last executing test programs: 20m50.816625402s ago: executing program 32 (id=951): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ftruncate(0xffffffffffffffff, 0xc17a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x112, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 20m46.784470103s ago: executing program 33 (id=982): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 20m46.043501948s ago: executing program 34 (id=988): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5, 0x0, 0x0, 0x48014}, 0x0) 20m44.477502779s ago: executing program 35 (id=1000): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x400, 0x1) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) r10 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000600)={0x0, @multicast2, @initdev}, &(0x7f0000000880)=0xc) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a00)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r13}, 0x10) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = accept$nfc_llcp(r10, 0x0, &(0x7f0000000200)) recvfrom(r15, &(0x7f0000000700)=""/198, 0xc6, 0x12140, &(0x7f0000000800)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x80) sendmsg(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 19m0.451199703s ago: executing program 36 (id=2353): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x12) 18m55.346097106s ago: executing program 37 (id=2375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1899c2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='consume_skb\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0xa0, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffffffff, 0x6, 0x0, 0x4}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6002}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040800}, 0x10) 11m56.483793115s ago: executing program 4 (id=7852): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 11m56.323756788s ago: executing program 4 (id=7854): r0 = memfd_secret(0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/97, 0x61}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000900)=""/131, 0x83}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/232, 0xe8}, {&(0x7f0000000cc0)=""/220, 0xdc}], 0x9) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) fcntl$setlease(r3, 0x400, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='signal_generate\x00', r4}, 0x54) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16, @ANYRES64], 0x40, 0x2f6, &(0x7f0000000e40)="$eJzs3M9r02AYwPGnXbd2HVt7EEFF9qIXvYSt3oUiG4gFZa7iDxCyNdXS2JamTCri6smr/4Zjx11koPMP2MWbJy/iZRfBy0BnpU3q0i3dus4tG/1+YLzP8r5Pm+R9W54Uko37b5/ls5aW1SsSjCgJitRkSyTeiBzzoyISkIA0myF7Y8RuanJ15OeXi0pEkqnU1IxS08nZawml1Nj4h+cvly+tVUburYythmU9/njjR+Lb+tn1cxt/Zp/mLJWzVKFYUbqaK36t6HOmoTI5K68pdcc0dMtQuYJllO3+YsV5WymVqkovZEajpbJhWUovVFXeqKpKUVXKVaU/0XMFpWmaGo1K/9gcbzalg+all2Zm9GSPbzrfYx7+u7U9e8vl1ofnU729J710dPsEAABOqlb9H3bX/5vt9X/AaYPu+t9Rk1qj/r/74OGtLur/1aEO9X9xV/3vXF9IW3/WLFL/9yqye1N6aaD3+h+nRHlYwrIs25/o14+WJ5oB9T8AAAAAAAAAAAAAAAAAAAAAAKfBZr0eq9frsUYbFDtu/IWdG0Za//u9nzga7vm35zrUmHXmv0+4btyLiJhvFtILabu1+5NZyYkphkxITH4314PDjqdvpqYCqikuH81FJ39xIT3Qnj8pMYl750/a+ao9f1Ci7vyExOSMd37CM39Irlx25WsSk8/zUhRTMs11vZ3/alKpG7dTO/KHJeNxxxwAAAAAAKeRpv7xvH7XtE79dn43vw9MeF6fh+R8yN9jBwAAAACgX1jVF3ndNI3yvsE7J2Pfwd+dgV2/8mGDwQMcRbfB+2YQ6PTKkQOduiMIWs9k3nPwsDOorcv5eWbxcLsx6Mexj/tywkONRe/aEu04eGzA64TvFYSdpzI3tmzVd4y5vnLhl39r7Fi/hgAAAAAcg+2i3+89AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACgfx3H48T8PkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpPgbAAD//zi/FSY=") r9 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 11m56.186087181s ago: executing program 4 (id=7859): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 11m56.159017492s ago: executing program 3 (id=7860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x41, 0x3, "99e376b9b40da96d7e74dd66f6d326cd3178544f4fa4062291663f53d424dd3b4c03f998241e79fcb8fd017018910ea4af9a0b0a0200000000000000bc"}, @NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 11m56.108311382s ago: executing program 3 (id=7862): r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r4, 0x400}}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x100003c}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0x8000000000000}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0x0) 11m56.048919084s ago: executing program 4 (id=7863): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x4, 0x2, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x9b, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000025238d19f9ef60caa6f84ba7f565d7a43336e142051207a25aa217cc5a5769267dc6b107274f82c5db480ba298f96b98f67f0e1318c7eba9f14e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x20000090) r4 = inotify_init() syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") inotify_add_watch(r4, &(0x7f0000000340)='./file2/../file0\x00', 0x61000080) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYRES8=r5], 0x0, 0x65b2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe25}, 0x94) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dedbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f0000000900)={0x0, 0x10, 0x100}) ioctl$TCSETA(r10, 0x5406, &(0x7f0000000000)={0x5, 0x3, 0x4, 0x5, 0x14, "91afb621a021869a"}) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x101, 0x7fff, 0xc9, 0x0, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x8000000}, 0x50) 11m55.997572525s ago: executing program 3 (id=7864): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f000001000000000000000001"], 0x58}, 0x1, 0x7}, 0x0) 11m55.997072395s ago: executing program 3 (id=7865): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x0, 0x10, 0xffffffffffffffff, 0x8881d000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8112, 0x1, 0x5e44, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) sync() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) setsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) 11m55.74708603s ago: executing program 3 (id=7868): eventfd(0x0) 11m55.629169982s ago: executing program 4 (id=7869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x100000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESOCT=r2, @ANYRES8=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00'}, 0x18) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11m55.547843304s ago: executing program 38 (id=7870): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 11m55.534262764s ago: executing program 3 (id=7872): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11m55.534166374s ago: executing program 39 (id=7872): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_clone3(&(0x7f0000000600)={0xa0202000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11m51.288034929s ago: executing program 4 (id=7896): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001500)={r3, 0x3, 0xfffffffd, 0x3, 0x4, 0x29b, 0x5, 0x4, {0x0, @in={{0x2, 0x4e21, @remote}}, 0xffff1890, 0xfffffff9, 0x1, 0x2, 0x6}}, &(0x7f00000015c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={r3, 0x8f, "cad16d8057f5cc7e94c3ebc37969b8c7a7ad63f536ff4f59ac02faf33ac176ffbd22a329362c4056680b67739afd365811ca8dd320998e0660cfcfdd7596276768084a5f61e4a945353a0eb047b478eb26594c8c75868a951ac45fc98a5d0fdc8f57a87f135680b5c092f58af85ea33e9d9f4381a2efce82ffecf10cb32d30c41282cb5629ef969257705b8a9df483"}, &(0x7f0000000040)=0x97) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x6, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000d001811000c000000004edf3ad0562743e45998da2014603547999989769112f1abb1b643046ad5e3e6b1a8b080000000000000008069021f5eaa840445ee84bc1c1b73deaed5e33a59c5a0ccf91f522c8726d65ceabdc69295a183d541878d26c6d58adfa4c5769bd3735d7ebdd4fd11130eb90be437e1c501b820302fed1fef49fd3b", @ANYRES32=r7, @ANYRESHEX=r7], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r8}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x88}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000100)=0x430) ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000610000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r10, &(0x7f0000000680), 0x0}, 0x20) 11m51.249626769s ago: executing program 40 (id=7896): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001500)={r3, 0x3, 0xfffffffd, 0x3, 0x4, 0x29b, 0x5, 0x4, {0x0, @in={{0x2, 0x4e21, @remote}}, 0xffff1890, 0xfffffff9, 0x1, 0x2, 0x6}}, &(0x7f00000015c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)={r3, 0x8f, "cad16d8057f5cc7e94c3ebc37969b8c7a7ad63f536ff4f59ac02faf33ac176ffbd22a329362c4056680b67739afd365811ca8dd320998e0660cfcfdd7596276768084a5f61e4a945353a0eb047b478eb26594c8c75868a951ac45fc98a5d0fdc8f57a87f135680b5c092f58af85ea33e9d9f4381a2efce82ffecf10cb32d30c41282cb5629ef969257705b8a9df483"}, &(0x7f0000000040)=0x97) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x0, 0x0, 0x6, 0x2}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000d001811000c000000004edf3ad0562743e45998da2014603547999989769112f1abb1b643046ad5e3e6b1a8b080000000000000008069021f5eaa840445ee84bc1c1b73deaed5e33a59c5a0ccf91f522c8726d65ceabdc69295a183d541878d26c6d58adfa4c5769bd3735d7ebdd4fd11130eb90be437e1c501b820302fed1fef49fd3b", @ANYRES32=r7, @ANYRESHEX=r7], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r8}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8047) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x88}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000100)=0x430) ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000610000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r10, &(0x7f0000000680), 0x0}, 0x20) 11m49.19522305s ago: executing program 8 (id=7933): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() close_range(r0, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1) timerfd_create(0x1, 0xc0000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 11m49.115374682s ago: executing program 8 (id=7935): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f67f0000000000000d000000950000362f3dc100"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, r1, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}, 0x0, 0x0, 0x0, {0x0, r10}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 11m48.235854129s ago: executing program 8 (id=7941): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0xd112, 0x1046, 0x0, 0x264}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) 11m47.595960282s ago: executing program 8 (id=7949): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000001140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3800813, &(0x7f0000001300)=ANY=[@ANYBLOB='block=0x0000000000000200,iocharset=iso8859-13,nojoliet,unhide,hide,overriderockperm,dmode=0x0000000000000003,nocompress,mode=0x0000000000000080,hide,block=0x0000000000000200,overriderockperm,showassoc,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB="7000a756ca89ad16c280e92006c1e11bb7301f2daee40bca386b38293c9c349695a703c54eaa8e3136f01e0c2da2014d8abc61f3b8e5f4d2fc0ff785baae0acdfb07ede45826cb07d9cf03d9c523662a8d60228056195aaa230f374b00d54f5fba197ff3a5255fcc8d5f892e9809d966299ee7f06eb5fc285c75a1f52ac6c51a024c002b5f4ad69212672cd62b20c4fbfc8dc1a2a3be4877471188553fbe33f41ca98616af94d8156e007d5b08ff2f6accd9f62590b6410463db843ab6ddc6128148e8ec7132e32ef3c93e6f3e7513da03c5d2e55f9078d8f4a88f0bc11cefde2a8cf1ab9d6fa42e26ad39"], 0x5, 0xa62, &(0x7f0000000680)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x4}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_settime(0xfffffffb, 0x0) 11m47.076761332s ago: executing program 8 (id=7954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@local, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}}}}}}}}, 0x0) 11m47.023400723s ago: executing program 8 (id=7955): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() close_range(r0, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1) timerfd_create(0x1, 0xc0000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 11m32.56867065s ago: executing program 41 (id=7955): r0 = syz_open_procfs(0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() close_range(r0, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1) timerfd_create(0x1, 0xc0000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 11m20.215119925s ago: executing program 5 (id=8246): socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setresgid(0x0, 0xee01, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x3, 0x53e, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x240942, 0x189) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @broadcast}], 0x40) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000600)=""/176, &(0x7f00000006c0)=0xb0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x38}}, 0x24040054) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0xee00, 0x0) 11m19.944342021s ago: executing program 5 (id=8251): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x2, 0xa, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, r1, 0x0, 0x8010002b) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="080029bd7000ffdbdf65010000000500030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x24004001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r7 = syz_clone(0x20111, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) waitid(0x2, r7, 0x0, 0x4, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc) r9 = syz_open_dev$vcsa(0x0, 0x3, 0x220002) ioctl$int_in(r9, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r9, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f00000007c0)=0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000023c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 11m19.410998521s ago: executing program 5 (id=8256): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x33) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0xf45, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r3}, 0xc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) rt_sigtimedwait(&(0x7f0000000200)={[0x4]}, &(0x7f0000000340), &(0x7f0000000400), 0x8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0x2, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getxattr(0x0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f00000005c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x5abf, 0x8000010, 0x2, 0x0, 0x1e) 11m18.501904739s ago: executing program 5 (id=8272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x3}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0), 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r9, 0x0, 0x4}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r3, r4, 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x20}}, 0x80}}, 0x80000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r11, 0xf, 0x0, 0x4, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) 11m18.379653282s ago: executing program 5 (id=8275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100003c}, 0x18) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) 11m17.991378459s ago: executing program 5 (id=8283): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x44c00) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x1}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x8, 0x0, 0x0, 0x3, 0x82, 0x0, 0x80001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80, 0x9}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00'}) inotify_init() 11m17.95759488s ago: executing program 42 (id=8283): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x44c00) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x1}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x8, 0x0, 0x0, 0x3, 0x82, 0x0, 0x80001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @loopback}, 0x44, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80, 0x9}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00'}) inotify_init() 10m32.362172175s ago: executing program 1 (id=9073): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008060001080006040001000000000000ac0d14bbbbbbbbbbbbbbac1414"], 0x0) (fail_nth: 2) 10m31.999362283s ago: executing program 1 (id=9077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x38fc, 0x6d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) io_uring_setup(0x6503, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff020000000000000000000000003101180000"], 0x40}, 0x24004800) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f0b) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 10m31.156742169s ago: executing program 1 (id=9092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x80010, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000bc0)='\\}\xee\x9aT\x03\tz\r\xc6<\x16\x9dF\xb0W\xf3\x15\x15=\x926ud\x84\x9a!