4207, r8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x3, 0x400, 0xfffffff5, 0x8, 0x5, r8}) 2m29.409671265s ago: executing program 3 (id=3208): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 2m29.119819771s ago: executing program 3 (id=3211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x6fe2, 0x1}, 0x50) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x7, 0x8ec84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x23, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x141}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r5, 0x0, 0x0, 0x9000) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f00000000c0)={0x100080, 0x4, 0x20000}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007800800024000000003080001400000000408000240"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r8, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m29.1195185s ago: executing program 43 (id=3211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x6fe2, 0x1}, 0x50) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x7, 0x8ec84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x23, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x141}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r5, 0x0, 0x0, 0x9000) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f00000000c0)={0x100080, 0x4, 0x20000}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007800800024000000003080001400000000408000240"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r8, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m20.174656241s ago: executing program 5 (id=3349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m20.107964683s ago: executing program 5 (id=3352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 2m20.037100304s ago: executing program 5 (id=3354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x28}}, 0x40000) 2m19.974577175s ago: executing program 5 (id=3357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000100000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="2162bb9e70a073e6e6f387a2af80d5b48207b490553c3a9f5b3c24b125da012571b4d3a404a0a6f1d1934e480a2bf90211cd3fb98c2323d5a703fdb5048d634c6d1687d81f7c2d3c61e6c9d472f6b9f23e2369bc9261260ac0916f9bb7fde8888f202c850fa204c805cc4c3a02af091fb0b8142a864c", @ANYRES32=r2, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x79a, &(0x7f0000001480)="$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") setxattr$system_posix_acl(&(0x7f0000000240)='./file1\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) io_uring_enter(r8, 0x29ab, 0xd480, 0x0, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) open(0x0, 0x4000, 0x100) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m19.113949561s ago: executing program 5 (id=3364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 2m18.760011159s ago: executing program 5 (id=3374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 2m18.759779979s ago: executing program 44 (id=3374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 1m50.756295284s ago: executing program 8 (id=3830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x39) 1m50.755301824s ago: executing program 8 (id=3831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m50.748274373s ago: executing program 8 (id=3833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x4010, 0xffffffffffffffff, 0xec776000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1m50.699634385s ago: executing program 8 (id=3834): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x78d, &(0x7f0000001180)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x25, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000001a80)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$nci(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x200000000}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_xen(&(0x7f0000001980), &(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000001a40), 0x400, &(0x7f0000001bc0)={'trans=xen,', {[{@version_u}, {@access_uid}], [{@flag='rw'}, {@obj_type={'obj_type', 0x3d, 'GPL\x00'}}, {@permit_directio}]}}) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002002900000003000100000000000000000000000000000000000000000000000000000000000000000000000059f2175c00000000000000000000000000050000000020000000000000ffffffffffffffff000000000000f4ff0000000000000000000000000000000000000000000000000000000000000000ffffffff000000000900ff00000000000a00"/192]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001a00)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00022bdc7009ace73e12235f0d00"], 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800181200"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00'}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r8 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1m49.762313542s ago: executing program 8 (id=3845): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") select(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') fallocate(0xffffffffffffffff, 0x5, 0x0, 0xfd55) syz_pidfd_open(0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvfrom(r3, &(0x7f00000001c0)=""/108, 0x6c, 0x4000, 0x0, 0x0) 1m49.37604796s ago: executing program 8 (id=3851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) ioprio_set$pid(0x2, 0x0, 0x0) write(r0, 0x0, 0x0) 1m49.3759326s ago: executing program 45 (id=3851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) ioprio_set$pid(0x2, 0x0, 0x0) write(r0, 0x0, 0x0) 1m47.24881951s ago: executing program 1 (id=3875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000740)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 1m47.232923611s ago: executing program 1 (id=3877): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 1m47.084386364s ago: executing program 1 (id=3880): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9feb01001800cc5ce85a00000000000096020000960000000b000000070000000000000b010000000f000000000096fdfb71e0756fde86002704000000030000000b0000000000001004000000030000000800a7aa5aaca2000f020000000400000006000000ff03000004000000ce00000c0800000003000000050000000700342da4738b34f1d90000040000000300000008000000010000000500000005000000060000000200000008000000e10e00000200000001010000010000009e3a00000000c957ea12470463c5ca519b23cac0cea3c81523ca0e8333f8e28166ccc2c7e1d90f868319ef3f1240d15455f0a1e7956535260b77d067556497078bb69b0b7309d596ef61584cd71a9eed295f877902de311f17cede3e30d59e5fb3d2fd200ebeaa4482283d0f6822272eebe806d3343f1f910acab5aef91fcd021e18151292e4a594d118f21f379e85ed22e0596a6dbeba9f0bf2b90849b1f8f77a8354d66e6c"], &(0x7f0000000900)=""/111, 0xbb, 0x6f, 0x1, 0x4, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000050000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018290000", @ANYRES32=0x1, @ANYBLOB="002ebc2ca156254059110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000065510c0001000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xeb2, 0x4f, &(0x7f0000000180)=""/79, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x8000, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x3, 0x2, 0x10, 0xa}, {0x3, 0x3, 0x1, 0x3}, {0x0, 0x2, 0xb, 0xb}], 0x10, 0x5}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f00000006c0)=""/209, 0xd1, 0x0, &(0x7f00000003c0)=""/37, 0x25}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="8520000002000000183300000100000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000f3ffffffb70300002200000085000000060000001837000005000000000000000000000047ae2ea001000000e18f700dcb1da05602cf5bad600c617596636bd6c4662658af143e998f84acbb2213de77991d594ac538b619fd399567a6e30781fa1d53ec3612b41e19d8baf32f2da3701050277c12868b13a3c43352e09e2a344c78b9585437270a531c434abb374f73f62d36bc82d4f45ba0a13117254333e4020d2e05d4e4d5cd9d1f17"], &(0x7f0000000ac0)='GPL\x00', 0x6, 0x0, &(0x7f0000000b00), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0x3, 0x2d}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000bc0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000c00)=[{0x3, 0x5, 0x6, 0xc}, {0x5, 0x1, 0x7, 0x2}, {0x4, 0x0, 0xa, 0x6}, {0x5, 0x3, 0x10, 0xf}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x14, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000d000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000921100000000000007000000182b0000", @ANYRES32, @ANYBLOB="0000000000040000180100a3ceb1fe2500000000002020207b1af8ff00000000bfa10000000000f607010000f8ffffffffff002008000000b703000009253cd242c1ff010000000000000000000a180001ffff69f55d5e000000000000bf91000000000000b70200000042afa60100000000000000b700000000000000950000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0xcb, &(0x7f0000000740)=""/203, 0x41000, 0x14, '\x00', r1, @lirc_mode2=0x10, r2, 0x8, &(0x7f00000009c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x1, 0x2, 0x101}, 0x10, r5, r6, 0x1, 0x0, &(0x7f0000000d00)=[{0x1, 0x5, 0xd, 0xb}], 0x10, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1, 0x3523, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r11 = dup(r10) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r11, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="680000001054e10463cecfd4052502d529bd7000", @ANYRES32=0x0, @ANYBLOB="890c040000000000480012800b00010069703667726500003800028014000700fc000000000000000000000000000000060010004e200000050008000600000008000c000500000006000f00ff7f0000"], 0x68}, 0x1, 0x0, 0x0, 0x20008090}, 0x20000000) 1m46.22305581s ago: executing program 1 (id=3902): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3000000000000) 1m46.167837631s ago: executing program 1 (id=3904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r2}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080)=0x4748, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='9p\x00') bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) 1m44.619927061s ago: executing program 1 (id=3930): ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x71c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='fscache_cookie\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x48080, 0x0) 1m44.619727781s ago: executing program 46 (id=3930): ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x71c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='fscache_cookie\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x48080, 0x0) 55.122887416s ago: executing program 0 (id=5060): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x26020480) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000080200004e"]) r4 = dup(r2) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r4, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x0, 0xffffffff, 0x5, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0xc) 54.93185085s ago: executing program 0 (id=5061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 54.565407667s ago: executing program 0 (id=5066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 54.523723988s ago: executing program 0 (id=5068): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 54.466072219s ago: executing program 0 (id=5070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 54.428443539s ago: executing program 0 (id=5073): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 39.354779798s ago: executing program 47 (id=5073): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 3.494216553s ago: executing program 4 (id=6000): unshare(0x8000000) unshare(0x2c040000) (fail_nth: 8) 3.214528358s ago: executing program 4 (id=6002): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180)=r3, 0x17e) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_pwait(r4, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0x8000, &(0x7f00000003c0)={[0x7]}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100006c2100000000002020207b1af8ff00000000bfa100000000000007160000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x79c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) 3.166922799s ago: executing program 4 (id=6014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mq_unlink(&(0x7f0000000140)='\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000580)={"5237f213af0514e1448b40e64e19eae4", 0x0, 0x0, {0xfff, 0x5}, {0x3ff, 0x63f}, 0x6bc2ed9e, [0x0, 0x4, 0x6, 0x100000001, 0x304, 0x9, 0x0, 0x230, 0x3, 0x400, 0x4, 0x7, 0x8d5, 0x3ff, 0x0, 0xfffffffffffffff7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x41, &(0x7f00000003c0)={[{@nogrpid}, {@lazytime}, {@bh}, {@errors_continue}, {@noblock_validity}, {}, {@mblk_io_submit}, {@nodioread_nolock}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000010c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x981a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x573, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) 2.792467426s ago: executing program 4 (id=6009): clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r1 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000700)={{0xfc, 0x4}, 'port1\x00', 0xe, 0x40, 0x7c, 0x662, 0x0, 0x9, 0x8, 0x0, 0x6, 0x3}) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') listxattr(&(0x7f000001a240)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7c, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x38}}, 0x0) 2.027798491s ago: executing program 2 (id=6030): openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0xfffffffffffffe8d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x8) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x101) 1.611831779s ago: executing program 4 (id=6034): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x104008, 0x10000, 0x8, 0x7, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) poll(0x0, 0x0, 0x11ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) shutdown(r0, 0x0) 1.420819172s ago: executing program 7 (id=6037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0xc0000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.393673533s ago: executing program 2 (id=6038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.359453004s ago: executing program 7 (id=6039): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt(r0, 0x4, 0x80, &(0x7f0000000640), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9482, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt(r2, 0x8000, 0xbb3, 0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, 0x0, 0x28040000) add_key$user(&(0x7f0000000400), &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="6f4bdf9292b8568306b9eb58e8c86d236bbbd4aa5e35570ef452e921371267ffa96a7f95a9450709be82a3f7f2e4e2d09ac60f4ebfc5a3769926021e31a170425156549cc8dd79fe4bda637bdd67a95300d4f303ade7a5e9e50684a4f00b116a9bfab27aa1265225bd8e9bb106880ad6ed589e7c40dc22488dd4742f37a514fcb4e4c9a562e6a515fb51e7af402b90a3dacca2ab6b6d2529a7227d9a70c0596150e26c00e5d3f47f0a423fed31899024e8e32b0f1005a4e10c012d3f0c24ab3ebf1a1d0fc8a9a6ba1d132fc5f907151dadd438044c9e01d836d4e2846c08a10d3aa9ee047ac557", 0xe7, 0xfffffffffffffffc) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000080) 1.116754928s ago: executing program 2 (id=6040): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) 1.090980138s ago: executing program 6 (id=6041): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x400000}, {}, {}, {0x0, 0x20000000, 0x7fffffff, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x80000}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x3}, {0x0, 0x4}, {0x0, 0x7fff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x100000}, {0x0, 0x4000}, {0xfffffffe}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {0xd5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1}, {0x2000000}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x0, 0x0, 0x0, 0x2, 0x7}, {}, {0x0, 0x0, 0xc0}, {}, {0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x6d}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0xfffffffc, 0x10}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x5, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0xc7f}, {0x3}, {0x100, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x998c, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x400000, 0x0, 0x0, 0x3ff}, {0x814, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x5, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x800}, {0x0, 0xffff}, {0x4}, {0x0, 0x0, 0x0, 0xfffffff9}, {0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0x100, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x8}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0xffffff70, 0x10000}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x1, 0x0, 0xd, 0xffffffff}], [{0x2}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r2) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000380)={[], 0xfffffffffffffff8}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r4, 0x0, r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a000058090001fbffffff310000000008000540000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6dea}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_io_uring_setup(0x3e, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 