last executing test programs: 9m22.918168218s ago: executing program 2 (id=239): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = accept4$unix(r1, &(0x7f0000000440)=@abs, &(0x7f0000000340)=0x6e, 0x800) sendto$unix(r4, &(0x7f0000000500)="42f3169caeac39d0e59aaeb1", 0xc, 0x4005, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000844}, 0x8000) (async) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)={0x0, r3, 0x9, 0x3, 0xffffffff, 0x1}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x7}, 0x18) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r13 = fcntl$dupfd(r0, 0x406, r7) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x3, 0x7, 0x5, 0x786555e0, 0x1020, r12, 0x3, '\x00', r6, r13, 0x1, 0x4}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) sendto$inet6(r10, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) (async) r14 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r15, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 9m22.203742186s ago: executing program 2 (id=243): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=tcp,']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) 9m21.9072628s ago: executing program 2 (id=246): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) getpgrp(0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000), 0x0, &(0x7f0000121000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 9m21.347939725s ago: executing program 2 (id=254): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) getpgrp(0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8010) 9m20.728054035s ago: executing program 2 (id=259): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x66da1e7f8782043e) r2 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffea4) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x7fff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='qgroup_num_dirty_extents\x00', r3, 0x0, 0x8}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)='system_u:object_r:sudo_exec_t:s0\x00', 0x21, 0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) fcntl$notify(r0, 0x402, 0x80000030) 9m20.356077955s ago: executing program 2 (id=261): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x24044054) 9m20.330622927s ago: executing program 32 (id=261): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x24044054) 9m10.217187433s ago: executing program 5 (id=361): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000300000004000000c9c29cfdd448c50905000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001200010300000000fdffffff0004000000000023000000230580000000000000000000040100"/56, @ANYRES32=0x0, @ANYBLOB="070000000000000080fffff00000000004000300"], 0x50}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) 9m10.100592262s ago: executing program 5 (id=363): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sync_file_range(r3, 0x4, 0x101, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x24, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r4, {0xfff0, 0x8}, {0x0, 0xfff1}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) socket(0x8000000010, 0x2, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 9m9.637459169s ago: executing program 5 (id=368): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) getpgrp(0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 9m8.969211103s ago: executing program 5 (id=381): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000008000000000000d99300000300"/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0x0, 0x0) r4 = socket(0x2b, 0x1, 0x7fff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x10008844) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100000022abd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="400800001e00000014001400726f7365300000000000000000000000c9b58ef6700618083171b76bcf9808b8db30a4951234999a6619715853cd4c5b3d134b59995b7ebf41690602b9372950a696d1092662bc395d00deb5e463a1759bb47ceb616b7fd2c4f734f9a45af5f0a78d465972c098d9aa6a2587c5202fad52c9849e634613a83dd86628f2b63498e0ec5f5c7f9b90da1e786447d746e5b60261c6cd022ae9cbcfb55a69e6b7c31ac3f086443344ef37c086c01d13bdbd"], 0x34}, 0x1, 0x0, 0x0, 0x2000}, 0x20040000) getpgrp(0xffffffffffffffff) r8 = gettid() syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000080)={[{@noquota}, {@errors_remount}]}, 0x3, 0xbc9, &(0x7f0000002380)="$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") io_setup(0x6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m7.946647126s ago: executing program 5 (id=395): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) io_setup(0x7, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x86) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r8) r9 = socket$key(0xf, 0x3, 0x2) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf250300090080a0fb9652fbba474cbc46ebdb0000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000040b0000020000000000000002000100000000000000070c0000000005000500000000000a00000100"/136], 0x88}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000200)={[{@grpid}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 9m7.635991711s ago: executing program 5 (id=398): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1a97b757cdc6c5b14e237e964e2d73d8f8b364faf9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff7fffb703000000000000b7040000000000008500000057000e7283cb811e04aadddb3f44c38f645d0000959682384da6a972b2f28b5daa58e253ba53a09c051a9b8f8d80040c132bf7952cad2e3ba911256237c8f07a0accd0147b8b20ada95a43a66714faadb21ea77c177d437c4f235f642946210226300fe727e74ce711587b7a4a2b64a3b7854034b1f5bdb0666226368c7e61fe41d4760af7bc16547c5fc4c6920697bb0f"], 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x127, 0x127, 0x3, [@union={0x9, 0x5, 0x0, 0x5, 0x0, 0xd, [{0xd, 0x2, 0xae34}, {0x4, 0x4, 0x5}, {0x7, 0x1, 0x6}, {0x4, 0x2, 0x5}, {0xe, 0x0, 0x3}]}, @fwd={0xe}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @datasec={0x9, 0x4, 0x0, 0xf, 0x3, [{0x2, 0xa, 0x3}, {0x3, 0x4, 0x3}, {0x2, 0x6, 0x4}, {0x4, 0xd05, 0x2}], "faef5a"}, @enum64={0x2, 0x7, 0x0, 0x13, 0x1, 0x6, [{0x1, 0x5, 0x3}, {0xb, 0x5, 0x3016}, {0x9, 0x7, 0xd0}, {0xe, 0x9, 0xb}, {0xb, 0x1, 0x2}, {0xf, 0x3, 0xb04}, {0x10, 0xe43, 0x1}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x60, 0x2}, @fwd={0x10}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/6, 0x143, 0x6, 0x1, 0xbdd8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080200000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe47}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r5, 0x3, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680}) 9m7.615984242s ago: executing program 33 (id=398): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1a97b757cdc6c5b14e237e964e2d73d8f8b364faf9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff7fffb703000000000000b7040000000000008500000057000e7283cb811e04aadddb3f44c38f645d0000959682384da6a972b2f28b5daa58e253ba53a09c051a9b8f8d80040c132bf7952cad2e3ba911256237c8f07a0accd0147b8b20ada95a43a66714faadb21ea77c177d437c4f235f642946210226300fe727e74ce711587b7a4a2b64a3b7854034b1f5bdb0666226368c7e61fe41d4760af7bc16547c5fc4c6920697bb0f"], 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x127, 0x127, 0x3, [@union={0x9, 0x5, 0x0, 0x5, 0x0, 0xd, [{0xd, 0x2, 0xae34}, {0x4, 0x4, 0x5}, {0x7, 0x1, 0x6}, {0x4, 0x2, 0x5}, {0xe, 0x0, 0x3}]}, @fwd={0xe}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @datasec={0x9, 0x4, 0x0, 0xf, 0x3, [{0x2, 0xa, 0x3}, {0x3, 0x4, 0x3}, {0x2, 0x6, 0x4}, {0x4, 0xd05, 0x2}], "faef5a"}, @enum64={0x2, 0x7, 0x0, 0x13, 0x1, 0x6, [{0x1, 0x5, 0x3}, {0xb, 0x5, 0x3016}, {0x9, 0x7, 0xd0}, {0xe, 0x9, 0xb}, {0xb, 0x1, 0x2}, {0xf, 0x3, 0xb04}, {0x10, 0xe43, 0x1}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x6a, 0x0, 0x60, 0x2}, @fwd={0x10}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/6, 0x143, 0x6, 0x1, 0xbdd8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080200000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe47}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r5, 0x3, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680}) 5m36.091935958s ago: executing program 1 (id=5428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x2, &(0x7f0000002400)=0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000002440)=ANY=[@ANYBLOB="180000000000000000000098a78d6f45d7b7227d0000000000850000002a000000180100002020702500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000954ad07977171daf6fca2d555e0b74f8cccbbbb7fbb5249ed29903000000f4e05a3799a14c655ee942e7ee4fc08da469c0765a3f1f1e643f32a2de20", @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="db5d53bf3c361ecde7821c0e79a4fd847e204b3c88411765c080e09d759815a622326193b35bc233dcce2df732bc3a07e3870f004bcf8d551dfbd80ae936d5a5f1d371f6e42a0688ad11b18ecc9c6d163a644584adc6484e0c155b0b72c63d7d30f374221e61a085dda2785d8a7a61e970329350305c6d2ee32f929caef1e38f1014df6d918404b46452b28853f87e902edae2e86b93e7e9e67e183149c2e8251d3a23078d4e9d4b7c7d7e1d22bdc1bcb0848b66a2fb2823f9d1c208afcc3995ca60c6ed6788cff2c966b5d8fcdc43"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3, 0x0, 0x0, 0x2}]) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000b00), 0x2}, 0x1320, 0x1, 0x3, 0x5, 0x0, 0x800001, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0xc048) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 64) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1a, 0x100, &(0x7f00000000c0)="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"}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3800009, 0x10010, r6, 0xf8589000) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) (rerun: 64) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r3], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) (async, rerun: 32) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000280)={r12, 0x400}, 0x8) (async) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000080)=0x1, 0x12) 5m35.962699628s ago: executing program 1 (id=5433): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) 5m35.904148643s ago: executing program 1 (id=5436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 5m35.298122182s ago: executing program 1 (id=5449): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x6000, 0x7ff, &(0x7f00000004c0)) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="16000000000000000400000001e1dd484e8a4f70f000000000000000df96fb7450ccdc67ddc57d06585bf90a194f07ea3575a39b6768492a30fca7", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x19, &(0x7f0000000840)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x0, 0x1, 0x1, 0x5, 0xa, 0x8, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lu}], &(0x7f0000000940)='GPL\x00', 0xe23f746e, 0x8b, &(0x7f0000000f80)=""/139, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x3, 0x2, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[r2, r2, r2, r0, r2, r2, r0], &(0x7f0000001040)=[{0x3, 0x2, 0x2, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000000800)='svcsock_marker\x00', r3, 0x0, 0x100000000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r5, 0x0, 0x0, 0x400000000000000) syz_clone(0x11800, &(0x7f0000000400)="2fdc6109782ecb8b0c68ab520b9f4b0fd5f611d08dd16f1916379015a5d0ee66052377fcb3e1ef289471cbb99fbb9e0c5f70e4ab542b28cf95ffb86c07571145e858260fe345b27c654a751ec835d9504de1b2835616e0cda1de4e4a204721af9e41d86da68b7e7218cf1e21cb4b7e94b91a82adb7eb6d2c8bc6ca723219bfdbe8cc65f023192eb1aab2422f9d3a2733e420b503bfd45e06159cf420b5255f666a9e381985e8d4257145b09ae86d6b694ec5eac698d66a648abe135cdb295148a37ed67695cff6f123d352bea00f63", 0xcf, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="b859d60c27f75a8ee8457a9965bb971b36b3779b9778a5768cece956115c2ed426bad57692a51a4eec") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f00000005c0)="3c253c5dbef880fa3a07b8cc92f32d554787f5b1fa2a38e8e5caed6884fe35191a3d326b5de1ae36ed87199cc3791f1ec29bf9c7d31162864166aef0276385c720b3419b56d52097d81bad1a52fc4029dd8d5179cc97b4269ad9119b2e48e5b3444cfd28", &(0x7f00000006c0)=""/255, &(0x7f0000000380)="4cd11b94199c550ff847aab6024fa043b877192dbac23f105d1e089f7897d471c8b910", &(0x7f0000001380)="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", 0xa3, r2}, 0x38) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 5m35.063510601s ago: executing program 1 (id=5455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) 5m34.823498351s ago: executing program 1 (id=5459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)=')\x00', 0x0) 5m34.82343173s ago: executing program 34 (id=5459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, &(0x7f00000003c0)=')\x00', 0x0) 1m50.829141472s ago: executing program 4 (id=9220): syz_clone(0x230a0800, &(0x7f0000000cc0)="d4971240afae5420aaf83f3b15458ef20e4b29eed63512b00e74140847f76c2b0d810000001d6b70adb8f3f7ba236d3a13e9cf80e582753abfee47aac523b143c04c24456343b817c1177121bd620931ed23bccc34c8e4e8b9fcc29ac3ae399376b26276cce8d19e16603cdfc1ef01671c0048b0e6a5846f5ceafb8d9581d3a772a35cf2a5caebb8624c817dea6d43057c3fbf9e0104a628238bede2e8accd15f0818ae0aa6b681fcfe95516c3ec51899df4218e33c77a0bbfd7ccb54fa63131989106379fece17b761d0af59a6bc0794c34dd4226e109005686dfeaa5c4b4d9efd5c1dd5af3229dc2b7cb688f5e2e", 0xef, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000007c0)="53e99f55c2d230bfab38ebcd374e5f4ffb706669cb7096") r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x108000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0xd7487aa6f8c07d18, 0xf7fa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x9, 0x1c, &(0x7f0000000980)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @tail_call, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x5e}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000140)='GPL\x00', 0x7, 0x2, &(0x7f0000000900)=""/2, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[0xffffffffffffffff], &(0x7f0000000b00)=[{0x3, 0x3, 0x1, 0xc}, {0x0, 0x80000005, 0x5, 0x9}, {0x3, 0x80004, 0xf, 0x7}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@RTM_DELMDB={0x38, 0x55, 0xdb98ed7b5ced8fe5, 0x70bd27, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0xffff, {@ip4=@dev={0xac, 0x14, 0x14, 0x3a}}}}]}, 0x38}, 0x1, 0x8, 0x0, 0x40040}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='module_free\x00', r1, 0x0, 0x8000000000000000}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r3, 0x1) 1m49.510118368s ago: executing program 4 (id=9248): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa1000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x28}}, 0x44040) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m49.456469032s ago: executing program 4 (id=9249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = getpid() process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0xff9}], 0x2, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0x5f}], 0x1, 0x0) 1m49.426250384s ago: executing program 4 (id=9251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r4 = openat(r3, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x553400, 0x1a) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_fc_cleanup\x00', r6, 0x0, 0x3}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m49.389502738s ago: executing program 4 (id=9252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ftruncate(r0, 0x1) 1m49.23495866s ago: executing program 4 (id=9256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x7, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="b92b13f6b94d38", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000100002800c000180080001006c0034fb18000180140002007866726d3000"/54], 0x3c}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r9, 0xb}}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x890, &(0x7f0000000080)={[{@noload}, {@resgid}, {@discard}]}, 0x1, 0x3db, &(0x7f00000004c0)="$eJzs3F1rHFUfAPD/TN6epo9u1OqFFowUMfiSl6bEBgsqeOmV9QusSVqi28Y2K9iSCwWxH0D9AOJl/QheiHeC4E3x2julUCTJtazMZnYzbnZj3pbR7u8HB86Z2eGc/8zsnpNzDglgYE1GxCcRMRoR70dEJT+e5Cne2EnZ57Y3N5aylESjcfmPpHl+a3NjKQrXZE7nhak0Iv0siWe61Lt+6/YH1Vpt5WZenqlf+3Bm/dbtV1avVa+uXF25Pj+7uDg7f3FhceHEYv0t7vx66d5blS9+OvfLD++9s5C1N83PFeM4KZMx2b4nnaZPurKS/a+QT4ZLbAiHkr3/QxEx3Pz+V2Iodh9eJb6rlNo4AKAvGo3XO8oAwMMv0ecDwIBp/d2/tbmx1EplzEOU5cGbO4tXW/na5nY7/uH2SshIx/rWSZqMiG+/evXZLEWf1iEBAIq+z8Y/F7uN/9I4W/jcqYgYz/d2/T8iHomIRwv7xY5qsqO8d/yT3j9mFfvKxn+XCnvbtgvx5yaG8lIW80SMJFdWayuzefxTMTKWlef2qePs5af+7HWuOP7LUlZ/ayyYt+P+8Njfr1mu1qvHibnowacRTw93iz9pj3+TZtxH99qNu0/2OvfP8fdX4+uIF7o+/92de8n++xNnmu/DTOut2OvOi8/f6FV/2fFnz398//gnkuJ+zfXD1/HjhdWfe5076vs/mrzbzI/mxz6u1us35yJGk7f3Hj+/e22r3Pp8Fv/Uue7f/zOxeycei4jHI+KJiObxni90Fy/Xvnnu6PH3Vxb/8qGe/+Ez45/fvder/oM9/wvN3FR+5CC/fwdt4HHuHQAAAPxXpM353CSdbufTdHp6Z573TIyntbX1+ktX1j66vrwz7zsRI2lrpqtSmA+dy+cIW+XzHeX5fA7ly7FTzfL00lptuezgAWBAne7R/2d+Hyu7dQBA3/RrczsA8O+l/weAwaP/B4DBo/8HgMGj/weAwaP/B4CBcpz/6ycjI/OwZsr+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKNdfAQAA//+h6NU1") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setreuid(0x0, 0xee00) 1m49.23464272s ago: executing program 35 (id=9256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x7, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="b92b13f6b94d38", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000100002800c000180080001006c0034fb18000180140002007866726d3000"/54], 0x3c}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r9, 0xb}}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x890, &(0x7f0000000080)={[{@noload}, {@resgid}, {@discard}]}, 0x1, 0x3db, &(0x7f00000004c0)="$eJzs3F1rHFUfAPD/TN6epo9u1OqFFowUMfiSl6bEBgsqeOmV9QusSVqi28Y2K9iSCwWxH0D9AOJl/QheiHeC4E3x2julUCTJtazMZnYzbnZj3pbR7u8HB86Z2eGc/8zsnpNzDglgYE1GxCcRMRoR70dEJT+e5Cne2EnZ57Y3N5aylESjcfmPpHl+a3NjKQrXZE7nhak0Iv0siWe61Lt+6/YH1Vpt5WZenqlf+3Bm/dbtV1avVa+uXF25Pj+7uDg7f3FhceHEYv0t7vx66d5blS9+OvfLD++9s5C1N83PFeM4KZMx2b4nnaZPurKS/a+QT4ZLbAiHkr3/QxEx3Pz+V2Iodh9eJb6rlNo4AKAvGo3XO8oAwMMv0ecDwIBp/d2/tbmx1EplzEOU5cGbO4tXW/na5nY7/uH2SshIx/rWSZqMiG+/evXZLEWf1iEBAIq+z8Y/F7uN/9I4W/jcqYgYz/d2/T8iHomIRwv7xY5qsqO8d/yT3j9mFfvKxn+XCnvbtgvx5yaG8lIW80SMJFdWayuzefxTMTKWlef2qePs5af+7HWuOP7LUlZ/ayyYt+P+8Njfr1mu1qvHibnowacRTw93iz9pj3+TZtxH99qNu0/2OvfP8fdX4+uIF7o+/92de8n++xNnmu/DTOut2OvOi8/f6FV/2fFnz398//gnkuJ+zfXD1/HjhdWfe5076vs/mrzbzI/mxz6u1us35yJGk7f3Hj+/e22r3Pp8Fv/Uue7f/zOxeycei4jHI+KJiObxni90Fy/Xvnnu6PH3Vxb/8qGe/+Ez45/fvder/oM9/wvN3FR+5CC/fwdt4HHuHQAAAPxXpM353CSdbufTdHp6Z573TIyntbX1+ktX1j66vrwz7zsRI2lrpqtSmA+dy+cIW+XzHeX5fA7ly7FTzfL00lptuezgAWBAne7R/2d+Hyu7dQBA3/RrczsA8O+l/weAwaP/B4DBo/8HgMGj/weAwaP/B4CBcpz/6ycjI/OwZsr+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKNdfAQAA//+h6NU1") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setreuid(0x0, 0xee00) 5.030999857s ago: executing program 7 (id=11009): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r0, r2, 0x25, 0x0, @val=@tracing={0x0, 0x3c73}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000000)={[{@mblk_io_submit}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x7b9, &(0x7f00000007c0)="$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") socket$kcm(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendto$packet(r5, &(0x7f00000001c0)="10030600e0ff020004004788aa96b10000", 0x11, 0x4c8c0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0xd}, 0x14) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, 0x0, 0x4084) 4.415912923s ago: executing program 7 (id=11013): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 3.655194269s ago: executing program 7 (id=11028): creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3.440472664s ago: executing program 7 (id=11031): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20803, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r1, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) tkill(r2, 