\x96\x16}\x9d\xf9M\xaf\x91\xb6h|\xb5m\xf6\x90\xc3ko\xa6m=1\xf0\x93\xb5\x00\xf2\t\r\xae{\xf9\xf6\x16\x964\v\xe3\x94.\xb9\xa1\x04\xd0\xc7\x14\x89\x1e\x9c\xe0\xc7\\%\xc2\xb0\v\"\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000, 0x0, 0x3}, 0x20) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000b00)=""/13, &(0x7f0000000800)=0xd) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4, r4, 0x2000}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000000001000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(0xffffffffffffffff, 0x6691, 0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffea7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x1, 0x7, 0x6, 0x3, {{0x18, 0x4, 0x0, 0x7, 0x60, 0x66, 0x0, 0xf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @empty, {[@generic={0x86, 0x3, 'L'}, @timestamp={0x44, 0x18, 0xdc, 0x0, 0x9, [0x5, 0x5, 0x381, 0x1c000000, 0x5]}, @lsrr={0x83, 0x17, 0x8e, [@broadcast, @multicast2, @local, @remote, @broadcast]}, @ssrr={0x89, 0xb, 0x32, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xf, 0x9, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x3e}]}]}}}}}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xfffc}, {0x10, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x7, 0x9, 0x4, 0xd, 0x4, 0x5}, [@TCA_NETEM_CORR={0x10, 0x1, {0x6, 0xe, 0x2}}, @TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x6f, 0x9}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_REORDER={0xc, 0x3, {0x101, 0x3}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80, 0xb, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xc44}]}}}]}, 0x9c}}, 0x4048000) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, 0x2, 0x3, 0x0, 0x1, 0x8}, &(0x7f00000004c0)=0x20) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000001000)=ANY=[@ANYBLOB="2c020000", @ANYBLOB="377ce5cac2c66978eb773e1a916d4730f0c920ad594b99d25292dffb81a9e6137fd585b4f29635fd84f835f4145f084ae8859aca276dc7f3d956429a78d9354ffc170888a617eb5cd33ed74e937bed86a0ac7339904b630075004909e9e4", @ANYBLOB="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", @ANYRES32=r9, @ANYRESDEC=r6, @ANYRESHEX=r9, @ANYBLOB="e92dcb8e1d441a16cba47da20b80e8243e2e5654da7109cbab0b49691bbcccded3274bf9287bac6f6b84467e688a13ee034085f3d822eb59b22ce51fa1057b8bed13bb83596c6972bd8cd126ffe3cecdd22f02cc1159981cd1ed233e94be244ed05d714075f45d02afe308ba37a581c45882e7", @ANYRES8=r4, @ANYBLOB="faaba257427a4ec3dc242abf53900373e1e774db7fe8141c6cfae19e2979be287fbb72ad106522da3bd2f627"], 0x22c}}, 0x8c011) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="000429bd7000ffdbdf25130000006000018008000300070000001400020076657468315f746f5f6873720000000008000300030000001400020064756d6d793000000000000000000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="3c00018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000c0001800800030001000000280001801400020076657468305f746f5f6261746164760008000300e562abde08000100", @ANYRES32=r11, @ANYBLOB="7477538e755a67f5b58cac83b5d0e576301f0d529e695c25b213417f85fd3444d5179a82f2c8b01464a79239d82347df87c3c2d6fe0e1503706cfea4a003990ad000aa2b64c453c307cc16e78d254a9b5dc2e4cde9195c18d10dbf50d57df67d298ab08779e15e5a2b387374e570b4dee421b2ddac407e"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) 10m30.644839919s ago: executing program 1 (id=9100): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r3, 0x3000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_ext={0x1c, 0x26, &(0x7f0000000440)=@raw=[@jmp={0x5, 0x0, 0x2, 0xa, 0x6, 0x10, 0xfffffffffffffff0}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0xc, 0x9, 0x4, 0x100, 0x8}, @alu={0x4, 0x0, 0x8, 0x7, 0x2, 0x1, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}], &(0x7f0000000580)='GPL\x00', 0x4, 0xb1, &(0x7f0000001200)=""/177, 0x1f00, 0xbf27e5597a2a329f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001300)={0x0, 0x0, 0x1ff, 0x7fffffff}, 0x10, 0x5e0b, 0xffffffffffffffff, 0x2, &(0x7f0000001380)=[r4, r3, r5, r3], &(0x7f00000013c0)=[{0x2, 0x4, 0x5, 0x8}, {0x3, 0x1, 0xc, 0x6}], 0x10, 0xffff}, 0x94) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 10m29.951973743s ago: executing program 1 (id=9107): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 10m29.275023837s ago: executing program 1 (id=9116): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f67f0000000000000d000000950000362f3dc100"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 10m29.264307327s ago: executing program 43 (id=9116): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f67f0000000000000d000000950000362f3dc100"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 3.112524248s ago: executing program 0 (id=19966): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3.062055769s ago: executing program 0 (id=19968): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f0000000040)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$unix(r0, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.990511121s ago: executing program 0 (id=19973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f", 0x8b}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) 2.829893084s ago: executing program 6 (id=19978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 2.785728465s ago: executing program 6 (id=19980): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x140341) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r2 = syz_open_dev$loop(&(0x7f0000005800), 0x81, 0x2002) ioctl$BLKPG(r2, 0x1269, &(0x7f0000005900)={0x2, 0x0, 0x98, &(0x7f0000005840)={0x8, 0x7}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x2141) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='rxrpc_improper_term\x00', r3, 0x0, 0x100000007d}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r7 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e0001000000000000005f00000c0000000100000500000080040001"], 0x20}], 0x1}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bind$llc(r5, &(0x7f00000004c0)={0x1a, 0x339, 0x1, 0x5, 0x7, 0x8c, @random="0d9b221e8d6f"}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r9, 0x0) write$UHID_INPUT(r9, &(0x7f0000000e00)={0x8, {"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", 0x1000}}, 0x1006) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.273714955s ago: executing program 9 (id=19981): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, r2, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}, 0x0, 0x0, 0x0, {0x0, r10}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 2.109450008s ago: executing program 2 (id=19982): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f67f0000000000000d000000950000362f3dc100"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, r2, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}, 0x0, 0x0, 0x0, {0x0, r10}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 2.108669308s ago: executing program 0 (id=19983): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x140341) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r2 = syz_open_dev$loop(&(0x7f0000005800), 0x81, 0x2002) ioctl$BLKPG(r2, 0x1269, &(0x7f0000005900)={0x2, 0x0, 0x98, &(0x7f0000005840)={0x8, 0x7}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x2141) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='rxrpc_improper_term\x00', r3, 0x0, 0x100000007d}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r7 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e0001000000000000005f00000c0000000100000500000080040001"], 0x20}], 0x1}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bind$llc(r5, &(0x7f00000004c0)={0x1a, 0x339, 0x1, 0x5, 0x7, 0x8c, @random="0d9b221e8d6f"}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r10, 0x0) write$UHID_INPUT(r10, &(0x7f0000000e00)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.951096841s ago: executing program 6 (id=19984): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffe0, 0xa}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_io_uring_setup(0x232b, &(0x7f0000000140)={0x0, 0x82d6, 0x5088, 0x2, 0x1a3}, &(0x7f0000000040), &(0x7f00000001c0)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x86dd, r6, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x76, 0x160341) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r10}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r12, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.862596553s ago: executing program 6 (id=19986): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x2, 0x3, 0x6, 0x1}}) (fail_nth: 2) 1.861617403s ago: executing program 2 (id=19987): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20004041}, 0x4040000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.591587028s ago: executing program 6 (id=19989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x4) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xffe0, 0xde56f3541d6f8878}, {0x1, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r9], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x80, 0x1, 0xff, 0x0, {{0x13, 0x4, 0x3, 0x7, 0x4c, 0x65, 0x0, 0x10, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x24, 0x6c, 0x3, 0xa, [{@rand_addr=0x64010102, 0x5}, {@loopback, 0x9}, {@remote, 0x26}, {@loopback, 0xff}]}, @timestamp_addr={0x44, 0x14, 0x3d, 0x1, 0x5, [{@multicast2, 0x3}, {@local, 0x11eb06d6}]}]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2400000070000184d487a101d9f9002bbd70d70007f4a6e400000000", @ANYRES32=r14, @ANYBLOB="0c0002800500030003000000"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f000001a240)=ANY=[@ANYBLOB="e3b5bed0ca7c3e5e13ec5830af4efd3367eeba661e23efd4ffca776d88f576a275f61a828a32b1beb179bb379094a0a4594948ad20ba8b910141bea7f1d8fab32aef93a9c3743b08d1b9f86cb846cdb4bc565ddfd56a23f635ac38fc9242cdca7b7fa9ec6bef6c15730b9ea3492131638ca32ca1faf43a0e1e6c7d20d1584b76618835b82cf6561682c0deda58bb82ac917e7a2073884d6435", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25110000002000018008000100", @ANYRES32=r3, @ANYBLOB="1400020074756e6c3000000000000000000000003c00018008000300030000000800030000000000140002006e6574706369300000000000000093cb0000140002006e657464657673696d300000000000006400018008000300cfda0c8a0800", @ANYBLOB="0ed1996d49019ecd563d252f1962158c78a4db3605e602c4c5c43859454497cc1744cb648f6f3c0dfd5e8ae6f64dc4a4739f7da19989cd31d3c7", @ANYBLOB="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", @ANYRES32=r9, @ANYRES64=r13, @ANYRES32=r10, @ANYBLOB="a7ee289368afa1068087b1f9ae61168f2be908000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="1400020070696d726567000000000000000000001400020076657468315f6d6163767461700000001400018008000100", @ANYBLOB="ace9d5264577c8f7543443cbd05032d4052ad0494493ea92415c95fd8b018f0f82c3540aacaebecea5bbdad37446625ccb5a61706d9ece233c60885718bd506420c671d8833a88029560521021fd2eaa3746fc8979f7f6bb339cd7fcdf166bffb3c9f7a8253425525a21cc274d189badd5f04e2b9a98555c19c7a6e7a8993057727c0725b66421cdf71f6618227cc9a7e612d50189788560ba0b85d174b764c3c0bc84f1fd42009878853c9251fe68994c61ab9eed76cacb396cfcd74af1e72d2e7e113c65f7f7a5f26a5d9fdf4bda1efad21cbcb5fee07a2318d885f95175ec2fe5490cd812354dd2b6f4806d19f854ddaa1cda", @ANYBLOB="0800030001000000"], 0x198}, 0x1, 0x0, 0x0, 0x4c000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r15, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000046a8b8bebb55f6ce6e3100000006f45fc2c6de2ce5035c911f832bba15bc579d48e2752222727caabbc8e80b69639e998a96f311f04e994406ea2011bac3b53ff3f0f55be", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r16 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r16, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.464076751s ago: executing program 2 (id=19990): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) select(0x0, 0x0, 0x0, 0x0, 0x0) 1.239044855s ago: executing program 0 (id=19991): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000000380004803400018009000100686173680000"], 0x8c}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYRES32=r3, @ANYRES16=r2, @ANYRES8=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x45, 0x1, 0x2, 0xff, 0x0, 0x8, 0x1001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x13}, 0x8c12, 0x100100000001, 0x6, 0x7, 0x0, 0xaa7, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, r5, 0x3) io_setup(0x2007, &(0x7f0000000980)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="390200000000000000001407000018"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000004000000f70000000000000001020000", @ANYRES32, @ANYBLOB="00000000003ef23549159f0f4226a16f87c1504c52ec0872c749607be63b9fab81c14f5fbc351361fa5ae9fce4bc37b34642e812", @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES8], 0x50) splice(r8, 0x0, r10, 0x0, 0x8000f28, 0x0) splice(r9, 0x0, r8, 0x0, 0x7f, 0xe) write(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r12 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r12, 0x2004, 0x0) 1.238449305s ago: executing program 9 (id=19992): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f0000000040)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$unix(r0, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.206042946s ago: executing program 9 (id=19993): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x3}}) 1.176474717s ago: executing program 9 (id=19994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.156677737s