1.072775389s ago: executing program 7 (id=6042): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt(r0, 0x4, 0x80, &(0x7f0000000640), 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9482, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt(r2, 0x8000, 0xbb3, 0x0, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, 0x0, 0x28040000) add_key$user(&(0x7f0000000400), &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="6f4bdf9292b8568306b9eb58e8c86d236bbbd4aa5e35570ef452e921371267ffa96a7f95a9450709be82a3f7f2e4e2d09ac60f4ebfc5a3769926021e31a170425156549cc8dd79fe4bda637bdd67a95300d4f303ade7a5e9e50684a4f00b116a9bfab27aa1265225bd8e9bb106880ad6ed589e7c40dc22488dd4742f37a514fcb4e4c9a562e6a515fb51e7af402b90a3dacca2ab6b6d2529a7227d9a70c0596150e26c00e5d3f47f0a423fed31899024e8e32b0f1005a4e10c012d3f0c24ab3ebf1a1d0fc8a9a6ba1d132fc5f907151dadd438044c9e01d836d4e2846c08a10d3aa9ee047ac5", 0xe6, 0xfffffffffffffffc) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x3, {0xa, 0x4e23, 0x8644, @remote}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="8fc329abe5c6832c93101aa468b7d9461f631e80e1118874ba88e4", 0x1b}, {&(0x7f00000002c0)="9a2a43b9e035099a4c1e3a7d6949c2c27c0fc01e913a5fadab6f00ec0ed6e3955cb3ca7bd32632aa78df3f572e104870699feb9de04ebe0ac9290a79957051ed070fee1704ee36dfb4a871c38e0c5e1b3878c857e9cc74a8e697aba762f54ca9f0c88db896257c54e15f9c89c9942f9cb82d9f98b40470a296144e8a4d", 0x7d}], 0x2, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x5658}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffc0}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0x78}, 0x4000080) 1.045273239s ago: executing program 7 (id=6043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x181000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x2c6e, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r2 = dup(r1) pwritev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)="d6329859c79a986ac975bf27da43cac833eb70126186061a0f507ca5c68f8e0849c0c65aaca159703f84c8ecdadaa2154d6aeac7ce3f8c7d8fb67bd32331fe791b9584403c85643a4c3fbf8f5f5042fd8338f5ef38c017f353a0ad5c7dff03a97d4428e9d2fda380e2a6a043602fb1079cbf15e785fcc35f08029e2d16791250b671", 0x82}], 0x2, 0x2, 0xffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x22020400) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) lsm_list_modules(&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=0x28, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000038c0)={0x0, 0x989680}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) sendto$inet6(r7, &(0x7f0000000000)="48e76409b3a4", 0x6, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x81, @mcast2, 0xfff}, 0x1c) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1.01500153s ago: executing program 7 (id=6044): r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/121, &(0x7f0000000100)=0x79) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r1, 0x16) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @loopback, 0x98b7}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x859fc998a48bae8, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0xf8}]}) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000240)=0x10001) write(r5, &(0x7f0000000280)="4591", 0x2) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) unshare(0x2c040000) unshare(0x2c020400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 959.680081ms ago: executing program 2 (id=6045): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000740)={r0}) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500)="8b95", 0x2, r3}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1034}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="a5050f0000b50000009000000800450000780000000000019078ac1e0001ac1414aa05009078e00000e0470000000000000000110000ac1414aaac1414aa0703408807cddaa0c8a1443c00030a01012f00000000e000000100000000ac14141f00000000ac1e0101000000000000000000000000ac141400"/134], 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000500)) syz_extract_tcp_res$synack(&(0x7f0000000640), 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)='%ps \x00'}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x200000, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 721.895105ms ago: executing program 4 (id=6046): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000b5faba23fae5bb1000000000000000000180100002020702500090000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000793d00b703000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x114402, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x5d13, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='xen_cpu_load_idt\x00', r0}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0xe, 0xa7754fc1b88f8f1f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1a00400000000000000000000000800218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095", @ANYBLOB="87d5e9bae737fd215162e747e7c786f819c3607b6cf23de6fd9ed877f8301ce14b9c3a4fdc9e2e965c148e50d8833d8a691c059a55f6b6589f5508015140502c0aff0ed97238789ba19eaaa6405a9e6d92fba2e9b0cdf4f9ccf324f24e3c41056593aa8820329fe03bfc91376550", @ANYRES32=r2], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x1000000000000000}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) 607.214458ms ago: executing program 9 (id=6047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000aec14d04000000ff0f1cf8982b5a4f314a5b59054a241362650304862cb3ce2feb80176ab628053255bc2016"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000380), 0x0, 0x51, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x861}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400020000779f25c8356a662e"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x74d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") 518.674569ms ago: executing program 9 (id=6048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a300000000008000340000000"], 0x64}}, 0x0) 500.683ms ago: executing program 9 (id=6049): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, 0x0, 0x0) 489.00607ms ago: executing program 9 (id=6050): ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x0, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYBLOB="00032abd7000fddbdf25420000000c00990001000000610000000a000600ffffffffffff00000a0006009e7c9cfaa58700000a00060050505050505000001bdb06b6dd4d72bcf72cfa9a3abcc3712e34cfe58bec12510aa0138a565602778a6b277b708c17613667bdc0ee9ee35745adf5f67f9d1a6a669b2fd0406be5b15759b9dafaf96dd5c8967cb2b4dc4daf853031dd73885fe11f6e08e0d44929eb449ad79c9555b19d73ba65fe6cf739c33a4991c78496996d3fa8f433fffe99454d998ab84f83a51f614d808dc8761b264d25e41d5e404c06a97ef77caea3"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x48815) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/249, 0xf9}], 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x32, 0x0, 0x471ac000) faccessat2(r5, &(0x7f0000000140)='./file0\x00', 0x0, 0x1200) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 283.708654ms ago: executing program 9 (id=6051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r3}, 0x14) 240.425695ms ago: executing program 6 (id=6052): creat(&(0x7f0000000080)='./bus\x00', 0x0) 232.176425ms ago: executing program 9 (id=6053): ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x0, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYBLOB="00032abd7000fddbdf25420000000c00990001000000610000000a000600ffffffffffff00000a0006009e7c9cfaa58700000a00060050505050505000001bdb06b6dd4d72bcf72cfa9a3abcc3712e34cfe58bec12510aa0138a565602778a6b277b708c17613667bdc0ee9ee35745adf5f67f9d1a6a669b2fd0406be5b15759b9dafaf96dd5c8967cb2b4dc4daf853031dd73885fe11f6e08e0d44929eb449ad79c9555b19d73ba65fe6cf739c33a4991c78496996d3fa8f433fffe99454d998ab84f83a51f614d808dc8761b264d25e41d5e404c06a97ef77caea3"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x48815) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a0000200"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x18) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/249, 0xf9}], 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x32, 0x0, 0x471ac000) faccessat2(r5, &(0x7f0000000140)='./file0\x00', 0x0, 0x1200) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 223.796995ms ago: executing program 6 (id=6054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000004005d18000e9e5ea1571f290bcf0050520a4724a373aaf9718f", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) (async) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresgid(0x0, 0xee01, 0xffffffffffffffff) (async) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000400)=r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r10}, 0x18) (async) r11 = eventfd2(0x8, 0x0) write$eventfd(r11, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) (async) read(r11, &(0x7f0000000180)=""/78, 0xfffffeab) (async) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (async) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x3}, 0xc) (async) r12 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r12, &(0x7f0000000000)=""/34, 0x22) 166.476916ms ago: executing program 6 (id=6055): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) 166.020626ms ago: executing program 6 (id=6056): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9) 165.469496ms ago: executing program 6 (id=6057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) 115.308957ms ago: executing program 2 (id=6058): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x6, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x2, 0x3, 0x2}, 0x1}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_unlink(0x0) 104.477517ms ago: executing program 7 (id=6059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB='\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 0s ago: executing program 2 (id=6060): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000740)={r0}) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500)="8b95", 0x2, r3}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1034}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="a5050f0000b50000009000000800450000780000000000019078ac1e0001ac1414aa05009078e00000e0470000000000000000110000ac1414aaac1414aa0703408807cddaa0c8a1443c00030a01012f00000000e000000100000000ac14141f00000000ac1e0101000000000000000000000000ac141400"/134], 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000500)) syz_extract_tcp_res$synack(&(0x7f0000000640), 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)='%ps \x00'}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x200000, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): [ 369.290119][T19969] Call Trace: [ 369.290126][T19969] [ 369.290133][T19969] __dump_stack+0x1d/0x30 [ 369.290152][T19969] dump_stack_lvl+0xe8/0x140 [ 369.290168][T19969] dump_stack+0x15/0x1b [ 369.290182][T19969] should_fail_ex+0x265/0x280 [ 369.290281][T19969] should_fail+0xb/0x20 [ 369.290301][T19969] should_fail_usercopy+0x1a/0x20 [ 369.290322][T19969] strncpy_from_user+0x25/0x230 [ 369.290358][T19969] ? kmem_cache_alloc_noprof+0x186/0x310 [ 369.290381][T19969] ? getname_flags+0x80/0x3b0 [ 369.290410][T19969] getname_flags+0xae/0x3b0 [ 369.290492][T19969] user_path_at+0x28/0x130 [ 369.290524][T19969] __se_sys_mount+0x25b/0x2e0 [ 369.290555][T19969] __x64_sys_mount+0x67/0x80 [ 369.290579][T19969] x64_sys_call+0x2b4d/0x2ff0 [ 369.290603][T19969] do_syscall_64+0xd2/0x200 [ 369.290628][T19969] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 369.290651][T19969] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 369.290682][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.290706][T19969] RIP: 0033:0x7f747d8aeec9 [ 369.290769][T19969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.290783][T19969] RSP: 002b:00007f747c317038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.290803][T19969] RAX: ffffffffffffffda RBX: 00007f747db05fa0 RCX: 00007f747d8aeec9 [ 369.290817][T19969] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 369.290831][T19969] RBP: 00007f747c317090 R08: 0000200000000240 R09: 0000000000000000 [ 369.290844][T19969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.290871][T19969] R13: 00007f747db06038 R14: 00007f747db05fa0 R15: 00007ffd6a85c7d8 [ 369.290889][T19969] [ 369.499275][T19971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19971 comm=syz.2.5250 [ 369.581920][ T3410] hid-generic 0000:0000:0000.0033: hidraw0: HID v8.00 Device [syz0] on syz0 [ 369.644730][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 369.644746][ T29] audit: type=1326 audit(1758555115.132:26234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.670612][T20000] netlink: 'syz.9.5264': attribute type 1 has an invalid length. [ 369.674550][ T29] audit: type=1326 audit(1758555115.132:26235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.683672][T19994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19994 comm=syz.7.5263 [ 369.705867][ T29] audit: type=1326 audit(1758555115.132:26236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.742000][ T29] audit: type=1326 audit(1758555115.132:26237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.765722][ T29] audit: type=1326 audit(1758555115.132:26238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.776929][T20004] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13) [ 369.790523][ T29] audit: type=1326 audit(1758555115.132:26239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.795848][T20004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.819527][ T29] audit: type=1326 audit(1758555115.132:26240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.826901][T20004] vhci_hcd vhci_hcd.0: Device attached [ 369.850299][ T29] audit: type=1326 audit(1758555115.132:26241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.860183][T19991] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 369.879264][ T29] audit: type=1326 audit(1758555115.132:26242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.885792][T19991] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.909334][ T29] audit: type=1326 audit(1758555115.132:26243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19990 comm="syz.6.5261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8be6caeec9 code=0x7ffc0000 [ 369.916851][T19991] vhci_hcd vhci_hcd.0: Device attached [ 369.946837][T20004] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.961221][T20008] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(15) [ 369.967828][T20008] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 369.975599][T20008] vhci_hcd vhci_hcd.0: Device attached [ 369.978885][T19995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=19995 comm=syz.2.5262 [ 369.983745][T19991] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 370.015198][T20003] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5265'. [ 370.025515][T20009] vhci_hcd: connection closed [ 370.025601][ T12] vhci_hcd: stop threads [ 370.030356][T20005] vhci_hcd: connection closed [ 370.034540][ T12] vhci_hcd: release socket [ 370.034752][T19996] vhci_hcd: connection closed [ 370.039219][ T12] vhci_hcd: disconnect device [ 370.055742][ T12] vhci_hcd: stop threads [ 370.060032][ T12] vhci_hcd: release socket [ 370.064476][ T12] vhci_hcd: disconnect device [ 370.069711][ T12] vhci_hcd: stop threads [ 370.073948][ T12] vhci_hcd: release socket [ 370.078360][ T12] vhci_hcd: disconnect device [ 370.103374][ T1097] hid-generic 0000:0000:0000.0034: hidraw0: HID v8.00 Device [syz0] on syz0 [ 370.119380][ T3410] usb 13-2: new low-speed USB device number 4 using vhci_hcd [ 370.126793][ T3410] usb 13-2: enqueue for inactive port 1 [ 370.133042][ T3410] usb 13-2: enqueue for inactive port 1 [ 370.138616][ T3410] usb 13-2: enqueue for inactive port 1 [ 370.208422][T20031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20031 comm=syz.2.5275 [ 370.219347][T20033] netlink: 'syz.9.5276': attribute type 1 has an invalid length. [ 370.229900][ T3410] vhci_hcd: vhci_device speed not set [ 370.318134][T20037] serio: Serial port ptm1 [ 370.527869][T20043] serio: Serial port ptm0 [ 370.557417][ T1097] hid-generic 0000:0000:0000.0035: hidraw0: HID v8.00 Device [syz0] on syz0 [ 370.677021][T20061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20061 comm=syz.9.5288 [ 370.707496][T20063] netlink: 'syz.9.5289': attribute type 1 has an invalid length. [ 370.803408][T20067] serio: Serial port ptm0 [ 371.074939][T20087] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5298'. [ 371.076441][T20092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20092 comm=syz.6.5300 [ 371.156981][T20096] netlink: 'syz.6.5302': attribute type 1 has an invalid length. [ 371.645791][T20108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20108 comm=syz.6.5305 [ 372.487579][T20129] chnl_net:caif_netlink_parms(): no params data found [ 372.517025][T20149] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 