0x16) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x84, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) 2.414324421s ago: executing program 0 (id=11040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0xb) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "21795a4c92b0114bdf3268a63ceefeafbc1d166b6ca66c81b1f01bfeba1393356ab18dec4feba3e47b94a0f58b1969172be915c197cbaf521de453b59cdf4653", 0x18}, 0x48, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r4, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000002280)=0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], &(0x7f0000000380)='GPL\x00', 0x5, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x12, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7}, 0x10}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x80, 0x0, 0x80, 0xfffe, 0xa}, {0x0, 0xa9, 0x1, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0xc0d0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14"], 0x118}}, 0x44) 2.339050676s ago: executing program 0 (id=11041): creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.094320044s ago: executing program 0 (id=11044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000080)=0x0, &(0x7f00000006c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r4, 0x40056d6, 0xb4f1, 0x2e, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r8) 1.87959379s ago: executing program 3 (id=11052): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, &(0x7f00000019c0)=@phonet={0x23, 0x81, 0x3, 0x81}, 0x80) (fail_nth: 2) 1.560719394s ago: executing program 3 (id=11055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000540)='./file0\x00', 0xc4000ce7) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.537568395s ago: executing program 3 (id=11057): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7b107ee150a05d8e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9a9) socket$rds(0x15, 0x5, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r2, r0, 0x4, 0x4, 0x2}, 0x50) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x7, 0x1}, {0xc, 0x40}, 0x5, 0x2, 0xe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='host1x_channel_submit\x00', r0, 0x0, 0x6}, 0x18) finit_module(r0, &(0x7f00000002c0)='#%\x00', 0x3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x105000, 0x0) sendfile(r3, r4, &(0x7f0000000340)=0x8, 0xe) linkat(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00', 0x1400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000400)={0x3, 0x80000001, 0x3, {0xb, 0x80}, 0x2, 0xb626}) recvmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/29, 0x1d}], 0x2, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/41, 0x29}], 0x2, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x2, 0x0, &(0x7f00000009c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000a00)={0x1, 0xc, 0x8, 0x8, 0x0}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000a80)={r9, 0x9}, &(0x7f0000000ac0)=0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x8, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r10, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg$unix(r6, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/156, 0x9c}, {&(0x7f0000000d40)=""/193, 0xc1}], 0x3, &(0x7f0000000e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000ec0)=""/172, 0xac}, {&(0x7f0000000f80)=""/93, 0x5d}, {&(0x7f0000001000)=""/119, 0x77}, {&(0x7f0000001080)=""/227, 0xe3}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/250, 0xfa}, {&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/121, 0x79}], 0x8}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/66, 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)=""/72, 0x48}, {&(0x7f0000001800)=""/155, 0x9b}, {&(0x7f00000018c0)=""/125, 0x7d}, {&(0x7f0000001940)=""/223, 0xdf}, {&(0x7f0000001a40)=""/65, 0x41}], 0x5, &(0x7f0000001b40)}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001b80)=""/13, 0xd}, {&(0x7f0000001bc0)=""/70, 0x46}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/113, 0x71}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/109, 0x6d}, {&(0x7f0000003e40)=""/188, 0xbc}], 0x3, &(0x7f0000003f40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x6, 0x40000002, &(0x7f0000004100)) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002e) recvmsg(r5, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004140)=""/3, 0x3}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/3, 0x3}, {&(0x7f0000004200)=""/249, 0xf9}, {&(0x7f0000004300)=""/49, 0x31}, {&(0x7f0000004340)=""/18, 0x12}, {&(0x7f0000004380)=""/152, 0x98}], 0x7, &(0x7f00000044c0)=""/160, 0xa0}, 0x12100) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000045c0), &(0x7f0000004600)=0x4) io_setup(0x5, &(0x7f0000004640)=0x0) io_cancel(r11, &(0x7f0000005680)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f0000004680)="519cd765a728ec6deacf7ef3c93691da723f177a10f9db40300d6d1bfb41458ed6d6e64eedd80aecc3e12fc37c2364b0f307b484d1b4288f6fe8761a7b38f8e1d8017e3b5a803111db7ef2ac45c71097d59e90bf252c22f10a25335250a38201e2dd874c5438eb17cb013471e901c0007478201f216d0ac15a4ff72be9ffa78c4ce5d4b0d8e31fd43aca583c15c5afa4f4285812911d20d95fd32743a0f0c1cdf47f8ec636fbe71791d965927266a4bdc029c635dcf70f63886340ee01fa630c5359f00961d963cc29f003cd0658061762aa7659126e8e24c94a0e8b49524f96c6d5deced322b3c26cbc7b7764a9447ecb694903165b9a10c2a0f3a4e5cbeac44c00e2c574913ff7b0bf342e97a740e488edb480c81793387b55204b5b3ebc77fbcb74a16c755c0dc3ccab7b36d10f95b4722d440f4b260266e5266ee795f7e35de8e511e93e2bc60f523f51e99254f3f00daef791d3a3666d94175203cd0ae3960c7cb34ebb58af1a18c6ca5401fcd5b84d255ddeefcab995afe2143067432c0a5b825265ecf517f91296d2c28014fcfe60dd44a38d3b3c5d0340be09394d1c6614e4abb1bda7f60118f8fac5b47a5fd7b73dc670d29aeb61c2ca95ca98a60b48d8d2152265b1cda43c70d8cdd2e7e4f5d2164254a17904ed5ebfc4937777dce6ff8fef0c8a99ad641508d681409160aaca49a7cf378cb63ad7b5c0a395a7869074e0e2393e3c3a3ad269e764eeaffa0106ddef1e475f3f50be6613c31d4dba84ee95abbc4248b33f3c3bbb14fb0bab937fe433a81791b1a5b67339d6e39a62e69931e7ab8521feda69d77fb0c237cb48827e34b72105ae1395746617d5aea590c77255207d418e35ec87e18894a77c22ae878cac29fb88bd8834c20b9990d3ab9e9b1335e9db8d9ac5725e3795183634bedf54068e7b6400702c110abb61edfd7d9c37c4d59e16ba50af858519d122baf7d40ad7d3aeb11c346a499d47b55d3c5f0491ff5bea65ed9634b3978a981b8368f7f3832c260b1c9b6859d8745f33c9ca82ee267376b4ce459bd48a421b6b043e11210c2c64f8818c59a8c6420e86e039917fa3b74f1e8f9f6a2827475367b057a9bcd948a2c59e7ac16be2c8fa0353f2103ec982148930538b6c6bca34b064fb48a8194a6711fd4dc7850e6391d181724db7565bdafd6d202ed8e31b6265cb309c48424595e49fcd0dbc4a9a8783cb2a48f2c5f718b66e48c30c0e58b9369344483a6cb3b5bce35637e31f450ca348964ff4020937be5468046a941b2e4546d9e3aa5e5cec4173c1335af42f78751e19cfc99232548bb63fc116a45eaf52faac742d0b683b0cabd2a2b3538ffd682f37ab22c52f83c9cae3ffbf4b9a1d6eaa62bce280c9147f15d0aa651adab7a27606bb5ddf78441f1eb26e2bd9ec705d94a70e267c61afd3b70e03a40ed75e8280e9eac3deb423651179871e5c41a2e63e1d0001523da2b1e0593535c0ce539b40826ccc228a1646010e538e3dc9adf0d56a3564df438601e8ef181ee4e2a61ab0f4ea5433b3f8cb26052449c69fc43c9ccb1a1defe31214d522e1d26e8ba1f3d9ac12d6867e80cfb609b572abfa94888aa91a663a25366874d45b87295c123d2528f0057cb566f5f81f124cde2af1a0222dc9f80b93badc75c8a2da4e2e7d15df78c18e2f805ac6ab4a41e31c2cfac1f89d4d87ea98e168202ba6d9eb53043f1a6c0294ab4cf671f832b32b48fa0c1f16b7c4584cc1b84051fea50a59dc6ec90d4575f2cc5c57af44882fe2fa3211eb61565ac1ec5bdc458f4ac478e73bda6eda31dfd3fb1b786a24669489bedff9187955f3c1978d663f9a7cc32466129fde4542aeff5c3ca38f47150cccbf59e9d6043775eff8489633e269672b039cfd77bb58595bd855f7544783c3a361ff4eab59c115f78197ac795880adeb8cd426a4752d4abdd43f01a1b33f4b081ac1f2514a8269ec1e29441e4a7874973aa5fde87b9ae8e4e94eaf66bc0040c6515e0c76396dd10950e4c66443c0a420af6ffc721270e51f54e59127fda4a085f6b19349467cc003d4c564fa93b9078c7da4afc6ec4090137e024e4fb1e438b431a489978462a76f486108dac73015d370549e54b565abc66183800da9556939268721b4a2f0f0d44fb89dca7177e2231172a83005301fecf341e69384516069d7968dd41b4f5fea3c3727233dc619e718bb4728502577b9f11a563022993b0fbf83804a4102252fc971bbb85ff27a27a777fc60dcbf9555683d68b4e55094401874fa921ec97fd6bd8829ae634b27d27abf82ce944385f4aca5fdbdf3df9e0a2c2ebb64c2762f9dfa76f0e2fae8740cd66d5c33d4b74e8b77356f452c9e07b261e796d352b0fec7276f509756d51f24a9f878bc6b24c204bd48afed6a67096ac074ac993d2c8dd50266fa664ade760e1097a46cf65952478255941b03482bb286112d3a6f06a7ca39b56bc3230c6b621043e2afc074682424af5701f9da7cf4fe61f4c0817f5eb65a1c60f6d54b30b868a39d002c647f2055aa7e4915b35bff500c34a0cd52b80985d4a907bf2a2a4cbcdcd6a8411de40a3633a82056f1f261e225da5edf147dc47aaa5ba72fc8a494eb2d4c8d90b6f4f28b202100408ed4745ab8635db7368181b04583f8ffaac97b7bf2e3d5c3fe9d7af136f24d15f8d4e6b173d8fc2388051d8112e5973ab604051ccc0d01a771768cd99d0638f707b53465c043616a49a747d40d6852af93ca0a4f5e5f512cac0bd71d1ec4971a19788024f8a3d27e811c449c69c2086d1752963fe71922c788ea61140307ada696e790cf03e9efef5f457171c673df9477e0665783f9a8d457eb9019e81b28c364d3bdc01cba1c1d917eb808ea139ac19efb2c63fbd40731669fb29cec435e9a75d12669fbede47ced6754e5baa412021c3fd8a300d320e15d66360cd3245bebf8de5bf046745b0be88c2c6b3f0d70516cc463b6807990c48bdbde48fbb704fc9902ca1c0ce2ef7e818b43aa29eb937723b2e6e702e8688ed72375c297d907496013a11209c7fe2423e8dab2195a2f142fe0eda1f99c28219b41f637d743073076c6c3889d164e03cca03ffe9556662a712e5dab61211f21ff9f0f853cc14ea244d4e27f49f17d1bab82c95f47cd28e242ecf33fa7c738150375c8e99927b5e70c227fc4fa4bdb98f626e4d805e502961aa2bdfd2c36bea63eeabca6e00c9f7d9b29414eee564c58d31f12006a7f71fde2897db639d82540e0963c01b8d77d02cb09bba010941234be3ba11896528e3d1184e1be0d68e33dcf35e9a97ad5a75b2dcec5ead03a43278928a0ec77964767575aef9fd3f535d0730cb0dcc240074bcd60c3c5ab41fb10224136faa9f28c4f2d516a6eba0d0f53fea1e0ee29730046d22202f31ca3b6bb46e0a84a6c9e983274accf7ee9b1081b082d1f0d5b39b0200791c2127c577c3c9f60bca0937f72d0d40ab1f1d42ba704f8bf2c60209596f5ffe689150fbed856a38050540835c1f86cc04fd5621eb57cb82673005295e320b7289d6717a4ebc11a20f6dbce30616cec113e4cd1fbf24c0e82ff82df3ddd0a4c4f077e418ea1084d86bfca0e33bb3348a678a0ad3f82f864aa3d31c5019a8b7663ad755a0b57a65c2433a5c3c04595556248a2b9325b9b1e2050a52044f92424a153e5a8fc57438340a6b01c596a1f3b932648e4790e9b121a4188089f5aab3a141b0b59ef12c74e2c149af05d02a646fac4be99b37262afd4de223e078c012153ba665b9e8afdbb52879a923b751c85abc603c63c8413227ded7c6ec7899011cf9d16f244bcf1a835995e1bcb8a1de56a48438c0d1b07187ea9b858977c0cd39e27bed4c4a928903c69564bb30cb9a8e5ce8bfe774caf7a1843e72d107f210c0dd2599d6142d86492d88d5a82aa1200a4ca970440c587021158ce1ed661d832af99db6220ffbfed4e8194d846674e39a9fb699f61b0a1a75d0bfb8c5cd5ff072b25c2912b5a2d7b2e0985ffede4dc776aa2553c93215a1c250ecccd79a851b7d52643ee95cb52c103f9558b22da13c6e29f801b66a3952d3fe687bcbcd705497de1149f31d1e2bb251aab08799d3d34b8cb54e47f2ff35d8a2ecd726e60cdaf019ad452ace7319e51ed7475cd459d850212c8ce3fdb5933a4fc01703996a3ea4a96973d0a630e3bc2696413b52ee0eb006e700b281430fe58115c9e2316587da82ff384871d3d494e7952aae4e7a95d3d0de2cbe317a7c9702a92c94cfadfdcabd9ea2fb43293902363af85c643f3cedc8bbc0ba67c4b0584a033c70ba2b1a4c3b647ee817d64e7bfb2eb4d91a735e2e4a16e070a24f77e1aaea1296f3c6735c2bf0a2777b85322f7b214314d5542bf570088e047a71354ef2e5b1ae20d9b0515d1baf927543b7b1301ddfd2fe59462f621f83fe1e2d9d5c185d893682c2763ce60e00fbd6ef01bed0af5ba78f01facc11e8e542129368cf856e0ada30514a0e22d25603c268c179030f18db703b52ff8a45407ae480552eef60db96ef16a3fd9e7bac526825f99d955195ada59d23611937a104ba576287d4b71046d6169f5060cc8601eef635c13f301b9a1c95c524167c9a6f7eacd122870b75a37e608fd17a4688056e0d2fa500bbcce3e697f8ba2aea027b4c854107da0d1760f5754c36bf27e00c79724819fe2bbff5229881bec0642550a8995e390770a83c99d7ad40aa27533b032b533e871fa543628e54d034ebe817427326b65dedf24b06f615092b19ee9231f0ca62c7c89dec4f50e3fd0add5fabfae574dd4e11fb45e071844fcd284183ea1d02756555e1ffbb765d05e370042bf5f154e27e896529078f74ad284b0baaf4fa564967e55cd91807d7e433769b8819643b2265dfe6b3608bb8a563c93e9d20109084b4482309482b84cdf5a032068bcb09f806111d532e0a250182532abe12d609b432954eba1ab9521c05af14890114dee8ae0666f1a6e795eed16ba758e29881eff9de5859fd56c0b0fdf73a85caf1377f6527cf665e253ca2139ecaa8ac2041779e2b387a4ef425532dcfea715f7957d93fb81df16aaa6314be08aca7248d2e35ce322ee6b73fbb8e1ed6e584b58fc265d7b3a464f16049126ee7d72b407b856ce1464a668a33d3edc4ebc44666f259046604395817699d1f5179b5677249617ffc02fb15b94eafce56bd98e3d3520ead6f77fcd5b62ec288f685f77fa12810d003b19e4a8d2374f4b5a65f761c2a39492f29838db2d85934ffd31910dbd1256b3045a2d50ca6bb2ac4f7b74cbacd6ca8e24d8ea5cbbe586adc069c18f59d89da9751c8ac6518d636fa77954d518ba59f123d6f7f1b54b774fe6bb2d6f1d29de1f7c6e1d73cf9e7103411d68bd947b77140c565477091446f3c9a49a2bbb49edcd0fad574f3819645e9b49385001eb8162eae621e80ee54862fa3d1c967954a97094b522a873fde898148682b43f5afb54143d59d47470125c4a6ec4391e534d321a4979afcea1a63fc615313b091835f6a08a74febc67a9305a4f84dc8bf0c473026095be099286d7386da6df0c07268f0944f94fd669f59e5a9e8ac0f269085bd04cb6f541aff0764dead39f2d7ee7ece060ca530922ca00e94488166d69d0101cd05d2de96c564025f8f03f640ae638d3b8b935690e67843068ba159bd42c20ec44d3a1c28b43bdad022920a5a700863fc8ac02be9c5fe81f6128a37a7c50d747f168786e348eafb89e3cc4b2cf503b1de7a4262f5af5ad962bef69c79cc7bc963cead62f56f4a0f6ea0d57db", 0x1000, 0x8000000000000000, 0x0, 0x2}, &(0x7f00000056c0)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000005700)={'veth0\x00', 0x200}) ioctl$RTC_AIE_OFF(r8, 0x7002) 1.394100666s ago: executing program 3 (id=11061): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1c}}, 0x0) 1.371916218s ago: executing program 3 (id=11063): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000080)=0x0, &(0x7f00000006c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r4, 0x40056d6, 0xb4f1, 0x2e, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r8) 1.368641758s ago: executing program 6 (id=11064): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7b107ee150a05d8e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9a9) socket$rds(0x15, 0x5, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r2, r0, 0x4, 0x4, 0x2}, 0x50) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x7, 0x1}, {0xc, 0x40}, 0x5, 0x2, 0xe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='host1x_channel_submit\x00', r0, 0x0, 0x6}, 0x18) finit_module(r0, &(0x7f00000002c0)='#%\x00', 0x3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x105000, 0x0) sendfile(r3, r4, &(0x7f0000000340)=0x8, 0xe) linkat(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00', 0x1400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000400)={0x3, 0x80000001, 0x3, {0xb, 0x80}, 0x2, 0xb626}) recvmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/29, 0x1d}], 0x2, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/41, 0x29}], 0x2, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x2, 0x0, &(0x7f00000009c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000a00)={0x1, 0xc, 0x8, 0x8, 0x0}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000a80)={r9, 0x9}, &(0x7f0000000ac0)=0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x8, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r10, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg$unix(r6, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/156, 0x9c}, {&(0x7f0000000d40)=""/193, 0xc1}], 0x3, &(0x7f0000000e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000ec0)=""/172, 0xac}, {&(0x7f0000000f80)=""/93, 0x5d}, {&(0x7f0000001000)=""/119, 0x77}, {&(0x7f0000001080)=""/227, 0xe3}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/250, 0xfa}, {&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/121, 0x79}], 0x8}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/66, 0x42}], 0x1, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)=""/72, 0x48}, {&(0x7f0000001800)=""/155, 0x9b}, {&(0x7f00000018c0)=""/125, 0x7d}, {&(0x7f0000001940)=""/223, 0xdf}, {&(0x7f0000001a40)=""/65, 0x41}], 0x5, &(0x7f0000001b40)}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001b80)=""/13, 0xd}, {&(0x7f0000001bc0)=""/70, 0x46}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/113, 0x71}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/109, 0x6d}, {&(0x7f0000003e40)=""/188, 0xbc}], 0x3, &(0x7f0000003f40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x6, 0x40000002, &(0x7f0000004100)) fcntl$notify(r11, 0x402, 0x8000002e) recvmsg(r5, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004140)=""/3, 0x3}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/3, 0x3}, {&(0x7f0000004200)=""/249, 0xf9}, {&(0x7f0000004300)=""/49, 0x31}, {&(0x7f0000004340)=""/18, 0x12}, {&(0x7f0000004380)=""/152, 0x98}], 0x7, &(0x7f00000044c0)=""/160, 0xa0}, 0x12100) getsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f00000045c0), &(0x7f0000004600)=0x4) io_setup(0x5, &(0x7f0000004640)=0x0) r15 = memfd_secret(0x0) io_cancel(r14, &(0x7f0000005680)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f0000004680)="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", 0x1000, 0x8000000000000000, 0x0, 0x2, r15}, &(0x7f00000056c0)) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000005700)={'veth0\x00', 0x200}) ioctl$RTC_AIE_OFF(r8, 0x7002) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000005740)=0x8) 1.278781804s ago: executing program 6 (id=11065): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x28}}, 0x44040) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.230083278s ago: executing program 0 (id=11066): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000340)="a0147aa6e3d0b26b31c605185fe72a0bdf0c", 0xc498, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) dup(r1) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$eJzs3c1rHGUYAPBnZrPWttFU/EA9FbRUKd2kTYvk1hw8VqrBo8Sw2YaQSTZkN7UJObTgXUFBUQT15N2riPgHeBbRf0ARGyytt8hkd9Oaj3WtTVczvx/M7vsx5HnfzD4vO8MMG0BhHc9f0ohnIuJSEjF0V99AtDuPt/a7tb5Wvb2+Vk1iY2PitySSiLi5vlbt7J+0349GxLWIeDoivi1HnEp3xm2srM5NZVltqV0fbs4vDjdWVk/Pzk/N1GZqC6Nj58dGx14aOzd63+Y6MTn26okfXkm+TsZfvvnJGzeSuBCD7b6753E/tf4n5biwrf3cfgTro6TfA+CelNp5Xo6IJ2MoSu2sBw6+jUMRG0BBJfIfCqrzPSA//+1sD/L7x6/jrROQPO6t9tbqGWhdm4iHN89Njvye/OXMJD/fPPYgB8qBdO16RIwMDOz8/Cftz9+9G7kfA2RffTPeOlA7j3+6tf7ELuvPYOfa6b/UWf9u7Vj/7sQv7bH+XeoxxsLYd0/tGf96xLO7xk+24ie7xE8j4s0e4098+cvne/VtfBZxMnaP35F0vz48fHk2q420XneN8c5rI190m/+RPeJf6DL/vG2xx/nH64//eK1L/Bee6378d4t/OCLe7TH8Tx+99/ZefXn86T3m3y1+3vZpj/FPvPjVeI+7AgAAAAAAAAAA/0C6eS9bkla2ymlaqbSe4X0ijqRZvdE8dbm+vDDduuftWJTTzp1WQ616ktfPtO/H7dTPbquPRsRjEfF+6fBmvVKtZ9P9njwAAAAAAAAAAAAAAAAAAAD8Rxzd9vz/zVLr+X+gIPzkNxSX/Ifikv9QXPIfikv+Q3HJfygu+Q/FJf+huOQ/FJf8h+KS/wAAAAAAAAAAAAAAAAAAAAAAAAAAsC8uXbyYbxu319eqeX36ysryXP3K6elaY64yv1ytVOtLi5WZen0mq1Wq9fm/+3tZvb54PhaWrw43a43mcGNldXK+vrzQnJydn5qpTdbKD2RWAAAAAAAAAAAAAAAAAAAA8P8yuLklaSUi0s1ymlYqEY9ExLEoJ5dns9pIRDwaEd+Xyofy+pl+DxoAAAAAAAAAAAAAAAAAAAAOmMbK6txUltWWFBQUFLYK/V6ZAAAAAAAAAAAAAAAAAACgeO489NvvkQAAAAAAAAAAAAAAAAAAAECRpT8nEZFvJ4eeH9ze+1DyR2nzPSLe+njig6tTzebSmbz9xlZ788N2+9l+jB/oVSdPO3kMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3NFYWZ2byrLa0j4W+j1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHvxZwAAAP//YVnXuQ==") rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, 0x0, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18) timer_create(0x2, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x18}}], 0x1, 0x0) r9 = dup3(r8, r7, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) connect$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x14) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x1000, 0x4, 0x8, 0x8, 0xffffffffffffffff}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000003c0)="4f14", 0x2}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.229486258s ago: executing program 6 (id=11067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.185720222s ago: executing program 6 (id=11068): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='ext4_free_inode\x00', r1, 