ago: executing program 9 (id=19995): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f67f0000000000000d000000950000362f3dc100"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, r2, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}, 0x0, 0x0, 0x0, {0x0, r11}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 1.01956637s ago: executing program 7 (id=19996): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) setreuid(0xee01, 0x0) 936.270491ms ago: executing program 7 (id=19997): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x19, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x1, 0x1, 0x0, 0xc, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7f, 0xb4, &(0x7f0000000080)=""/180, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xb, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000005c0)={r1, 0x0, 0x71, 0x0, &(0x7f0000000480)="1a0d5f02b8a67f18a4b97e08570b1382862aaf24575fc6abcf4bf202bb1b5f7787e342bce6cd382218e643034d880481eb4c16ad3195627c283a85c8e304221e4e6de54b2bb888446c7364a2c1fb4d609bf62c801914ba533d30fdfd0c81457bf5aa53aead79be19791ca8619f53ceccfb", 0x0, 0x5, 0x0, 0x48, 0x0, &(0x7f0000000540)="3fa32681f5be564c47d7d2d8ea560a473857a6969e3f559b64ffde7ee483fc06c3e0a74bfabe023013206a2ad6c535ad5d65dcbca01ed5d69129c2911f92b00a8e604ef9f20432f4", 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) 764.035485ms ago: executing program 7 (id=19998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x8, 0x1, 0x1}}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 763.238605ms ago: executing program 7 (id=19999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000000c0)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 724.357316ms ago: executing program 2 (id=20000): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 7) 672.497977ms ago: executing program 6 (id=20001): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x140341) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r2 = syz_open_dev$loop(&(0x7f0000005800), 0x81, 0x2002) ioctl$BLKPG(r2, 0x1269, &(0x7f0000005900)={0x2, 0x0, 0x98, &(0x7f0000005840)={0x8, 0x7}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x2141) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='rxrpc_improper_term\x00', r3, 0x0, 0x100000007d}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r7 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e0001000000000000005f00000c0000000100000500000080040001"], 0x20}], 0x1}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) bind$llc(r5, &(0x7f00000004c0)={0x1a, 0x339, 0x1, 0x5, 0x7, 0x8c, @random="0d9b221e8d6f"}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x12, r10, 0x0) write$UHID_INPUT(r10, &(0x7f0000000e00)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 611.160088ms ago: executing program 2 (id=20002): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 610.358948ms ago: executing program 0 (id=20003): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x110, 0xffffffffffffffff, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, r2, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}, 0x0, 0x0, 0x0, {0x0, r10}}) timer_delete(0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x2}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$key(0xf, 0x3, 0x2) 543.930409ms ago: executing program 2 (id=20004): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socket(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0137013710ff"}) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) 436.611142ms ago: executing program 7 (id=20005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 408.109852ms ago: executing program 7 (id=20006): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000039f199b0d1a380429c00"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000100)=0x9, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES8=r5, @ANYBLOB="3a3c6e8fbed3f8b1036e9fa987b4edbcec71ccc1255e9a5338d16429914b3e597ce5f21d3b5b9220b7639f2c1f4caba10b46f060e0e465611fc4e2c5c74787ec5cbd54e13e4936a788c94a094bafb58996739236601d1ba33f70897065ddb9dc9304294cc39ce8d06d6618596ea585847a470a72b6d70cb2c784699bddf3566f8c7cef9d2bb93bf165f36b536b2e2a43e4eab3", @ANYRESOCT=r1, @ANYRES8=r9, @ANYRES32=r0, @ANYRESHEX=r8, @ANYRESOCT=r4, @ANYBLOB="f27ea7c8a0869ed171927ecbc2322aaccbbbedbdf5605635610882c1a0665417a3ee5939aaea18e686abd952a678c09dfa452986e881af07d0679d17fbd9b2b8218e1381755826df07b0d29234958f7a20fe4c47a093983bcc404b121b5cacc859a95fa60611fa0c3f1896b0e3044328"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x38) 0s ago: executing program 9 (id=20007): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) (async) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) (async) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) socketpair(0x28, 0x800, 0x4, &(0x7f0000000040)) kernel console output (not intermixed with test programs): text=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1318.765425][ T29] audit: type=1400 audit(1369.496:142909): avc: denied { open } for pid=27897 comm="syz.0.19074" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1318.765460][ T29] audit: type=1326 audit(1369.496:142910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27901 comm="syz.9.19076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1318.772093][T27898] pim6reg: entered allmulticast mode [ 1319.007221][T27903] pim6reg: left allmulticast mode [ 1319.069178][T27911] netlink: 'syz.6.19080': attribute type 1 has an invalid length. [ 1319.096318][T27911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1319.147559][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19080'. [ 1319.163600][T27911] bond2 (unregistering): Released all slaves [ 1319.175875][T27918] ipvlan2: entered promiscuous mode [ 1319.187929][T27918] bridge0: port 3(ipvlan2) entered blocking state [ 1319.194420][T27918] bridge0: port 3(ipvlan2) entered disabled state [ 1319.201576][T27918] ipvlan2: entered allmulticast mode [ 1319.206996][T27918] bridge0: entered allmulticast mode [ 1319.222663][T27918] ipvlan2: left allmulticast mode [ 1319.227859][T27918] bridge0: left allmulticast mode [ 1319.270228][T27924] SELinux: ebitmap: truncated map [ 1319.279147][T27924] SELinux: failed to load policy [ 1319.307577][T27936] IPv6: Can't replace route, no match found [ 1319.333053][T27939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19093'. [ 1319.342276][T27939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19093'. [ 1319.388015][T27947] random: crng reseeded on system resumption [ 1319.424754][T27952] can0: slcan on ptm0. [ 1319.481751][T27949] can0 (unregistered): slcan off ptm0. [ 1319.540160][T27959] SELinux: ebitmap: truncated map [ 1319.540742][T27960] ipvlan2: entered promiscuous mode [ 1319.546811][T27959] SELinux: failed to load policy [ 1319.551493][T27960] bridge0: port 1(ipvlan2) entered blocking state [ 1319.562242][T27960] bridge0: port 1(ipvlan2) entered disabled state [ 1319.590773][T27960] ipvlan2: entered allmulticast mode [ 1319.596149][T27960] bridge0: entered allmulticast mode [ 1319.607171][T27967] IPv6: Can't replace route, no match found [ 1319.641232][T27960] ipvlan2: left allmulticast mode [ 1319.646472][T27960] bridge0: left allmulticast mode [ 1319.692335][T27975] FAULT_INJECTION: forcing a failure. [ 1319.692335][T27975] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.692372][T27975] CPU: 1 UID: 0 PID: 27975 Comm: syz.9.19108 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1319.692475][T27975] Tainted: [W]=WARN [ 1319.692482][T27975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1319.692495][T27975] Call Trace: [ 1319.692504][T27975] [ 1319.692513][T27975] __dump_stack+0x1d/0x30 [ 1319.692540][T27975] dump_stack_lvl+0xe8/0x140 [ 1319.692567][T27975] dump_stack+0x15/0x1b [ 1319.692654][T27975] should_fail_ex+0x265/0x280 [ 1319.692680][T27975] should_failslab+0x8c/0xb0 [ 1319.692714][T27975] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1319.692770][T27975] ? debugfs_alloc_inode+0x34/0x40 [ 1319.692805][T27975] ? lookup_noperm+0xc9/0x180 [ 1319.692853][T27975] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1319.692981][T27975] debugfs_alloc_inode+0x34/0x40 [ 1319.693017][T27975] alloc_inode+0x40/0x170 [ 1319.693054][T27975] new_inode+0x1d/0xe0 [ 1319.693098][T27975] __debugfs_create_file+0x109/0x330 [ 1319.693169][T27975] debugfs_create_file_full+0x3f/0x60 [ 1319.693204][T27975] ? __pfx_vxcan_setup+0x10/0x10 [ 1319.693237][T27975] ref_tracker_dir_debugfs+0x100/0x1e0 [ 1319.693354][T27975] alloc_netdev_mqs+0x1a2/0xa30 [ 1319.693394][T27975] rtnl_create_link+0x239/0x710 [ 1319.693500][T27975] rtnl_newlink_create+0x14c/0x620 [ 1319.693524][T27975] ? security_capable+0x83/0x90 [ 1319.693551][T27975] ? netlink_ns_capable+0x86/0xa0 [ 1319.693701][T27975] rtnl_newlink+0xf29/0x12d0 [ 1319.693774][T27975] ? __pfx_rtnl_newlink+0x10/0x10 [ 1319.693838][T27975] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 1319.693874][T27975] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1319.693912][T27975] netlink_rcv_skb+0x120/0x220 [ 1319.693936][T27975] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1319.694035][T27975] rtnetlink_rcv+0x1c/0x30 [ 1319.694114][T27975] netlink_unicast+0x5c0/0x690 [ 1319.694147][T27975] netlink_sendmsg+0x58b/0x6b0 [ 1319.694254][T27975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.694320][T27975] __sock_sendmsg+0x142/0x180 [ 1319.694358][T27975] ____sys_sendmsg+0x31e/0x4e0 [ 1319.694397][T27975] ___sys_sendmsg+0x17b/0x1d0 [ 1319.694454][T27975] __x64_sys_sendmsg+0xd4/0x160 [ 1319.694496][T27975] x64_sys_call+0x191e/0x2ff0 [ 1319.694553][T27975] do_syscall_64+0xd2/0x200 [ 1319.694588][T27975] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1319.694668][T27975] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1319.694706][T27975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.694746][T27975] RIP: 0033:0x7fea2763eba9 [ 1319.694765][T27975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.694831][T27975] RSP: 002b:00007fea260a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1319.694850][T27975] RAX: ffffffffffffffda RBX: 00007fea27885fa0 RCX: 00007fea2763eba9 [ 1319.694862][T27975] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1319.694877][T27975] RBP: 00007fea260a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.694890][T27975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.694902][T27975] R13: 00007fea27886038 R14: 00007fea27885fa0 R15: 00007ffc9b2ba9f8 [ 1319.694934][T27975] [ 1319.694959][T27975] debugfs: out of free dentries, can not create file 'netdev@ffff88815d0a0550' [ 1319.898613][T27985] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19112'. [ 1320.132742][T27991] SELinux: ebitmap: truncated map [ 1320.144611][T27994] netlink: 'syz.7.19115': attribute type 4 has an invalid length. [ 1320.188621][T27991] SELinux: failed to load policy [ 1320.224327][T28005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1320.238644][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19120'. [ 1320.240344][T28012] random: crng reseeded on system resumption [ 1320.264560][T28005] bond2 (unregistering): Released all slaves [ 1320.284397][T28014] FAULT_INJECTION: forcing a failure. [ 1320.284397][T28014] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.297073][T28014] CPU: 0 UID: 0 PID: 28014 Comm: syz.9.19124 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1320.297104][T28014] Tainted: [W]=WARN [ 1320.297111][T28014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1320.297125][T28014] Call Trace: [ 1320.297144][T28014] [ 1320.297153][T28014] __dump_stack+0x1d/0x30 [ 1320.297180][T28014] dump_stack_lvl+0xe8/0x140 [ 1320.297206][T28014] dump_stack+0x15/0x1b [ 1320.297227][T28014] should_fail_ex+0x265/0x280 [ 1320.297253][T28014] should_failslab+0x8c/0xb0 [ 1320.297312][T28014] __kmalloc_noprof+0xa5/0x3e0 [ 1320.297368][T28014] ? usb_alloc_urb+0x42/0xc0 [ 1320.297458][T28014] usb_alloc_urb+0x42/0xc0 [ 1320.297499][T28014] do_proc_control+0x1a8/0x8b0 [ 1320.297518][T28014] ? should_fail_ex+0xdb/0x280 [ 1320.297615][T28014] proc_control+0x71/0xa0 [ 1320.297654][T28014] usbdev_ioctl+0x948/0x1710 [ 1320.297802][T28014] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1320.297834][T28014] __se_sys_ioctl+0xce/0x140 [ 1320.297856][T28014] __x64_sys_ioctl+0x43/0x50 [ 1320.297876][T28014] x64_sys_call+0x1816/0x2ff0 [ 1320.297904][T28014] do_syscall_64+0xd2/0x200 [ 1320.298018][T28014] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1320.298046][T28014] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1320.298079][T28014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.298157][T28014] RIP: 0033:0x7fea2763eba9 [ 1320.298172][T28014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.298220][T28014] RSP: 002b:00007fea260a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.298243][T28014] RAX: ffffffffffffffda RBX: 00007fea27885fa0 RCX: 00007fea2763eba9 [ 1320.298309][T28014] RDX: 00002000000008c0 RSI: 00000000c0185500 RDI: 0000000000000005 [ 1320.298323][T28014] RBP: 00007fea260a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.298335][T28014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.298346][T28014] R13: 00007fea27886038 R14: 00007fea27885fa0 R15: 00007ffc9b2ba9f8 [ 1320.298439][T28014] [ 1320.545039][T28015] Process accounting resumed [ 1320.599349][T28029] IPv6: Can't replace route, no match found [ 1320.685952][T28038] pim6reg: entered allmulticast mode [ 1320.686896][T28038] pim6reg: left allmulticast mode [ 1320.694653][T28046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19126'. [ 1320.729165][T28044] team0: Port device dummy0 added [ 1320.857196][T28060] FAULT_INJECTION: forcing a failure. [ 1320.857196][T28060] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.869976][T28060] CPU: 0 UID: 0 PID: 28060 Comm: syz.6.19138 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1320.870015][T28060] Tainted: [W]=WARN [ 1320.870024][T28060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1320.870078][T28060] Call Trace: [ 1320.870085][T28060] [ 1320.870094][T28060] __dump_stack+0x1d/0x30 [ 1320.870120][T28060] dump_stack_lvl+0xe8/0x140 [ 1320.870201][T28060] dump_stack+0x15/0x1b [ 1320.870218][T28060] should_fail_ex+0x265/0x280 [ 1320.870247][T28060] ? __pfx_proc_self_get_link+0x10/0x10 [ 1320.870278][T28060] ? proc_self_get_link+0x97/0x110 [ 1320.870357][T28060] should_failslab+0x8c/0xb0 [ 1320.870382][T28060] __kmalloc_cache_noprof+0x4c/0x320 [ 1320.870414][T28060] ? __pfx_proc_self_get_link+0x10/0x10 [ 1320.870471][T28060] proc_self_get_link+0x97/0x110 [ 1320.870562][T28060] pick_link+0x47d/0x830 [ 1320.870606][T28060] step_into+0x7b6/0x820 [ 1320.870642][T28060] path_openat+0x13e8/0x2170 [ 1320.870702][T28060] do_filp_open+0x109/0x230 [ 1320.870753][T28060] do_sys_openat2+0xa6/0x110 [ 1320.870847][T28060] __x64_sys_openat+0xf2/0x120 [ 1320.870896][T28060] x64_sys_call+0x2e9c/0x2ff0 [ 1320.870926][T28060] do_syscall_64+0xd2/0x200 [ 1320.871044][T28060] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1320.871128][T28060] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1320.871176][T28060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.871208][T28060] RIP: 0033:0x7fa69badeba9 [ 1320.871231][T28060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.871257][T28060] RSP: 002b:00007fa69a547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1320.871311][T28060] RAX: ffffffffffffffda RBX: 00007fa69bd25fa0 RCX: 00007fa69badeba9 [ 1320.871329][T28060] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1320.871348][T28060] RBP: 00007fa69a547090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.871363][T28060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.871382][T28060] R13: 00007fa69bd26038 R14: 00007fa69bd25fa0 R15: 00007ffc010b4348 [ 1320.871408][T28060] [ 1320.980735][T28034] lo speed is unknown, defaulting to 1000 [ 1321.025411][T28070] IPv6: Can't replace route, no match found [ 1321.037617][T28034] lo speed is unknown, defaulting to 1000 [ 1321.071059][T28072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1321.103109][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19143'. [ 1321.246123][T28078] bond3 (unregistering): Released all slaves [ 1321.258328][T28034] chnl_net:caif_netlink_parms(): no params data found [ 1321.283815][T28083] SELinux: ebitmap: truncated map [ 1321.284355][T28083] SELinux: failed to load policy [ 1321.362689][T28034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.362790][T28034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.362878][T28034] bridge_slave_0: entered allmulticast mode [ 1321.363529][T28034] bridge_slave_0: entered promiscuous mode [ 1321.366884][T28034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.398756][T28034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.406101][T28034] bridge_slave_1: entered allmulticast mode [ 1321.412765][T28034] bridge_slave_1: entered promiscuous mode [ 1321.425426][T28095] random: crng reseeded on system resumption [ 1321.433302][T28034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.461695][T28093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1321.474675][T28034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.481799][T28093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19150'. [ 1321.484929][T28093] bond1 (unregistering): Released all slaves [ 1321.527724][T28034] team0: Port device team_slave_0 added [ 1321.529027][T28034] team0: Port device team_slave_1 added [ 1321.562821][T28034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.569901][T28034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.595916][T28034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.621643][T28104] ipvlan2: entered promiscuous mode [ 1321.624832][T28109] random: crng reseeded on system resumption [ 1321.627746][T28104] bridge0: port 1(ipvlan2) entered blocking state [ 1321.639448][T28104] bridge0: port 1(ipvlan2) entered disabled state [ 1321.646449][T28104] ipvlan2: entered allmulticast mode [ 1321.651862][T28104] bridge0: entered allmulticast mode [ 1321.657730][T28104] ipvlan2: left allmulticast mode [ 1321.662830][T28104] bridge0: left allmulticast mode [ 1321.674471][T28034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.674786][T28111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.681570][T28034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.681607][T28034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.728261][T28111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.754832][T28034] hsr_slave_0: entered promiscuous mode [ 1321.767003][T28034] hsr_slave_1: entered promiscuous mode [ 1321.774746][T28034] debugfs: 'hsr0' already exists in 'hsr' [ 1321.780574][T28034] Cannot create hsr debugfs directory [ 1321.852516][T28127] netlink: 36 bytes leftover after parsing attributes in process `syz.9.19162'. [ 1321.909354][T28034] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.951129][T28034] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.009226][T28034] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.149680][T28034] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.216123][T28034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1322.226604][T28034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1322.228851][T28034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1322.253123][T28034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1322.359985][T28034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.365273][T28034] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.412261][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.412301][ T5630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.418512][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.434407][ T5613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.490054][T28034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1322.490077][T28034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1322.645555][T28168] IPv6: Can't replace route, no match found [ 1322.668269][T28034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.825048][T28034] veth0_vlan: entered promiscuous mode [ 1322.827773][T28034] veth1_vlan: entered promiscuous mode [ 1322.849683][T28034] veth0_macvtap: entered promiscuous mode [ 1322.851302][T28034] veth1_macvtap: entered promiscuous mode [ 1322.867770][T28034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.872329][T28034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.890925][ T5613] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.900224][ T5613] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.900303][ T5613] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.900421][ T5613] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.280794][T28205] SELinux: ebitmap: truncated map [ 1323.281132][T28205] SELinux: failed to load policy [ 1323.296995][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 1323.297012][ T29] audit: type=1400 audit(1374.252:143288): avc: denied { map } for pid=28207 comm="syz.7.19181" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=241617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1323.297048][ T29] audit: type=1400 audit(1374.252:143289): avc: denied { read write } for pid=28207 comm="syz.7.19181" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=241617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1323.309048][T28210] IPv6: Can't replace route, no match found [ 1323.314974][ T29] audit: type=1400 audit(1374.273:143290): avc: denied { read } for pid=28207 comm="syz.7.19181" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1323.387529][ T29] audit: type=1400 audit(1374.273:143291): avc: denied { open } for pid=28207 comm="syz.7.19181" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1323.414032][T28208] random: crng reseeded on system resumption [ 1323.415417][ T29] audit: type=1400 audit(1374.378:143292): avc: denied { create } for pid=28207 comm="syz.7.19181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1323.415508][ T29] audit: type=1400 audit(1374.378:143293): avc: denied { write } for pid=28207 comm="syz.7.19181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1323.429896][T28208] bridge_slave_0: left allmulticast mode [ 1323.429916][T28208] bridge_slave_0: left promiscuous mode [ 1323.430081][T28208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.435355][T28208] bridge_slave_1: left allmulticast mode [ 1323.435376][T28208] bridge_slave_1: left promiscuous mode [ 1323.435524][T28208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.447031][T28208] bond0: (slave bond_slave_0): Releasing backup interface [ 1323.549649][T28208] bond0: (slave bond_slave_1): Releasing backup interface [ 1323.567115][T28208] team0: Port device team_slave_0 removed [ 1323.590503][T28208] team0: Port device team_slave_1 removed [ 1323.591602][ T29] audit: type=1326 audit(1374.567:143294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.0.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1323.598006][T28208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.619597][ T29] audit: type=1326 audit(1374.567:143295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.0.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1323.626991][T28208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.695223][T28208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.695240][T28208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.740080][ T29] audit: type=1326 audit(1374.630:143296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.0.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1323.740113][ T29] audit: type=1326 audit(1374.630:143297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28215 comm="syz.0.19184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1323.855766][T28231] validate_nla: 4 callbacks suppressed [ 1323.855783][T28231] netlink: 'syz.7.19188': attribute type 1 has an invalid length. [ 1323.855987][T28231] __nla_validate_parse: 2 callbacks suppressed [ 1323.856002][T28231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19188'. [ 1323.870624][T28232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19187'. [ 1323.876278][T28234] random: crng reseeded on system resumption [ 1324.055245][T28249] SELinux: ebitmap: truncated map [ 1324.055797][T28249] SELinux: failed to load policy [ 1324.115977][T28256] netlink: 'syz.2.19199': attribute type 1 has an invalid length. [ 1324.153052][T28256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1324.157111][T28259] netlink: 'syz.9.19200': attribute type 1 has an invalid length. [ 1324.163415][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19199'. [ 1324.175326][T28259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1324.191134][T28256] bond3 (unregistering): Released all slaves [ 1324.197605][T28259] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19200'. [ 1324.211931][T28259] bond1 (unregistering): Released all slaves [ 1324.514764][T28278] netlink: 'syz.0.19208': attribute type 1 has an invalid length. [ 1324.552633][T28278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1324.562951][T28278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19208'. [ 1324.592792][T28278] bond1 (unregistering): Released all slaves [ 1324.706084][T28287] random: crng reseeded on system resumption [ 1324.728252][T28289] netlink: 'syz.6.19211': attribute type 4 has an invalid length. [ 1324.781535][T28293] pim6reg: entered allmulticast mode [ 1324.817702][T28297] netlink: 'syz.6.19215': attribute type 1 has an invalid length. [ 1324.838480][T28297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1324.851243][T28300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19216'. [ 1324.851266][T28300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19216'. [ 1324.894390][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19215'. [ 1324.904829][T28297] bond2 (unregistering): Released all slaves [ 1324.915032][T28306] IPv6: Can't replace route, no match found [ 1324.933284][T28304] SELinux: ebitmap: truncated map [ 1324.933683][T28304] SELinux: failed to load policy [ 1325.250198][T28326] netlink: 'syz.9.19227': attribute type 1 has an invalid length. [ 1325.265976][T28326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1325.275838][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19227'. [ 1325.354346][T28326] bond1 (unregistering): Released all slaves [ 1325.455995][T28344] hub 9-0:1.0: USB hub found [ 1325.460771][T28344] hub 9-0:1.0: 8 ports detected [ 1325.595750][T28349] random: crng reseeded on system resumption [ 1325.717232][T28369] netlink: 'syz.9.19242': attribute type 1 has an invalid length. [ 1325.728391][T28370] netlink: 'syz.6.19239': attribute type 1 has an invalid length. [ 1325.731328][T28369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1325.746936][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19242'. [ 1325.761891][T28370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1325.772741][T28369] bond1 (unregistering): Released all slaves [ 1325.784456][T28370] bond2 (unregistering): Released all slaves [ 1325.853855][T28380] random: crng reseeded on system resumption [ 1325.917136][T28388] IPv6: Can't replace route, no match found [ 1325.940703][T28393] can0: slcan on ptm0. [ 1325.941463][T28395] random: crng reseeded on system resumption [ 1325.987367][T28392] can0 (unregistered): slcan off ptm0. [ 1326.070770][T28404] netlink: 'syz.2.19257': attribute type 1 has an invalid length. [ 1326.113581][T28404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1326.139720][T28406] bond3 (unregistering): Released all slaves [ 1326.191509][T28412] random: crng reseeded on system resumption [ 1326.529540][T28424] IPv6: Can't replace route, no match found [ 1326.553461][T28426] ipvlan2: entered promiscuous mode [ 1326.576123][T28426] bridge0: port 1(ipvlan2) entered blocking state [ 1326.582675][T28426] bridge0: port 1(ipvlan2) entered disabled state [ 1326.668005][T28426] ipvlan2: entered allmulticast mode [ 1326.673404][T28426] bridge0: entered allmulticast mode [ 1326.711028][T28426] ipvlan2: left allmulticast mode [ 1326.716143][T28426] bridge0: left allmulticast mode [ 1326.733510][T28428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1326.745650][T28430] bond1 (unregistering): Released all slaves [ 1326.801807][T28438] can0: slcan on ptm0. [ 1326.864294][T28437] can0 (unregistered): slcan off ptm0. [ 1326.950888][T28450] SELinux: ebitmap: truncated map [ 1326.956312][T28450] SELinux: failed to load policy [ 1326.987444][T28452] hub 9-0:1.0: USB hub found [ 1326.996567][T28452] hub 9-0:1.0: 8 ports detected [ 1327.040803][T28461] ipvlan2: entered promiscuous mode [ 1327.047327][T28461] bridge0: port 1(ipvlan2) entered blocking state [ 1327.053931][T28461] bridge0: port 1(ipvlan2) entered disabled state [ 1327.060970][T28461] ipvlan2: entered allmulticast mode [ 1327.066391][T28461] bridge0: entered allmulticast mode [ 1327.074747][T28461] ipvlan2: left allmulticast mode [ 1327.079844][T28461] bridge0: left allmulticast mode [ 1327.153494][T28470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1327.165318][T28470] bond3 (unregistering): Released all slaves [ 1327.364746][T28496] random: crng reseeded on system resumption [ 1327.547122][T28486] lo speed is unknown, defaulting to 1000 [ 1327.687104][T28486] lo speed is unknown, defaulting to 1000 [ 1327.834692][T28506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1327.868377][T28506] bond1 (unregistering): Released all slaves [ 1327.914280][T28511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1327.931135][T28511] bond1 (unregistering): Released all slaves [ 