372.523633][T20149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.531185][T20149] vhci_hcd vhci_hcd.0: Device attached [ 372.538267][T20149] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 372.544862][T20149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 372.552369][T20149] vhci_hcd vhci_hcd.0: Device attached [ 372.558499][T20129] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.559095][T20149] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 372.565588][T20129] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.572088][T20149] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.572277][T20149] vhci_hcd vhci_hcd.0: Device attached [ 372.581003][T20129] bridge_slave_0: entered allmulticast mode [ 372.593935][T20149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.598801][T20129] bridge_slave_0: entered promiscuous mode [ 372.608160][T20149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 372.614348][T20129] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.627095][T20129] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.634371][T20157] vhci_hcd: connection closed [ 372.634847][ T51] vhci_hcd: stop threads [ 372.634969][T20129] bridge_slave_1: entered allmulticast mode [ 372.639548][ T51] vhci_hcd: release socket [ 372.639557][ T51] vhci_hcd: disconnect device [ 372.644424][T20129] bridge_slave_1: entered promiscuous mode [ 372.656546][T20155] vhci_hcd: connection closed [ 372.659650][T20152] vhci_hcd: connection closed [ 372.665176][ T51] vhci_hcd: stop threads [ 372.678319][ T51] vhci_hcd: release socket [ 372.682736][ T51] vhci_hcd: disconnect device [ 372.687489][ T51] vhci_hcd: stop threads [ 372.691822][ T51] vhci_hcd: release socket [ 372.696224][ T51] vhci_hcd: disconnect device [ 372.706970][T20129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.716122][ T3383] vhci_hcd: vhci_device speed not set [ 372.720619][T20129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.741260][T20129] team0: Port device team_slave_0 added [ 372.747934][T20129] team0: Port device team_slave_1 added [ 372.763372][T20129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.770415][T20129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.796307][T20129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.807688][T20129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.814821][T20129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.840906][T20129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.867002][T20129] hsr_slave_0: entered promiscuous mode [ 372.873080][T20129] hsr_slave_1: entered promiscuous mode [ 372.878856][T20129] debugfs: 'hsr0' already exists in 'hsr' [ 372.884597][T20129] Cannot create hsr debugfs directory [ 372.932811][T20129] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.970412][T20129] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.020856][T20129] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.070472][T20129] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.143178][T20129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.152822][T20129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.172972][T20129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.183253][T20129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.199990][T20129] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.207084][T20129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.214475][T20129] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.217551][ T1097] hid-generic 0000:0000:0000.0036: hidraw0: HID v8.00 Device [syz0] on syz0 [ 373.221513][T20129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.253852][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5325'. [ 373.261748][T20129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.301934][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.321921][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.338096][T20186] FAULT_INJECTION: forcing a failure. [ 373.338096][T20186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.351249][T20186] CPU: 0 UID: 0 PID: 20186 Comm: syz.9.5328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 373.351277][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.351288][T20186] Call Trace: [ 373.351293][T20186] [ 373.351299][T20186] __dump_stack+0x1d/0x30 [ 373.351375][T20186] dump_stack_lvl+0xe8/0x140 [ 373.351396][T20186] dump_stack+0x15/0x1b [ 373.351413][T20186] should_fail_ex+0x265/0x280 [ 373.351435][T20186] should_fail+0xb/0x20 [ 373.351456][T20186] should_fail_usercopy+0x1a/0x20 [ 373.351513][T20186] _copy_from_user+0x1c/0xb0 [ 373.351606][T20186] uhid_char_write+0xef/0x650 [ 373.351634][T20186] ? __pfx_uhid_char_write+0x10/0x10 [ 373.351720][T20186] vfs_write+0x266/0x960 [ 373.351742][T20186] ? __rcu_read_unlock+0x4f/0x70 [ 373.351774][T20186] ? __fget_files+0x184/0x1c0 [ 373.351832][T20186] ksys_write+0xda/0x1a0 [ 373.351889][T20186] __x64_sys_write+0x40/0x50 [ 373.351912][T20186] x64_sys_call+0x27fe/0x2ff0 [ 373.351934][T20186] do_syscall_64+0xd2/0x200 [ 373.351980][T20186] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 373.352000][T20186] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 373.352063][T20186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.352088][T20186] RIP: 0033:0x7f65b533eec9 [ 373.352102][T20186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.352116][T20186] RSP: 002b:00007f65b3d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.352166][T20186] RAX: ffffffffffffffda RBX: 00007f65b5595fa0 RCX: 00007f65b533eec9 [ 373.352210][T20186] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000004 [ 373.352224][T20186] RBP: 00007f65b3d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 373.352237][T20186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.352248][T20186] R13: 00007f65b5596038 R14: 00007f65b5595fa0 R15: 00007ffc14a47758 [ 373.352264][T20186] [ 373.551577][ T10] hid-generic 0000:0000:0009.0037: hidraw0: HID v8.00 Device [syz0] on syz0 [ 373.566124][T20129] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.591404][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.594644][T20188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5330'. [ 373.598448][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.621421][T20191] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 373.648491][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.655638][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.747993][T20208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5337'. [ 373.763137][T20129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.847993][T20222] 9pnet_fd: Insufficient options for proto=fd [ 373.956100][T20129] veth0_vlan: entered promiscuous mode [ 373.979917][T20129] veth1_vlan: entered promiscuous mode [ 374.039959][T20129] veth0_macvtap: entered promiscuous mode [ 374.051337][T20129] veth1_macvtap: entered promiscuous mode [ 374.067070][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5351'. [ 374.079423][T20129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.106985][T20129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.120728][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.131352][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.140974][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.152101][T20255] 9pnet_fd: Insufficient options for proto=fd [ 374.177464][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.185598][T20247] serio: Serial port ptm1 [ 374.216408][T20266] netlink: 'syz.4.5313': attribute type 1 has an invalid length. [ 374.227998][T20268] netlink: 108 bytes leftover after parsing attributes in process `team0'. [ 374.236699][T20268] netlink: 20 bytes leftover after parsing attributes in process `team0'. [ 374.310250][T20273] loop4: detected capacity change from 0 to 2048 [ 374.339559][T20273] EXT4-fs mount: 36 callbacks suppressed [ 374.339620][T20273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.370952][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.496322][T20289] 9pnet_fd: Insufficient options for proto=fd [ 374.499384][ T3623] hid_parser_main: 178 callbacks suppressed [ 374.499401][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.515723][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.523143][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.530845][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.538249][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.545858][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.553295][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.560743][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.568149][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.575594][ T3623] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 374.593589][ T3623] hid-generic 0000:0000:0000.0038: hidraw0: HID v8.00 Device [syz0] on syz0 [ 374.626703][T20305] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 374.630836][T20307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42514 sclass=netlink_route_socket pid=20307 comm=syz.9.5372 [ 374.688022][ T29] kauditd_printk_skb: 921 callbacks suppressed [ 374.688037][ T29] audit: type=1401 audit(1758555120.172:27165): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 374.789825][T20302] serio: Serial port ptm1 [ 374.868879][T20324] 9pnet_fd: Insufficient options for proto=fd [ 374.959815][T20335] FAULT_INJECTION: forcing a failure. [ 374.959815][T20335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.972947][T20335] CPU: 1 UID: 0 PID: 20335 Comm: syz.7.5384 Not tainted syzkaller #0 PREEMPT(voluntary) [ 374.973030][T20335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.973041][T20335] Call Trace: [ 374.973048][T20335] [ 374.973070][T20335] __dump_stack+0x1d/0x30 [ 374.973090][T20335] dump_stack_lvl+0xe8/0x140 [ 374.973107][T20335] dump_stack+0x15/0x1b [ 374.973120][T20335] should_fail_ex+0x265/0x280 [ 374.973210][T20335] should_fail+0xb/0x20 [ 374.973241][T20335] should_fail_usercopy+0x1a/0x20 [ 374.973264][T20335] strncpy_from_user+0x25/0x230 [ 374.973292][T20335] ? __fget_files+0x184/0x1c0 [ 374.973352][T20335] __se_sys_add_key+0x86/0x350 [ 374.973373][T20335] ? __secure_computing+0x82/0x150 [ 374.973416][T20335] __x64_sys_add_key+0x67/0x80 [ 374.973434][T20335] x64_sys_call+0x28c4/0x2ff0 [ 374.973486][T20335] do_syscall_64+0xd2/0x200 [ 374.973518][T20335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 374.973600][T20335] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 374.973658][T20335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.973676][T20335] RIP: 0033:0x7fa3dafceec9 [ 374.973690][T20335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.973743][T20335] RSP: 002b:00007fa3d9a37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 374.973834][T20335] RAX: ffffffffffffffda RBX: 00007fa3db225fa0 RCX: 00007fa3dafceec9 [ 374.973846][T20335] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000000080 [ 374.973856][T20335] RBP: 00007fa3d9a37090 R08: fffffffffffffffe R09: 0000000000000000 [ 374.973867][T20335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.973896][T20335] R13: 00007fa3db226038 R14: 00007fa3db225fa0 R15: 00007ffce379a1d8 [ 374.973916][T20335] [ 375.002709][ T29] audit: type=1326 audit(1758555120.442:27166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3dafceec9 code=0x7ffc0000 [ 375.050205][T20344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42514 sclass=netlink_route_socket pid=20344 comm=syz.9.5386 [ 375.051580][ T29] audit: type=1326 audit(1758555120.442:27167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3dafceec9 code=0x7ffc0000 [ 375.218569][ T29] audit: type=1326 audit(1758555120.442:27168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3dafceec9 code=0x7ffc0000 [ 375.242192][ T29] audit: type=1400 audit(1758555120.442:27169): avc: denied { append } for pid=20327 comm="syz.4.5381" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 375.265592][ T29] audit: type=1326 audit(1758555120.452:27170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3dafceec9 code=0x7ffc0000 [ 375.289220][ T29] audit: type=1326 audit(1758555120.452:27171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3dafceec9 code=0x7ffc0000 [ 375.312772][ T29] audit: type=1326 audit(1758555120.452:27172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3dafceec9 code=0x7ffc0000 [ 375.336407][ T29] audit: type=1326 audit(1758555120.452:27173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3dafceec9 code=0x7ffc0000 [ 375.359937][ T29] audit: type=1326 audit(1758555120.452:27174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.7.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3dafcd710 code=0x7ffc0000 [ 375.472590][T20355] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 375.525077][T20368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42514 sclass=netlink_route_socket pid=20368 comm=syz.6.5398 [ 375.560530][T20372] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 375.567168][T20372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.574778][T20372] vhci_hcd vhci_hcd.0: Device attached [ 375.583191][T20372] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 375.589845][T20372] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.597344][T20372] vhci_hcd vhci_hcd.0: Device attached [ 375.604362][T20372] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 375.610944][T20372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 375.618661][T20372] vhci_hcd vhci_hcd.0: Device attached [ 375.625326][T20372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.634307][T20372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 375.648204][T20379] vhci_hcd: connection closed [ 375.648231][T20374] vhci_hcd: connection closed [ 375.653069][T20377] vhci_hcd: connection closed [ 375.653155][ T2244] vhci_hcd: stop threads [ 375.666722][ T2244] vhci_hcd: release socket [ 375.671170][ T2244] vhci_hcd: disconnect device [ 375.676079][ T2244] vhci_hcd: stop threads [ 375.680412][ T2244] vhci_hcd: release socket [ 375.684808][ T2244] vhci_hcd: disconnect device [ 375.693002][ T2244] vhci_hcd: stop threads [ 375.697287][ T2244] vhci_hcd: release socket [ 375.701757][ T2244] vhci_hcd: disconnect device [ 375.815820][T20388] loop4: detected capacity change from 0 to 512 [ 375.822539][T20388] EXT4-fs: Ignoring removed bh option [ 375.827962][T20388] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.837275][T20388] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 375.851339][T20388] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 375.859603][T20388] EXT4-fs (loop4): orphan cleanup on readonly fs [ 375.867009][T20388] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5403: Failed to acquire dquot type 1 [ 375.880366][T20388] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5403: Invalid block bitmap block 0 in block_group 0 [ 375.897244][T20388] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5403: Invalid block bitmap block 0 in block_group 0 [ 375.913721][T20388] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5403: Invalid block bitmap block 0 in block_group 0 [ 375.933115][T20388] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5403: Failed to acquire dquot type 1 [ 375.946570][T20388] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5403: Failed to acquire dquot type 1 [ 375.959750][T20388] EXT4-fs (loop4): 1 orphan inode deleted [ 375.966031][T20388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.986916][ T3623] hid-generic 0000:0000:0000.0039: hidraw0: HID v8.00 Device [syz0] on syz0 [ 376.000276][T20388] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 376.032953][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.301363][T20398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20398 comm=syz.4.5407 [ 376.396738][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5410'. [ 376.418289][T20406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42514 sclass=netlink_route_socket pid=20406 comm=syz.9.5411 [ 376.556214][T20416] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 376.562910][T20416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.570448][T20416] vhci_hcd vhci_hcd.0: Device attached [ 376.590981][T20416] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(12) [ 376.597646][T20416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.605158][T20416] vhci_hcd vhci_hcd.0: Device attached [ 376.621137][T20416] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(14) [ 376.624157][T20417] siw: device registration error -23 [ 376.627736][T20416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 376.627780][T20416] vhci_hcd vhci_hcd.0: Device attached [ 376.637074][T20416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.668779][T20416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.702866][T20422] vhci_hcd: connection