0x0, 0x2}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.126253736s ago: executing program 0 (id=11069): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x31) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00') readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8c0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0xd}, 0x604a, 0xe3b, 0x2, 0x0, 0x2, 0x240, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0x18c6) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) poll(&(0x7f0000000580)=[{r5, 0x12}], 0x1, 0xe8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) 1.125626736s ago: executing program 6 (id=11070): unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) chown(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = openat(0xffffffffffffffff, 0x0, 0x20000, 0x144) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbfbbbbbaaaaaaaaaabb08"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 805.68363ms ago: executing program 6 (id=11072): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close(r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file1\x00', 0x0, 0x10, r6}, 0x18) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r8, 0x0, 0xf7}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=") stat(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) name_to_handle_at(r9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB='('], &(0x7f00000001c0), 0x1200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000040)={'veth1_to_batadv\x00', @ifru_map={0x3, 0xbf1, 0x1, 0x2, 0x9f, 0xea}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 577.070746ms ago: executing program 0 (id=11075): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x11) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x243b, &(0x7f0000000580)={0x0, 0xeed4, 0x1, 0x4, 0x200224, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x5}, 0x1}) pivot_root(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x460881, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8001, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0), 0x6}, 0x880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x851}, 0x40010) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1216, &(0x7f0000002480)="$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") truncate(&(0x7f0000000100)='./file2\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYBLOB="4acd7a3d8af48ca47754e7865d6d7a28845485d3830757599afea48d732651afdb978f51140919dea99d4cbea80500efa4", @ANYRESOCT=r5, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)="7209c384c8ad07dde384093c47374c1ceca41900000000d230cf0db6318464bab66508ad6f402675b42ddd8783df81523a9659190fd2", &(0x7f00000004c0)="9798f38c488528920cc50a3f86a55dd291ab3576244e275d0e17041b3847afe9d770e557a2e477464477d89bac55fd07658b869fe1f281fab173542cabcae2e59e47c512d318fa60bd4461c4a2eeb7d190dac0c03d09f044af48ca74872821509fe6594bf584925f26e485135e12ff7e2a216d152ab334de5751abe50fb8a0ff50d487", 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x8e) socket$inet_udp(0x2, 0x2, 0x0) 576.625206ms ago: executing program 8 (id=11076): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) msync(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) fstat(r1, &(0x7f0000000340)) 492.708423ms ago: executing program 3 (id=11077): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0xbbd41413d349687) r1 = io_uring_setup(0x1af8, &(0x7f0000000100)={0x0, 0xc332, 0x1, 0x1, 0x28c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000030000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC, @ANYBLOB=',versiP\r=9p2000', @ANYBLOB="146575", @ANYRESDEC=r4, @ANYBLOB=',nomand,appraise_type=imasig,dont_measure,seclabel,']) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 491.885083ms ago: executing program 8 (id=11078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 470.136674ms ago: executing program 8 (id=11079): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000340)="a0147aa6e3d0b26b31c605185fe72a0bdf0c", 0xc498, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) dup(r1) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}}], 0x1, 0x0) r8 = dup3(r7, r6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) connect$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x14) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x1000, 0x4, 0x8, 0x8, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f00000003c0)="4f14", 0x2}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 352.031623ms ago: executing program 7 (id=11080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "21795a4c92b0114bdf3268a63ceefeafbc1d166b6ca66c81b1f01bfeba1393356ab18dec4feba3e47b94a0f58b1969172be915c197cbaf521de453b59cdf4653", 0x18}, 0x48, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB="18010000210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14"], 0x118}}, 0x44) 240.335621ms ago: executing program 8 (id=11081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f0000000080)='\xe3', 0xffffffffffffffff) 190.640935ms ago: executing program 7 (id=11082): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) 182.887146ms ago: executing program 8 (id=11083): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7b107ee150a05d8e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9a9) socket$rds(0x15, 0x5, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r2, r0, 0x4, 0x4, 0x2}, 0x50) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f00000001c0)={{0x7, 0x1}, {0xc, 0x40}, 0x5, 0x2, 0xe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='host1x_channel_submit\x00', r0, 0x0, 0x6}, 0x18) finit_module(r0, &(0x7f00000002c0)='#%\x00', 0x3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x105000, 0x0) sendfile(r3, r4, &(0x7f0000000340)=0x8, 0xe) linkat(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00', 0x1400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000400)={0x3, 0x80000001, 0x3, {0xb, 0x80}, 0x2, 0xb626}) recvmmsg$unix(r0, &(0x7f0000000940)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/29, 0x1d}], 0x2, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/41, 0x29}], 0x2, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x2, 0x0, &(0x7f00000009c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000a00)={0x1, 0xc, 0x8, 0x8, 0x0}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000a80)={r9, 0x9}, &(0x7f0000000ac0)=0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x8, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r10, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg$unix(r6, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/156, 0x9c}, {&(0x7f0000000d40)=""/193, 0xc1}], 0x3, &(0x7f0000000e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000ec0)=""/172, 0xac}, {&(0x7f0000000f80)=""/93, 0x5d}, {&(0x7f0000001000)=""/119, 0x77}, {&(0x7f0000001080)=""/227, 0xe3}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/250, 0xfa}, {&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/121, 0x79}], 0x8}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001640)=[{&(0x7f00000015c0)=""/66, 0x42}], 0x1, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001780)=""/72, 0x48}, {&(0x7f0000001800)=""/155, 0x9b}, {&(0x7f00000018c0)=""/125, 0x7d}, {&(0x7f0000001940)=""/223, 0xdf}, {&(0x7f0000001a40)=""/65, 0x41}], 0x5, &(0x7f0000001b40)}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001b80)=""/13, 0xd}, {&(0x7f0000001bc0)=""/70, 0x46}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/113, 0x71}], 0x4, &(0x7f0000002d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/109, 0x6d}, {&(0x7f0000003e40)=""/188, 0xbc}], 0x3, &(0x7f0000003f40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x6, 0x40000002, &(0x7f0000004100)) fcntl$notify(r11, 0x402, 0x8000002e) recvmsg(r5, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004140)=""/3, 0x3}, {&(0x7f0000004180)}, {&(0x7f00000041c0)=""/3, 0x3}, {&(0x7f0000004200)=""/249, 0xf9}, {&(0x7f0000004300)=""/49, 0x31}, {&(0x7f0000004340)=""/18, 0x12}, {&(0x7f0000004380)=""/152, 0x98}], 0x7, &(0x7f00000044c0)=""/160, 0xa0}, 0x12100) getsockopt$inet_sctp_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f00000045c0), &(0x7f0000004600)=0x4) io_setup(0x5, &(0x7f0000004640)=0x0) r15 = memfd_secret(0x0) io_cancel(r14, &(0x7f0000005680)={0x0, 0x0, 0x0, 0x1, 0x1, r5, &(0x7f0000004680)="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", 0x1000, 0x8000000000000000, 0x0, 0x2, r15}, &(0x7f00000056c0)) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000005700)={'veth0\x00', 0x200}) ioctl$RTC_AIE_OFF(r8, 0x7002) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000005740)=0x8) 0s ago: executing program 8 (id=11084): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) kernel console output (not intermixed with test programs): atal error: cannot create timer (-19) [ 571.896375][T15952] FAULT_INJECTION: forcing a failure. [ 571.896375][T15952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.911962][T15952] CPU: 0 UID: 0 PID: 15952 Comm: syz.8.10362 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 571.912001][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.912019][T15952] Call Trace: [ 571.912026][T15952] [ 571.912035][T15952] __dump_stack+0x1d/0x30 [ 571.912115][T15952] dump_stack_lvl+0xe8/0x140 [ 571.912140][T15952] dump_stack+0x15/0x1b [ 571.912160][T15952] should_fail_ex+0x265/0x280 [ 571.912246][T15952] should_fail+0xb/0x20 [ 571.912268][T15952] should_fail_usercopy+0x1a/0x20 [ 571.912295][T15952] copy_folio_from_iter_atomic+0x278/0x1170 [ 571.912338][T15952] ? shmem_write_begin+0xa8/0x190 [ 571.912441][T15952] ? shmem_write_begin+0xe1/0x190 [ 571.912466][T15952] generic_perform_write+0x2c2/0x490 [ 571.912496][T15952] shmem_file_write_iter+0xc5/0xf0 [ 571.912527][T15952] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 571.912578][T15952] vfs_write+0x527/0x960 [ 571.912608][T15952] ksys_write+0xda/0x1a0 [ 571.912636][T15952] __x64_sys_write+0x40/0x50 [ 571.912740][T15952] x64_sys_call+0x27fe/0x2ff0 [ 571.912764][T15952] do_syscall_64+0xd2/0x200 [ 571.912791][T15952] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 571.912851][T15952] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 571.912901][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.912988][T15952] RIP: 0033:0x7f81cd12ebe9 [ 571.913008][T15952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.913031][T15952] RSP: 002b:00007f81cbb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 571.913057][T15952] RAX: ffffffffffffffda RBX: 00007f81cd355fa0 RCX: 00007f81cd12ebe9 [ 571.913073][T15952] RDX: 0000000000032600 RSI: 00002000000000c0 RDI: 0000000000000009 [ 571.913089][T15952] RBP: 00007f81cbb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 571.913137][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.913153][T15952] R13: 00007f81cd356038 R14: 00007f81cd355fa0 R15: 00007ffc8ebcf388 [ 571.913187][T15952] [ 572.164044][T15954] netlink: 'syz.0.10364': attribute type 10 has an invalid length. [ 572.172860][T15954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10364'. [ 572.189476][T15954] team0: Port device geneve1 added [ 572.353629][T15968] syzkaller0: entered promiscuous mode [ 572.359204][T15968] syzkaller0: entered allmulticast mode [ 572.398726][T15979] random: crng reseeded on system resumption [ 572.420752][T15984] FAULT_INJECTION: forcing a failure. [ 572.420752][T15984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.438036][T15984] CPU: 0 UID: 0 PID: 15984 Comm: syz.6.10373 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 572.438093][T15984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.438111][T15984] Call Trace: [ 572.438120][T15984] [ 572.438130][T15984] __dump_stack+0x1d/0x30 [ 572.438160][T15984] dump_stack_lvl+0xe8/0x140 [ 572.438189][T15984] dump_stack+0x15/0x1b [ 572.438293][T15984] should_fail_ex+0x265/0x280 [ 572.438319][T15984] should_fail+0xb/0x20 [ 572.438339][T15984] should_fail_usercopy+0x1a/0x20 [ 572.438412][T15984] strncpy_from_user+0x25/0x230 [ 572.438529][T15984] ? kmem_cache_alloc_noprof+0x186/0x310 [ 572.438563][T15984] ? getname_flags+0x80/0x3b0 [ 572.438606][T15984] getname_flags+0xae/0x3b0 [ 572.438729][T15984] user_path_at+0x28/0x130 [ 572.438776][T15984] vfs_open_tree+0xef/0x540 [ 572.438838][T15984] __x64_sys_open_tree+0x45/0xc0 [ 572.438868][T15984] x64_sys_call+0x2a87/0x2ff0 [ 572.439018][T15984] do_syscall_64+0xd2/0x200 [ 572.439056][T15984] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 572.439088][T15984] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 572.439209][T15984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.439258][T15984] RIP: 0033:0x7fd20391ebe9 [ 572.439278][T15984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.439300][T15984] RSP: 002b:00007fd202387038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 572.439323][T15984] RAX: ffffffffffffffda RBX: 00007fd203b45fa0 RCX: 00007fd20391ebe9 [ 572.439337][T15984] RDX: 0000000000000100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 572.439353][T15984] RBP: 00007fd202387090 R08: 0000000000000000 R09: 0000000000000000 [ 572.439512][T15984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.439530][T15984] R13: 00007fd203b46038 R14: 00007fd203b45fa0 R15: 00007ffc15c9f318 [ 572.439556][T15984] [ 572.698214][T15987] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10372'. [ 572.812242][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10378'. [ 573.169259][T16010] FAULT_INJECTION: forcing a failure. [ 573.169259][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 573.182830][T16010] CPU: 0 UID: 0 PID: 16010 Comm: syz.7.10383 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 573.182946][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.182959][T16010] Call Trace: [ 573.182966][T16010] [ 573.182976][T16010] __dump_stack+0x1d/0x30 [ 573.183041][T16010] dump_stack_lvl+0xe8/0x140 [ 573.183063][T16010] dump_stack+0x15/0x1b [ 573.183080][T16010] should_fail_ex+0x265/0x280 [ 573.183101][T16010] should_failslab+0x8c/0xb0 [ 573.183131][T16010] kmem_cache_alloc_node_noprof+0x57/0x320 [ 573.183206][T16010] ? __alloc_skb+0x101/0x320 [ 573.183242][T16010] __alloc_skb+0x101/0x320 [ 573.183282][T16010] netlink_alloc_large_skb+0xba/0xf0 [ 573.183366][T16010] netlink_sendmsg+0x3cf/0x6b0 [ 573.183429][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.183453][T16010] __sock_sendmsg+0x142/0x180 [ 573.183483][T16010] ____sys_sendmsg+0x31e/0x4e0 [ 573.183553][T16010] ___sys_sendmsg+0x17b/0x1d0 [ 573.183606][T16010] __x64_sys_sendmsg+0xd4/0x160 [ 573.183704][T16010] x64_sys_call+0x191e/0x2ff0 [ 573.183771][T16010] do_syscall_64+0xd2/0x200 [ 573.183803][T16010] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 573.183867][T16010] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 573.183898][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.183924][T16010] RIP: 0033:0x7fb000f4ebe9 [ 573.183942][T16010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.184037][T16010] RSP: 002b:00007fafff9af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.184057][T16010] RAX: ffffffffffffffda RBX: 00007fb001175fa0 RCX: 00007fb000f4ebe9 [ 573.184069][T16010] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 573.184084][T16010] RBP: 00007fafff9af090 R08: 0000000000000000 R09: 0000000000000000 [ 573.184099][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.184114][T16010] R13: 00007fb001176038 R14: 00007fb001175fa0 R15: 00007ffdc1bcbe28 [ 573.184138][T16010] [ 573.595067][T16053] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 573.595067][T16053] program syz.3.10392 not setting count and/or reply_len properly [ 573.602751][T16052] SELinux: failed to load policy [ 573.629797][T16052] netlink: 'syz.0.10394': attribute type 3 has an invalid length. [ 573.690419][T16068] FAULT_INJECTION: forcing a failure. [ 573.690419][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 573.703436][T16068] CPU: 0 UID: 0 PID: 16068 Comm: syz.3.10398 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 573.703475][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.703567][T16068] Call Trace: [ 573.703575][T16068] [ 573.703586][T16068] __dump_stack+0x1d/0x30 [ 573.703613][T16068] dump_stack_lvl+0xe8/0x140 [ 573.703639][T16068] dump_stack+0x15/0x1b [ 573.703660][T16068] should_fail_ex+0x265/0x280 [ 573.703681][T16068] should_failslab+0x8c/0xb0 [ 573.703761][T16068] kmem_cache_alloc_node_noprof+0x57/0x320 [ 573.703799][T16068] ? perf_event_alloc+0x14c/0x1740 [ 573.703841][T16068] perf_event_alloc+0x14c/0x1740 [ 573.703966][T16068] __se_sys_perf_event_open+0x4a5/0x11c0 [ 573.704007][T16068] ? __rcu_read_unlock+0x4f/0x70 [ 573.704045][T16068] __x64_sys_perf_event_open+0x67/0x80 [ 573.704079][T16068] x64_sys_call+0x7bd/0x2ff0 [ 573.704173][T16068] do_syscall_64+0xd2/0x200 [ 573.704201][T16068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 573.704231][T16068] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 573.704293][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.704321][T16068] RIP: 0033:0x7f35b5aaebe9 [ 573.704338][T16068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.704358][T16068] RSP: 002b:00007f35b450f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 573.704381][T16068] RAX: ffffffffffffffda RBX: 00007f35b5cd5fa0 RCX: 00007f35b5aaebe9 [ 573.704398][T16068] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 573.704417][T16068] RBP: 00007f35b450f090 R08: 0000000000000000 R09: 0000000000000000 [ 573.704434][T16068] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 573.704508][T16068] R13: 00007f35b5cd6038 R14: 00007f35b5cd5fa0 R15: 00007ffeb7e4f5d8 [ 573.704530][T16068] [ 574.078257][T16088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10405'. [ 574.087600][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10408'. [ 574.137317][T16086] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 574.141512][T16909] IPVS: starting estimator thread 0... [ 574.195876][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 574.195966][ T29] audit: type=1326 audit(1755257622.131:29862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.10397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 574.266551][T16097] IPVS: using max 1872 ests per chain, 93600 per kthread [ 574.331990][ T29] audit: type=1326 audit(1755257622.261:29863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16101 comm="syz.0.10397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 574.399816][ T29] audit: type=1326 audit(1755257622.291:29864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.6.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 574.428254][ T29] audit: type=1326 audit(1755257622.291:29865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.6.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 574.456354][ T29] audit: type=1326 audit(1755257622.291:29866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.6.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 574.482012][ T29] audit: type=1326 audit(1755257622.291:29867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.6.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 574.509634][ T29] audit: type=1326 audit(1755257622.291:29868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16110 comm="syz.6.