1327.975842][T28486] chnl_net:caif_netlink_parms(): no params data found [ 1327.998274][T28520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1328.058145][T28486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.065318][T28486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.075752][T28486] bridge_slave_0: entered allmulticast mode [ 1328.082583][T28486] bridge_slave_0: entered promiscuous mode [ 1328.094578][T28486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.101808][T28486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.109387][T28486] bridge_slave_1: entered allmulticast mode [ 1328.116077][T28486] bridge_slave_1: entered promiscuous mode [ 1328.136158][T28486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.177056][T28486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.202153][T28540] hub 9-0:1.0: USB hub found [ 1328.207373][T28486] team0: Port device team_slave_0 added [ 1328.213510][T28540] hub 9-0:1.0: 8 ports detected [ 1328.222878][T28541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1328.234014][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 1328.234029][ T29] audit: type=1326 audit(1379.438:143441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28543 comm="syz.7.19304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14439eeba9 code=0x0 [ 1328.265760][T28486] team0: Port device team_slave_1 added [ 1328.291119][T28541] bond1 (unregistering): Released all slaves [ 1328.302659][T28486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.309700][T28486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.335886][T28486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.349269][T28486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.356342][T28486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.382416][T28486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.419887][T28486] hsr_slave_0: entered promiscuous mode [ 1328.427018][T28486] hsr_slave_1: entered promiscuous mode [ 1328.433128][T28486] debugfs: 'hsr0' already exists in 'hsr' [ 1328.438957][T28486] Cannot create hsr debugfs directory [ 1328.505342][T28486] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.515202][T28486] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.571025][T28486] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.581199][T28486] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.600736][T28552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1328.612074][T28552] bond2 (unregistering): Released all slaves [ 1328.627048][T28486] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.637019][T28486] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.666070][T28555] validate_nla: 7 callbacks suppressed [ 1328.666089][T28555] netlink: 'syz.6.19307': attribute type 1 has an invalid length. [ 1328.685252][T28555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1328.696184][T28555] __nla_validate_parse: 13 callbacks suppressed [ 1328.696204][T28555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19307'. [ 1328.712424][T28486] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.722292][T28486] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.735597][T28555] bond2 (unregistering): Released all slaves [ 1328.799460][T28486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1328.807179][ T29] audit: type=1326 audit(1380.036:143442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28557 comm="syz.6.19308" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa69badeba9 code=0x0 [ 1328.808721][T28486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1328.839025][T28486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1328.848365][T28486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1328.888065][T28486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.909976][T28486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.912895][T28570] random: crng reseeded on system resumption [ 1328.922035][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.930028][ T5602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.953699][T28486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1328.964147][T28486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1328.979810][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.986997][ T5602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.057852][T28486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.148738][T28486] veth0_vlan: entered promiscuous mode [ 1329.157355][T28486] veth1_vlan: entered promiscuous mode [ 1329.176680][T28486] veth0_macvtap: entered promiscuous mode [ 1329.186663][T28486] veth1_macvtap: entered promiscuous mode [ 1329.208760][T28486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.222791][T28486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.233876][ T5630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.245726][ T5630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.296811][ T5630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.317199][ T5630] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.347142][T28596] netlink: 36 bytes leftover after parsing attributes in process `syz.9.19322'. [ 1329.356291][T28596] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19322'. [ 1329.382219][T28597] SELinux: ebitmap: truncated map [ 1329.387922][T28597] SELinux: failed to load policy [ 1329.568374][T28609] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19314'. [ 1329.950993][T28615] netlink: 'syz.7.19317': attribute type 1 has an invalid length. [ 1329.976992][T28615] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19317'. [ 1330.050211][T28621] netlink: 'syz.6.19320': attribute type 1 has an invalid length. [ 1330.064477][T28621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1330.081621][T28621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19320'. [ 1330.096544][T28621] bond2 (unregistering): Released all slaves [ 1330.154212][T28630] IPv6: Can't replace route, no match found [ 1330.175239][T28631] SELinux: ebitmap: truncated map [ 1330.181625][T28631] SELinux: failed to load policy [ 1330.194582][T28634] random: crng reseeded on system resumption [ 1330.263668][T28638] can0: slcan on ptm0. [ 1330.297088][T28641] random: crng reseeded on system resumption [ 1330.343075][T28637] can0 (unregistered): slcan off ptm0. [ 1330.350892][ T29] audit: type=1326 audit(1381.653:143443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.374290][ T29] audit: type=1326 audit(1381.653:143444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.374324][ T29] audit: type=1326 audit(1381.653:143445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.420878][ T29] audit: type=1326 audit(1381.653:143446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.444244][ T29] audit: type=1326 audit(1381.653:143447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.467693][ T29] audit: type=1326 audit(1381.653:143448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.491037][ T29] audit: type=1326 audit(1381.653:143449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.514485][ T29] audit: type=1326 audit(1381.653:143450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28645 comm="syz.6.19331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1330.553879][T28643] netlink: 20 bytes leftover after parsing attributes in process `syz.9.19330'. [ 1330.666112][T28656] netlink: 'syz.6.19333': attribute type 1 has an invalid length. [ 1330.677910][T28656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1330.701099][T28656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19333'. [ 1330.712234][T28656] bond2 (unregistering): Released all slaves [ 1330.820967][T28667] netlink: 'syz.6.19336': attribute type 1 has an invalid length. [ 1330.836022][T28667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1330.839800][T28667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19336'. [ 1330.857298][T28667] bond2 (unregistering): Released all slaves [ 1330.929288][T28670] netlink: 'syz.9.19338': attribute type 1 has an invalid length. [ 1330.935259][T28670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1330.935506][T28675] random: crng reseeded on system resumption [ 1330.937963][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19338'. [ 1330.955620][T28670] bond1 (unregistering): Released all slaves [ 1331.109652][T28682] ipvlan2: entered promiscuous mode [ 1331.110900][T28682] bridge0: port 3(ipvlan2) entered blocking state [ 1331.110938][T28682] bridge0: port 3(ipvlan2) entered disabled state [ 1331.111082][T28682] ipvlan2: entered allmulticast mode [ 1331.111100][T28682] bridge0: entered allmulticast mode [ 1331.111617][T28682] ipvlan2: left allmulticast mode [ 1331.111633][T28682] bridge0: left allmulticast mode [ 1332.002043][T28732] can0: slcan on ptm0. [ 1332.030208][T28737] SELinux: ebitmap: truncated map [ 1332.036106][T28737] SELinux: failed to load policy [ 1332.083357][T28741] random: crng reseeded on system resumption [ 1332.144363][T28746] random: crng reseeded on system resumption [ 1332.160138][T28731] can0 (unregistered): slcan off ptm0. [ 1332.216016][T28755] netlink: 'syz.0.19370': attribute type 4 has an invalid length. [ 1332.314733][T28764] SELinux: ebitmap: truncated map [ 1332.321029][T28764] SELinux: failed to load policy [ 1332.331796][T28766] hub 9-0:1.0: USB hub found [ 1332.336621][T28766] hub 9-0:1.0: 8 ports detected [ 1332.373051][T28770] netlink: 'syz.2.19375': attribute type 1 has an invalid length. [ 1332.697116][T28777] random: crng reseeded on system resumption [ 1332.728883][T28781] ipvlan2: entered promiscuous mode [ 1332.729700][T28781] bridge0: port 1(ipvlan2) entered blocking state [ 1332.741280][T28781] bridge0: port 1(ipvlan2) entered disabled state [ 1332.751384][T28781] ipvlan2: entered allmulticast mode [ 1332.751400][T28781] bridge0: entered allmulticast mode [ 1332.752113][T28781] ipvlan2: left allmulticast mode [ 1332.767897][T28781] bridge0: left allmulticast mode [ 1333.034240][T28791] netlink: 'syz.9.19383': attribute type 1 has an invalid length. [ 1333.052968][T28791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1333.068320][T28791] bond1 (unregistering): Released all slaves [ 1333.198468][T28800] can0: slcan on ptm0. [ 1333.255748][T28799] can0 (unregistered): slcan off ptm0. [ 1333.432595][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 1333.432649][ T29] audit: type=1326 audit(1384.897:143619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.432937][ T29] audit: type=1326 audit(1384.897:143620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.433074][ T29] audit: type=1326 audit(1384.897:143621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.433337][ T29] audit: type=1326 audit(1384.897:143622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.533705][ T29] audit: type=1326 audit(1384.908:143623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.533829][ T29] audit: type=1326 audit(1384.908:143624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.533861][ T29] audit: type=1326 audit(1384.908:143625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.533895][ T29] audit: type=1326 audit(1384.908:143626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.533963][ T29] audit: type=1326 audit(1384.908:143627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.533998][ T29] audit: type=1326 audit(1384.908:143628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28803 comm="syz.9.19398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1333.690891][T28810] netlink: 'syz.6.19389': attribute type 1 has an invalid length. [ 1333.714995][T28810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1333.725122][T28810] __nla_validate_parse: 6 callbacks suppressed [ 1333.725140][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19389'. [ 1333.744285][T28810] bond2 (unregistering): Released all slaves [ 1333.752209][T28813] SELinux: ebitmap: truncated map [ 1333.758363][T28813] SELinux: failed to load policy [ 1333.787212][T28819] netlink: 'syz.7.19393': attribute type 4 has an invalid length. [ 1333.819868][T28817] ipvlan2: entered promiscuous mode [ 1333.829471][T28817] bridge0: port 3(ipvlan2) entered blocking state [ 1333.835980][T28817] bridge0: port 3(ipvlan2) entered disabled state [ 1333.842971][T28817] ipvlan2: entered allmulticast mode [ 1333.848428][T28817] bridge0: entered allmulticast mode [ 1333.856064][T28817] ipvlan2: left allmulticast mode [ 1333.861130][T28817] bridge0: left allmulticast mode [ 1334.058027][T28855] netlink: 'syz.9.19407': attribute type 1 has an invalid length. [ 1334.071507][T28855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1334.081202][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19407'. [ 1334.092625][T28855] bond1 (unregistering): Released all slaves [ 1334.737063][T28874] ipvlan0: entered promiscuous mode [ 1334.743306][T28874] bridge0: port 1(ipvlan0) entered blocking state [ 1334.743348][T28874] bridge0: port 1(ipvlan0) entered disabled state [ 1334.743434][T28874] ipvlan0: entered allmulticast mode [ 1334.743451][T28874] bridge0: entered allmulticast mode [ 1334.743864][T28874] ipvlan0: left allmulticast mode [ 1334.743881][T28874] bridge0: left allmulticast mode [ 1334.775161][T28873] netlink: 'syz.0.19414': attribute type 4 has an invalid length. [ 1334.959781][T28888] netlink: 'syz.7.19419': attribute type 1 has an invalid length. [ 1334.961733][T28890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19415'. [ 1334.977682][T28888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1335.010799][T28892] random: crng reseeded on system resumption [ 1335.035573][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19419'. [ 1335.047588][T28888] bond1 (unregistering): Released all slaves [ 1335.094201][T28898] SELinux: ebitmap: truncated map [ 1335.094754][T28898] SELinux: failed to load policy [ 1335.172740][T28904] netlink: 'syz.7.19425': attribute type 4 has an invalid length. [ 1335.864295][T28927] netlink: 'syz.0.19432': attribute type 1 has an invalid length. [ 1335.879491][T28927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1335.888654][T28927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19432'. [ 1335.899994][T28927] bond2 (unregistering): Released all slaves [ 1335.939734][T28932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19430'. [ 1335.943371][T28933] random: crng reseeded on system resumption [ 1336.000628][T28935] SELinux: ebitmap: truncated map [ 1336.006772][T28935] SELinux: failed to load policy [ 1336.036199][T28940] netlink: 'syz.9.19436': attribute type 1 has an invalid length. [ 1336.045858][T28943] netlink: 'syz.0.19437': attribute type 1 has an invalid length. [ 1336.062368][T28943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1336.082802][T28943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19437'. [ 