closed [ 376.702951][T20420] vhci_hcd: connection closed [ 376.702951][ T51] vhci_hcd: stop threads [ 376.707677][ T51] vhci_hcd: release socket [ 376.721074][ T51] vhci_hcd: disconnect device [ 376.729372][T20418] vhci_hcd: connection closed [ 376.729587][ T51] vhci_hcd: stop threads [ 376.738511][ T51] vhci_hcd: release socket [ 376.742957][ T51] vhci_hcd: disconnect device [ 376.750828][ T51] vhci_hcd: stop threads [ 376.755077][ T51] vhci_hcd: release socket [ 376.759538][ T51] vhci_hcd: disconnect device [ 376.809045][ T3623] usb 15-1: new low-speed USB device number 6 using vhci_hcd [ 376.816473][ T3623] usb 15-1: enqueue for inactive port 0 [ 376.822078][ T3623] usb 15-1: enqueue for inactive port 0 [ 376.827619][ T3623] usb 15-1: enqueue for inactive port 0 [ 376.885521][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5420'. [ 376.894841][T20431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20431 comm=syz.4.5419 [ 376.910210][ T3623] vhci_hcd: vhci_device speed not set [ 376.952160][T20437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5422'. [ 376.971091][T20438] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 377.292540][T20448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42514 sclass=netlink_route_socket pid=20448 comm=syz.7.5426 [ 377.379770][T20451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20451 comm=syz.7.5427 [ 377.735087][T20461] FAULT_INJECTION: forcing a failure. [ 377.735087][T20461] name failslab, interval 1, probability 0, space 0, times 0 [ 377.747720][T20461] CPU: 1 UID: 0 PID: 20461 Comm: syz.9.5432 Not tainted syzkaller #0 PREEMPT(voluntary) [ 377.747749][T20461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.747767][T20461] Call Trace: [ 377.747773][T20461] [ 377.747779][T20461] __dump_stack+0x1d/0x30 [ 377.747810][T20461] dump_stack_lvl+0xe8/0x140 [ 377.747897][T20461] dump_stack+0x15/0x1b [ 377.747909][T20461] should_fail_ex+0x265/0x280 [ 377.747924][T20461] should_failslab+0x8c/0xb0 [ 377.747947][T20461] __kmalloc_noprof+0xa5/0x3e0 [ 377.747963][T20461] ? fib6_info_alloc+0x2e/0x90 [ 377.748061][T20461] fib6_info_alloc+0x2e/0x90 [ 377.748079][T20461] ip6_route_info_create+0xe7/0x390 [ 377.748129][T20461] addrconf_f6i_alloc+0x158/0x280 [ 377.748148][T20461] ipv6_add_addr+0x3b2/0x830 [ 377.748194][T20461] inet6_addr_add+0x26e/0x6a0 [ 377.748206][T20461] ? selinux_capable+0x31/0x40 [ 377.748372][T20461] ? should_fail_ex+0xdb/0x280 [ 377.748421][T20461] addrconf_add_ifaddr+0x1ab/0x270 [ 377.748446][T20461] inet6_ioctl+0xb0/0x190 [ 377.748483][T20461] ? ioctl_has_perm+0x257/0x2a0 [ 377.748496][T20461] sock_do_ioctl+0x70/0x220 [ 377.748515][T20461] sock_ioctl+0x41b/0x610 [ 377.748593][T20461] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 377.748609][T20461] ? __pfx_sock_ioctl+0x10/0x10 [ 377.748695][T20461] __se_sys_ioctl+0xce/0x140 [ 377.748708][T20461] __x64_sys_ioctl+0x43/0x50 [ 377.748718][T20461] x64_sys_call+0x1816/0x2ff0 [ 377.748730][T20461] do_syscall_64+0xd2/0x200 [ 377.748775][T20461] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 377.748788][T20461] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 377.748814][T20461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.748870][T20461] RIP: 0033:0x7f65b533eec9 [ 377.748886][T20461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.748903][T20461] RSP: 002b:00007f65b3d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.748921][T20461] RAX: ffffffffffffffda RBX: 00007f65b5595fa0 RCX: 00007f65b533eec9 [ 377.748932][T20461] RDX: 0000200000005b80 RSI: 0000000000008916 RDI: 0000000000000003 [ 377.748944][T20461] RBP: 00007f65b3d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.748957][T20461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.748970][T20461] R13: 00007f65b5596038 R14: 00007f65b5595fa0 R15: 00007ffc14a47758 [ 377.749011][T20461] [ 378.024931][T20467] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 378.031608][T20467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.039174][T20467] vhci_hcd vhci_hcd.0: Device attached [ 378.046925][T20467] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(12) [ 378.053517][T20467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.061173][T20467] vhci_hcd vhci_hcd.0: Device attached [ 378.063769][T20473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20473 comm=syz.6.5436 [ 378.070293][T20467] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(14) [ 378.085684][T20467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 378.093292][T20467] vhci_hcd vhci_hcd.0: Device attached [ 378.105385][T20467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 378.115348][T20467] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 378.131717][T20470] vhci_hcd: connection closed [ 378.131910][T20474] vhci_hcd: connection closed [ 378.135430][T20468] vhci_hcd: connection closed [ 378.141448][ T3444] vhci_hcd: stop threads [ 378.147363][T20479] netlink: 'syz.6.5438': attribute type 1 has an invalid length. [ 378.150381][ T3444] vhci_hcd: release socket [ 378.150391][ T3444] vhci_hcd: disconnect device [ 378.150882][ T3444] vhci_hcd: stop threads [ 378.171597][ T3444] vhci_hcd: release socket [ 378.176019][ T3444] vhci_hcd: disconnect device [ 378.180969][ T3444] vhci_hcd: stop threads [ 378.185235][ T3444] vhci_hcd: release socket [ 378.189667][ T3444] vhci_hcd: disconnect device [ 378.219106][ T3410] vhci_hcd: vhci_device speed not set [ 378.329146][T20489] netlink: 'syz.7.5443': attribute type 1 has an invalid length. [ 378.652840][T20494] FAULT_INJECTION: forcing a failure. [ 378.652840][T20494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.665957][T20494] CPU: 0 UID: 0 PID: 20494 Comm: syz.9.5445 Not tainted syzkaller #0 PREEMPT(voluntary) [ 378.665982][T20494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.666018][T20494] Call Trace: [ 378.666024][T20494] [ 378.666032][T20494] __dump_stack+0x1d/0x30 [ 378.666050][T20494] dump_stack_lvl+0xe8/0x140 [ 378.666067][T20494] dump_stack+0x15/0x1b [ 378.666089][T20494] should_fail_ex+0x265/0x280 [ 378.666113][T20494] should_fail+0xb/0x20 [ 378.666132][T20494] should_fail_usercopy+0x1a/0x20 [ 378.666155][T20494] strncpy_from_user+0x25/0x230 [ 378.666220][T20494] ? kmem_cache_alloc_noprof+0x186/0x310 [ 378.666242][T20494] ? getname_flags+0x80/0x3b0 [ 378.666345][T20494] getname_flags+0xae/0x3b0 [ 378.666371][T20494] user_path_at+0x28/0x130 [ 378.666447][T20494] __se_sys_mount+0x25b/0x2e0 [ 378.666469][T20494] ? __bpf_trace_sys_enter+0x10/0x30 [ 378.666490][T20494] ? __traceiter_sys_enter+0x5c/0x80 [ 378.666513][T20494] __x64_sys_mount+0x67/0x80 [ 378.666548][T20494] x64_sys_call+0x2b4d/0x2ff0 [ 378.666568][T20494] do_syscall_64+0xd2/0x200 [ 378.666597][T20494] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 378.666619][T20494] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 378.666656][T20494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.666674][T20494] RIP: 0033:0x7f65b533eec9 [ 378.666689][T20494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.666705][T20494] RSP: 002b:00007f65b3d9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 378.666779][T20494] RAX: ffffffffffffffda RBX: 00007f65b5595fa0 RCX: 00007f65b533eec9 [ 378.666791][T20494] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 378.666803][T20494] RBP: 00007f65b3d9f090 R08: 0000200000000240 R09: 0000000000000000 [ 378.666855][T20494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.666866][T20494] R13: 00007f65b5596038 R14: 00007f65b5595fa0 R15: 00007ffc14a47758 [ 378.666882][T20494] [ 378.887126][T20496] siw: device registration error -23 [ 379.206235][T20508] netlink: 'syz.9.5450': attribute type 1 has an invalid length. [ 379.275921][T20517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5451'. [ 379.284917][T20517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5451'. [ 379.893833][ T29] kauditd_printk_skb: 1037 callbacks suppressed [ 379.893847][ T29] audit: type=1326 audit(1758555125.382:28206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 379.900180][T20521] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 379.923739][ T29] audit: type=1326 audit(1758555125.382:28207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 379.930291][T20521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 379.953807][ T29] audit: type=1326 audit(1758555125.382:28208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 379.961455][T20521] vhci_hcd vhci_hcd.0: Device attached [ 379.984865][ T29] audit: type=1326 audit(1758555125.382:28209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 380.013936][ T29] audit: type=1326 audit(1758555125.382:28210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 380.037558][ T29] audit: type=1326 audit(1758555125.392:28211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 380.061109][ T29] audit: type=1326 audit(1758555125.392:28212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 380.084719][ T29] audit: type=1326 audit(1758555125.392:28213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 380.086487][T20521] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 380.108278][ T29] audit: type=1326 audit(1758555125.392:28214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 380.114843][T20521] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.114996][T20521] vhci_hcd vhci_hcd.0: Device attached [ 380.138325][ T29] audit: type=1326 audit(1758555125.392:28215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20520 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f747d8aeec9 code=0x7ffc0000 [ 380.148860][T20527] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 380.183136][T20526] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 380.189104][T20521] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 380.189806][T20526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 380.205436][T20526] vhci_hcd vhci_hcd.0: Device attached [ 380.217382][T20528] vhci_hcd: connection closed [ 380.217659][T20524] vhci_hcd: connection closed [ 380.222767][ T2244] vhci_hcd: stop threads [ 380.222793][T20522] vhci_hcd: connection closed [ 380.227434][ T2244] vhci_hcd: release socket [ 380.227452][ T2244] vhci_hcd: disconnect device [ 380.229893][ T2244] vhci_hcd: stop threads [ 380.233920][T20531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5456'. [ 380.236520][ T2244] vhci_hcd: release socket [ 380.240969][T20531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5456'. [ 380.240984][T20531] tc_dump_action: action bad kind [ 380.245641][ T2244] vhci_hcd: disconnect device [ 380.247183][ T2244] vhci_hcd: stop threads [ 380.262557][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5456'. [ 380.263312][ T2244] vhci_hcd: release socket [ 380.263327][ T2244] vhci_hcd: disconnect device [ 380.272252][ T1097] usb 5-1: new low-speed USB device number 5 using vhci_hcd [ 380.283300][T20531] bridge_slave_1: left allmulticast mode [ 380.286426][ T1097] usb 5-1: enqueue for inactive port 0 [ 380.295156][T20531] bridge_slave_1: left promiscuous mode [ 380.314282][ T1097] usb 5-1: enqueue for inactive port 0 [ 380.317279][T20531] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.322617][ T1097] usb 5-1: enqueue for inactive port 0 [ 380.349980][T20531] bridge_slave_0: left allmulticast mode [ 380.355619][T20531] bridge_slave_0: left promiscuous mode [ 380.361329][T20531] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.421438][ T1097] vhci_hcd: vhci_device speed not set [ 380.507193][T20551] netlink: 'syz.9.5464': attribute type 1 has an invalid length. [ 380.618212][T20555] loop4: detected capacity change from 0 to 8192 [ 380.682385][T20558] serio: Serial port ptm2 [ 380.755840][T20561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20561 comm=syz.2.5467 [ 380.986643][T20565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42514 sclass=netlink_route_socket pid=20565 comm=syz.2.5469 [ 381.306080][T20572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5472'. [ 381.315114][T20572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5472'. [ 381.646214][T20588] netlink: 'syz.4.5479': attribute type 1 has an invalid length. [ 382.196957][T20598] siw: device registration error -23 [ 382.236792][T20600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20600 comm=syz.6.5484 [ 382.571931][T20617] netlink: 'syz.2.5491': attribute type 1 has an invalid length. [ 382.621286][T20627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20627 comm=syz.6.5496 [ 382.765214][T20643] FAULT_INJECTION: forcing a failure. [ 382.765214][T20643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.778412][T20643] CPU: 0 UID: 0 PID: 20643 Comm: syz.6.5502 Not tainted syzkaller #0 PREEMPT(voluntary) [ 382.778437][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.778449][T20643] Call Trace: [ 382.778455][T20643] [ 382.778462][T20643] __dump_stack+0x1d/0x30 [ 382.778483][T20643] dump_stack_lvl+0xe8/0x140 [ 382.778500][T20643] dump_stack+0x15/0x1b [ 382.778528][T20643] should_fail_ex+0x265/0x280 [ 382.778550][T20643] should_fail+0xb/0x20 [ 382.778569][T20643] should_fail_usercopy+0x1a/0x20 [ 382.778661][T20643] _copy_to_user+0x20/0xa0 [ 382.778687][T20643] simple_read_from_buffer+0xb5/0x130 [ 382.778707][T20643] proc_fail_nth_read+0x10e/0x150 [ 382.778773][T20643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.778795][T20643] vfs_read+0x1a5/0x770 [ 382.778877][T20643] ? do_linkat+0x4c2/0x600 [ 382.778950][T20643] ? __rcu_read_unlock+0x4f/0x70 [ 382.778970][T20643] ? __fget_files+0x184/0x1c0 [ 382.778995][T20643] ksys_read+0xda/0x1a0 [ 382.779059][T20643] __x64_sys_read+0x40/0x50 [ 382.779077][T20643] x64_sys_call+0x27bc/0x2ff0 [ 382.779152][T20643] do_syscall_64+0xd2/0x200 [ 382.779180][T20643] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 382.779252][T20643] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 382.779280][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.779299][T20643] RIP: 0033:0x7f8be6cad8dc [ 382.779339][T20643] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.779355][T20643] RSP: 002b:00007f8be570f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.779373][T20643] RAX: ffffffffffffffda RBX: 00007f8be6f05fa0 RCX: 00007f8be6cad8dc [ 382.779384][T20643] RDX: 000000000000000f RSI: 00007f8be570f0a0 RDI: 0000000000000006 [ 382.779396][T20643] RBP: 00007f8be570f090 R08: 0000000000000000 R09: 0000000000000000 [ 382.779408][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.779499][T20643] R13: 00007f8be6f06038 R14: 00007f8be6f05fa0 R15: 00007ffd8ec21c98 [ 382.779517][T20643] [ 383.093494][T20650] netlink: 'syz.7.5505': attribute type 1 has an invalid length. [ 383.197688][T20658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20658 comm=syz.6.5509 [ 383.383049][T20676] netlink: 'syz.6.5517': attribute type 1 has an invalid length. [ 383.483107][T20685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5521'. [ 383.502501][T20688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20688 comm=syz.7.5522 [ 383.732417][T20699] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 383.739025][T20699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.746515][T20699] vhci_hcd vhci_hcd.0: Device attached [ 383.753443][T20699] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 383.758187][T20703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20703 comm=syz.2.5528 [ 383.760034][T20699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.760085][T20699] vhci_hcd vhci_hcd.0: Device attached [ 383.790766][T20699] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 383.797357][T20699] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 383.805003][T20699] vhci_hcd vhci_hcd.0: Device attached [ 383.811118][T20699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.820016][T20699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 383.833041][T20707] vhci_hcd: connection closed [ 383.833278][ T2244] vhci_hcd: stop threads [ 383.833360][T20700] vhci_hcd: connection closed [ 383.837969][ T2244] vhci_hcd: release socket [ 383.849285][T20704] vhci_hcd: connection closed [ 383.851340][ T2244] vhci_hcd: disconnect device [ 383.861378][ T2244] vhci_hcd: stop threads [ 383.865601][ T2244] vhci_hcd: release socket [ 383.870041][ T2244] vhci_hcd: disconnect device [ 383.871009][T20714] netlink: 'syz.2.5531': attribute type 1 has an invalid length. [ 383.874824][ T2244] vhci_hcd: stop threads [ 383.886702][ T2244] vhci_hcd: release socket [ 383.891119][ T2244] vhci_hcd: disconnect device [ 383.907309][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5532'. [ 383.916320][T20716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5532'. [ 383.925273][T20716] tc_dump_action: action bad kind [ 383.931016][T20716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5532'. [ 383.938594][ T3410] vhci_hcd: vhci_device