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 574.538621][ T29] audit: type=1326 audit(1755257622.291:29869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.10397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdac521add9 code=0x7ffc0000 [ 574.563449][ T29] audit: type=1326 audit(1755257622.291:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.10397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 574.588049][ T29] audit: type=1326 audit(1755257622.291:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.0.10397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 574.830452][T16137] FAULT_INJECTION: forcing a failure. [ 574.830452][T16137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 574.849579][T16137] CPU: 1 UID: 0 PID: 16137 Comm: syz.6.10420 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 574.849680][T16137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.849697][T16137] Call Trace: [ 574.849706][T16137] [ 574.849716][T16137] __dump_stack+0x1d/0x30 [ 574.849743][T16137] dump_stack_lvl+0xe8/0x140 [ 574.849769][T16137] dump_stack+0x15/0x1b [ 574.849791][T16137] should_fail_ex+0x265/0x280 [ 574.849834][T16137] should_fail_alloc_page+0xf2/0x100 [ 574.849861][T16137] __alloc_frozen_pages_noprof+0xff/0x360 [ 574.850083][T16137] alloc_pages_mpol+0xb3/0x250 [ 574.850130][T16137] vma_alloc_folio_noprof+0x1aa/0x300 [ 574.850175][T16137] handle_mm_fault+0xec2/0x2c20 [ 574.850258][T16137] do_user_addr_fault+0x636/0x1090 [ 574.850299][T16137] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 574.850347][T16137] exc_page_fault+0x62/0xa0 [ 574.850375][T16137] asm_exc_page_fault+0x26/0x30 [ 574.850418][T16137] RIP: 0033:0x7fd2038cc20b [ 574.850433][T16137] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 574.850455][T16137] RSP: 002b:00007fd202363e10 EFLAGS: 00010246 [ 574.850476][T16137] RAX: 00007fd202365f30 RBX: 00007fd203b17640 RCX: 0000000000000000 [ 574.850493][T16137] RDX: 00007fd202365f78 RSI: 00007fd20397eca8 RDI: 00007fd202363e30 [ 574.850509][T16137] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 574.850526][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.850539][T16137] R13: 00007fd203b46128 R14: 00007fd203b46090 R15: 00007ffc15c9f318 [ 574.850647][T16137] [ 574.850660][T16137] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 575.395284][T16154] netlink: 14 bytes leftover after parsing attributes in process `syz.6.10428'. [ 575.456764][T16154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.467580][T16154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.473547][T16159] FAULT_INJECTION: forcing a failure. [ 575.473547][T16159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.493905][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.8.10429 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 575.494008][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.494021][T16159] Call Trace: [ 575.494028][T16159] [ 575.494036][T16159] __dump_stack+0x1d/0x30 [ 575.494058][T16159] dump_stack_lvl+0xe8/0x140 [ 575.494161][T16159] dump_stack+0x15/0x1b [ 575.494182][T16159] should_fail_ex+0x265/0x280 [ 575.494209][T16159] should_fail+0xb/0x20 [ 575.494228][T16159] should_fail_usercopy+0x1a/0x20 [ 575.494283][T16159] _copy_from_user+0x1c/0xb0 [ 575.494316][T16159] __sys_bpf+0x178/0x7b0 [ 575.494368][T16159] __x64_sys_bpf+0x41/0x50 [ 575.494399][T16159] x64_sys_call+0x2aea/0x2ff0 [ 575.494424][T16159] do_syscall_64+0xd2/0x200 [ 575.494512][T16159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 575.494553][T16159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.494635][T16159] RIP: 0033:0x7f81cd12ebe9 [ 575.494651][T16159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.494674][T16159] RSP: 002b:00007f81cbb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.494698][T16159] RAX: ffffffffffffffda RBX: 00007f81cd355fa0 RCX: 00007f81cd12ebe9 [ 575.494714][T16159] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000001 [ 575.494795][T16159] RBP: 00007f81cbb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 575.494809][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.494825][T16159] R13: 00007f81cd356038 R14: 00007f81cd355fa0 R15: 00007ffc8ebcf388 [ 575.494848][T16159] [ 575.700960][T16154] bond0 (unregistering): Released all slaves [ 575.727610][T16201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16201 comm=syz.0.10432 [ 575.756607][T16209] FAULT_INJECTION: forcing a failure. [ 575.756607][T16209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.774071][T16209] CPU: 1 UID: 0 PID: 16209 Comm: syz.8.10435 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 575.774119][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.774265][T16209] Call Trace: [ 575.774272][T16209] [ 575.774279][T16209] __dump_stack+0x1d/0x30 [ 575.774305][T16209] dump_stack_lvl+0xe8/0x140 [ 575.774329][T16209] dump_stack+0x15/0x1b [ 575.774397][T16209] should_fail_ex+0x265/0x280 [ 575.774426][T16209] should_fail+0xb/0x20 [ 575.774449][T16209] should_fail_usercopy+0x1a/0x20 [ 575.774503][T16209] _copy_from_user+0x1c/0xb0 [ 575.774532][T16209] kstrtouint_from_user+0x69/0xf0 [ 575.774558][T16209] ? 0xffffffff81000000 [ 575.774576][T16209] ? selinux_file_permission+0x1e4/0x320 [ 575.774633][T16209] proc_fail_nth_write+0x50/0x160 [ 575.774670][T16209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 575.774706][T16209] vfs_write+0x266/0x960 [ 575.774734][T16209] ? vfs_read+0x4e6/0x770 [ 575.774786][T16209] ? __rcu_read_unlock+0x4f/0x70 [ 575.774814][T16209] ? __fget_files+0x184/0x1c0 [ 575.774849][T16209] ksys_write+0xda/0x1a0 [ 575.774878][T16209] __x64_sys_write+0x40/0x50 [ 575.774902][T16209] x64_sys_call+0x27fe/0x2ff0 [ 575.774935][T16209] do_syscall_64+0xd2/0x200 [ 575.774972][T16209] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 575.775074][T16209] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 575.775104][T16209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.775136][T16209] RIP: 0033:0x7f81cd12d69f [ 575.775154][T16209] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 575.775180][T16209] RSP: 002b:00007f81cbb8f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 575.775206][T16209] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81cd12d69f [ 575.775223][T16209] RDX: 0000000000000001 RSI: 00007f81cbb8f0a0 RDI: 0000000000000005 [ 575.775240][T16209] RBP: 00007f81cbb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 575.775288][T16209] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 575.775305][T16209] R13: 00007f81cd356038 R14: 00007f81cd355fa0 R15: 00007ffc8ebcf388 [ 575.775331][T16209] [ 575.834996][T16146] lo speed is unknown, defaulting to 1000 [ 576.026938][T16219] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10437'. [ 576.142813][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10440'. [ 576.252061][T16146] chnl_net:caif_netlink_parms(): no params data found [ 576.353001][T16341] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 576.353001][T16341] program syz.6.10444 not setting count and/or reply_len properly [ 576.533613][T16387] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 576.541090][T16387] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 576.549208][T16387] vhci_hcd vhci_hcd.0: Device attached [ 576.570888][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.581155][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.602974][T16387] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 576.623605][T16146] bridge_slave_0: entered allmulticast mode [ 576.632141][T16387] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 576.638693][T16146] bridge_slave_0: entered promiscuous mode [ 576.639592][T16387] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 576.654721][T16387] vhci_hcd vhci_hcd.0: Device attached [ 576.677811][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.685977][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.716732][T16402] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 576.724822][T16402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 576.734411][T16402] vhci_hcd vhci_hcd.0: Device attached [ 576.753065][T16146] bridge_slave_1: entered allmulticast mode [ 576.769335][T16146] bridge_slave_1: entered promiscuous mode [ 576.788114][T16399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16399 comm=syz.6.10449 [ 576.789024][T16400] vhci_hcd: connection closed [ 576.803011][T16892] usb 1-1: new high-speed USB device number 3 using vhci_hcd [ 576.819307][T16403] vhci_hcd: connection closed [ 576.819472][T16390] vhci_hcd: connection closed [ 576.827878][T16391] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 576.841042][ T3446] vhci_hcd: stop threads [ 576.845965][ T3446] vhci_hcd: release socket [ 576.850954][ T3446] vhci_hcd: disconnect device [ 576.862866][T16146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.878412][ T3446] vhci_hcd: stop threads [ 576.883332][ T3446] vhci_hcd: release socket [ 576.888492][ T3446] vhci_hcd: disconnect device [ 576.896754][ T3446] vhci_hcd: stop threads [ 576.901825][ T3446] vhci_hcd: release socket [ 576.903673][T16146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.906839][ T3446] vhci_hcd: disconnect device [ 576.955276][T16146] team0: Port device team_slave_0 added [ 576.985227][T16146] team0: Port device team_slave_1 added [ 577.021088][T16146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.028421][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.059735][T16146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.076644][T16146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.085456][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.095000][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10454'. [ 577.114524][T16146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.170550][T16500] ALSA: seq fatal error: cannot create timer (-19) [ 577.191361][T16146] hsr_slave_0: entered promiscuous mode [ 577.198117][T16146] hsr_slave_1: entered promiscuous mode [ 577.205190][T16146] debugfs: 'hsr0' already exists in 'hsr' [ 577.211405][T16146] Cannot create hsr debugfs directory [ 577.285388][T16546] ip6tnl1: entered promiscuous mode [ 577.292123][T16546] ip6tnl1: entered allmulticast mode [ 577.366330][T16146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.371872][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10460'. [ 577.392582][T16611] netlink: 'syz.0.10460': attribute type 15 has an invalid length. [ 577.401187][T16570] lo speed is unknown, defaulting to 1000 [ 577.413537][ T3459] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.429896][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10460'. [ 577.442580][T16611] netlink: 'syz.0.10460': attribute type 15 has an invalid length. [ 577.461781][ T3459] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.475502][T16146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.493637][ T3459] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.525861][ T3459] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.560270][T16620] ALSA: seq fatal error: cannot create timer (-19) [ 577.569864][T16146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.587108][T16642] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 577.587108][T16642] program syz.0.10464 not setting count and/or reply_len properly [ 577.652556][T16649] ALSA: seq fatal error: cannot create timer (-19) [ 577.686631][T16653] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10469'. [ 577.710111][T16146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.833943][T16146] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 577.859301][T16146] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 577.878797][T16146] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 577.900644][T16146] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 578.023710][T16146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.042299][T16146] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.055307][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.062708][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.077188][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.085406][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.121510][T16146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.199204][T16146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.242712][T16704] pim6reg1: entered promiscuous mode [ 578.325281][T16146] veth0_vlan: entered promiscuous mode [ 578.334476][T16146] veth1_vlan: entered promiscuous mode [ 578.354023][T16146] veth0_macvtap: entered promiscuous mode [ 578.362856][T16146] veth1_macvtap: entered promiscuous mode [ 578.376773][T16146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.397400][T16146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.423679][ T3455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.443169][ T3455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.458623][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.475850][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.487346][T16722] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 578.487346][T16722] program syz.8.10479 not setting count and/or reply_len properly [ 578.728124][T16737] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10483'. [ 578.737905][T16737] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10483'. [ 578.773282][T16737] netlink: 60 bytes leftover after parsing attributes in process `syz.7.10483'. [ 578.881108][T16758] FAULT_INJECTION: forcing a failure. [ 578.881108][T16758] name failslab, interval 1, probability 0, space 0, times 0 [ 578.895999][T16758] CPU: 0 UID: 0 PID: 16758 Comm: syz.3.10488 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 578.896036][T16758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.896087][T16758] Call Trace: [ 578.896095][T16758] [ 578.896103][T16758] __dump_stack+0x1d/0x30 [ 578.896126][T16758] dump_stack_lvl+0xe8/0x140 [ 578.896149][T16758] dump_stack+0x15/0x1b [ 578.896169][T16758] should_fail_ex+0x265/0x280 [ 578.896194][T16758] should_failslab+0x8c/0xb0 [ 578.896305][T16758] kmem_cache_alloc_noprof+0x50/0x310 [ 578.896344][T16758] ? audit_log_start+0x365/0x6c0 [ 578.896385][T16758] audit_log_start+0x365/0x6c0 [ 578.896505][T16758] audit_seccomp+0x48/0x100 [ 578.896558][T16758] ? __seccomp_filter+0x68c/0x10d0 [ 578.896653][T16758] __seccomp_filter+0x69d/0x10d0 [ 578.896683][T16758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 578.896720][T16758] ? vfs_write+0x7e8/0x960 [ 578.896754][T16758] __secure_computing+0x82/0x150 [ 578.896832][T16758] syscall_trace_enter+0xcf/0x1e0 [ 578.896907][T16758] do_syscall_64+0xac/0x200 [ 578.896943][T16758] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 578.897051][T16758] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 578.897150][T16758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.897174][T16758] RIP: 0033:0x7fc68595ebe9 [ 578.897192][T16758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.897214][T16758] RSP: 002b:00007fc6843c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 578.897264][T16758] RAX: ffffffffffffffda RBX: 00007fc685b85fa0 RCX: 00007fc68595ebe9 [ 578.897281][T16758] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 578.897297][T16758] RBP: 00007fc6843c7090 R08: 0000000000000000 R09: 0000000000000000 [ 578.897342][T16758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.897356][T16758] R13: 00007fc685b86038 R14: 00007fc685b85fa0 R15: 00007fff1bee80f8 [ 578.897380][T16758] [ 579.212029][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 579.212048][ T29] audit: type=1326 audit(1755257627.101:29985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.3.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc68595d5fc code=0x7ffc0000 [ 579.246700][ T29] audit: type=1326 audit(1755257627.101:29986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.3.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc68595d69f code=0x7ffc0000 [ 579.275131][ T29] audit: type=1326 audit(1755257627.101:29987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.3.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc68595d84a code=0x7ffc0000 [ 579.289987][T16737] lo speed is unknown, defaulting to 1000 [ 579.301400][ T29] audit: type=1326 audit(1755257627.101:29988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.3.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 579.338357][ T29] audit: type=1326 audit(1755257627.101:29989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16757 comm="syz.3.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 579.374260][ T29] audit: type=1326 audit(1755257627.141:29990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.6.10490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 579.400194][ T29] audit: type=1326 audit(1755257627.141:29991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.6.10490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 579.428109][ T29] audit: type=1326 audit(1755257627.301:29992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.6.10490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 579.454381][ T29] audit: type=1326 audit(1755257627.301:29993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.6.10490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 579.482553][ T29] audit: type=1326 audit(1755257627.301:29994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.6.10490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 579.627342][T16794] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 579.635128][T16794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 579.642642][T16794] vhci_hcd vhci_hcd.0: Device attached [ 579.672185][T16801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 579.701101][T16794] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 579.708066][T16794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 579.717210][T16794] vhci_hcd vhci_hcd.0: Device attached [ 579.754930][T16801] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 579.762412][T16801] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 579.771940][T16801] vhci_hcd vhci_hcd.0: Device attached [ 579.811455][T16794] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 579.819093][T16794] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 579.829714][T16794] vhci_hcd vhci_hcd.0: Device attached [ 579.867218][T16804] vhci_hcd: connection closed [ 579.867341][T16810] vhci_hcd: connection closed [ 579.872539][ T5246] vhci_hcd: stop threads [ 579.881856][ T5246] vhci_hcd: release socket [ 579.887386][ T5246] vhci_hcd: disconnect device [ 579.896471][T16802] vhci_hcd: connection closed [ 579.897771][T16797] vhci_hcd: connection closed [ 579.909175][ T5246] vhci_hcd: stop threads [ 579.918689][ T5246] vhci_hcd: release socket [ 579.925488][ T5246] vhci_hcd: disconnect device [ 579.956706][ T5246] vhci_hcd: stop threads [ 579.961404][ T5246] vhci_hcd: release socket [ 579.966827][ T5246] vhci_hcd: disconnect device [ 580.003362][ T5246] vhci_hcd: stop threads [ 580.008065][ T5246] vhci_hcd: release socket [ 580.012978][ T5246] vhci_hcd: disconnect device [ 580.283166][T16835] lo speed is unknown, defaulting to 1000 [ 580.471327][T16869] __nla_validate_parse: 5 callbacks suppressed [ 580.471345][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10508'. [ 580.707677][T16881] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 580.716283][T16881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 580.726357][T16881] vhci_hcd vhci_hcd.0: Device attached [ 580.748723][T16883] netlink: 332 bytes leftover after parsing attributes in process `syz.8.10514'. [ 580.777182][T16886] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 580.805955][T16881] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 580.812783][T16881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 