1336.095900][T28950] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19436'. [ 1336.096482][T28940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1336.118971][T28950] bond1 (unregistering): Released all slaves [ 1336.131243][T28943] bond2 (unregistering): Released all slaves [ 1336.328032][T28968] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19443'. [ 1336.383122][T28974] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19445'. [ 1336.458248][T28978] SELinux: ebitmap: truncated map [ 1336.464730][T28978] SELinux: failed to load policy [ 1336.744424][T28989] ipvlan2: entered promiscuous mode [ 1336.751634][T28989] bridge0: port 1(ipvlan2) entered blocking state [ 1336.751734][T28989] bridge0: port 1(ipvlan2) entered disabled state [ 1336.751954][T28989] ipvlan2: entered allmulticast mode [ 1336.751974][T28989] bridge0: entered allmulticast mode [ 1336.753038][T28989] ipvlan2: left allmulticast mode [ 1336.753056][T28989] bridge0: left allmulticast mode [ 1337.149375][T29007] random: crng reseeded on system resumption [ 1337.231199][T29012] SELinux: ebitmap: truncated map [ 1337.238308][T29012] SELinux: failed to load policy [ 1337.264387][T29017] netlink: 'syz.9.19464': attribute type 1 has an invalid length. [ 1337.281582][T29017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.317835][T29017] bond1 (unregistering): Released all slaves [ 1337.531011][T29036] random: crng reseeded on system resumption [ 1337.887937][T29059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.897658][T29059] bond1 (unregistering): Released all slaves [ 1337.958334][T29062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1337.967220][T29062] bond1 (unregistering): Released all slaves [ 1338.326979][T29070] ipvlan2: entered promiscuous mode [ 1338.333748][T29070] bridge0: port 3(ipvlan2) entered blocking state [ 1338.340259][T29070] bridge0: port 3(ipvlan2) entered disabled state [ 1338.346891][T29070] ipvlan2: entered allmulticast mode [ 1338.346914][T29070] bridge0: entered allmulticast mode [ 1338.347393][T29070] ipvlan2: left allmulticast mode [ 1338.347411][T29070] bridge0: left allmulticast mode [ 1338.460973][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 1338.460991][ T29] audit: type=1326 audit(1390.178:143896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.461160][ T29] audit: type=1326 audit(1390.178:143897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.461254][ T29] audit: type=1326 audit(1390.178:143898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.462165][ T29] audit: type=1326 audit(1390.178:143899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.563821][ T29] audit: type=1326 audit(1390.209:143900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.563919][ T29] audit: type=1326 audit(1390.209:143901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.563946][ T29] audit: type=1326 audit(1390.230:143902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.563980][ T29] audit: type=1326 audit(1390.230:143903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.564014][ T29] audit: type=1326 audit(1390.230:143904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.564160][ T29] audit: type=1326 audit(1390.230:143905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29087 comm="syz.2.19485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49c90eba9 code=0x7ffc0000 [ 1338.591505][T29100] __nla_validate_parse: 5 callbacks suppressed [ 1338.591526][T29100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19488'. [ 1338.591543][T29100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19488'. [ 1338.741916][T29105] validate_nla: 3 callbacks suppressed [ 1338.741932][T29105] netlink: 'syz.9.19492': attribute type 1 has an invalid length. [ 1338.759854][T29105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1338.800773][T29110] netlink: 'syz.6.19494': attribute type 1 has an invalid length. [ 1338.810522][T29105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19492'. [ 1338.825704][T29110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1338.838718][T29105] bond1 (unregistering): Released all slaves [ 1338.856365][T29110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19494'. [ 1338.901115][T29110] bond2 (unregistering): Released all slaves [ 1338.929886][T29119] can0: slcan on ptm0. [ 1338.937058][T29118] hub 9-0:1.0: USB hub found [ 1338.941745][T29118] hub 9-0:1.0: 8 ports detected [ 1338.978934][T29125] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1339.027554][T29117] can0 (unregistered): slcan off ptm0. [ 1339.349802][T29148] SELinux: ebitmap: truncated map [ 1339.350142][T29148] SELinux: failed to load policy [ 1339.709692][T29169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19516'. [ 1339.709720][T29169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19516'. [ 1339.746651][T29173] netlink: 'syz.2.19518': attribute type 1 has an invalid length. [ 1339.756269][T29173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1339.759732][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19518'. [ 1339.776780][T29173] bond1 (unregistering): Released all slaves [ 1339.974833][T29186] ipvlan2: entered promiscuous mode [ 1339.975919][T29186] bridge0: port 3(ipvlan2) entered blocking state [ 1339.975952][T29186] bridge0: port 3(ipvlan2) entered disabled state [ 1339.976028][T29186] ipvlan2: entered allmulticast mode [ 1339.976044][T29186] bridge0: entered allmulticast mode [ 1339.976603][T29186] ipvlan2: left allmulticast mode [ 1339.976620][T29186] bridge0: left allmulticast mode [ 1340.104768][T29191] tipc: New replicast peer: 255.255.255.255 [ 1340.110910][T29191] tipc: Enabled bearer , priority 10 [ 1340.123915][T29196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19526'. [ 1340.392906][T29215] SELinux: ebitmap: truncated map [ 1340.399602][T29215] SELinux: failed to load policy [ 1340.588758][T29230] netlink: 'syz.7.19537': attribute type 1 has an invalid length. [ 1340.606322][T29230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1340.612505][T29230] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19537'. [ 1340.625961][T29230] bond1 (unregistering): Released all slaves [ 1340.708785][T29233] netlink: 'syz.7.19538': attribute type 1 has an invalid length. [ 1340.770104][T29236] Process accounting resumed [ 1340.779997][T29239] netlink: 36 bytes leftover after parsing attributes in process `syz.7.19541'. [ 1340.955062][T29245] SELinux: ebitmap: truncated map [ 1340.974296][T29245] SELinux: failed to load policy [ 1341.042571][T29251] random: crng reseeded on system resumption [ 1341.095576][T29255] can0: slcan on ptm0. [ 1341.129933][T29257] can0: slcan on ptm1. [ 1341.142455][T29254] can0 (unregistered): slcan off ptm0. [ 1341.168520][T29259] netlink: 'syz.6.19550': attribute type 1 has an invalid length. [ 1341.184138][T29259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1341.199337][T29256] can0 (unregistered): slcan off ptm1. [ 1341.220178][T29259] bond2 (unregistering): Released all slaves [ 1341.322361][T29270] SELinux: ebitmap: truncated map [ 1341.328388][T29270] SELinux: failed to load policy [ 1341.404473][T29283] hub 9-0:1.0: USB hub found [ 1341.411020][T29283] hub 9-0:1.0: 8 ports detected [ 1341.509771][T29290] can0: slcan on ptm0. [ 1341.571533][T29289] can0 (unregistered): slcan off ptm0. [ 1341.679650][T29306] netlink: 'syz.2.19566': attribute type 1 has an invalid length. [ 1341.693847][T29306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1341.705541][T29306] bond1 (unregistering): Released all slaves [ 1342.115869][T29314] Process accounting resumed [ 1342.211938][T29323] can0: slcan on ptm0. [ 1342.216156][T29324] netlink: 'syz.0.19574': attribute type 1 has an invalid length. [ 1342.224220][T29324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1342.246414][T29324] bond2 (unregistering): Released all slaves [ 1342.370999][T29322] can0 (unregistered): slcan off ptm0. [ 1342.524042][T29355] ipvlan2: entered promiscuous mode [ 1342.525539][T29355] bridge0: port 3(ipvlan2) entered blocking state [ 1342.536846][T29355] bridge0: port 3(ipvlan2) entered disabled state [ 1342.537434][T29355] ipvlan2: entered allmulticast mode [ 1342.548640][T29355] bridge0: entered allmulticast mode [ 1342.554624][T29355] ipvlan2: left allmulticast mode [ 1342.554645][T29355] bridge0: left allmulticast mode [ 1342.573321][T29357] hub 9-0:1.0: USB hub found [ 1342.573376][T29357] hub 9-0:1.0: 8 ports detected [ 1342.617575][T29360] netlink: 'syz.2.19587': attribute type 1 has an invalid length. [ 1342.632813][T29360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1342.644668][T29360] bond1 (unregistering): Released all slaves [ 1342.654974][T29365] FAULT_INJECTION: forcing a failure. [ 1342.654974][T29365] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.667801][T29365] CPU: 1 UID: 0 PID: 29365 Comm: syz.0.19589 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1342.667852][T29365] Tainted: [W]=WARN [ 1342.667875][T29365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1342.667892][T29365] Call Trace: [ 1342.667901][T29365] [ 1342.667911][T29365] __dump_stack+0x1d/0x30 [ 1342.667939][T29365] dump_stack_lvl+0xe8/0x140 [ 1342.667978][T29365] dump_stack+0x15/0x1b [ 1342.667998][T29365] should_fail_ex+0x265/0x280 [ 1342.668024][T29365] ? audit_log_d_path+0x8d/0x150 [ 1342.668059][T29365] should_failslab+0x8c/0xb0 [ 1342.668090][T29365] __kmalloc_cache_noprof+0x4c/0x320 [ 1342.668187][T29365] audit_log_d_path+0x8d/0x150 [ 1342.668236][T29365] audit_log_d_path_exe+0x42/0x70 [ 1342.668278][T29365] audit_log_task+0x1e9/0x250 [ 1342.668316][T29365] audit_seccomp+0x61/0x100 [ 1342.668371][T29365] ? __seccomp_filter+0x68c/0x10d0 [ 1342.668400][T29365] __seccomp_filter+0x69d/0x10d0 [ 1342.668425][T29365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1342.668604][T29365] ? vfs_write+0x7e8/0x960 [ 1342.668632][T29365] ? __rcu_read_unlock+0x4f/0x70 [ 1342.668660][T29365] ? __fget_files+0x184/0x1c0 [ 1342.668690][T29365] __secure_computing+0x82/0x150 [ 1342.668782][T29365] syscall_trace_enter+0xcf/0x1e0 [ 1342.668825][T29365] do_syscall_64+0xac/0x200 [ 1342.668932][T29365] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1342.668964][T29365] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1342.668999][T29365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.669072][T29365] RIP: 0033:0x7fcc9a86eba9 [ 1342.669088][T29365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.669135][T29365] RSP: 002b:00007fcc992d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1342.669167][T29365] RAX: ffffffffffffffda RBX: 00007fcc9aab5fa0 RCX: 00007fcc9a86eba9 [ 1342.669183][T29365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1342.669199][T29365] RBP: 00007fcc992d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.669214][T29365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.669266][T29365] R13: 00007fcc9aab6038 R14: 00007fcc9aab5fa0 R15: 00007ffdb4627a28 [ 1342.669290][T29365] [ 1342.928155][T29367] SELinux: ebitmap: truncated map [ 1342.935604][T29367] SELinux: failed to load policy [ 1343.049506][T29383] ipvlan2: entered promiscuous mode [ 1343.056759][T29383] bridge0: port 3(ipvlan2) entered blocking state [ 1343.063299][T29383] bridge0: port 3(ipvlan2) entered disabled state [ 1343.070262][T29383] ipvlan2: entered allmulticast mode [ 1343.075599][T29383] bridge0: entered allmulticast mode [ 1343.083003][T29383] ipvlan2: left allmulticast mode [ 1343.088178][T29383] bridge0: left allmulticast mode [ 1343.335496][T29393] random: crng reseeded on system resumption [ 1343.410411][T29397] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1343.572786][T29404] sctp: [Deprecated]: syz.7.19606 (pid 29404) Use of int in max_burst socket option deprecated. [ 1343.572786][T29404] Use struct sctp_assoc_value instead [ 1343.577719][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 1343.577734][ T29] audit: type=1400 audit(1395.542:144248): avc: denied { shutdown } for pid=29402 comm="syz.7.19606" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1343.616864][T29406] __nla_validate_parse: 7 callbacks suppressed [ 1343.616887][T29406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19601'. [ 1343.665638][ T29] audit: type=1400 audit(1395.616:144249): avc: denied { create } for pid=29402 comm="syz.7.19606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1343.669661][T29406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19601'. [ 1343.728775][ T29] audit: type=1326 audit(1395.700:144250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.729005][ T29] audit: type=1326 audit(1395.700:144251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.729560][ T29] audit: type=1326 audit(1395.700:144252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.730552][ T29] audit: type=1326 audit(1395.700:144253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.743193][ T29] audit: type=1326 audit(1395.721:144254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.743405][ T29] audit: type=1326 audit(1395.721:144255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.744454][ T29] audit: type=1326 audit(1395.721:144256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.746991][ T29] audit: type=1326 audit(1395.721:144257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29402 comm="syz.7.19606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1343.869060][T29413] netlink: 'syz.9.19608': attribute type 1 has an invalid length. [ 1343.918503][T29413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1343.920351][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19608'. [ 1343.936337][T29417] bond1 (unregistering): Released all slaves [ 1344.197170][T29422] can0: slcan on ptm0. [ 1344.293776][T29421] can0 (unregistered): slcan off ptm0. [ 1344.480392][T29429] hub 9-0:1.0: USB hub found [ 1344.480447][T29429] hub 9-0:1.0: 8 ports detected [ 1344.757759][T29432] FAULT_INJECTION: forcing a failure. [ 1344.757759][T29432] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.757790][T29432] CPU: 1 UID: 0 PID: 29432 Comm: syz.7.19613 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1344.757823][T29432] Tainted: [W]=WARN [ 1344.757832][T29432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1344.757865][T29432] Call Trace: [ 1344.757873][T29432] [ 1344.757881][T29432] __dump_stack+0x1d/0x30 [ 1344.757903][T29432] dump_stack_lvl+0xe8/0x140 [ 1344.757922][T29432] dump_stack+0x15/0x1b [ 1344.757940][T29432] should_fail_ex+0x265/0x280 [ 1344.758085][T29432] should_failslab+0x8c/0xb0 [ 1344.758114][T29432] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1344.758145][T29432] ? __alloc_skb+0x101/0x320 [ 1344.758168][T29432] __alloc_skb+0x101/0x320 [ 1344.758232][T29432] xfrm_alloc_userspi+0x535/0x700 [ 1344.758269][T29432] ? __nla_parse+0x40/0x60 [ 