speed not set [ 383.939925][T20716] bridge_slave_1: left allmulticast mode [ 383.950879][T20716] bridge_slave_1: left promiscuous mode [ 383.956467][T20716] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.964256][T20716] bridge_slave_0: left allmulticast mode [ 383.970023][T20716] bridge_slave_0: left promiscuous mode [ 383.975665][T20716] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.153862][T20721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20721 comm=syz.9.5534 [ 384.192956][T20719] siw: device registration error -23 [ 384.259268][T20734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20734 comm=syz.2.5540 [ 384.304132][T20739] FAULT_INJECTION: forcing a failure. [ 384.304132][T20739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.317269][T20739] CPU: 1 UID: 0 PID: 20739 Comm: syz.2.5542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 384.317292][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.317370][T20739] Call Trace: [ 384.317375][T20739] [ 384.317381][T20739] __dump_stack+0x1d/0x30 [ 384.317399][T20739] dump_stack_lvl+0xe8/0x140 [ 384.317415][T20739] dump_stack+0x15/0x1b [ 384.317429][T20739] should_fail_ex+0x265/0x280 [ 384.317449][T20739] should_fail+0xb/0x20 [ 384.317491][T20739] should_fail_usercopy+0x1a/0x20 [ 384.317527][T20739] _copy_from_user+0x1c/0xb0 [ 384.317589][T20739] memdup_user+0x5e/0xd0 [ 384.317612][T20739] strndup_user+0x68/0xb0 [ 384.317708][T20739] bpf_uprobe_multi_link_attach+0x20a/0x910 [ 384.317732][T20739] ? __rcu_read_unlock+0x4f/0x70 [ 384.317749][T20739] ? __fget_files+0x184/0x1c0 [ 384.317772][T20739] link_create+0x680/0x6e0 [ 384.317919][T20739] __sys_bpf+0x61d/0x7b0 [ 384.317974][T20739] __x64_sys_bpf+0x41/0x50 [ 384.317994][T20739] x64_sys_call+0x2aea/0x2ff0 [ 384.318012][T20739] do_syscall_64+0xd2/0x200 [ 384.318041][T20739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 384.318061][T20739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 384.318085][T20739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.318103][T20739] RIP: 0033:0x7f747d8aeec9 [ 384.318141][T20739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.318155][T20739] RSP: 002b:00007f747c317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.318171][T20739] RAX: ffffffffffffffda RBX: 00007f747db05fa0 RCX: 00007f747d8aeec9 [ 384.318183][T20739] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 384.318193][T20739] RBP: 00007f747c317090 R08: 0000000000000000 R09: 0000000000000000 [ 384.318204][T20739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.318245][T20739] R13: 00007f747db06038 R14: 00007f747db05fa0 R15: 00007ffd6a85c7d8 [ 384.318266][T20739] [ 384.557992][T20743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5543'. [ 384.578267][T20748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20748 comm=syz.7.5546 [ 384.611254][T20754] loop4: detected capacity change from 0 to 512 [ 384.618060][T20754] EXT4-fs: Ignoring removed bh option [ 384.624246][T20754] EXT4-fs: Ignoring removed mblk_io_submit option [ 384.632544][T20754] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 384.643209][T20754] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 384.651815][T20754] EXT4-fs (loop4): orphan cleanup on readonly fs [ 384.658458][T20754] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5549: Failed to acquire dquot type 1 [ 384.670466][T20754] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5549: Invalid block bitmap block 0 in block_group 0 [ 384.684813][T20754] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5549: Invalid block bitmap block 0 in block_group 0 [ 384.698650][T20754] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5549: Invalid block bitmap block 0 in block_group 0 [ 384.712318][T20754] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5549: Failed to acquire dquot type 1 [ 384.723986][T20754] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5549: Failed to acquire dquot type 1 [ 384.736101][T20754] EXT4-fs (loop4): 1 orphan inode deleted [ 384.741555][T20758] siw: device registration error -23 [ 384.747880][T20754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.762831][ T10] hid_parser_main: 48 callbacks suppressed [ 384.762846][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.776123][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.783571][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.791102][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.798505][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.805876][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.813276][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.820682][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.828139][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.835575][ T10] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 384.843617][T20762] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 384.851971][ T10] hid-generic 0000:0000:0000.003A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 384.870388][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.927925][ T29] kauditd_printk_skb: 1230 callbacks suppressed [ 384.927938][ T29] audit: type=1400 audit(1758555130.413:29440): avc: denied { write } for pid=20766 comm="syz.4.5553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.265017][ T29] audit: type=1326 audit(1758555130.753:29441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.290250][ T29] audit: type=1326 audit(1758555130.753:29442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.313820][ T29] audit: type=1326 audit(1758555130.763:29443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.337518][ T29] audit: type=1326 audit(1758555130.763:29444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.361244][ T29] audit: type=1326 audit(1758555130.763:29445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.384946][ T29] audit: type=1326 audit(1758555130.763:29446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.408657][ T29] audit: type=1326 audit(1758555130.763:29447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.432424][ T29] audit: type=1326 audit(1758555130.763:29448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.456205][ T29] audit: type=1326 audit(1758555130.763:29449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20772 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38bf55eec9 code=0x7ffc0000 [ 385.899319][T20790] siw: device registration error -23 [ 386.027369][T20803] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 386.033974][T20803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.041522][T20803] vhci_hcd vhci_hcd.0: Device attached [ 386.048167][T20803] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(12) [ 386.054750][T20803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.062274][T20803] vhci_hcd vhci_hcd.0: Device attached [ 386.068684][T20803] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(14) [ 386.075303][T20803] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 386.082854][T20803] vhci_hcd vhci_hcd.0: Device attached [ 386.089252][T20803] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 386.098202][T20803] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 386.115226][T20808] vhci_hcd: connection closed [ 386.115369][ T5426] vhci_hcd: stop threads [ 386.118561][T20806] vhci_hcd: connection closed [ 386.120083][ T5426] vhci_hcd: release socket [ 386.124516][T20804] vhci_hcd: connection closed [ 386.128976][ T5426] vhci_hcd: disconnect device [ 386.144505][ T5426] vhci_hcd: stop threads [ 386.148336][T20811] selinux_netlink_send: 1 callbacks suppressed [ 386.148544][T20811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20811 comm=syz.4.5569 [ 386.148771][ T5426] vhci_hcd: release socket [ 386.148780][ T5426] vhci_hcd: disconnect device [ 386.177136][ T5426] vhci_hcd: stop threads [ 386.181398][ T5426] vhci_hcd: release socket [ 386.185803][ T5426] vhci_hcd: disconnect device [ 386.218492][ T10] vhci_hcd: vhci_device speed not set [ 386.355728][T20827] FAULT_INJECTION: forcing a failure. [ 386.355728][T20827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.368918][T20827] CPU: 0 UID: 0 PID: 20827 Comm: syz.9.5576 Not tainted syzkaller #0 PREEMPT(voluntary) [ 386.368943][T20827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.368955][T20827] Call Trace: [ 386.369019][T20827] [ 386.369026][T20827] __dump_stack+0x1d/0x30 [ 386.369044][T20827] dump_stack_lvl+0xe8/0x140 [ 386.369060][T20827] dump_stack+0x15/0x1b [ 386.369147][T20827] should_fail_ex+0x265/0x280 [ 386.369167][T20827] should_fail+0xb/0x20 [ 386.369184][T20827] should_fail_usercopy+0x1a/0x20 [ 386.369280][T20827] _copy_from_user+0x1c/0xb0 [ 386.369311][T20827] addrconf_add_ifaddr+0x93/0x270 [ 386.369381][T20827] inet6_ioctl+0xb0/0x190 [ 386.369401][T20827] ? ioctl_has_perm+0x257/0x2a0 [ 386.369424][T20827] sock_do_ioctl+0x70/0x220 [ 386.369452][T20827] sock_ioctl+0x41b/0x610 [ 386.369498][T20827] ? __pfx_sock_ioctl+0x10/0x10 [ 386.369527][T20827] __se_sys_ioctl+0xce/0x140 [ 386.369548][T20827] __x64_sys_ioctl+0x43/0x50 [ 386.369566][T20827] x64_sys_call+0x1816/0x2ff0 [ 386.369619][T20827] do_syscall_64+0xd2/0x200 [ 386.369727][T20827] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 386.369766][T20827] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 386.369794][T20827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.369812][T20827] RIP: 0033:0x7f65b533eec9 [ 386.369827][T20827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.369902][T20827] RSP: 002b:00007f65b3d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.369919][T20827] RAX: ffffffffffffffda RBX: 00007f65b5595fa0 RCX: 00007f65b533eec9 [ 386.369930][T20827] RDX: 0000200000000100 RSI: 0000000000008916 RDI: 0000000000000005 [ 386.369942][T20827] RBP: 00007f65b3d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.369955][T20827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.369967][T20827] R13: 00007f65b5596038 R14: 00007f65b5595fa0 R15: 00007ffc14a47758 [ 386.370010][T20827] [ 386.583696][T20824] siw: device registration error -23 [ 386.644223][T20838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20838 comm=syz.4.5581 [ 386.825841][T20844] loop4: detected capacity change from 0 to 32768 [ 386.916878][T20859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5589'. [ 386.925886][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5589'. [ 386.934827][T20859] tc_dump_action: action bad kind [ 386.939890][T20855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5587'. [ 386.940405][T20859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5589'. [ 386.948876][T20855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5587'. [ 387.029784][T20867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20867 comm=syz.4.5593 [ 387.064149][T20869] loop4: detected capacity change from 0 to 1024 [ 387.070691][T20869] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 387.533997][T20892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20892 comm=syz.9.5604 [ 387.573381][T20894] netlink: 'syz.2.5605': attribute type 1 has an invalid length. [ 387.667989][T20900] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 387.799612][T20922] netlink: 'syz.2.5617': attribute type 1 has an invalid length. [ 387.907386][T20925] serio: Serial port ptm2 [ 388.361561][T20939] loop4: detected capacity change from 0 to 512 [ 388.401519][T20939] EXT4-fs: Ignoring removed bh option [ 388.438588][T20939] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.836838][T20960] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 388.843443][T20960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.850979][T20960] vhci_hcd vhci_hcd.0: Device attached [ 388.889215][T20965] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 388.895879][T20965] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.903393][T20965] vhci_hcd vhci_hcd.0: Device attached [ 388.913960][T20939] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 388.989515][T20973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=20973 comm=syz.6.5634 [ 389.032055][T20939] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 389.040667][T20939] EXT4-fs (loop4): orphan cleanup on readonly fs [ 389.047327][T20939] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5622: Failed to acquire dquot type 1 [ 389.061374][T20960] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 389.067969][T20960] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 389.075537][T20960] vhci_hcd vhci_hcd.0: Device attached [ 389.082433][T20939] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5622: Invalid block bitmap block 0 in block_group 0 [ 389.096125][T20939] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5622: Invalid block bitmap block 0 in block_group 0 [ 389.109667][ T3410] usb 5-1: new low-speed USB device number 6 using vhci_hcd [ 389.119162][T20965] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.130425][T20939] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5622: Invalid block bitmap block 0 in block_group 0 [ 389.144169][T20960] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.159126][T20939] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5622: Failed to acquire dquot type 1 [ 389.172468][T20939] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5622: Failed to acquire dquot type 1 [ 389.186377][T20976] vhci_hcd: connection closed [ 389.186650][ T5426] vhci_hcd: stop threads [ 389.195597][ T5426] vhci_hcd: release socket [ 389.200015][ T5426] vhci_hcd: disconnect device [ 389.206446][T20966] vhci_hcd: connection closed [ 389.206511][T20961] vhci_hcd: connection reset by peer [ 389.216767][ T5426] vhci_hcd: stop threads [ 389.221030][ T5426] vhci_hcd: release socket [ 389.225431][ T5426] vhci_hcd: disconnect device [ 389.230326][T20939] EXT4-fs (loop4): 1 orphan inode deleted [ 389.236306][ T5426] vhci_hcd: stop threads [ 389.240599][ T5426] vhci_hcd: release socket [ 389.245033][ T5426] vhci_hcd: disconnect device [ 389.252096][T20939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.266836][T20939] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 389.283831][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.501222][T20992] __nla_validate_parse: 3 callbacks suppressed [ 389.501278][T20992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5643'. [ 389.516482][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5643'. [ 389.525598][T20992] tc_dump_action: action bad kind [ 389.531353][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5643'. [ 389.643626][T21004] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 389.650311][T21004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.657927][T21004] vhci_hcd vhci_hcd.0: Device attached [ 389.664901][T21004] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 389.671487][T21004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 389.679067][T21004] vhci_hcd vhci_hcd.0: Device attached [ 389.686382][T21004] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 389.693016][T21004] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 389.700725][T21004] vhci_hcd vhci_hcd.0: Device attached [ 389.715702][T21004] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.726604][T21004] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 389.740561][T21007] vhci_hcd: connection closed [ 389.740836][T21005] vhci_hcd: connection closed [ 389.740866][ T51] vhci_hcd: stop threads [ 389.750684][T21009] vhci_hcd: connection closed [ 389.754424][ T51] vhci_hcd: release socket [ 389.754435][ T51] vhci_hcd: disconnect device [ 389.755201][ T51] vhci_hcd: stop threads [ 389.772542][ T51] vhci_hcd: release socket [ 389.776928][ T51] vhci_hcd: disconnect device [ 389.781784][ T51] vhci_hcd: stop threads [ 389.786038][ T51] vhci_hcd: release socket [ 389.790508][ T51] vhci_hcd: disconnect device [ 389.932841][ T29] kauditd_printk_skb: 1002 callbacks suppressed [ 389.932853][ T29] audit: type=1326 audit(1758555135.423:30446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 389.967718][ T29] audit: type=1326 audit(1758555135.453:30447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 389.991367][ T29] audit: type=1326 audit(1758555135.453:30448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 390.015098][ T29] audit: type=1326 audit(1758555135.453:30449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 390.038681][ T29] audit: type=1326 audit(1758555135.453:30450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 390.062738][ T29] audit: type=1326 audit(1758555135.483:30451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 390.086263][ T29] audit: type=1326 audit(1758555135.483:30452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 390.109823][ T29] audit: type=1326 audit(1758555135.483:30453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 