580.821519][T16881] vhci_hcd vhci_hcd.0: Device attached [ 580.845013][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10516'. [ 580.863750][T16886] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 580.871312][T16886] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 580.880494][T16886] vhci_hcd vhci_hcd.0: Device attached [ 580.915831][T16898] vhci_hcd: vhci_device speed not set [ 580.922104][T16881] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14) [ 580.929588][T16881] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 580.938740][T16881] vhci_hcd vhci_hcd.0: Device attached [ 580.959732][T16886] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 581.005790][T16898] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 581.005798][T16911] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 581.005823][T16911] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 581.014643][T16889] vhci_hcd: connection closed [ 581.021918][T16911] vhci_hcd vhci_hcd.0: Device attached [ 581.031714][T16896] vhci_hcd: connection closed [ 581.037951][T16884] vhci_hcd: connection closed [ 581.043802][T16901] vhci_hcd: connection closed [ 581.058474][T16885] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 581.080686][T16914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 581.092958][ T5246] vhci_hcd: stop threads [ 581.099011][ T5246] vhci_hcd: release socket [ 581.104155][ T5246] vhci_hcd: disconnect device [ 581.110756][T16914] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(10) [ 581.118874][T16914] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 581.127868][T16914] vhci_hcd vhci_hcd.0: Device attached [ 581.144173][ T5246] vhci_hcd: stop threads [ 581.149708][ T5246] vhci_hcd: release socket [ 581.154509][ T5246] vhci_hcd: disconnect device [ 581.166029][T16911] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(7) [ 581.173464][T16911] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 581.183147][T16911] vhci_hcd vhci_hcd.0: Device attached [ 581.205193][T16914] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(12) [ 581.205754][ T5246] vhci_hcd: stop threads [ 581.213059][T16914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 581.218796][ T5246] vhci_hcd: release socket [ 581.218814][ T5246] vhci_hcd: disconnect device [ 581.235982][ T5246] vhci_hcd: stop threads [ 581.241866][T16914] vhci_hcd vhci_hcd.0: Device attached [ 581.246388][ T5246] vhci_hcd: release socket [ 581.258471][ T5246] vhci_hcd: disconnect device [ 581.264660][T16909] vhci_hcd: vhci_device speed not set [ 581.292311][T16919] vhci_hcd: connection closed [ 581.292355][T16915] vhci_hcd: connection closed [ 581.292443][T16917] vhci_hcd: connection closed [ 581.303357][ T5246] vhci_hcd: stop threads [ 581.313645][ T5246] vhci_hcd: release socket [ 581.318555][ T5246] vhci_hcd: disconnect device [ 581.323731][T16912] vhci_hcd: connection closed [ 581.342176][ T5246] vhci_hcd: stop threads [ 581.351960][ T5246] vhci_hcd: release socket [ 581.357136][ T5246] vhci_hcd: disconnect device [ 581.363291][T16909] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 581.373070][T16913] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 581.389760][ T5246] vhci_hcd: stop threads [ 581.394780][ T5246] vhci_hcd: release socket [ 581.401200][ T5246] vhci_hcd: disconnect device [ 581.427747][ T5246] vhci_hcd: stop threads [ 581.435879][ T5246] vhci_hcd: release socket [ 581.441221][ T5246] vhci_hcd: disconnect device [ 581.715229][T16926] ALSA: seq fatal error: cannot create timer (-19) [ 581.927000][T16892] vhci_hcd: vhci_device speed not set [ 581.963629][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10525'. [ 582.005588][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10525'. [ 582.048447][T16949] netlink: 'syz.8.10525': attribute type 21 has an invalid length. [ 582.912514][T16969] FAULT_INJECTION: forcing a failure. [ 582.912514][T16969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.927764][T16969] CPU: 1 UID: 0 PID: 16969 Comm: syz.0.10535 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 582.927835][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.927851][T16969] Call Trace: [ 582.927859][T16969] [ 582.927870][T16969] __dump_stack+0x1d/0x30 [ 582.927895][T16969] dump_stack_lvl+0xe8/0x140 [ 582.927945][T16969] dump_stack+0x15/0x1b [ 582.927961][T16969] should_fail_ex+0x265/0x280 [ 582.927987][T16969] should_fail+0xb/0x20 [ 582.928052][T16969] should_fail_usercopy+0x1a/0x20 [ 582.928132][T16969] _copy_to_user+0x20/0xa0 [ 582.928161][T16969] simple_read_from_buffer+0xb5/0x130 [ 582.928189][T16969] proc_fail_nth_read+0x10e/0x150 [ 582.928229][T16969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 582.928301][T16969] vfs_read+0x1a5/0x770 [ 582.928327][T16969] ? __fput+0x555/0x650 [ 582.928356][T16969] ? __rcu_read_unlock+0x4f/0x70 [ 582.928380][T16969] ? __fget_files+0x184/0x1c0 [ 582.928438][T16969] ksys_read+0xda/0x1a0 [ 582.928655][T16969] __x64_sys_read+0x40/0x50 [ 582.928681][T16969] x64_sys_call+0x27bc/0x2ff0 [ 582.928771][T16969] do_syscall_64+0xd2/0x200 [ 582.928803][T16969] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 582.928834][T16969] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 582.928913][T16969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.928940][T16969] RIP: 0033:0x7fdac527d5fc [ 582.928957][T16969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 582.928977][T16969] RSP: 002b:00007fdac3ce7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 582.929016][T16969] RAX: ffffffffffffffda RBX: 00007fdac54a5fa0 RCX: 00007fdac527d5fc [ 582.929095][T16969] RDX: 000000000000000f RSI: 00007fdac3ce70a0 RDI: 0000000000000008 [ 582.929174][T16969] RBP: 00007fdac3ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 582.929274][T16969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.929289][T16969] R13: 00007fdac54a6038 R14: 00007fdac54a5fa0 R15: 00007ffc90b893c8 [ 582.929314][T16969] [ 583.240298][T16971] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 583.247294][T16971] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 583.256203][T16971] vhci_hcd vhci_hcd.0: Device attached [ 583.286433][T16977] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 583.345778][T16971] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 583.352859][T16971] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 583.362873][T16971] vhci_hcd vhci_hcd.0: Device attached [ 583.371280][T16977] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(12) [ 583.379129][T16977] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 583.387828][T16977] vhci_hcd vhci_hcd.0: Device attached [ 583.413627][T16971] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 583.435758][T16907] vhci_hcd: vhci_device speed not set [ 583.468654][T16979] vhci_hcd: connection closed [ 583.468782][T16974] vhci_hcd: connection closed [ 583.468866][ T3455] vhci_hcd: stop threads [ 583.484796][ T3455] vhci_hcd: release socket [ 583.491094][ T3455] vhci_hcd: disconnect device [ 583.497117][T16981] vhci_hcd: connection closed [ 583.506363][T16907] usb 15-1: new full-speed USB device number 5 using vhci_hcd [ 583.516020][ T3455] vhci_hcd: stop threads [ 583.530304][ T3455] vhci_hcd: release socket [ 583.536815][ T3455] vhci_hcd: disconnect device [ 583.566642][ T3455] vhci_hcd: stop threads [ 583.571661][ T3455] vhci_hcd: release socket [ 583.577069][ T3455] vhci_hcd: disconnect device [ 583.867218][T16987] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10540'. [ 583.946337][T16991] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 583.946337][T16991] program syz.6.10541 not setting count and/or reply_len properly [ 584.116701][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10546'. [ 584.137780][T17011] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10548'. [ 584.213040][T17014] siw: device registration error -23 [ 584.227437][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 584.227453][ T29] audit: type=1326 audit(1755257632.161:30191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.260523][ T29] audit: type=1326 audit(1755257632.161:30192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.418817][T17017] ALSA: seq fatal error: cannot create timer (-19) [ 584.430048][ T29] audit: type=1326 audit(1755257632.231:30193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.458312][ T29] audit: type=1326 audit(1755257632.231:30194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.486742][ T29] audit: type=1326 audit(1755257632.231:30195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.514744][ T29] audit: type=1326 audit(1755257632.231:30196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.542858][ T29] audit: type=1326 audit(1755257632.231:30197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.571382][ T29] audit: type=1326 audit(1755257632.231:30198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 584.602376][ T29] audit: type=1326 audit(1755257632.241:30199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac5280b07 code=0x7ffc0000 [ 584.632092][ T29] audit: type=1326 audit(1755257632.241:30200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17006 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdac5280a7c code=0x7ffc0000 [ 585.029150][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10553'. [ 585.157683][T17036] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 585.165476][T17036] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.173803][T17036] vhci_hcd vhci_hcd.0: Device attached [ 585.182340][T17036] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.203758][T17036] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(9) [ 585.211889][T17036] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.220636][T17036] vhci_hcd vhci_hcd.0: Device attached [ 585.247727][T17036] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(11) [ 585.254967][T17036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.263618][T17036] vhci_hcd vhci_hcd.0: Device attached [ 585.273380][T17036] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.295067][T17043] vhci_hcd: connection closed [ 585.295351][ T3455] vhci_hcd: stop threads [ 585.306067][ T3455] vhci_hcd: release socket [ 585.310812][ T3455] vhci_hcd: disconnect device [ 585.318263][T17037] vhci_hcd: connection closed [ 585.321003][ T3455] vhci_hcd: stop threads [ 585.321243][T17039] vhci_hcd: connection closed [ 585.326554][ T3455] vhci_hcd: release socket [ 585.326576][ T3455] vhci_hcd: disconnect device [ 585.345854][T17049] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10557'. [ 585.378305][ T3455] vhci_hcd: stop threads [ 585.383447][ T3455] vhci_hcd: release socket [ 585.389031][ T3455] vhci_hcd: disconnect device [ 585.410780][T17046] lo speed is unknown, defaulting to 1000 [ 585.426879][T17056] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 585.434234][T17056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.444376][T17056] vhci_hcd vhci_hcd.0: Device attached [ 585.462202][T17056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.475766][T17056] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 585.486091][T17056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.498181][T17056] vhci_hcd vhci_hcd.0: Device attached [ 585.508877][T17056] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(11) [ 585.516489][T17056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.525860][T17056] vhci_hcd vhci_hcd.0: Device attached [ 585.565831][T17056] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(13) [ 585.565858][T17056] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 585.565889][T17056] vhci_hcd vhci_hcd.0: Device attached [ 585.570920][T17076] vhci_hcd: connection closed [ 585.571024][T17078] vhci_hcd: connection closed [ 585.571192][T17086] vhci_hcd: connection closed [ 585.592149][T17059] vhci_hcd: connection closed [ 585.592892][ T3459] vhci_hcd: stop threads [ 585.592905][ T3459] vhci_hcd: release socket [ 585.592922][ T3459] vhci_hcd: disconnect device [ 585.593966][ T3459] vhci_hcd: stop threads [ 585.593978][ T3459] vhci_hcd: release socket [ 585.593990][ T3459] vhci_hcd: disconnect device [ 585.595774][ T3459] vhci_hcd: stop threads [ 585.595786][ T3459] vhci_hcd: release socket [ 585.595803][ T3459] vhci_hcd: disconnect device [ 585.596009][ T3459] vhci_hcd: stop threads [ 585.596017][ T3459] vhci_hcd: release socket [ 585.596071][ T3459] vhci_hcd: disconnect device [ 585.647593][T16906] vhci_hcd: vhci_device speed not set [ 585.895040][T17108] bridge0: port 3(batadv1) entered blocking state [ 585.904522][T17108] bridge0: port 3(batadv1) entered disabled state [ 585.915104][T17108] batadv1: entered allmulticast mode [ 585.924214][T17108] batadv1: entered promiscuous mode [ 585.978900][T17116] netlink: 332 bytes leftover after parsing attributes in process `syz.3.10568'. [ 586.030851][T17120] vhci_hcd: invalid port number 96 [ 586.036525][T17120] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 586.110446][T16898] usb 7-1: enqueue for inactive port 0 [ 586.118847][T16898] usb 7-1: enqueue for inactive port 0 [ 586.156020][T17125] netlink: 'syz.6.10571': attribute type 10 has an invalid length. [ 586.205837][T16898] vhci_hcd: vhci_device speed not set [ 586.273970][T17130] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10573'. [ 586.325648][T17134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10575'. [ 586.383108][T17137] FAULT_INJECTION: forcing a failure. [ 586.383108][T17137] name failslab, interval 1, probability 0, space 0, times 0 [ 586.397780][T17137] CPU: 0 UID: 0 PID: 17137 Comm: syz.6.10576 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 586.397814][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.397830][T17137] Call Trace: [ 586.397839][T17137] [ 586.397848][T17137] __dump_stack+0x1d/0x30 [ 586.397964][T17137] dump_stack_lvl+0xe8/0x140 [ 586.397987][T17137] dump_stack+0x15/0x1b [ 586.398004][T17137] should_fail_ex+0x265/0x280 [ 586.398025][T17137] ? alloc_pipe_info+0xae/0x350 [ 586.398050][T17137] should_failslab+0x8c/0xb0 [ 586.398112][T17137] __kmalloc_cache_noprof+0x4c/0x320 [ 586.398148][T17137] alloc_pipe_info+0xae/0x350 [ 586.398173][T17137] splice_direct_to_actor+0x592/0x680 [ 586.398206][T17137] ? kstrtouint_from_user+0x9f/0xf0 [ 586.398237][T17137] ? __pfx_direct_splice_actor+0x10/0x10 [ 586.398265][T17137] ? __rcu_read_unlock+0x4f/0x70 [ 586.398293][T17137] ? get_pid_task+0x96/0xd0 [ 586.398356][T17137] ? avc_policy_seqno+0x15/0x30 [ 586.398388][T17137] ? selinux_file_permission+0x1e4/0x320 [ 586.398417][T17137] do_splice_direct+0xda/0x150 [ 586.398441][T17137] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 586.398499][T17137] do_sendfile+0x380/0x650 [ 586.398541][T17137] __x64_sys_sendfile64+0x105/0x150 [ 586.398580][T17137] x64_sys_call+0x2bb0/0x2ff0 [ 586.398604][T17137] do_syscall_64+0xd2/0x200 [ 586.398717][T17137] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 586.398749][T17137] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 586.398780][T17137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.398806][T17137] RIP: 0033:0x7fd20391ebe9 [ 586.398842][T17137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.398860][T17137] RSP: 002b:00007fd202387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 586.398881][T17137] RAX: ffffffffffffffda RBX: 00007fd203b45fa0 RCX: 00007fd20391ebe9 [ 586.398921][T17137] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 586.398934][T17137] RBP: 00007fd202387090 R08: 0000000000000000 R09: 0000000000000000 [ 586.398948][T17137] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 586.398963][T17137] R13: 00007fd203b46038 R14: 00007fd203b45fa0 R15: 00007ffc15c9f318 [ 586.398989][T17137] [ 586.400110][ T3465] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 586.436173][T16909] usb 17-1: enqueue for inactive port 0 [ 586.441107][ T3465] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 586.496452][T16909] usb 17-1: enqueue for inactive port 0 [ 587.108370][T16909] vhci_hcd: vhci_device speed not set [ 587.503977][T17091] lo speed is unknown, defaulting to 1000 [ 587.697334][T17151] lo speed is unknown, defaulting to 1000 [ 587.960721][T17199] vhci_hcd: invalid port number 96 [ 587.966731][T17199] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 588.578006][T16907] usb 15-1: enqueue for inactive port 0 [ 588.595754][T16907] usb 15-1: enqueue for inactive port 0 [ 588.675922][T16907] vhci_hcd: vhci_device speed not set [ 588.700928][T17161] lo speed is unknown, defaulting to 1000 [ 588.719513][T17241] siw: device registration error -23 [ 589.124229][T17259] vhci_hcd: invalid port number 96 [ 589.130681][T17259] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 589.184807][T17261] netlink: 'syz.6.10599': attribute type 10 has an invalid length. [ 589.254253][T17261] team0: Port device dummy0 added [ 589.254407][T17267] netlink: 'syz.6.10599': attribute type 10 has an invalid length. [ 589.293672][T17267] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 589.305760][T17267] team0: Failed to send options change via netlink (err -105) [ 589.313932][T17267] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 589.340619][T17267] team0: Port device dummy0 removed [ 589.379820][T17271] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 589.379820][T17271] program syz.3.10601 not setting count and/or reply_len properly [ 589.715042][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 589.715059][ T29] audit: type=1326 audit(1755257637.641:30429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 589.755520][ T29] audit: type=1326 audit(1755257637.641:30430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 589.860139][ T29] audit: type=1326 audit(1755257637.661:30431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 589.886688][ T29] audit: type=1326 audit(1755257637.661:30432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 589.919064][ T29] audit: type=1326 audit(1755257637.661:30433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 589.946818][ T29] audit: type=1326 audit(1755257637.661:30434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 589.975453][ T29] audit: type=1326 audit(1755257637.661:30435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81cd130b07 code=0x7ffc0000 [ 590.004482][ T29] audit: type=1326 audit(1755257637.661:30436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 590.032035][ T29] audit: type=1326 audit(1755257637.661:30437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 590.061669][ T29] audit: type=1326 audit(1755257637.661:30438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.8.