1344.758304][T29432] xfrm_user_rcv_msg+0x566/0x660 [ 1344.758381][T29432] ? __kfree_skb+0x109/0x150 [ 1344.758404][T29432] ? nlmon_xmit+0x4f/0x60 [ 1344.758454][T29432] ? consume_skb+0x49/0x150 [ 1344.758500][T29432] netlink_rcv_skb+0x120/0x220 [ 1344.758527][T29432] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1344.758562][T29432] xfrm_netlink_rcv+0x48/0x60 [ 1344.758595][T29432] netlink_unicast+0x5c0/0x690 [ 1344.758658][T29432] netlink_sendmsg+0x58b/0x6b0 [ 1344.758687][T29432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.758774][T29432] __sock_sendmsg+0x142/0x180 [ 1344.758848][T29432] ____sys_sendmsg+0x31e/0x4e0 [ 1344.758885][T29432] ___sys_sendmsg+0x17b/0x1d0 [ 1344.758931][T29432] __x64_sys_sendmsg+0xd4/0x160 [ 1344.759036][T29432] x64_sys_call+0x191e/0x2ff0 [ 1344.759106][T29432] do_syscall_64+0xd2/0x200 [ 1344.759142][T29432] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1344.759170][T29432] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1344.759277][T29432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.759344][T29432] RIP: 0033:0x7f14439eeba9 [ 1344.759363][T29432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1344.759391][T29432] RSP: 002b:00007f1442457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.759493][T29432] RAX: ffffffffffffffda RBX: 00007f1443c35fa0 RCX: 00007f14439eeba9 [ 1344.759531][T29432] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000006 [ 1344.759546][T29432] RBP: 00007f1442457090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.759559][T29432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.759620][T29432] R13: 00007f1443c36038 R14: 00007f1443c35fa0 R15: 00007ffdad1720f8 [ 1344.759680][T29432] [ 1344.879061][T29434] lo speed is unknown, defaulting to 1000 [ 1344.943303][T29441] SELinux: ebitmap: truncated map [ 1345.058309][T29434] lo speed is unknown, defaulting to 1000 [ 1345.062451][T29441] SELinux: failed to load policy [ 1345.311663][T29461] netlink: 'syz.6.19626': attribute type 1 has an invalid length. [ 1345.360103][T29461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1345.363289][T29466] netlink: 25 bytes leftover after parsing attributes in process `syz.2.19628'. [ 1345.392705][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19626'. [ 1345.429737][T29472] netlink: 25 bytes leftover after parsing attributes in process `syz.2.19630'. [ 1345.448064][T29467] bond2 (unregistering): Released all slaves [ 1345.545645][T29475] SELinux: ebitmap: truncated map [ 1345.554609][T29475] SELinux: failed to load policy [ 1346.182134][T29514] FAULT_INJECTION: forcing a failure. [ 1346.182134][T29514] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.182163][T29514] CPU: 0 UID: 0 PID: 29514 Comm: syz.0.19646 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1346.182243][T29514] Tainted: [W]=WARN [ 1346.182252][T29514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1346.182268][T29514] Call Trace: [ 1346.182275][T29514] [ 1346.182343][T29514] __dump_stack+0x1d/0x30 [ 1346.182367][T29514] dump_stack_lvl+0xe8/0x140 [ 1346.182392][T29514] dump_stack+0x15/0x1b [ 1346.182412][T29514] should_fail_ex+0x265/0x280 [ 1346.182517][T29514] should_failslab+0x8c/0xb0 [ 1346.182549][T29514] kmem_cache_alloc_noprof+0x50/0x310 [ 1346.182691][T29514] ? audit_log_start+0x365/0x6c0 [ 1346.182760][T29514] audit_log_start+0x365/0x6c0 [ 1346.182798][T29514] ? do_user_addr_fault+0xceb/0x1090 [ 1346.182843][T29514] audit_seccomp+0x48/0x100 [ 1346.182958][T29514] ? __seccomp_filter+0x68c/0x10d0 [ 1346.182987][T29514] __seccomp_filter+0x69d/0x10d0 [ 1346.183016][T29514] ? strncpy_from_user+0x177/0x230 [ 1346.183117][T29514] ? strncpy_from_user+0x1eb/0x230 [ 1346.183238][T29514] __secure_computing+0x82/0x150 [ 1346.183261][T29514] syscall_trace_enter+0xcf/0x1e0 [ 1346.183288][T29514] do_syscall_64+0xac/0x200 [ 1346.183422][T29514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1346.183518][T29514] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1346.183551][T29514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.183574][T29514] RIP: 0033:0x7fcc9a86d5bc [ 1346.183595][T29514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1346.183614][T29514] RSP: 002b:00007fcc992d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1346.183634][T29514] RAX: ffffffffffffffda RBX: 00007fcc9aab5fa0 RCX: 00007fcc9a86d5bc [ 1346.183648][T29514] RDX: 000000000000000f RSI: 00007fcc992d70a0 RDI: 0000000000000003 [ 1346.183661][T29514] RBP: 00007fcc992d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.183674][T29514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.183687][T29514] R13: 00007fcc9aab6038 R14: 00007fcc9aab5fa0 R15: 00007ffdb4627a28 [ 1346.183773][T29514] [ 1346.259569][T29522] ipvlan2: entered promiscuous mode [ 1346.443567][T29522] bridge0: port 3(ipvlan2) entered blocking state [ 1346.443624][T29522] bridge0: port 3(ipvlan2) entered disabled state [ 1346.443788][T29522] ipvlan2: entered allmulticast mode [ 1346.443802][T29522] bridge0: entered allmulticast mode [ 1346.444612][T29522] ipvlan2: left allmulticast mode [ 1346.472468][T29522] bridge0: left allmulticast mode [ 1346.502012][T29518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1346.513395][T29518] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1346.569955][T29533] netlink: 'syz.0.19655': attribute type 1 has an invalid length. [ 1346.583932][T29533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1346.590613][T29533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19655'. [ 1346.595089][T29533] bond2 (unregistering): Released all slaves [ 1346.608965][T29538] netlink: 'syz.6.19656': attribute type 4 has an invalid length. [ 1346.671166][T29541] netlink: 'syz.6.19657': attribute type 1 has an invalid length. [ 1346.691333][T29541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1346.838877][T29541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19657'. [ 1346.863755][T29541] bond2 (unregistering): Released all slaves [ 1347.126999][T29570] netlink: 'syz.0.19668': attribute type 4 has an invalid length. [ 1347.270268][T29576] hub 9-0:1.0: USB hub found [ 1347.270324][T29576] hub 9-0:1.0: 8 ports detected [ 1347.421174][T29578] netlink: 'syz.9.19671': attribute type 1 has an invalid length. [ 1347.471578][T29581] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19671'. [ 1347.471667][T29578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1347.486081][T29581] bond1 (unregistering): Released all slaves [ 1347.879120][T29597] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 1347.889665][T29596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19678'. [ 1347.930730][T29599] netlink: 'syz.9.19679': attribute type 4 has an invalid length. [ 1347.998694][T29608] netlink: 'syz.0.19683': attribute type 1 has an invalid length. [ 1348.006952][T29608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1348.035226][T29608] bond2 (unregistering): Released all slaves [ 1348.202153][T29621] Process accounting resumed [ 1348.232373][T29626] netlink: 'syz.7.19690': attribute type 1 has an invalid length. [ 1348.247456][T29626] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1348.280528][T29626] bond2 (unregistering): Released all slaves [ 1348.284030][T29629] sctp: [Deprecated]: syz.0.19689 (pid 29629) Use of int in max_burst socket option deprecated. [ 1348.284030][T29629] Use struct sctp_assoc_value instead [ 1348.384222][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 1348.384237][ T29] audit: type=1400 audit(1400.592:144552): avc: denied { create } for pid=29625 comm="syz.0.19689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1348.386892][ T29] audit: type=1400 audit(1400.592:144553): avc: denied { module_request } for pid=29625 comm="syz.0.19689" kmod="net-pf-11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1348.417650][ T29] audit: type=1400 audit(1400.634:144554): avc: denied { write } for pid=29634 comm="syz.7.19692" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1348.423553][ T29] audit: type=1400 audit(1400.634:144555): avc: denied { write } for pid=29634 comm="syz.7.19692" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1348.423653][ T29] audit: type=1400 audit(1400.634:144556): avc: denied { open } for pid=29634 comm="syz.7.19692" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1348.424510][ T29] audit: type=1326 audit(1400.634:144557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.0.19689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1348.424610][ T29] audit: type=1400 audit(1400.634:144558): avc: denied { ioctl } for pid=29634 comm="syz.7.19692" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1348.424870][ T29] audit: type=1326 audit(1400.634:144559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.0.19689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1348.424972][ T29] audit: type=1326 audit(1400.634:144560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.0.19689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1348.425207][ T29] audit: type=1326 audit(1400.634:144561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.0.19689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fcc9a86eba9 code=0x7ffc0000 [ 1348.577461][T29637] hub 9-0:1.0: USB hub found [ 1348.577584][T29637] hub 9-0:1.0: 8 ports detected [ 1348.815666][T29643] netlink: 'syz.9.19694': attribute type 1 has an invalid length. [ 1348.845785][T29643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1348.856466][T29643] __nla_validate_parse: 3 callbacks suppressed [ 1348.856486][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19694'. [ 1348.865307][T29643] bond1 (unregistering): Released all slaves [ 1349.065171][T29654] wireguard0: entered promiscuous mode [ 1349.070724][T29654] wireguard0: entered allmulticast mode [ 1349.168056][T29659] Process accounting resumed [ 1349.184497][T29661] FAT-fs (loop1): bogus number of reserved sectors [ 1349.191166][T29661] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1349.221808][T29664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19698'. [ 1349.278175][T29664] IPVS: Error joining to the multicast group [ 1349.342319][T29678] can0: slcan on ptm0. [ 1349.390534][T29683] netlink: 'syz.6.19709': attribute type 1 has an invalid length. [ 1349.404497][T29683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1349.416613][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19709'. [ 1349.428902][T29683] bond2 (unregistering): Released all slaves [ 1349.429358][T29675] can0 (unregistered): slcan off ptm0. [ 1349.449427][T29685] Process accounting resumed [ 1349.475108][T29691] 9pnet_fd: Insufficient options for proto=fd [ 1349.485082][T29691] netlink: 'syz.7.19712': attribute type 32 has an invalid length. [ 1349.523915][T29688] lo speed is unknown, defaulting to 1000 [ 1349.581845][T29688] lo speed is unknown, defaulting to 1000 [ 1349.609856][T29705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19712'. [ 1349.655781][T29710] netlink: 'syz.2.19717': attribute type 4 has an invalid length. [ 1349.761525][T29703] Process accounting resumed [ 1349.822458][T29732] netlink: 'syz.9.19725': attribute type 1 has an invalid length. [ 1349.850386][T29732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1349.860659][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19725'. [ 1349.888902][T29732] bond1 (unregistering): Released all slaves [ 1349.904241][T29738] netlink: 'syz.7.19727': attribute type 1 has an invalid length. [ 1349.921995][T29742] netlink: 'syz.0.19728': attribute type 1 has an invalid length. [ 1349.927004][T29738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1349.942335][T29738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19727'. [ 1349.954091][T29742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1349.964853][T29738] bond2 (unregistering): Released all slaves [ 1349.969883][T29742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19728'. [ 1349.983398][T29742] bond2 (unregistering): Released all slaves [ 1350.161662][T29766] ipvlan2: entered promiscuous mode [ 1350.168341][T29766] bridge0: port 3(ipvlan2) entered blocking state [ 1350.174858][T29766] bridge0: port 3(ipvlan2) entered disabled state [ 1350.181489][T29766] ipvlan2: entered allmulticast mode [ 1350.186931][T29766] bridge0: entered allmulticast mode [ 1350.192863][T29766] ipvlan2: left allmulticast mode [ 1350.197926][T29766] bridge0: left allmulticast mode [ 1350.283949][T29773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19738'. [ 1350.355390][T29780] netlink: 'syz.7.19740': attribute type 1 has an invalid length. [ 1350.377103][T29780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1350.387277][T29780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19740'. [ 1350.402136][T29780] bond2 (unregistering): Released all slaves [ 1350.517379][T29792] Process accounting resumed [ 1350.844958][T29809] can0: slcan on ptm0. [ 1350.896421][T29808] can0 (unregistered): slcan off ptm0. [ 1351.954597][T29864] can0: slcan on ptm0. [ 1352.001794][T29863] can0 (unregistered): slcan off ptm0. [ 1352.047479][T29868] can0: slcan on ptm0. [ 1352.106085][T29867] can0 (unregistered): slcan off ptm0. [ 1352.788393][T29904] can0: slcan on ptm0. [ 1352.849516][T29903] can0 (unregistered): slcan off ptm0. [ 1352.908588][T29908] SELinux: ebitmap: truncated map [ 1352.909288][T29908] SELinux: failed to load policy [ 1353.255960][T29927] lo speed is unknown, defaulting to 1000 [ 1353.308673][T29927] lo speed is unknown, defaulting to 1000 [ 1353.587661][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 1353.587679][ T29] audit: type=1400 audit(1406.051:144885): avc: denied { sys_module } for pid=29935 comm="syz.6.19796" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1353.711892][ T29] audit: type=1326 audit(1406.187:144886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.735253][ T29] audit: type=1326 audit(1406.187:144887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.758484][ T29] audit: type=1326 audit(1406.187:144888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.781761][ T29] audit: type=1326 audit(1406.187:144889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.805171][ T29] audit: type=1326 audit(1406.187:144890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.828376][ T29] audit: type=1326 audit(1406.187:144891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.840043][T29949] ipvlan2: entered promiscuous mode [ 1353.851878][ T29] audit: type=1326 audit(1406.187:144892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.880246][ T29] audit: type=1326 audit(1406.187:144893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.880342][ T29] audit: type=1326 audit(1406.187:144894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29944 comm="syz.6.19800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa69badeba9 