390.133279][ T29] audit: type=1326 audit(1758555135.483:30454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 390.156907][ T29] audit: type=1326 audit(1758555135.483:30455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20982 comm="syz.9.5640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 390.163313][T21043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21043 comm=syz.2.5661 [ 390.274977][T21047] siw: device registration error -23 [ 390.300304][T21049] serio: Serial port ptm1 [ 390.378568][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5670'. [ 390.387518][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5670'. [ 390.396468][T21064] tc_dump_action: action bad kind [ 390.411092][T21064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5670'. [ 390.420206][T21064] bridge_slave_1: left allmulticast mode [ 390.425839][T21064] bridge_slave_1: left promiscuous mode [ 390.431491][T21064] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.440711][T21064] bridge_slave_0: left allmulticast mode [ 390.446352][T21064] bridge_slave_0: left promiscuous mode [ 390.452109][T21064] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.769840][T21099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5678'. [ 390.778832][T21099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5678'. [ 390.911614][T21104] serio: Serial port ptm1 [ 391.150537][T21126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5695'. [ 391.159584][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5695'. [ 391.168586][T21126] tc_dump_action: action bad kind [ 391.199390][T21133] team_slave_0: entered promiscuous mode [ 391.206179][T21133] ipvlan0: entered promiscuous mode [ 391.211977][T21133] ipvlan0: left promiscuous mode [ 391.217236][T21133] team_slave_0: left promiscuous mode [ 391.293538][T21140] serio: Serial port ptm2 [ 391.414765][T21151] FAULT_INJECTION: forcing a failure. [ 391.414765][T21151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.428152][T21151] CPU: 1 UID: 0 PID: 21151 Comm: syz.7.5705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 391.428180][T21151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.428196][T21151] Call Trace: [ 391.428202][T21151] [ 391.428210][T21151] __dump_stack+0x1d/0x30 [ 391.428231][T21151] dump_stack_lvl+0xe8/0x140 [ 391.428247][T21151] dump_stack+0x15/0x1b [ 391.428261][T21151] should_fail_ex+0x265/0x280 [ 391.428341][T21151] should_fail_alloc_page+0xf2/0x100 [ 391.428367][T21151] __alloc_frozen_pages_noprof+0xff/0x360 [ 391.428484][T21151] alloc_pages_mpol+0xb3/0x250 [ 391.428510][T21151] alloc_pages_noprof+0x90/0x130 [ 391.428538][T21151] pte_alloc_one+0x2d/0x120 [ 391.428605][T21151] __do_fault+0x7b/0x200 [ 391.428625][T21151] handle_mm_fault+0xf78/0x2c20 [ 391.428644][T21151] ? __rcu_read_unlock+0x4f/0x70 [ 391.428668][T21151] do_user_addr_fault+0x3fe/0x1090 [ 391.428716][T21151] exc_page_fault+0x62/0xa0 [ 391.428815][T21151] asm_exc_page_fault+0x26/0x30 [ 391.428832][T21151] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 391.428853][T21151] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 391.428899][T21151] RSP: 0018:ffffc90004b13d60 EFLAGS: 00050206 [ 391.428950][T21151] RAX: ffff88816130dd20 RBX: 0000000000002000 RCX: 0000000000002000 [ 391.428961][T21151] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90004b8c000 [ 391.428972][T21151] RBP: 0000000000000000 R08: 0000000000000383 R09: 0000000000000000 [ 391.428983][T21151] R10: 0001c90004b8c000 R11: 0001c90004b8dfff R12: 0000200000000000 [ 391.428994][T21151] R13: ffff88816130d280 R14: ffffc90004b8c000 R15: 0000200000000000 [ 391.429021][T21151] _copy_from_user+0x6f/0xb0 [ 391.429052][T21151] sel_write_load+0x192/0x380 [ 391.429195][T21151] ? __pfx_sel_write_load+0x10/0x10 [ 391.429215][T21151] vfs_write+0x266/0x960 [ 391.429233][T21151] ? __rcu_read_unlock+0x4f/0x70 [ 391.429255][T21151] ? __fget_files+0x184/0x1c0 [ 391.429343][T21151] ksys_write+0xda/0x1a0 [ 391.429399][T21151] __x64_sys_write+0x40/0x50 [ 391.429417][T21151] x64_sys_call+0x27fe/0x2ff0 [ 391.429435][T21151] do_syscall_64+0xd2/0x200 [ 391.429485][T21151] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 391.429508][T21151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 391.429583][T21151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.429600][T21151] RIP: 0033:0x7fa3dafceec9 [ 391.429612][T21151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.429722][T21151] RSP: 002b:00007fa3d9a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.429741][T21151] RAX: ffffffffffffffda RBX: 00007fa3db225fa0 RCX: 00007fa3dafceec9 [ 391.429754][T21151] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000006 [ 391.429829][T21151] RBP: 00007fa3d9a37090 R08: 0000000000000000 R09: 0000000000000000 [ 391.429864][T21151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.429876][T21151] R13: 00007fa3db226038 R14: 00007fa3db225fa0 R15: 00007ffce379a1d8 [ 391.429892][T21151] [ 391.834299][T21161] tc_dump_action: action bad kind [ 391.845692][T21161] bridge_slave_1: left allmulticast mode [ 391.851420][T21161] bridge_slave_1: left promiscuous mode [ 391.857092][T21161] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.874042][T21161] bridge_slave_0: left allmulticast mode [ 391.879850][T21161] bridge_slave_0: left promiscuous mode [ 391.885529][T21161] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.942545][T21180] siw: device registration error -23 [ 392.042146][T21187] serio: Serial port ptm1 [ 392.434714][T21212] FAULT_INJECTION: forcing a failure. [ 392.434714][T21212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.447864][T21212] CPU: 0 UID: 0 PID: 21212 Comm: syz.6.5727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.447891][T21212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.447904][T21212] Call Trace: [ 392.447910][T21212] [ 392.447917][T21212] __dump_stack+0x1d/0x30 [ 392.447940][T21212] dump_stack_lvl+0xe8/0x140 [ 392.447961][T21212] dump_stack+0x15/0x1b [ 392.448037][T21212] should_fail_ex+0x265/0x280 [ 392.448065][T21212] should_fail+0xb/0x20 [ 392.448087][T21212] should_fail_usercopy+0x1a/0x20 [ 392.448112][T21212] copy_folio_from_iter_atomic+0x278/0x11b0 [ 392.448188][T21212] ? shmem_write_begin+0xa8/0x190 [ 392.448205][T21212] ? shmem_write_begin+0xe1/0x190 [ 392.448295][T21212] generic_perform_write+0x2c2/0x490 [ 392.448333][T21212] shmem_file_write_iter+0xc5/0xf0 [ 392.448360][T21212] do_iter_readv_writev+0x499/0x540 [ 392.448390][T21212] vfs_writev+0x2df/0x8b0 [ 392.448493][T21212] __se_sys_pwritev2+0xfc/0x1c0 [ 392.448519][T21212] __x64_sys_pwritev2+0x67/0x80 [ 392.448542][T21212] x64_sys_call+0x2c55/0x2ff0 [ 392.448628][T21212] do_syscall_64+0xd2/0x200 [ 392.448658][T21212] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 392.448683][T21212] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 392.448728][T21212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.448749][T21212] RIP: 0033:0x7f8be6caeec9 [ 392.448764][T21212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.448810][T21212] RSP: 002b:00007f8be570f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 392.448830][T21212] RAX: ffffffffffffffda RBX: 00007f8be6f05fa0 RCX: 00007f8be6caeec9 [ 392.448842][T21212] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 392.448855][T21212] RBP: 00007f8be570f090 R08: 0000000000000000 R09: 0000000000000000 [ 392.448868][T21212] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000001 [ 392.448881][T21212] R13: 00007f8be6f06038 R14: 00007f8be6f05fa0 R15: 00007ffd8ec21c98 [ 392.448901][T21212] [ 392.670506][T21218] FAULT_INJECTION: forcing a failure. [ 392.670506][T21218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.683714][T21218] CPU: 0 UID: 0 PID: 21218 Comm: syz.2.5730 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.683741][T21218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.683754][T21218] Call Trace: [ 392.683782][T21218] [ 392.683790][T21218] __dump_stack+0x1d/0x30 [ 392.683849][T21218] dump_stack_lvl+0xe8/0x140 [ 392.683869][T21218] dump_stack+0x15/0x1b [ 392.683887][T21218] should_fail_ex+0x265/0x280 [ 392.683913][T21218] should_fail+0xb/0x20 [ 392.683952][T21218] should_fail_usercopy+0x1a/0x20 [ 392.683977][T21218] copy_fpstate_to_sigframe+0x628/0x7d0 [ 392.684059][T21218] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 392.684092][T21218] ? kmem_cache_free+0xdf/0x300 [ 392.684121][T21218] ? x86_task_fpu+0x36/0x60 [ 392.684227][T21218] get_sigframe+0x34d/0x490 [ 392.684244][T21218] ? get_signal+0xdc8/0xf70 [ 392.684266][T21218] x64_setup_rt_frame+0xa8/0x580 [ 392.684373][T21218] arch_do_signal_or_restart+0x27c/0x480 [ 392.684441][T21218] irqentry_exit_to_user_mode+0x5e/0xa0 [ 392.684471][T21218] irqentry_exit+0x12/0x50 [ 392.684570][T21218] asm_exc_page_fault+0x26/0x30 [ 392.684587][T21218] RIP: 0033:0x7f747d8878f9 [ 392.684600][T21218] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 392.684615][T21218] RSP: 002b:00007f747c316e68 EFLAGS: 00010283 [ 392.684669][T21218] RAX: 0000000000000000 RBX: 00007f747c316ef0 RCX: 0000000000000000 [ 392.684684][T21218] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 392.684695][T21218] RBP: 0000200000000300 R08: 00002000000000c0 R09: 0000000000000000 [ 392.684708][T21218] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280 [ 392.684720][T21218] R13: 00007f747c316eb0 R14: 0000000000000000 R15: 0000000000000000 [ 392.684738][T21218] [ 393.546425][T21256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21256 comm=syz.4.5746 [ 393.912088][T21280] serio: Serial port ptm1 [ 394.168074][ T3410] usb 5-1: enqueue for inactive port 0 [ 394.173676][ T3410] usb 5-1: enqueue for inactive port 0 [ 394.243816][T21300] netlink: 'syz.6.5762': attribute type 21 has an invalid length. [ 394.248022][ T3410] vhci_hcd: vhci_device speed not set [ 394.705127][T21326] siw: device registration error -23 [ 394.760332][T21328] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 394.766940][T21328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.774451][T21328] vhci_hcd vhci_hcd.0: Device attached [ 394.781094][T21328] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 394.787687][T21328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.795262][T21328] vhci_hcd vhci_hcd.0: Device attached [ 394.795612][T21332] loop4: detected capacity change from 0 to 512 [ 394.801741][T21328] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 394.808887][T21332] EXT4-fs: Ignoring removed bh option [ 394.813527][T21328] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 394.813595][T21328] vhci_hcd vhci_hcd.0: Device attached [ 394.820617][T21332] EXT4-fs: Ignoring removed mblk_io_submit option [ 394.830906][T21328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.838573][T21332] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 394.847311][T21328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 394.858819][T21332] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 394.872755][T21335] vhci_hcd: connection closed [ 394.872903][T21333] vhci_hcd: connection closed [ 394.874563][T21332] EXT4-fs (loop4): orphan cleanup on readonly fs [ 394.877943][T21330] vhci_hcd: connection closed [ 394.882417][ T51] vhci_hcd: stop threads [ 394.897480][ T51] vhci_hcd: release socket [ 394.901974][ T51] vhci_hcd: disconnect device [ 394.906321][T21332] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5775: Failed to acquire dquot type 1 [ 394.919592][ T51] vhci_hcd: stop threads [ 394.923916][ T51] vhci_hcd: release socket [ 394.924120][T21332] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5775: Invalid block bitmap block 0 in block_group 0 [ 394.928377][ T51] vhci_hcd: disconnect device [ 394.943571][T21332] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5775: Invalid block bitmap block 0 in block_group 0 [ 394.948059][ T51] vhci_hcd: stop threads [ 394.961730][T21332] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5775: Invalid block bitmap block 0 in block_group 0 [ 394.964085][ T51] vhci_hcd: release socket [ 394.964098][ T51] vhci_hcd: disconnect device [ 394.980833][T21332] __quota_error: 1639 callbacks suppressed [ 394.980846][T21332] Quota error (device loop4): write_blk: dquota write failed [ 394.999912][T21332] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 395.009724][T21332] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5775: Failed to acquire dquot type 1 [ 395.027542][T21332] Quota error (device loop4): write_blk: dquota write failed [ 395.034995][T21332] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 395.044826][T21332] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5775: Failed to acquire dquot type 1 [ 395.057729][T21332] EXT4-fs (loop4): 1 orphan inode deleted [ 395.092838][T21332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 395.111693][ T23] hid_parser_main: 19 callbacks suppressed [ 395.111744][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.125147][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.132758][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.167963][ T3410] vhci_hcd: vhci_device speed not set [ 395.196869][T21344] FAULT_INJECTION: forcing a failure. [ 395.196869][T21344] name failslab, interval 1, probability 0, space 0, times 0 [ 395.209524][T21344] CPU: 0 UID: 0 PID: 21344 Comm: syz.7.5776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 395.209547][T21344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.209557][T21344] Call Trace: [ 395.209563][T21344] [ 395.209572][T21344] __dump_stack+0x1d/0x30 [ 395.209619][T21344] dump_stack_lvl+0xe8/0x140 [ 395.209668][T21344] dump_stack+0x15/0x1b [ 395.209707][T21344] should_fail_ex+0x265/0x280 [ 395.209731][T21344] should_failslab+0x8c/0xb0 [ 395.209751][T21344] kmem_cache_alloc_noprof+0x50/0x310 [ 395.209776][T21344] ? alloc_empty_file+0x76/0x200 [ 395.209868][T21344] alloc_empty_file+0x76/0x200 [ 395.209916][T21344] alloc_file_pseudo+0xc6/0x160 [ 395.209956][T21344] create_pipe_files+0x1c4/0x440 [ 395.210045][T21344] __do_pipe_flags+0x44/0x150 [ 395.210070][T21344] do_pipe2+0x61/0x130 [ 395.210185][T21344] ? ksys_write+0x192/0x1a0 [ 395.210210][T21344] __x64_sys_pipe2+0x30/0x40 [ 395.210234][T21344] x64_sys_call+0x2624/0x2ff0 [ 395.210288][T21344] do_syscall_64+0xd2/0x200 [ 395.210379][T21344] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 395.210405][T21344] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 395.210435][T21344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.210455][T21344] RIP: 0033:0x7fa3dafceec9 [ 395.210528][T21344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.210546][T21344] RSP: 002b:00007fa3d99f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 395.210631][T21344] RAX: ffffffffffffffda RBX: 00007fa3db226180 RCX: 00007fa3dafceec9 [ 395.210642][T21344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 395.210654][T21344] RBP: 00007fa3d99f5090 R08: 0000000000000000 R09: 0000000000000000 [ 395.210668][T21344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.210680][T21344] R13: 00007fa3db226218 R14: 00007fa3db226180 R15: 00007ffce379a1d8 [ 395.210696][T21344] [ 395.413418][T21343] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 395.453772][ T29] audit: type=1326 audit(395.454:32091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.9.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 395.499770][ T29] audit: type=1326 audit(395.484:32092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.9.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 395.517924][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.522803][ T29] audit: type=1326 audit(395.484:32093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.9.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 395.530065][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.552972][ T29] audit: type=1326 audit(395.484:32094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.9.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 395.560353][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.560375][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.583270][ T29] audit: type=1326 audit(395.484:32095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.9.