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 590.155111][T17300] lo speed is unknown, defaulting to 1000 [ 590.446365][T17336] FAULT_INJECTION: forcing a failure. [ 590.446365][T17336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.462778][T17336] CPU: 1 UID: 0 PID: 17336 Comm: syz.3.10610 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 590.462816][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.462830][T17336] Call Trace: [ 590.462886][T17336] [ 590.462895][T17336] __dump_stack+0x1d/0x30 [ 590.462924][T17336] dump_stack_lvl+0xe8/0x140 [ 590.462951][T17336] dump_stack+0x15/0x1b [ 590.462974][T17336] should_fail_ex+0x265/0x280 [ 590.463003][T17336] should_fail+0xb/0x20 [ 590.463049][T17336] should_fail_usercopy+0x1a/0x20 [ 590.463077][T17336] _copy_from_user+0x1c/0xb0 [ 590.463113][T17336] ___sys_sendmsg+0xc1/0x1d0 [ 590.463164][T17336] __x64_sys_sendmsg+0xd4/0x160 [ 590.463227][T17336] x64_sys_call+0x191e/0x2ff0 [ 590.463307][T17336] do_syscall_64+0xd2/0x200 [ 590.463400][T17336] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 590.463434][T17336] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 590.463466][T17336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.463551][T17336] RIP: 0033:0x7fc68595ebe9 [ 590.463572][T17336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.463617][T17336] RSP: 002b:00007fc6843c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.463669][T17336] RAX: ffffffffffffffda RBX: 00007fc685b85fa0 RCX: 00007fc68595ebe9 [ 590.463682][T17336] RDX: 0000000000000000 RSI: 00002000000074c0 RDI: 0000000000000003 [ 590.463695][T17336] RBP: 00007fc6843c7090 R08: 0000000000000000 R09: 0000000000000000 [ 590.463708][T17336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.463756][T17336] R13: 00007fc685b86038 R14: 00007fc685b85fa0 R15: 00007fff1bee80f8 [ 590.463784][T17336] [ 590.463918][T17332] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 590.463918][T17332] program syz.8.10607 not setting count and/or reply_len properly [ 590.478616][T17335] ALSA: seq fatal error: cannot create timer (-19) [ 590.760587][T17339] netlink: 332 bytes leftover after parsing attributes in process `syz.8.10611'. [ 590.766337][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10613'. [ 590.801517][T17343] netlink: 332 bytes leftover after parsing attributes in process `syz.3.10612'. [ 590.879390][T17273] syz.6.10602 (17273) used greatest stack depth: 6200 bytes left [ 590.907523][T17351] siw: device registration error -23 [ 590.955169][T17357] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10618'. [ 591.002230][T17361] netlink: 332 bytes leftover after parsing attributes in process `syz.0.10619'. [ 591.046611][T17364] random: crng reseeded on system resumption [ 591.083938][T17366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 591.083938][T17366] program syz.6.10621 not setting count and/or reply_len properly [ 591.137220][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10624'. [ 591.189318][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10627'. [ 591.254534][T17394] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10620'. [ 591.304426][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10628'. [ 591.571814][T17404] lo speed is unknown, defaulting to 1000 [ 591.855082][T17452] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10640'. [ 592.229049][T17486] vhci_hcd: invalid port number 96 [ 592.235434][T17486] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 592.541466][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10652'. [ 592.599130][T17504] netlink: 332 bytes leftover after parsing attributes in process `syz.8.10653'. [ 592.681434][T17509] netlink: 332 bytes leftover after parsing attributes in process `syz.8.10654'. [ 593.037877][T17526] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10658'. [ 593.470866][T17491] lo speed is unknown, defaulting to 1000 [ 594.177656][T17600] random: crng reseeded on system resumption [ 594.383470][T17629] ALSA: seq fatal error: cannot create timer (-19) [ 594.491583][T17649] SELinux: failed to load policy [ 594.691107][T17675] sd 0:0:1:0: device reset [ 594.962591][T17699] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 594.972000][T17699] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 594.980518][T17699] vhci_hcd vhci_hcd.0: Device attached [ 594.996682][T17699] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 595.005371][T17699] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 595.015383][T17699] vhci_hcd vhci_hcd.0: Device attached [ 595.072924][T17707] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(10) [ 595.080627][T17707] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 595.089778][T17707] vhci_hcd vhci_hcd.0: Device attached [ 595.128692][T17710] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(13) [ 595.136313][T17710] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 595.148206][T17710] vhci_hcd vhci_hcd.0: Device attached [ 595.154309][T17699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 595.165869][T16907] vhci_hcd: vhci_device speed not set [ 595.194276][T17705] vhci_hcd: connection closed [ 595.194381][T17700] vhci_hcd: connection closed [ 595.194468][T17708] vhci_hcd: connection closed [ 595.200514][T17713] vhci_hcd: connection closed [ 595.212020][ T51] vhci_hcd: stop threads [ 595.222618][ T51] vhci_hcd: release socket [ 595.228233][ T51] vhci_hcd: disconnect device [ 595.239400][T16907] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 595.249334][T17702] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 595.262153][ T51] vhci_hcd: stop threads [ 595.267820][ T51] vhci_hcd: release socket [ 595.273590][ T51] vhci_hcd: disconnect device [ 595.305982][ T51] vhci_hcd: stop threads [ 595.311356][ T51] vhci_hcd: release socket [ 595.317876][ T51] vhci_hcd: disconnect device [ 595.335730][ T51] vhci_hcd: stop threads [ 595.342488][ T51] vhci_hcd: release socket [ 595.349000][ T51] vhci_hcd: disconnect device [ 595.861532][T17739] vhci_hcd: invalid port number 96 [ 595.868749][T17739] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 595.933513][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 595.933530][ T29] audit: type=1326 audit(1755257643.861:30841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.3.10709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 596.037884][T17657] lo speed is unknown, defaulting to 1000 [ 596.085572][ T29] audit: type=1326 audit(1755257643.911:30842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.3.10709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 596.113647][ T29] audit: type=1326 audit(1755257643.921:30843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.3.10709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 596.145919][ T29] audit: type=1326 audit(1755257643.991:30844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.3.10709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 596.175581][ T29] audit: type=1326 audit(1755257643.991:30845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.3.10709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 596.469565][ T29] audit: type=1326 audit(1755257644.141:30846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17736 comm="syz.3.10709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 596.837009][T17786] __nla_validate_parse: 6 callbacks suppressed [ 596.837093][T17786] netlink: 332 bytes leftover after parsing attributes in process `syz.7.10716'. [ 596.857780][T17788] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 596.899181][ T29] audit: type=1326 audit(1755257644.831:30847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.7.10716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 596.928466][ T29] audit: type=1326 audit(1755257644.831:30848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.7.10716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 596.958110][ T29] audit: type=1326 audit(1755257644.831:30849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.7.10716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 596.989043][ T29] audit: type=1326 audit(1755257644.831:30850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.7.10716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 597.035678][T17788] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 597.043942][T17788] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 597.055065][T17788] vhci_hcd vhci_hcd.0: Device attached [ 597.069605][T17799] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 597.081624][T17793] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 597.091277][T17793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 597.100853][T17793] vhci_hcd vhci_hcd.0: Device attached [ 597.105836][T17792] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 597.115150][T17792] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 597.126616][T17792] vhci_hcd vhci_hcd.0: Device attached [ 597.140541][T17794] vhci_hcd: connection closed [ 597.140649][T17796] vhci_hcd: connection closed [ 597.141164][ T5246] vhci_hcd: stop threads [ 597.147859][T17795] vhci_hcd: connection closed [ 597.153864][ T5246] vhci_hcd: release socket [ 597.171427][ T5246] vhci_hcd: disconnect device [ 597.229088][ T5246] vhci_hcd: stop threads [ 597.233764][ T5246] vhci_hcd: release socket [ 597.238840][ T5246] vhci_hcd: disconnect device [ 597.265193][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10719'. [ 597.277855][ T5246] vhci_hcd: stop threads [ 597.283693][ T5246] vhci_hcd: release socket [ 597.289718][ T5246] vhci_hcd: disconnect device [ 597.447311][T17833] netlink: 332 bytes leftover after parsing attributes in process `syz.7.10723'. [ 597.805382][T17846] SELinux: policydb version -299076691 does not match my version range 15-35 [ 597.845813][T17846] SELinux: failed to load policy [ 597.914269][T17843] lo speed is unknown, defaulting to 1000 [ 598.082523][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10730'. [ 598.885437][T17914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 598.930645][T17914] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 598.939860][T17914] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 598.950004][T17914] vhci_hcd vhci_hcd.0: Device attached [ 598.972986][T17914] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 598.983571][T17914] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 598.995307][T17914] vhci_hcd vhci_hcd.0: Device attached [ 599.026511][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10742'. [ 599.037787][T17931] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 599.048077][T17931] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 599.061329][T17931] vhci_hcd vhci_hcd.0: Device attached [ 599.071765][T17914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 599.091626][T17918] vhci_hcd: connection closed [ 599.091874][ T51] vhci_hcd: stop threads [ 599.091995][T17922] vhci_hcd: connection closed [ 599.098828][ T51] vhci_hcd: release socket [ 599.098855][ T51] vhci_hcd: disconnect device [ 599.104658][T17933] vhci_hcd: connection closed [ 599.130662][ T51] vhci_hcd: stop threads [ 599.135849][T16898] vhci_hcd: vhci_device speed not set [ 599.137083][ T51] vhci_hcd: release socket [ 599.156005][ T51] vhci_hcd: disconnect device [ 599.181171][ T51] vhci_hcd: stop threads [ 599.186774][ T51] vhci_hcd: release socket [ 599.191751][ T51] vhci_hcd: disconnect device [ 599.353719][T17958] netlink: 332 bytes leftover after parsing attributes in process `syz.7.10746'. [ 599.957630][T17984] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10753'. [ 600.306576][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10756'. [ 600.436070][ C0] vcan0: j1939_session_tx_dat: 0xffff8881bd541a00: queue data error: -100 [ 600.448750][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 600.459921][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 600.472011][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.482522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.494191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.505874][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.516248][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.525681][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.535961][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.545489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.556849][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.566227][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.576164][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.586782][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.596914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.606110][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.617818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.628803][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.639887][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.649028][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.660002][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.672324][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.683959][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.693167][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.702223][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.712668][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.722023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.732659][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.742477][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.751852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.761732][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.772148][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.782916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.794066][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.806269][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.816365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.826461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.837870][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.847903][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.859147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.869990][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.880705][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.890607][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.901142][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.909944][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.920783][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.931394][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.942654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.953857][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.966175][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.975554][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 600.985958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 600.996281][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.006080][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.016251][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.026868][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.036662][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.047406][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.059232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.068613][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.081874][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.092474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.103312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.113672][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.124058][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.134346][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.141356][T17977] syz.6.10752 (17977) used greatest stack depth: 6152 bytes left [ 601.143461][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.163811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.167037][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 601.167058][ T29] audit: type=1326 audit(1755257649.101:31115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.173147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.208169][ T29] audit: type=1326 audit(1755257649.121:31116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.212147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.223525][ T29] audit: type=1326 audit(1755257649.121:31117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.252748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.252775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.252801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.252819][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.252857][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.252877][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.262721][ T29] audit: type=1326 audit(1755257649.121:31118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.290660][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.290685][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.303356][ T29] audit: type=1326 audit(1755257649.121:31119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.313133][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.313156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.313176][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 601.313191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 601.324877][ T29] audit: type=1326 audit(1755257649.121:31120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.338359][T16907] usb 17-1: enqueue for inactive port 0 [ 601.343031][ T29] audit: type=1326 audit(1755257649.121:31121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.353263][T16907] usb 17-1: enqueue for inactive port 0 [ 601.389312][ T29] audit: type=1326 audit(1755257649.131:31122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.467803][T16907] vhci_hcd: vhci_device speed not set [ 601.475013][ T29] audit: type=1326 audit(1755257649.131:31123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.532901][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10758'. [ 601.558764][ T29] audit: type=1326 audit(1755257649.131:31124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.10758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20391ebe9 code=0x7ffc0000 [ 601.753917][T17936] lo speed is unknown, defaulting to 1000 [ 601.790708][T18005] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 601.822518][T18005] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 601.830802][T18005] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 601.841791][T18005] vhci_hcd vhci_hcd.0: Device attached [ 601.874042][T18012] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 601.881918][T18012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 601.891315][T18012] vhci_hcd vhci_hcd.0: Device attached [ 601.928834][T18005] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 601.937879][T18005] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 601.949405][T18005] vhci_hcd vhci_hcd.0: Device attached [ 601.973190][T18012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 602.025837][T16905] vhci_hcd: vhci_device speed not set [ 602.042570][T18015] vhci_hcd: connection closed [ 602.042970][T18013] vhci_hcd: connection closed [ 602.043186][ T3459] vhci_hcd: stop threads [ 602.050596][T18007] vhci_hcd: connection closed [ 602.057210][ T3459] vhci_hcd: release socket [ 602.057234][ T3459] vhci_hcd: disconnect device [ 602.085919][T16905] usb 7-2: new full-speed USB device number 7 using vhci_hcd [ 602.097583][T18011] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 602.119883][ T3459] vhci_hcd: stop threads [ 602.125333][ T3459] vhci_hcd: release socket [ 602.131241][ T3459] vhci_hcd: disconnect device [ 602.168752][ T3459] vhci_hcd: stop threads [ 602.174187][ T3459] vhci_hcd: release socket [ 602.182365][ T3459] vhci_hcd: disconnect device [ 602.739917][T18044] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10764'. [ 602.865819][T18056] sd 0:0:1:0: device reset [ 602.978166][T18068] netlink: 'syz.3.10774': attribute type 4 has an invalid length. [ 603.004873][T18068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10774'. [ 603.083128][T18068] SELinux: failed to load policy [ 603.181138][T18082] siw: device registration error -23 [ 603.504952][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10783'. [ 603.530931][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10784'. [ 604.217928][T18142] sd 0:0:1:0: device reset [ 604.399769][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10802'. [ 604.775308][T18176] lo speed is unknown, defaulting to 1000 [ 604.912971][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10808'. [ 605.087179][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10810'. [ 605.138779][T18207] lo speed is unknown, defaulting to 1000 [ 605.640784][T18270] random: crng reseeded on system resumption [ 605.659073][T18268] siw: device registration error -23 [ 605.867140][T18277] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10821'. [ 605.976430][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10822'. [ 606.237168][T18299] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 606.245764][T18299] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 606.255748][T18299] vhci_hcd vhci_hcd.0: Device attached [ 606.281696][T18299] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 606.313870][T18299] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 606.322733][T18299] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 606.331608][T18299] vhci_hcd vhci_hcd.0: Device attached [ 606.351392][T18290] lo speed is unknown, defaulting to 1000 [ 606.368078][T18307] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 606.378336][T18307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 606.388004][T18307] vhci_hcd vhci_hcd.0: Device attached [ 606.423219][T18299] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(10) [ 606.431476][T18299] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 606.441696][T18299] vhci_hcd vhci_hcd.0: Device attached [ 606.454032][T18299] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 606.507366][T18323] vhci_hcd: connection closed [ 606.507546][T18300] vhci_hcd: connection closed [ 606.507657][T18304] vhci_hcd: connection closed [ 606.514898][T18308] vhci_hcd: connection closed [ 606.531183][ T3465] vhci_hcd: stop threads [ 606.542595][ T3465] vhci_hcd: release socket [ 606.547927][ T3465] vhci_hcd: disconnect device [ 606.587323][ T3465] vhci_hcd: stop threads [ 606.593564][ T3465] vhci_hcd: release socket [ 606.599758][ T3465] vhci_hcd: disconnect device [ 606.629099][ T3465] vhci_hcd: stop threads [ 606.634447][ T3465] vhci_hcd: release socket [ 606.640566][ T3465] vhci_hcd: disconnect device [ 606.646765][ T3465] vhci_hcd: stop threads [ 606.652231][ T3465] vhci_hcd: release socket [ 606.658997][ T3465] vhci_hcd: disconnect device [ 606.698406][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 606.698425][ T29] audit: type=1326 audit(1755257654.631:31393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.7.