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 395.590664][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.598050][ T29] audit: type=1326 audit(395.484:32096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.9.5778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 395.620940][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.658561][ T23] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 395.720862][ T23] hid-generic 0000:0000:0000.003B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 395.739041][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.835132][T21354] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 395.850150][T21354] SELinux: failed to load policy [ 395.964452][T21370] loop4: detected capacity change from 0 to 1024 [ 395.982283][T21365] siw: device registration error -23 [ 395.994754][T21370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.075660][T21370] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 396.109721][T21369] __nla_validate_parse: 11 callbacks suppressed [ 396.109772][T21369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5784'. [ 396.124999][T21369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5784'. [ 396.229319][T21364] SELinux: security_context_str_to_sid (unt-ro,) failed with errno=-22 [ 396.267251][T21379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21379 comm=syz.9.5787 [ 396.361562][T21367] serio: Serial port ptm1 [ 396.637197][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.703700][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5792'. [ 396.748202][ T3410] hid-generic 0000:0000:0000.003C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 396.761468][T21401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5798'. [ 396.797301][T21403] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 396.901384][T21429] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5810'. [ 397.049044][T21437] loop4: detected capacity change from 0 to 8192 [ 397.073833][T21441] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 397.167542][T21451] serio: Serial port ptm1 [ 397.800722][T21465] FAULT_INJECTION: forcing a failure. [ 397.800722][T21465] name failslab, interval 1, probability 0, space 0, times 0 [ 397.813413][T21465] CPU: 1 UID: 0 PID: 21465 Comm: syz.6.5819 Not tainted syzkaller #0 PREEMPT(voluntary) [ 397.813440][T21465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.813468][T21465] Call Trace: [ 397.813475][T21465] [ 397.813483][T21465] __dump_stack+0x1d/0x30 [ 397.813504][T21465] dump_stack_lvl+0xe8/0x140 [ 397.813530][T21465] dump_stack+0x15/0x1b [ 397.813547][T21465] should_fail_ex+0x265/0x280 [ 397.813624][T21465] ? copy_cgroup_ns+0x162/0x370 [ 397.813679][T21465] should_failslab+0x8c/0xb0 [ 397.813737][T21465] __kmalloc_cache_noprof+0x4c/0x320 [ 397.813851][T21465] copy_cgroup_ns+0x162/0x370 [ 397.813882][T21465] create_new_namespaces+0x1c2/0x3d0 [ 397.813914][T21465] unshare_nsproxy_namespaces+0xe8/0x120 [ 397.813963][T21465] ksys_unshare+0x3d0/0x6d0 [ 397.813989][T21465] ? trace_sys_enter+0xd0/0xf0 [ 397.814014][T21465] __x64_sys_unshare+0x1f/0x30 [ 397.814066][T21465] x64_sys_call+0x2911/0x2ff0 [ 397.814087][T21465] do_syscall_64+0xd2/0x200 [ 397.814181][T21465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 397.814203][T21465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 397.814232][T21465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.814253][T21465] RIP: 0033:0x7f8be6caeec9 [ 397.814338][T21465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.814354][T21465] RSP: 002b:00007f8be56cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 397.814373][T21465] RAX: ffffffffffffffda RBX: 00007f8be6f06180 RCX: 00007f8be6caeec9 [ 397.814429][T21465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062000000 [ 397.814444][T21465] RBP: 00007f8be56cd090 R08: 0000000000000000 R09: 0000000000000000 [ 397.814456][T21465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.814468][T21465] R13: 00007f8be6f06218 R14: 00007f8be6f06180 R15: 00007ffd8ec21c98 [ 397.814488][T21465] [ 398.261283][T21475] siw: device registration error -23 [ 398.280518][T21477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21477 comm=syz.4.5827 [ 398.360946][T21482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5829'. [ 398.375116][T21479] loop4: detected capacity change from 0 to 8192 [ 398.442431][T21484] serio: Serial port ptm2 [ 398.686038][ T3410] hid-generic 0000:0000:0000.003D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 398.736917][T21499] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5837'. [ 398.745961][T21499] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5837'. [ 398.754994][T21499] tc_dump_action: action bad kind [ 399.008277][T21504] serio: Serial port ptm5 [ 399.246281][ T3410] hid-generic 0000:0000:0000.003E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 399.335988][T21518] loop4: detected capacity change from 0 to 1024 [ 399.345403][T21518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.362589][T21518] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5846'. [ 399.680948][T21540] netlink: 'syz.6.5852': attribute type 1 has an invalid length. [ 399.828799][T21542] serio: Serial port ptm1 [ 399.989212][ T29] kauditd_printk_skb: 968 callbacks suppressed [ 399.989226][ T29] audit: type=1326 audit(399.995:33065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 400.018348][ T29] audit: type=1326 audit(399.995:33066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 400.152726][ T29] audit: type=1326 audit(400.045:33067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 400.175848][ T29] audit: type=1326 audit(400.045:33068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 400.198761][ T29] audit: type=1326 audit(400.045:33069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 400.221706][ T29] audit: type=1326 audit(400.045:33070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 400.244734][ T29] audit: type=1326 audit(400.045:33071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 400.267771][ T29] audit: type=1326 audit(400.045:33072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 400.290769][ T29] audit: type=1326 audit(400.045:33073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 400.313703][ T29] audit: type=1326 audit(400.045:33074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21522 comm="syz.9.5847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 400.407529][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.581751][T21560] siw: device registration error -23 [ 400.691567][T21571] serio: Serial port ptm2 [ 400.911997][T21575] siw: device registration error -23 [ 402.009186][T21605] serio: Serial port ptm1 [ 402.395793][T21620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5880'. [ 402.550594][ T4295] hid_parser_main: 106 callbacks suppressed [ 402.550706][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.564164][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.571640][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.604009][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.611507][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.618967][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.626336][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.633824][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.641295][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.648751][ T4295] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 402.661006][ T4295] hid-generic 0000:0000:0000.003F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 402.736270][T21617] Set syz1 is full, maxelem 65536 reached [ 402.742348][ T4295] hid-generic 0000:0000:0000.0040: hidraw0: HID v8.00 Device [syz0] on syz0 [ 402.783784][T21648] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5892'. [ 402.799480][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5893'. [ 402.808900][T21651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5893'. [ 402.818061][T21651] tc_dump_action: action bad kind [ 402.882702][T21653] loop4: detected capacity change from 0 to 8192 [ 402.948251][T21659] serio: Serial port ptm2 [ 403.012475][T21664] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5898'. [ 403.358251][ T4295] hid-generic 0000:0000:0000.0041: hidraw0: HID v8.00 Device [syz0] on syz0 [ 404.623317][T21698] netlink: 'syz.4.5913': attribute type 1 has an invalid length. [ 404.688657][T21704] loop4: detected capacity change from 0 to 512 [ 404.695291][T21704] EXT4-fs: Ignoring removed bh option [ 404.701717][T21704] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.709304][T21704] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 404.720704][T21704] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 404.729536][T21704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 404.736180][T21704] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5915: Failed to acquire dquot type 1 [ 404.749295][T21704] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5915: Invalid block bitmap block 0 in block_group 0 [ 404.763004][T21704] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5915: Invalid block bitmap block 0 in block_group 0 [ 404.776905][T21704] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5915: Invalid block bitmap block 0 in block_group 0 [ 404.790673][T21704] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5915: Failed to acquire dquot type 1 [ 404.803210][T21704] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5915: Failed to acquire dquot type 1 [ 404.816152][T21704] EXT4-fs (loop4): 1 orphan inode deleted [ 404.822723][T21704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.839571][ T3410] hid-generic 0000:0000:0000.0042: hidraw0: HID v8.00 Device [syz0] on syz0 [ 404.851860][T21704] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 404.871300][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.882525][T21711] serio: Serial port ptm2 [ 404.998575][ T29] kauditd_printk_skb: 2264 callbacks suppressed [ 404.998588][ T29] audit: type=1326 audit(405.005:35333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 405.029366][ T29] audit: type=1326 audit(405.005:35334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 405.052290][ T29] audit: type=1326 audit(405.005:35335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 405.075150][ T29] audit: type=1326 audit(405.005:35336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 405.098037][ T29] audit: type=1326 audit(405.005:35337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 405.120917][ T29] audit: type=1326 audit(405.005:35338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 405.143836][ T29] audit: type=1326 audit(405.005:35339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 405.166691][ T29] audit: type=1326 audit(405.005:35340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b52daf79 code=0x7ffc0000 [ 405.189617][ T29] audit: type=1326 audit(405.005:35341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 405.212463][ T29] audit: type=1326 audit(405.035:35342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21694 comm="syz.9.5912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65b5335d67 code=0x7ffc0000 [ 405.253501][T21727] FAULT_INJECTION: forcing a failure. [ 405.253501][T21727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.266662][T21727] CPU: 0 UID: 0 PID: 21727 Comm: syz.9.5924 Not tainted syzkaller #0 PREEMPT(voluntary) [ 405.266701][T21727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.266713][T21727] Call Trace: [ 405.266719][T21727] [ 405.266727][T21727] __dump_stack+0x1d/0x30 [ 405.266747][T21727] dump_stack_lvl+0xe8/0x140 [ 405.266767][T21727] dump_stack+0x15/0x1b [ 405.266815][T21727] should_fail_ex+0x265/0x280 [ 405.266838][T21727] should_fail+0xb/0x20 [ 405.266858][T21727] should_fail_usercopy+0x1a/0x20 [ 405.266926][T21727] strncpy_from_user+0x25/0x230 [ 405.266966][T21727] ? kmem_cache_alloc_noprof+0x186/0x310 [ 405.266994][T21727] ? getname_flags+0x80/0x3b0 [ 405.267046][T21727] getname_flags+0xae/0x3b0 [ 405.267082][T21727] user_path_at+0x28/0x130 [ 405.267114][T21727] __se_sys_mount+0x25b/0x2e0 [ 405.267141][T21727] __x64_sys_mount+0x67/0x80 [ 405.267198][T21727] x64_sys_call+0x2b4d/0x2ff0 [ 405.267218][T21727] do_syscall_64+0xd2/0x200 [ 405.267248][T21727] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 405.267274][T21727] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 405.267301][T21727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.267319][T21727] RIP: 0033:0x7f65b533eec9 [ 405.267336][T21727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.267415][T21727] RSP: 002b:00007f65b3d9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.267432][T21727] RAX: ffffffffffffffda RBX: 00007f65b5595fa0 RCX: 00007f65b533eec9 [ 405.267474][T21727] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 405.267488][T21727] RBP: 00007f65b3d9f090 R08: 0000200000000340 R09: 0000000000000000 [ 405.267501][T21727] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000001 [ 405.267515][T21727] R13: 00007f65b5596038 R14: 00007f65b5595fa0 R15: 00007ffc14a47758 [ 405.267547][T21727] [ 405.465254][T21729] siw: device registration error -23 [ 405.478079][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5927'. [ 405.589156][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5940'. [ 405.622227][T21764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5941'. [ 405.641760][T21757] tmpfs: Bad value for 'mpol' [ 405.776055][T21771] siw: device registration error -23 [ 405.981543][T21794] loop4: detected capacity change from 0 to 2048 [ 405.982207][T21793] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5951'. [ 405.996866][T21793] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5951'. [ 406.011583][T21794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.034199][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.253647][T21813] loop4: detected capacity change from 0 to 8192 [ 406.315414][T21815] serio: Serial port ptm2 [ 406.525109][T21823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21823 comm=syz.9.5963 [ 406.871343][T21839] netlink: 'syz.6.5971': attribute type 7 has an invalid length. [ 407.328730][T21862] FAULT_INJECTION: forcing a failure. [ 407.328730][T21862] name failslab, interval 1, probability 0, space 0, times 0 [ 407.341394][T21862] CPU: 1 UID: 0 PID: 21862 Comm: syz.9.5981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 407.341417][T21862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.341489][T21862] Call Trace: [ 407.341495][T21862] [ 407.341503][T21862] __dump_stack+0x1d/0x30 [ 407.341525][T21862] dump_stack_lvl+0xe8/0x140 [ 407.341545][T21862] dump_stack+0x15/0x1b [ 407.341585][T21862] should_fail_ex+0x265/0x280 [ 407.341609][T21862] should_failslab+0x8c/0xb0 [ 407.341641][T21862] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 407.341668][T21862] ? shmem_alloc_inode+0x34/0x50 [ 407.341759][T21862] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 407.341777][T21862] shmem_alloc_inode+0x34/0x50 [ 407.341795][T21862] alloc_inode+0x40/0x170 [ 407.341814][T21862] new_inode+0x1d/0xe0 [ 407.341854][T21862] shmem_get_inode+0x244/0x750 [ 407.341872][T21862] ? __se_sys_memfd_create+0x1cc/0x590 [ 407.341892][T21862] __shmem_file_setup+0x113/0x210 [ 407.341918][T21862] shmem_file_setup+0x3b/0x50 [ 407.341999][T21862] __se_sys_memfd_create+0x2c3/0x590 [ 407.342017][T21862] __x64_sys_memfd_create+0x31/0x40 [ 407.342050][T21862] x64_sys_call+0x2abe/0x2ff0 [ 407.342071][T21862] do_syscall_64+0xd2/0x200 [ 407.342095][T21862] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 407.342160][T21862] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 407.342182][T21862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.342211][T21862] RIP: 0033:0x7f65b533eec9 [ 407.342224][T21862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.342237][T21862] RSP: 002b:00007f65b3d9ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 407.342253][T21862] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007f65b533eec9 [ 407.342263][T21862] RDX: 00007f65b3d9eef0 RSI: 0000000000000000 RDI: 00007f65b53c2960 [ 407.342274][T21862] RBP: 0000200000000640 R08: 00007f65b3d9ebb7 R09: 00007f65b3d9ee40 [ 407.342326][T21862] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 407.342336][T21862] R13: 00007f65b3d9eef0 R14: 00007f65b3d9eeb0 R15: 00002000000001c0 [ 407.342352][T21862] [ 407.682201][T21880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21880 comm=syz.7.5989 [ 407.885095][T21889] siw: device registration error -23 [ 408.095465][T21906] __nla_validate_parse: 1 callbacks suppressed [ 408.095476][T21906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5998'. [ 408.148834][T21910] FAULT_INJECTION: forcing a failure. [ 408.148834][T21910] name failslab, interval 1, probability 0, space 0, times 0 [ 408.161478][T21910] CPU: 1 UID: 0 PID: 21910 Comm: syz.4.6000 Not tainted syzkaller #0 PREEMPT(voluntary) [ 408.161510][T21910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.161597][T21910] Call Trace: [ 408.161603][T21910] [ 408.161611][T21910] __dump_stack+0x1d/0x30 [ 408.161633][T21910] dump_stack_lvl+0xe8/0x140 [ 408.161685][T21910] dump_stack+0x15/0x1b [ 408.161702][T21910] should_fail_ex+0x265/0x280 [ 408.161728][T21910] ? shrinker_alloc+0x3b/0x650 [ 408.161757][T21910] should_failslab+0x8c/0xb0 [ 408.161777][T21910] __kmalloc_cache_noprof+0x4c/0x320 [ 408.161829][T21910] ? pcpu_alloc_noprof+0xd29/0x1250 [ 408.161847][T21910] shrinker_alloc+0x3b/0x650 [ 408.161936][T21910] ? alloc_super+0x2f0/0x570 [ 408.161955][T21910] alloc_super+0x426/0x570 [ 408.162024][T21910] sget_fc+0x24e/0x6e0 [ 408.162041][T21910] ? __pfx_set_anon_super_fc+0x10/0x10 [ 408.162064][T21910] ? __pfx_mqueue_fill_super+0x10/0x10 [ 408.162112][T21910] get_tree_nodev+0x2a/0x100 [ 408.162193][T21910] mqueue_get_tree+0x63/0x90 [ 408.162238][T21910] vfs_get_tree+0x57/0x1d0 [ 408.162261][T21910] fc_mount_longterm+0x18/0xb0 [ 408.162292][T21910] mq_init_ns+0x249/0x2f0 [ 408.162390][T21910] copy_ipcs+0x214/0x3b0 [ 408.162412][T21910] create_new_namespaces+0x12a/0x3d0 [ 408.162458][T21910] unshare_nsproxy_namespaces+0xe8/0x120 [ 408.162484][T21910] ksys_unshare+0x3d0/0x6d0 [ 408.162536][T21910] ? trace_sys_enter+0xd0/0xf0 [ 408.162562][T21910] __x64_sys_unshare+0x1f/0x30 [ 408.162586][T21910] x64_sys_call+0x2911/0x2ff0 [ 408.162650][T21910] do_syscall_64+0xd2/0x200 [ 408.162678][T21910] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 408.162749][T21910] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 408.162773][T21910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.162816][T21910] RIP: 0033:0x7f38bf55eec9 [ 408.162829][T21910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.162844][T21910] RSP: 002b:00007f38bdfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 408.162893][T21910] RAX: ffffffffffffffda RBX: 00007f38bf7b5fa0 RCX: 00007f38bf55eec9 [ 408.162904][T21910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 408.162915][T21910] RBP: 00007f38bdfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 408.162995][T21910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.163006][T21910] R13: 00007f38bf7b6038 R14: 00007f38bf7b5fa0 R15: 00007ffcc2d1b9b8 [ 408.163022][T21910] [ 408.478446][T21920] loop4: detected capacity change from 0 to 512 [ 408.485124][T21920] EXT4-fs: Ignoring removed bh option [ 408.491073][T21920] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.498290][T21920] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 408.509753][T21920] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 408.518529][T21920] EXT4-fs (loop4): orphan cleanup on readonly fs [ 408.525321][T21920] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6014: Failed to acquire dquot type 1 [ 408.527848][T21923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21923 comm=syz.7.6004 [ 408.538784][T21920] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6014: Invalid block bitmap block 0 in block_group 0 [ 408.564406][T21920] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6014: Invalid block bitmap block 0 in block_group 0 [ 408.579784][T21920] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6014: Invalid block bitmap block 0 in block_group 0 [ 408.594627][T21920] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6014: Failed to acquire dquot type 1 [ 408.601585][T21925] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 408.606371][T21920] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6014: Failed to acquire dquot type 1 [ 408.612436][T21925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.623936][T21920] EXT4-fs (loop4): 1 orphan inode deleted [ 408.631158][T21925] vhci_hcd vhci_hcd.0: Device attached [ 408.643615][T21920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.665853][ T4295] hid_parser_main: 106 callbacks suppressed [ 408.665867][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.666009][T21928] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(12) [ 408.671897][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.679184][T21928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 408.679253][T21928] vhci_hcd vhci_hcd.0: Device attached [ 408.685831][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.703914][T21925] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(14) [ 408.720019][T21925] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 408.727664][T21925] vhci_hcd vhci_hcd.0: Device attached [ 408.728126][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.740545][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.745719][T21925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.747955][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.747980][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.759118][T21925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.763442][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.763470][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.793677][ T4295] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 408.803237][T21934] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 408.807286][ T4295] hid-generic 0000:0000:0000.0043: hidraw0: HID v8.00 Device [syz0] on syz0 [ 408.844533][T20129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.864929][T21926] vhci_hcd: connection closed [ 408.865191][ T2244] vhci_hcd: stop threads [ 408.874229][ T2244] vhci_hcd: release socket [ 408.877491][T21929] vhci_hcd: connection closed [ 408.878654][ T2244] vhci_hcd: disconnect device [ 408.878990][T21931] vhci_hcd: connection closed [ 408.883394][ T1097] vhci_hcd: vhci_device speed not set [ 408.893590][ T2244] vhci_hcd: stop threads [ 408.902488][ T2244] vhci_hcd: release socket [ 408.902752][T21942] FAULT_INJECTION: forcing a failure. [ 408.902752][T21942] name failslab, interval 1, probability 0, space 0, times 0 [ 408.906908][ T2244] vhci_hcd: disconnect device [ 408.919585][T21942] CPU: 0 UID: 0 PID: 21942 Comm: syz.2.6010 Not tainted syzkaller #0 PREEMPT(voluntary) [ 408.919653][T21942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.919666][T21942] Call Trace: [ 408.919673][T21942] [ 408.919682][T21942] __dump_stack+0x1d/0x30 [ 408.919703][T21942] dump_stack_lvl+0xe8/0x140 [ 408.919785][T21942] dump_stack+0x15/0x1b [ 408.919802][T21942] should_fail_ex+0x265/0x280 [ 408.919825][T21942] ? security_load_policy+0x66/0x890 [ 408.919847][T21942] should_failslab+0x8c/0xb0 [ 408.919891][T21942] __kmalloc_cache_noprof+0x4c/0x320 [ 408.919976][T21942] ? exc_page_fault+0x62/0xa0 [ 408.920004][T21942] security_load_policy+0x66/0x890 [ 408.920145][T21942] ? rep_movs_alternative+0x4a/0x90 [ 408.920169][T21942] sel_write_load+0x1d4/0x380 [ 408.920194][T21942] ? __pfx_sel_write_load+0x10/0x10 [ 408.920218][T21942] vfs_write+0x266/0x960 [ 408.920239][T21942] ? __rcu_read_unlock+0x4f/0x70 [ 408.920337][T21942] ? __fget_files+0x184/0x1c0 [ 408.920386][T21942] ksys_write+0xda/0x1a0 [ 408.920409][T21942] __x64_sys_write+0x40/0x50 [ 408.920444][T21942] x64_sys_call+0x27fe/0x2ff0 [ 408.920465][T21942] do_syscall_64+0xd2/0x200 [ 408.920493][T21942] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 408.920517][T21942] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 408.920564][T21942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.920585][T21942] RIP: 0033:0x7f747d8aeec9 [ 408.920600][T21942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.920643][T21942] RSP: 002b:00007f747c317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.920662][T21942] RAX: ffffffffffffffda RBX: 00007f747db05fa0 RCX: 00007f747d8aeec9 [ 408.920674][T21942] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004 [ 408.920687][T21942] RBP: 00007f747c317090 R08: 0000000000000000 R09: 0000000000000000 [ 408.920715][T21942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.920728][T21942] R13: 00007f747db06038 R14: 00007f747db05fa0 R15: 00007ffd6a85c7d8 [ 408.920751][T21942] [ 408.920759][T21942] SELinux: failed to load policy [ 408.979779][T21937] serio: Serial port ptm1 [ 408.992218][ T2244] vhci_hcd: stop threads [ 408.999015][T21945] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 409.003078][ T2244] vhci_hcd: release socket [ 409.008236][T21945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 409.008332][T21945] vhci_hcd vhci_hcd.0: Device attached [ 409.012492][ T2244] vhci_hcd: disconnect device [ 409.022300][T21944] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.148118][T21945] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 409.190494][T21945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 409.197940][T21945] vhci_hcd vhci_hcd.0: Device attached [ 409.221304][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6013'. [ 409.230722][T21944] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 409.237312][T21944] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 409.244912][T21944] vhci_hcd vhci_hcd.0: Device attached [ 409.270217][T21960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21960 comm=syz.2.6015 [ 409.285285][ T4295] vhci_hcd: vhci_device speed not set [ 409.292618][T21944] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 409.299215][T21944] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 409.306836][T21944] vhci_hcd vhci_hcd.0: Device attached [ 409.320789][T21944] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.330133][T21944] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.347166][ T4295] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 409.401658][T21953] vhci_hcd: connection closed [ 409.401929][T21956] vhci_hcd: connection closed [ 409.406758][T21961] vhci_hcd: connection closed [ 409.412951][T21946] vhci_hcd: connection reset by peer [ 409.413463][ T12] vhci_hcd: stop threads [ 409.427464][ T12] vhci_hcd: release socket [ 409.431958][ T12] vhci_hcd: disconnect device [ 409.437841][ T12] vhci_hcd: stop threads [ 409.442096][ T12] vhci_hcd: release socket [ 409.446511][ T12] vhci_hcd: disconnect device [ 409.453237][ T12] vhci_hcd: stop threads [ 409.457521][ T12] vhci_hcd: release socket [ 409.461963][ T12] vhci_hcd: disconnect device [ 409.463144][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6025'. [ 409.476528][ T12] vhci_hcd: stop threads [ 409.480843][ T12] vhci_hcd: release socket [ 409.485251][ T12] vhci_hcd: disconnect device [ 409.506223][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6027'. [ 409.515303][T21987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6027'. [ 409.524257][T21987] tc_dump_action: action bad kind [ 409.530362][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6027'. [ 409.572010][T21994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21520 sclass=netlink_route_socket pid=21994 comm=syz.6.6028 [ 409.602739][T21985] serio: Serial port ptm2 [ 410.136329][ T3410] hid-generic 0000:0000:0000.0044: hidraw0: HID v8.00 Device [syz0] on syz0 [ 410.165606][ T29] kauditd_printk_skb: 1383 callbacks suppressed [ 410.165620][ T29] audit: type=1326 audit(410.165:36718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.175059][T21995] Set syz1 is full, maxelem 65536 reached [ 410.219268][T22010] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 410.225884][T22010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.233436][T22010] vhci_hcd vhci_hcd.0: Device attached [ 410.247244][ T29] audit: type=1326 audit(410.215:36719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.257195][T22010] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(12) [ 410.270601][ T29] audit: type=1326 audit(410.215:36720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.277077][T22010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.277243][T22010] vhci_hcd vhci_hcd.0: Device attached [ 410.300145][ T29] audit: type=1326 audit(410.215:36721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.315648][T22021] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(15) [ 410.336075][ T29] audit: type=1326 audit(410.215:36722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.342568][T22021] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 410.342794][T22021] vhci_hcd vhci_hcd.0: Device attached [ 410.365654][ T29] audit: type=1326 audit(410.215:36723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.379971][T22024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.401535][ T29] audit: type=1326 audit(410.215:36724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.401577][ T29] audit: type=1326 audit(410.215:36725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.427395][T22010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.432717][ T29] audit: type=1326 audit(410.215:36726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.486613][ T29] audit: type=1326 audit(410.215:36727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22009 comm="syz.9.6036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65b533eec9 code=0x7ffc0000 [ 410.520198][T22011] vhci_hcd: connection closed [ 410.521814][T22018] vhci_hcd: connection closed [ 410.526673][T22022] vhci_hcd: connection closed [ 410.531833][ T3444] vhci_hcd: stop threads [ 410.540917][ T3444] vhci_hcd: release socket [ 410.545464][ T3444] vhci_hcd: disconnect device [ 410.550407][ T3444] vhci_hcd: stop threads [ 410.554640][ T3444] vhci_hcd: release socket [ 410.559108][ T3444] vhci_hcd: disconnect device [ 410.564126][ T3444] vhci_hcd: stop threads [ 410.568446][ T3444] vhci_hcd: release socket [ 410.572925][ T3444] vhci_hcd: disconnect device [ 410.708053][T22038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6045'. [ 410.717169][T22038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6045'. [ 411.195922][T22052] serio: Serial port ptm2 [ 411.497094][T22072] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 411.503699][T22072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.511324][T22072] vhci_hcd vhci_hcd.0: Device attached [ 411.513673][T22060] serio: Serial port ptm2 [ 411.525894][T22072] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 411.532577][T22072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.540175][T22072] vhci_hcd vhci_hcd.0: Device attached [ 411.549574][T22072] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 411.556170][T22072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 411.563794][T22072] vhci_hcd vhci_hcd.0: Device attached [ 411.570234][T22072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 411.596954][T22072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 411.623290][T22073] vhci_hcd: connection closed [ 411.623347][T22082] ================================================================== [ 411.623576][ T3621] vhci_hcd: stop threads [ 411.628049][T22082] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 411.628088][T22082] [ 411.628095][T22082] write to 0xffffffff8688e6f0 of 8 bytes by task 22073 on cpu 1: [ 411.636258][ T3621] vhci_hcd: release socket [ 411.640352][T22082] data_alloc+0x27d/0x2b0 [ 411.640382][T22082] prb_reserve+0x808/0xaf0 [ 411.647195][ T3621] vhci_hcd: disconnect device [ 411.649332][T22082] vprintk_store+0x56d/0x860 [ 411.679363][T22082] vprintk_emit+0x178/0x650 [ 411.683876][T22082] vprintk_default+0x26/0x30 [ 411.688457][T22082] vprintk+0x1d/0x30 [ 411.692353][T22082] _printk+0x79/0xa0 [ 411.696246][T22082] vhci_rx_loop+0x4ab/0x5f0 [ 411.700750][T22082] kthread+0x489/0x510 [ 411.704816][T22082] ret_from_fork+0x11f/0x1b0 [ 411.709403][T22082] ret_from_fork_asm+0x1a/0x30 [ 411.714164][T22082] [ 411.716477][T22082] read to 0xffffffff8688e6f0 of 8 bytes by task 22082 on cpu 0: [ 411.724095][T22082] prb_reserve+0x221/0xaf0 [ 411.728512][T22082] vprintk_store+0x56d/0x860 [ 411.733093][T22082] vprintk_emit+0x178/0x650 [ 411.737590][T22082] vprintk_default+0x26/0x30 [ 411.742182][T22082] vprintk+0x1d/0x30 [ 411.742980][T22088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6060'. [ 411.746079][T22082] _printk+0x79/0xa0 [ 411.755079][T22088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6060'. [ 411.758878][T22082] vhci_rx_loop+0x4ab/0x5f0 [ 411.758904][T22082] kthread+0x489/0x510 [ 411.776338][T22082] ret_from_fork+0x11f/0x1b0 [ 411.777032][T22076] vhci_hcd: connection closed [ 411.780925][T22082] ret_from_fork_asm+0x1a/0x30 [ 411.790336][T22082] [ 411.792647][T22082] value changed: 0x0000000000042990 -> 0x00000000000de818 [ 411.799735][T22082] [ 411.802050][T22082] Reported by Kernel Concurrency Sanitizer on: [ 411.808199][T22082] CPU: 0 UID: 0 PID: 22082 Comm: vhci_rx Not tainted syzkaller #0 PREEMPT(voluntary) [ 411.817736][T22082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.827779][T22082] ================================================================== [ 411.623272][T22082] vhci_hcd: connection closed [ 411.837547][ T3621] vhci_hcd: stop threads [ 411.846449][ T3621] vhci_hcd: release socket [ 411.847053][ T3955] vhci_hcd: vhci_device speed not set [ 411.856222][ T3621] vhci_hcd: disconnect device [ 411.959265][ T3621] vhci_hcd: stop threads [ 411.963546][ T3621] vhci_hcd: release socket [ 411.968094][ T3621] vhci_hcd: disconnect device [ 414.406889][ T4295] usb 9-1: enqueue for inactive port 0 [ 414.412356][ T4295] usb 9-1: enqueue for inactive port 0 [ 414.486870][ T4295] vhci_hcd: vhci_device speed not set