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 606.740293][ T29] audit: type=1326 audit(1755257654.631:31394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.7.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 606.756348][T18339] sd 0:0:1:0: device reset [ 606.769908][ T29] audit: type=1326 audit(1755257654.701:31395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.7.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 606.803030][ T29] audit: type=1326 audit(1755257654.701:31396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.7.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 606.830556][ T29] audit: type=1326 audit(1755257654.701:31397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.7.10831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 606.978998][T18344] netlink: 'syz.7.10834': attribute type 153 has an invalid length. [ 607.003705][ T29] audit: type=1326 audit(1755257654.931:31398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 607.064971][ T29] audit: type=1326 audit(1755257654.971:31399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 607.142629][T16905] usb 7-2: enqueue for inactive port 1 [ 607.163717][T16905] usb 7-2: enqueue for inactive port 1 [ 607.187740][ T29] audit: type=1326 audit(1755257655.061:31400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 607.223534][ T29] audit: type=1326 audit(1755257655.081:31401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb000f814a5 code=0x7ffc0000 [ 607.264471][T16905] vhci_hcd: vhci_device speed not set [ 607.397976][ T29] audit: type=1326 audit(1755257655.231:31402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18346 comm="syz.7.10834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb000f4ebe9 code=0x7ffc0000 [ 608.148645][T18363] vhci_hcd: invalid port number 96 [ 608.155587][T18363] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 608.458680][T18288] lo speed is unknown, defaulting to 1000 [ 608.471399][T18337] siw: device registration error -23 [ 609.658872][T18423] siw: device registration error -23 [ 610.120465][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10852'. [ 610.171728][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10854'. [ 610.304654][T18446] vhci_hcd: invalid port number 96 [ 610.310551][T18446] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 610.349043][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10859'. [ 610.370299][T18455] ALSA: seq fatal error: cannot create timer (-19) [ 611.286263][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10868'. [ 611.402511][T18499] FAULT_INJECTION: forcing a failure. [ 611.402511][T18499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.418533][T18499] CPU: 1 UID: 0 PID: 18499 Comm: syz.7.10873 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 611.418641][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.418658][T18499] Call Trace: [ 611.418668][T18499] [ 611.418678][T18499] __dump_stack+0x1d/0x30 [ 611.418705][T18499] dump_stack_lvl+0xe8/0x140 [ 611.418764][T18499] dump_stack+0x15/0x1b [ 611.418781][T18499] should_fail_ex+0x265/0x280 [ 611.418802][T18499] should_fail+0xb/0x20 [ 611.418819][T18499] should_fail_usercopy+0x1a/0x20 [ 611.418841][T18499] _copy_from_user+0x1c/0xb0 [ 611.418955][T18499] kstrtouint_from_user+0x69/0xf0 [ 611.418979][T18499] ? 0xffffffff81000000 [ 611.418997][T18499] ? selinux_file_permission+0x1e4/0x320 [ 611.419057][T18499] proc_fail_nth_write+0x50/0x160 [ 611.419163][T18499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 611.419192][T18499] vfs_write+0x266/0x960 [ 611.419229][T18499] ? vfs_read+0x4e6/0x770 [ 611.419249][T18499] ? __rcu_read_unlock+0x4f/0x70 [ 611.419345][T18499] ? __fget_files+0x184/0x1c0 [ 611.419415][T18499] ksys_write+0xda/0x1a0 [ 611.419440][T18499] __x64_sys_write+0x40/0x50 [ 611.419466][T18499] x64_sys_call+0x27fe/0x2ff0 [ 611.419490][T18499] do_syscall_64+0xd2/0x200 [ 611.419608][T18499] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 611.419635][T18499] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 611.419695][T18499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.419719][T18499] RIP: 0033:0x7fb000f4d69f [ 611.419735][T18499] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 611.419754][T18499] RSP: 002b:00007fafff9af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 611.419775][T18499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb000f4d69f [ 611.419788][T18499] RDX: 0000000000000001 RSI: 00007fafff9af0a0 RDI: 0000000000000004 [ 611.419800][T18499] RBP: 00007fafff9af090 R08: 0000000000000000 R09: 0000000000000000 [ 611.419829][T18499] R10: 0000000000000086 R11: 0000000000000293 R12: 0000000000000001 [ 611.419841][T18499] R13: 00007fb001176038 R14: 00007fb001175fa0 R15: 00007ffdc1bcbe28 [ 611.419861][T18499] [ 611.712809][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 611.712879][ T29] audit: type=1326 audit(1755257659.651:31701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.3.10872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 611.753553][ T29] audit: type=1326 audit(1755257659.651:31702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.3.10872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 611.790033][ T29] audit: type=1326 audit(1755257659.721:31703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.3.10872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 611.823866][ T29] audit: type=1326 audit(1755257659.721:31704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.3.10872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 611.853247][ T29] audit: type=1326 audit(1755257659.721:31705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.3.10872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 611.855799][T18491] ALSA: seq fatal error: cannot create timer (-19) [ 612.124986][T18530] vhci_hcd: invalid port number 96 [ 612.132182][T18530] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 612.176956][ T29] audit: type=1326 audit(1755257660.111:31706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 612.275833][ T29] audit: type=1326 audit(1755257660.141:31707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 612.308403][ T29] audit: type=1326 audit(1755257660.181:31708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 612.338007][ T29] audit: type=1326 audit(1755257660.181:31709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 612.369046][ T29] audit: type=1326 audit(1755257660.181:31710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18527 comm="syz.3.10880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc68595ebe9 code=0x7ffc0000 [ 612.612272][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10883'. [ 612.780121][T18556] netlink: 61211 bytes leftover after parsing attributes in process `syz.8.10886'. [ 612.811803][T18560] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10887'. [ 612.872848][T18562] ALSA: seq fatal error: cannot create timer (-19) [ 613.007183][T18578] netlink: 332 bytes leftover after parsing attributes in process `syz.7.10892'. [ 613.640344][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10897'. [ 613.729915][T18610] random: crng reseeded on system resumption [ 613.925752][T18615] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10898'. [ 614.175512][T18625] ALSA: seq fatal error: cannot create timer (-19) [ 614.269796][T18632] vhci_hcd: invalid port number 96 [ 614.276111][T18632] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 614.474358][T18645] vhci_hcd: invalid port number 96 [ 614.481239][T18645] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 614.602194][T18650] ALSA: seq fatal error: cannot create timer (-19) [ 615.986452][T18681] __nla_validate_parse: 2 callbacks suppressed [ 615.986471][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10921'. [ 616.265165][T18697] vhci_hcd: invalid port number 96 [ 616.270691][T18697] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 616.757831][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 616.757846][ T29] audit: type=1326 audit(1755257664.691:32031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 616.850913][ T29] audit: type=1326 audit(1755257664.731:32032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 616.880766][ T29] audit: type=1326 audit(1755257664.731:32033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 616.910710][ T29] audit: type=1326 audit(1755257664.731:32034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 616.940002][ T29] audit: type=1326 audit(1755257664.731:32035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 616.970672][ T29] audit: type=1326 audit(1755257664.731:32036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 617.004923][ T29] audit: type=1326 audit(1755257664.731:32037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 617.033942][ T29] audit: type=1326 audit(1755257664.731:32038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 617.065920][ T29] audit: type=1326 audit(1755257664.731:32039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 617.085874][T18717] ALSA: seq fatal error: cannot create timer (-19) [ 617.096516][ T29] audit: type=1326 audit(1755257664.731:32040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18713 comm="syz.8.10932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cd12ebe9 code=0x7ffc0000 [ 617.177420][T18728] vhci_hcd: invalid port number 96 [ 617.185380][T18728] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 617.498957][T18744] random: crng reseeded on system resumption [ 617.687687][T18751] netlink: 76 bytes leftover after parsing attributes in process `syz.8.10943'. [ 618.023208][T18757] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 618.032883][T18757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 618.041976][T18757] vhci_hcd vhci_hcd.0: Device attached [ 618.076183][T18761] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 618.094327][T18757] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(6) [ 618.103613][T18757] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 618.113826][T18757] vhci_hcd vhci_hcd.0: Device attached [ 618.175577][T18761] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 618.183188][T18761] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 618.193501][T18761] vhci_hcd vhci_hcd.0: Device attached [ 618.205903][T18773] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 618.213626][T18773] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 618.223969][T18773] vhci_hcd vhci_hcd.0: Device attached [ 618.225978][T16898] vhci_hcd: vhci_device speed not set [ 618.257774][T18757] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 618.274545][T18766] lo speed is unknown, defaulting to 1000 [ 618.295153][T18774] vhci_hcd: connection closed [ 618.295244][T18770] vhci_hcd: connection closed [ 618.295454][T18758] vhci_hcd: connection closed [ 618.300909][ T3455] vhci_hcd: stop threads [ 618.318852][ T3455] vhci_hcd: release socket [ 618.323851][ T3455] vhci_hcd: disconnect device [ 618.331053][T18763] vhci_hcd: connection closed [ 618.336405][T16898] usb 1-1: new full-speed USB device number 4 using vhci_hcd [ 618.371915][ T3455] vhci_hcd: stop threads [ 618.377882][ T3455] vhci_hcd: release socket [ 618.383778][ T3455] vhci_hcd: disconnect device [ 618.390170][T18759] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 618.441414][ T3455] vhci_hcd: stop threads [ 618.446738][ T3455] vhci_hcd: release socket [ 618.446758][ T3455] vhci_hcd: disconnect device [ 618.463680][ T3455] vhci_hcd: stop threads [ 618.463693][ T3455] vhci_hcd: release socket [ 618.463711][ T3455] vhci_hcd: disconnect device [ 618.527965][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10949'. [ 618.551051][T18798] lo speed is unknown, defaulting to 1000 [ 618.632720][T18831] sd 0:0:1:0: device reset [ 618.722388][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10956'. [ 618.735637][T18850] sd 0:0:1:0: device reset [ 618.794791][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10959'. [ 618.919671][T18873] sd 0:0:1:0: device reset [ 618.964057][T18865] lo speed is unknown, defaulting to 1000 [ 618.979760][T18876] vhci_hcd: invalid port number 96 [ 618.986560][T18876] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 619.016881][T18892] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 619.026818][T18892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 619.036924][T18892] vhci_hcd vhci_hcd.0: Device attached [ 619.078276][T18892] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7) [ 619.086072][T18892] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 619.095905][T18892] vhci_hcd vhci_hcd.0: Device attached [ 619.132598][T18892] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(9) [ 619.140199][T18892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 619.142611][T18913] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10969'. [ 619.148635][T18892] vhci_hcd vhci_hcd.0: Device attached [ 619.173831][T18892] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(11) [ 619.181617][T18892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 619.192704][T18892] vhci_hcd vhci_hcd.0: Device attached [ 619.212262][T18915] vhci_hcd: connection closed [ 619.212508][ T3465] vhci_hcd: stop threads [ 619.224195][ T3465] vhci_hcd: release socket [ 619.229500][ T3465] vhci_hcd: disconnect device [ 619.238340][T18911] vhci_hcd: connection closed [ 619.238478][T18908] vhci_hcd: connection closed [ 619.238582][T18895] vhci_hcd: connection closed [ 619.261892][ T3465] vhci_hcd: stop threads [ 619.265768][ T3390] vhci_hcd: vhci_device speed not set [ 619.268403][ T3465] vhci_hcd: release socket [ 619.286203][ T3465] vhci_hcd: disconnect device [ 619.307562][ T3465] vhci_hcd: stop threads [ 619.313184][ T3465] vhci_hcd: release socket [ 619.319309][ T3465] vhci_hcd: disconnect device [ 619.329609][ T3465] vhci_hcd: stop threads [ 619.334982][ T3465] vhci_hcd: release socket [ 619.341914][ T3465] vhci_hcd: disconnect device [ 619.345786][ T3390] usb 15-1: new full-speed USB device number 6 using vhci_hcd [ 619.358692][ T3390] usb 15-1: enqueue for inactive port 0 [ 619.367084][ T3390] usb 15-1: enqueue for inactive port 0 [ 619.367124][T18922] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 619.374237][ T3390] usb 15-1: enqueue for inactive port 0 [ 619.382626][T18922] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 619.382770][T18922] vhci_hcd vhci_hcd.0: Device attached [ 619.390368][T18925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 619.419663][T18925] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 619.428341][T18925] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 619.438441][T18925] vhci_hcd vhci_hcd.0: Device attached [ 619.467915][T18922] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(6) [ 619.477537][T18922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 619.488277][T18922] vhci_hcd vhci_hcd.0: Device attached [ 619.495363][ T3390] vhci_hcd: vhci_device speed not set [ 619.507094][T18922] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 619.515185][T18922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 619.527465][T18922] vhci_hcd vhci_hcd.0: Device attached [ 619.536305][T18922] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 619.551182][T18931] vhci_hcd: connection closed [ 619.551345][T18928] vhci_hcd: connection closed [ 619.551376][ T5246] vhci_hcd: stop threads [ 619.557926][T18923] vhci_hcd: connection closed [ 619.565599][ T5246] vhci_hcd: release socket [ 619.581594][ T5246] vhci_hcd: disconnect device [ 619.587821][T16905] vhci_hcd: vhci_device speed not set [ 619.595837][T18926] vhci_hcd: connection closed [ 619.627417][ T5246] vhci_hcd: stop threads [ 619.637921][ T5246] vhci_hcd: release socket [ 619.642930][ T5246] vhci_hcd: disconnect device [ 619.651956][ T5246] vhci_hcd: stop threads [ 619.656800][ T5246] vhci_hcd: release socket [ 619.663314][ T5246] vhci_hcd: disconnect device [ 619.666936][T18935] netlink: 332 bytes leftover after parsing attributes in process `syz.8.10974'. [ 619.669311][T16905] usb 7-1: new full-speed USB device number 8 using vhci_hcd [ 619.691455][T16905] usb 7-1: enqueue for inactive port 0 [ 619.699228][T16905] usb 7-1: enqueue for inactive port 0 [ 619.707270][ T5246] vhci_hcd: stop threads [ 619.712253][ T5246] vhci_hcd: release socket [ 619.717694][ T5246] vhci_hcd: disconnect device [ 619.724161][T16905] usb 7-1: enqueue for inactive port 0 [ 619.805793][T16905] vhci_hcd: vhci_device speed not set [ 619.974386][T18954] lo speed is unknown, defaulting to 1000 [ 619.997753][T18966] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10981'. [ 620.084724][T18981] sd 0:0:1:0: device reset [ 620.120444][T18989] netlink: 332 bytes leftover after parsing attributes in process `syz.6.10986'. [ 620.155938][T18996] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 620.164723][T18996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 620.176137][T18996] vhci_hcd vhci_hcd.0: Device attached [ 620.211301][T19000] ALSA: seq fatal error: cannot create timer (-19) [ 620.211303][T19007] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 620.211349][T19007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 620.238336][T19007] vhci_hcd vhci_hcd.0: Device attached [ 620.274143][T18996] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 620.281274][T18996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 620.287415][T19011] ALSA: seq fatal error: cannot create timer (-19) [ 620.291254][T18996] vhci_hcd vhci_hcd.0: Device attached [ 620.311619][T19020] vhci_hcd: invalid port number 96 [ 620.318679][T19020] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 620.319507][T18996] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 620.334286][T18996] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 620.344364][T18996] vhci_hcd vhci_hcd.0: Device attached [ 620.361692][T19016] vhci_hcd: connection closed [ 620.361913][T19008] vhci_hcd: connection closed [ 620.369309][T19021] vhci_hcd: connection closed [ 620.375411][ T51] vhci_hcd: stop threads [ 620.382207][T18998] vhci_hcd: connection closed [ 620.383540][ T51] vhci_hcd: release socket [ 620.403911][ T51] vhci_hcd: disconnect device [ 620.410292][T19026] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 620.417980][T19026] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 620.426712][T19026] vhci_hcd vhci_hcd.0: Device attached [ 620.450526][T19030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 620.462194][ T51] vhci_hcd: stop threads [ 620.467096][ T51] vhci_hcd: release socket [ 620.468405][T19031] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10996'. [ 620.472564][ T51] vhci_hcd: disconnect device [ 620.472774][T19026] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(8) [ 620.500077][T19026] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 620.510405][T19026] vhci_hcd vhci_hcd.0: Device attached [ 620.516900][T16905] vhci_hcd: vhci_device speed not set [ 620.530669][ T51] vhci_hcd: stop threads [ 620.536558][ T51] vhci_hcd: release socket [ 620.542206][ T51] vhci_hcd: disconnect device [ 620.547912][T19030] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(11) [ 620.556471][T19030] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 620.565092][T19030] vhci_hcd vhci_hcd.0: Device attached [ 620.572405][ T51] vhci_hcd: stop threads [ 620.578385][ T51] vhci_hcd: release socket [ 620.583974][ T51] vhci_hcd: disconnect device [ 620.598068][T19041] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(14) [ 620.608089][T19041] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 620.618371][T19041] vhci_hcd vhci_hcd.0: Device attached [ 620.644013][T19026] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 620.655596][T19039] lo speed is unknown, defaulting to 1000 [ 620.697595][T19060] vhci_hcd: invalid port number 96 [ 620.703318][T19060] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 620.705784][T16905] usb 7-1: enqueue for inactive port 0 [ 620.718273][T16905] usb 7-1: enqueue for inactive port 0 [ 620.726114][T19035] vhci_hcd: connection closed [ 620.726393][T19032] vhci_hcd: connection closed [ 620.726546][T19027] vhci_hcd: connection closed [ 620.737345][T16905] usb 7-1: enqueue for inactive port 0 [ 620.746183][T19042] vhci_hcd: connection closed [ 620.751509][ T3455] vhci_hcd: stop threads [ 620.764433][ T3455] vhci_hcd: release socket [ 620.770628][ T3455] vhci_hcd: disconnect device [ 620.777439][ T3390] vhci_hcd: vhci_device speed not set [ 620.790280][ T3455] vhci_hcd: stop threads [ 620.796784][ T3455] vhci_hcd: release socket [ 620.804494][ T3455] vhci_hcd: disconnect device [ 620.832868][T16905] vhci_hcd: vhci_device speed not set [ 620.835498][ T3455] vhci_hcd: stop threads [ 620.844118][ T3455] vhci_hcd: release socket [ 620.850375][ T3455] vhci_hcd: disconnect device [ 620.856206][ T3390] usb 15-3: new full-speed USB device number 7 using vhci_hcd [ 620.866020][ T3390] usb 15-3: enqueue for inactive port 2 [ 620.874136][ T3390] usb 15-3: enqueue for inactive port 2 [ 620.884366][ T3390] usb 15-3: enqueue for inactive port 2 [ 620.893551][ T3455] vhci_hcd: stop threads [ 620.898419][ T3455] vhci_hcd: release socket [ 620.904312][ T3455] vhci_hcd: disconnect device [ 620.955998][ T3390] vhci_hcd: vhci_device speed not set [ 621.313719][T19082] netlink: 332 bytes leftover after parsing attributes in process `syz.7.11004'. [ 621.463082][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11006'. [ 621.497249][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11005'. [ 621.585283][T19090] netlink: 'syz.6.11007': attribute type 1 has an invalid length. [ 621.634272][T19090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.680229][T19131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.711884][T19131] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 621.743188][T19131] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 621.772699][T19090] gretap1: entered promiscuous mode [ 621.783117][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 621.783207][ T29] audit: type=1326 audit(1755257669.701:32695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 621.787043][T19090] bond0: (slave gretap1): making interface the new active one [ 621.791168][ T29] audit: type=1326 audit(1755257669.701:32696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 621.861164][ T29] audit: type=1326 audit(1755257669.701:32697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 621.861457][T19090] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 621.894202][ T29] audit: type=1326 audit(1755257669.701:32698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 621.921877][T19143] macvlan2: entered promiscuous mode [ 621.936379][ T29] audit: type=1326 audit(1755257669.701:32699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 621.943427][T19143] macvlan2: entered allmulticast mode [ 621.970659][ T29] audit: type=1326 audit(1755257669.701:32700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 621.970699][ T29] audit: type=1326 audit(1755257669.701:32701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 621.999779][T19143] bond0: entered promiscuous mode [ 622.010207][ T29] audit: type=1326 audit(1755257669.701:32702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 622.079401][ T29] audit: type=1326 audit(1755257669.701:32703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 622.082036][T19143] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 622.109136][ T29] audit: type=1326 audit(1755257669.701:32704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19059 comm="syz.0.11000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdac527ebe9 code=0x7ffc0000 [ 622.152099][T19143] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 622.171349][T19143] bond0: left promiscuous mode [ 622.192932][T19165] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 622.202722][T19165] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 622.211453][T19165] vhci_hcd vhci_hcd.0: Device attached [ 622.228341][T19165] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(7) [ 622.235867][T19165] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 622.244443][T19165] vhci_hcd vhci_hcd.0: Device attached [ 622.284542][T19177] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(9) [ 622.292295][T19177] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 622.304135][T19177] vhci_hcd vhci_hcd.0: Device attached [ 622.344089][T19165] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(12) [ 622.351879][T19165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 622.352504][T19154] lo speed is unknown, defaulting to 1000 [ 622.362514][T19165] vhci_hcd vhci_hcd.0: Device attached [ 622.436875][T19174] vhci_hcd: connection closed [ 622.437027][T19181] vhci_hcd: connection closed [ 622.444176][T19168] vhci_hcd: connection closed [ 622.445044][T19178] vhci_hcd: connection closed [ 622.466154][ T3455] vhci_hcd: stop threads [ 622.477215][ T3455] vhci_hcd: release socket [ 622.482418][ T3455] vhci_hcd: disconnect device [ 622.555464][ T3455] vhci_hcd: stop threads [ 622.563511][ T3455] vhci_hcd: release socket [ 622.565803][ T3390] vhci_hcd: vhci_device speed not set [ 622.575403][ T3455] vhci_hcd: disconnect device [ 622.580753][T19189] lo speed is unknown, defaulting to 1000 [ 622.593475][ T3455] vhci_hcd: stop threads [ 622.599170][ T3455] vhci_hcd: release socket [ 622.604997][ T3455] vhci_hcd: disconnect device [ 622.625776][ T3390] usb 15-1: new full-speed USB device number 8 using vhci_hcd [ 622.637731][ T3390] usb 15-1: enqueue for inactive port 0 [ 622.656368][ T3390] usb 15-1: enqueue for inactive port 0 [ 622.675243][ T3455] vhci_hcd: stop threads [ 622.676723][ T3390] usb 15-1: enqueue for inactive port 0 [ 622.682128][ T3455] vhci_hcd: release socket [ 622.694912][ T3455] vhci_hcd: disconnect device [ 622.771547][T19239] ALSA: seq fatal error: cannot create timer (-19) [ 622.805794][ T3390] vhci_hcd: vhci_device speed not set [ 622.914240][T19256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11025'. [ 622.937284][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11024'. [ 622.966565][T19266] netlink: 'syz.0.11026': attribute type 5 has an invalid length. [ 622.976470][T19266] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.11026'. [ 623.017826][T19252] Falling back ldisc for ttyS3. [ 623.077150][T19271] lo speed is unknown, defaulting to 1000 [ 623.218238][T19304] random: crng reseeded on system resumption [ 623.378130][T16898] usb 1-1: enqueue for inactive port 0 [ 623.392729][T16898] usb 1-1: enqueue for inactive port 0 [ 623.442141][T19312] netlink: 332 bytes leftover after parsing attributes in process `syz.8.11033'. [ 623.443974][T19315] netlink: 76 bytes leftover after parsing attributes in process `syz.7.11031'. [ 623.472960][T16898] vhci_hcd: vhci_device speed not set [ 623.528233][T19319] FAULT_INJECTION: forcing a failure. [ 623.528233][T19319] name failslab, interval 1, probability 0, space 0, times 0 [ 623.548150][T19319] CPU: 0 UID: 0 PID: 19319 Comm: syz.8.11035 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 623.548186][T19319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.548199][T19319] Call Trace: [ 623.548214][T19319] [ 623.548223][T19319] __dump_stack+0x1d/0x30 [ 623.548280][T19319] dump_stack_lvl+0xe8/0x140 [ 623.548304][T19319] dump_stack+0x15/0x1b [ 623.548380][T19319] should_fail_ex+0x265/0x280 [ 623.548404][T19319] should_failslab+0x8c/0xb0 [ 623.548429][T19319] kmem_cache_alloc_node_noprof+0x57/0x320 [ 623.548541][T19319] ? __alloc_skb+0x101/0x320 [ 623.548585][T19319] __alloc_skb+0x101/0x320 [ 623.548652][T19319] ? audit_log_start+0x365/0x6c0 [ 623.548685][T19319] audit_log_start+0x380/0x6c0 [ 623.548722][T19319] audit_seccomp+0x48/0x100 [ 623.548922][T19319] ? __seccomp_filter+0x68c/0x10d0 [ 623.548958][T19319] __seccomp_filter+0x69d/0x10d0 [ 623.548993][T19319] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 623.549087][T19319] ? vfs_write+0x7e8/0x960 [ 623.549114][T19319] ? __rcu_read_unlock+0x4f/0x70 [ 623.549153][T19319] ? __fget_files+0x184/0x1c0 [ 623.549260][T19319] __secure_computing+0x82/0x150 [ 623.549287][T19319] syscall_trace_enter+0xcf/0x1e0 [ 623.549311][T19319] do_syscall_64+0xac/0x200 [ 623.549417][T19319] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 623.549445][T19319] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 623.549469][T19319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.549490][T19319] RIP: 0033:0x7f81cd12ebe9 [ 623.549506][T19319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.549537][T19319] RSP: 002b:00007f81cbb8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 623.549561][T19319] RAX: ffffffffffffffda RBX: 00007f81cd355fa0 RCX: 00007f81cd12ebe9 [ 623.549577][T19319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 623.549593][T19319] RBP: 00007f81cbb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 623.549608][T19319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.549623][T19319] R13: 00007f81cd356038 R14: 00007f81cd355fa0 R15: 00007ffc8ebcf388 [ 623.549649][T19319] [ 623.902868][T19322] netlink: 332 bytes leftover after parsing attributes in process `syz.8.11036'. [ 624.027647][T19326] siw: device registration error -23 [ 624.167784][T19328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 624.179620][T19328] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 624.187077][T19328] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 624.196258][T19328] vhci_hcd vhci_hcd.0: Device attached [ 624.237274][T19328] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(9) [ 624.246169][T19328] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 624.256784][T19328] vhci_hcd vhci_hcd.0: Device attached [ 624.286371][T19340] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(12) [ 624.294565][T19340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 624.304299][T19340] vhci_hcd vhci_hcd.0: Device attached [ 624.343096][T19335] vhci_hcd: connection closed [ 624.343269][ T3465] vhci_hcd: stop threads [ 624.343334][T19341] vhci_hcd: connection closed [ 624.350399][ T3465] vhci_hcd: release socket [ 624.368035][ T3465] vhci_hcd: disconnect device [ 624.373965][T19330] vhci_hcd: connection closed [ 624.384973][T16906] vhci_hcd: vhci_device speed not set [ 624.398983][T19338] lo speed is unknown, defaulting to 1000 [ 624.406158][ T3465] vhci_hcd: stop threads [ 624.410760][ T3465] vhci_hcd: release socket [ 624.416308][ T3465] vhci_hcd: disconnect device [ 624.433227][ T3465] vhci_hcd: stop threads [ 624.438807][ T3465] vhci_hcd: release socket [ 624.444898][ T3465] vhci_hcd: disconnect device [ 624.466590][T16906] usb 17-2: new full-speed USB device number 4 using vhci_hcd [ 624.487813][T16906] usb 17-2: enqueue for inactive port 1 [ 624.494812][T16906] usb 17-2: enqueue for inactive port 1 [ 624.520227][T19278] syz.6.11029 (19278) used greatest stack depth: 6144 bytes left [ 624.530408][T16906] usb 17-2: enqueue for inactive port 1 [ 624.605898][T16906] vhci_hcd: vhci_device speed not set [ 624.608393][T19372] netlink: 332 bytes leftover after parsing attributes in process `syz.6.11045'. [ 624.694476][T19384] siw: device registration error -23 [ 624.762426][T19390] FAULT_INJECTION: forcing a failure. [ 624.762426][T19390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.779816][T19390] CPU: 1 UID: 0 PID: 19390 Comm: syz.3.11052 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 624.779848][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.779860][T19390] Call Trace: [ 624.779868][T19390] [ 624.779877][T19390] __dump_stack+0x1d/0x30 [ 624.779905][T19390] dump_stack_lvl+0xe8/0x140 [ 624.779930][T19390] dump_stack+0x15/0x1b [ 624.779952][T19390] should_fail_ex+0x265/0x280 [ 624.780020][T19390] should_fail+0xb/0x20 [ 624.780037][T19390] should_fail_usercopy+0x1a/0x20 [ 624.780061][T19390] _copy_to_user+0x20/0xa0 [ 624.780167][T19390] simple_read_from_buffer+0xb5/0x130 [ 624.780195][T19390] proc_fail_nth_read+0x10e/0x150 [ 624.780230][T19390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.780321][T19390] vfs_read+0x1a5/0x770 [ 624.780343][T19390] ? __rcu_read_unlock+0x4f/0x70 [ 624.780364][T19390] ? __fget_files+0x184/0x1c0 [ 624.780447][T19390] ksys_read+0xda/0x1a0 [ 624.780477][T19390] __x64_sys_read+0x40/0x50 [ 624.780505][T19390] x64_sys_call+0x27bc/0x2ff0 [ 624.780531][T19390] do_syscall_64+0xd2/0x200 [ 624.780600][T19390] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 624.781118][T19390] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 624.781152][T19390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.781179][T19390] RIP: 0033:0x7fc68595d5fc [ 624.781213][T19390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 624.781239][T19390] RSP: 002b:00007fc6843c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.781331][T19390] RAX: ffffffffffffffda RBX: 00007fc685b85fa0 RCX: 00007fc68595d5fc [ 624.781348][T19390] RDX: 000000000000000f RSI: 00007fc6843c70a0 RDI: 0000000000000004 [ 624.781364][T19390] RBP: 00007fc6843c7090 R08: 0000000000000000 R09: 0000000000000000 [ 624.781380][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.781395][T19390] R13: 00007fc685b86038 R14: 00007fc685b85fa0 R15: 00007fff1bee80f8 [ 624.781421][T19390] [ 625.103576][T19400] sd 0:0:1:0: device reset [ 625.141102][T19395] lo speed is unknown, defaulting to 1000 [ 625.224866][T19430] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.269756][T19430] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.329485][T19430] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.360055][T19438] netlink: 'syz.8.11060': attribute type 10 has an invalid length. [ 625.377166][T19438] team0: Port device geneve1 added [ 625.411051][T19430] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.457723][T19465] sd 0:0:1:0: device reset [ 625.485270][ T51] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.514136][ T51] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.524926][ T51] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.558643][ T51] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.603596][T19477] lo speed is unknown, defaulting to 1000 [ 625.908753][T19515] : renamed from veth1_to_batadv [ 626.166925][T19531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=19531 comm=syz.0.11075 [ 626.343177][T19541] __nla_validate_parse: 4 callbacks suppressed [ 626.343196][T19541] netlink: 44 bytes leftover after parsing attributes in process `syz.7.11080'. [ 626.603678][T19550] ================================================================== [ 626.613366][T19550] BUG: KCSAN: data-race in __mark_inode_dirty / move_expired_inodes [ 626.624913][T19550] [ 626.627888][T19550] read-write to 0xffff8881055fe008 of 4 bytes by task 51 on cpu 1: [ 626.637580][T19550] move_expired_inodes+0x17a/0x400 [ 626.644082][T19550] queue_io+0xd9/0x2c0 [ 626.650566][T19550] wb_writeback+0x226/0x5c0 [ 626.656769][T19550] wb_workfn+0x4c9/0x910 [ 626.661646][T19550] process_scheduled_works+0x4cb/0x9d0 [ 626.669613][T19550] worker_thread+0x582/0x770 [ 626.675016][T19550] kthread+0x489/0x510 [ 626.680633][T19550] ret_from_fork+0xda/0x150 [ 626.685893][T19550] ret_from_fork_asm+0x1a/0x30 [ 626.691513][T19550] [ 626.694306][T19550] read to 0xffff8881055fe008 of 4 bytes by task 19550 on cpu 0: [ 626.705975][T19550] __mark_inode_dirty+0x52/0x760 [ 626.711173][T19550] file_update_time+0x288/0x2b0 [ 626.716464][T19550] ext4_page_mkwrite+0x18c/0xb90 [ 626.724898][T19550] handle_mm_fault+0x15cb/0x2c20 [ 626.730419][T19550] do_user_addr_fault+0x636/0x1090 [ 626.736407][T19550] exc_page_fault+0x62/0xa0 [ 626.741582][T19550] asm_exc_page_fault+0x26/0x30 [ 626.747811][T19550] [ 626.750261][T19550] value changed: 0x00000008 -> 0x0001000a [ 626.758204][T19550] [ 626.762059][T19550] Reported by Kernel Concurrency Sanitizer on: [ 626.771132][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.8.11084 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 626.787757][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 626.801364][T19550] ================================================================== [ 626.991818][T19551] ALSA: seq fatal error: cannot create timer (-19)