code=0x7ffc0000 [ 1353.917545][T29949] bridge0: port 3(ipvlan2) entered blocking state [ 1353.917684][T29949] bridge0: port 3(ipvlan2) entered disabled state [ 1353.917803][T29949] ipvlan2: entered allmulticast mode [ 1353.917819][T29949] bridge0: entered allmulticast mode [ 1353.918168][T29949] ipvlan2: left allmulticast mode [ 1353.918253][T29949] bridge0: left allmulticast mode [ 1354.115170][T29966] wireguard0: entered promiscuous mode [ 1354.120862][T29966] wireguard0: entered allmulticast mode [ 1354.125393][T29970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19808'. [ 1354.135585][T29970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19808'. [ 1354.164231][T29973] FAULT_INJECTION: forcing a failure. [ 1354.164231][T29973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.177446][T29973] CPU: 0 UID: 0 PID: 29973 Comm: syz.9.19809 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1354.177549][T29973] Tainted: [W]=WARN [ 1354.177593][T29973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1354.177607][T29973] Call Trace: [ 1354.177613][T29973] [ 1354.177622][T29973] __dump_stack+0x1d/0x30 [ 1354.177681][T29973] dump_stack_lvl+0xe8/0x140 [ 1354.177704][T29973] dump_stack+0x15/0x1b [ 1354.177722][T29973] should_fail_ex+0x265/0x280 [ 1354.177751][T29973] should_fail+0xb/0x20 [ 1354.177855][T29973] should_fail_usercopy+0x1a/0x20 [ 1354.177884][T29973] _copy_from_user+0x1c/0xb0 [ 1354.177921][T29973] ___sys_sendmsg+0xc1/0x1d0 [ 1354.178037][T29973] __x64_sys_sendmsg+0xd4/0x160 [ 1354.178161][T29973] x64_sys_call+0x191e/0x2ff0 [ 1354.178186][T29973] do_syscall_64+0xd2/0x200 [ 1354.178223][T29973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1354.178251][T29973] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1354.178295][T29973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.178319][T29973] RIP: 0033:0x7fea2763eba9 [ 1354.178336][T29973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1354.178355][T29973] RSP: 002b:00007fea260a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1354.178376][T29973] RAX: ffffffffffffffda RBX: 00007fea27885fa0 RCX: 00007fea2763eba9 [ 1354.178445][T29973] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1354.178458][T29973] RBP: 00007fea260a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.178472][T29973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.178485][T29973] R13: 00007fea27886038 R14: 00007fea27885fa0 R15: 00007ffc9b2ba9f8 [ 1354.178506][T29973] [ 1354.418573][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19807'. [ 1354.438249][T29981] IPVS: Error joining to the multicast group [ 1354.478975][T29983] SELinux: ebitmap: truncated map [ 1354.485216][T29983] SELinux: failed to load policy [ 1354.615011][T29990] netlink: 'syz.2.19813': attribute type 1 has an invalid length. [ 1354.646644][T29990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1354.667926][T29990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19813'. [ 1354.691981][T29990] bond1 (unregistering): Released all slaves [ 1354.950796][T30013] netlink: 'syz.7.19820': attribute type 1 has an invalid length. [ 1354.970044][T30013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1355.049575][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19820'. [ 1355.061041][T30013] bond2 (unregistering): Released all slaves [ 1355.469347][T30031] hub 9-0:1.0: USB hub found [ 1355.469409][T30031] hub 9-0:1.0: 8 ports detected [ 1355.519122][T30036] netlink: 'syz.2.19827': attribute type 1 has an invalid length. [ 1355.541267][T30036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1355.574917][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19827'. [ 1355.577274][T30036] bond1 (unregistering): Released all slaves [ 1355.839161][T30051] hub 9-0:1.0: USB hub found [ 1355.839354][T30051] hub 9-0:1.0: 8 ports detected [ 1355.972577][T30060] program syz.2.19832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1356.134945][T30068] SELinux: ebitmap: truncated map [ 1356.136769][T30068] SELinux: failed to load policy [ 1356.259771][T30081] FAULT_INJECTION: forcing a failure. [ 1356.259771][T30081] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.259844][T30081] CPU: 1 UID: 0 PID: 30081 Comm: syz.7.19844 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1356.259882][T30081] Tainted: [W]=WARN [ 1356.259891][T30081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1356.259908][T30081] Call Trace: [ 1356.259994][T30081] [ 1356.260001][T30081] __dump_stack+0x1d/0x30 [ 1356.260027][T30081] dump_stack_lvl+0xe8/0x140 [ 1356.260049][T30081] dump_stack+0x15/0x1b [ 1356.260066][T30081] should_fail_ex+0x265/0x280 [ 1356.260098][T30081] should_failslab+0x8c/0xb0 [ 1356.260143][T30081] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1356.260185][T30081] ? sidtab_sid2str_get+0xa0/0x130 [ 1356.260216][T30081] kmemdup_noprof+0x2b/0x70 [ 1356.260247][T30081] sidtab_sid2str_get+0xa0/0x130 [ 1356.260327][T30081] security_sid_to_context_core+0x1eb/0x2e0 [ 1356.260357][T30081] security_sid_to_context+0x27/0x40 [ 1356.260388][T30081] selinux_lsmprop_to_secctx+0x67/0xf0 [ 1356.260418][T30081] security_lsmprop_to_secctx+0x43/0x80 [ 1356.260525][T30081] audit_log_task_context+0x77/0x190 [ 1356.260692][T30081] audit_log_task+0xf4/0x250 [ 1356.260740][T30081] audit_seccomp+0x61/0x100 [ 1356.260779][T30081] ? __seccomp_filter+0x68c/0x10d0 [ 1356.260813][T30081] __seccomp_filter+0x69d/0x10d0 [ 1356.260846][T30081] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1356.260967][T30081] ? vfs_write+0x7e8/0x960 [ 1356.261009][T30081] __secure_computing+0x82/0x150 [ 1356.261040][T30081] syscall_trace_enter+0xcf/0x1e0 [ 1356.261078][T30081] do_syscall_64+0xac/0x200 [ 1356.261171][T30081] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1356.261206][T30081] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1356.261250][T30081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.261281][T30081] RIP: 0033:0x7f14439ed80a [ 1356.261303][T30081] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 1356.261358][T30081] RSP: 002b:00007f1442456ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1356.261386][T30081] RAX: ffffffffffffffda RBX: 00007f1443c35fa0 RCX: 00007f14439ed80a [ 1356.261406][T30081] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 1356.261424][T30081] RBP: 00007f1442457090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.261442][T30081] R10: ffffffffffffffff R11: 0000000000000293 R12: 0000000000000001 [ 1356.261460][T30081] R13: 00007f1443c36038 R14: 00007f1443c35fa0 R15: 00007ffdad1720f8 [ 1356.261514][T30081] [ 1356.601134][T30091] lo speed is unknown, defaulting to 1000 [ 1356.615422][T30093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.615496][T30093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.644560][T30091] lo speed is unknown, defaulting to 1000 [ 1356.761729][T30096] FAULT_INJECTION: forcing a failure. [ 1356.761729][T30096] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.774437][T30096] CPU: 0 UID: 0 PID: 30096 Comm: syz.6.19848 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1356.774477][T30096] Tainted: [W]=WARN [ 1356.774486][T30096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1356.774500][T30096] Call Trace: [ 1356.774507][T30096] [ 1356.774573][T30096] __dump_stack+0x1d/0x30 [ 1356.774671][T30096] dump_stack_lvl+0xe8/0x140 [ 1356.774698][T30096] dump_stack+0x15/0x1b [ 1356.774719][T30096] should_fail_ex+0x265/0x280 [ 1356.774745][T30096] should_failslab+0x8c/0xb0 [ 1356.774800][T30096] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1356.774837][T30096] ? sidtab_sid2str_get+0xa0/0x130 [ 1356.774915][T30096] kmemdup_noprof+0x2b/0x70 [ 1356.774946][T30096] sidtab_sid2str_get+0xa0/0x130 [ 1356.774974][T30096] security_sid_to_context_core+0x1eb/0x2e0 [ 1356.775071][T30096] security_sid_to_context+0x27/0x40 [ 1356.775097][T30096] selinux_lsmprop_to_secctx+0x67/0xf0 [ 1356.775126][T30096] security_lsmprop_to_secctx+0x43/0x80 [ 1356.775158][T30096] audit_log_task_context+0x77/0x190 [ 1356.775243][T30096] audit_log_task+0xf4/0x250 [ 1356.775277][T30096] audit_seccomp+0x61/0x100 [ 1356.775304][T30096] ? __seccomp_filter+0x68c/0x10d0 [ 1356.775390][T30096] __seccomp_filter+0x69d/0x10d0 [ 1356.775414][T30096] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1356.775447][T30096] ? vfs_write+0x7e8/0x960 [ 1356.775593][T30096] ? __rcu_read_unlock+0x4f/0x70 [ 1356.775614][T30096] ? __fget_files+0x184/0x1c0 [ 1356.775641][T30096] __secure_computing+0x82/0x150 [ 1356.775673][T30096] syscall_trace_enter+0xcf/0x1e0 [ 1356.775772][T30096] do_syscall_64+0xac/0x200 [ 1356.775817][T30096] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1356.775852][T30096] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1356.775883][T30096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.775904][T30096] RIP: 0033:0x7fa69badeba9 [ 1356.775954][T30096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.775977][T30096] RSP: 002b:00007fa69a547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1356.775999][T30096] RAX: ffffffffffffffda RBX: 00007fa69bd25fa0 RCX: 00007fa69badeba9 [ 1356.776012][T30096] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 1356.776023][T30096] RBP: 00007fa69a547090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.776067][T30096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.776082][T30096] R13: 00007fa69bd26038 R14: 00007fa69bd25fa0 R15: 00007ffc010b4348 [ 1356.776105][T30096] [ 1356.819532][T30098] SELinux: ebitmap: truncated map [ 1357.037609][T30098] SELinux: failed to load policy [ 1357.189630][T30118] netlink: 36 bytes leftover after parsing attributes in process `syz.6.19858'. [ 1357.198878][T30118] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19858'. [ 1357.221509][T30124] netlink: 'syz.0.19860': attribute type 4 has an invalid length. [ 1357.291246][T30126] SELinux: ebitmap: truncated map [ 1357.296683][T30126] SELinux: failed to load policy [ 1357.371592][T30131] can0: slcan on ptm0. [ 1357.403050][T30132] hub 2-0:1.0: USB hub found [ 1357.403229][T30132] hub 2-0:1.0: 8 ports detected [ 1357.441285][T30130] can0 (unregistered): slcan off ptm0. [ 1357.706667][T30147] netlink: 'syz.0.19870': attribute type 1 has an invalid length. [ 1357.750645][T30147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1357.753995][T30147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19870'. [ 1357.758682][T30151] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19872'. [ 1357.761995][T30151] FAULT_INJECTION: forcing a failure. [ 1357.761995][T30151] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.789544][T30151] CPU: 0 UID: 0 PID: 30151 Comm: syz.2.19872 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1357.789609][T30151] Tainted: [W]=WARN [ 1357.789616][T30151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1357.789629][T30151] Call Trace: [ 1357.789636][T30151] [ 1357.789644][T30151] __dump_stack+0x1d/0x30 [ 1357.789666][T30151] dump_stack_lvl+0xe8/0x140 [ 1357.789691][T30151] dump_stack+0x15/0x1b [ 1357.789713][T30151] should_fail_ex+0x265/0x280 [ 1357.789747][T30151] should_failslab+0x8c/0xb0 [ 1357.789777][T30151] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1357.789885][T30151] ? sidtab_sid2str_get+0xa0/0x130 [ 1357.789912][T30151] kmemdup_noprof+0x2b/0x70 [ 1357.789992][T30151] sidtab_sid2str_get+0xa0/0x130 [ 1357.790015][T30151] security_sid_to_context_core+0x1eb/0x2e0 [ 1357.790090][T30151] security_sid_to_context+0x27/0x40 [ 1357.790115][T30151] selinux_lsmprop_to_secctx+0x67/0xf0 [ 1357.790138][T30151] security_lsmprop_to_secctx+0x43/0x80 [ 1357.790168][T30151] audit_log_task_context+0x77/0x190 [ 1357.790214][T30151] audit_log_task+0xf4/0x250 [ 1357.790291][T30151] audit_seccomp+0x61/0x100 [ 1357.790323][T30151] ? __seccomp_filter+0x68c/0x10d0 [ 1357.790396][T30151] __seccomp_filter+0x69d/0x10d0 [ 1357.790424][T30151] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1357.790453][T30151] ? vfs_write+0x7e8/0x960 [ 1357.790486][T30151] ? __rcu_read_unlock+0x4f/0x70 [ 1357.790568][T30151] ? __fget_files+0x184/0x1c0 [ 1357.790596][T30151] __secure_computing+0x82/0x150 [ 1357.790699][T30151] syscall_trace_enter+0xcf/0x1e0 [ 1357.790768][T30151] do_syscall_64+0xac/0x200 [ 1357.790803][T30151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1357.790843][T30151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.790870][T30151] RIP: 0033:0x7fe49c90eba9 [ 1357.790903][T30151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1357.790921][T30151] RSP: 002b:00007fe49b377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1357.790939][T30151] RAX: ffffffffffffffda RBX: 00007fe49cb55fa0 RCX: 00007fe49c90eba9 [ 1357.790952][T30151] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 1357.790963][T30151] RBP: 00007fe49b377090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.790975][T30151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.790991][T30151] R13: 00007fe49cb56038 R14: 00007fe49cb55fa0 R15: 00007ffcabb97f88 [ 1357.791014][T30151] [ 1358.056288][T30147] bond2 (unregistering): Released all slaves [ 1358.124482][T30151] lo speed is unknown, defaulting to 1000 [ 1358.156444][T30151] lo speed is unknown, defaulting to 1000 [ 1358.377341][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 1358.377360][ T29] audit: type=1326 audit(1411.080:145536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14439e5b67 code=0x7ffc0000 [ 1358.377398][ T29] audit: type=1326 audit(1411.080:145537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f144398ada9 code=0x7ffc0000 [ 1358.377503][ T29] audit: type=1326 audit(1411.080:145538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1358.377541][ T29] audit: type=1326 audit(1411.080:145539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1358.402334][ T29] audit: type=1326 audit(1411.090:145540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14439e5b67 code=0x7ffc0000 [ 1358.499964][ T29] audit: type=1326 audit(1411.090:145541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f144398ada9 code=0x7ffc0000 [ 1358.523279][ T29] audit: type=1326 audit(1411.090:145542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1358.523347][ T29] audit: type=1326 audit(1411.101:145543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f14439e5b67 code=0x7ffc0000 [ 1358.523439][ T29] audit: type=1326 audit(1411.101:145544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f144398ada9 code=0x7ffc0000 [ 1358.523465][ T29] audit: type=1326 audit(1411.101:145545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30154 comm="syz.7.19874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14439eeba9 code=0x7ffc0000 [ 1358.716823][T30183] FAULT_INJECTION: forcing a failure. [ 1358.716823][T30183] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.716853][T30183] CPU: 1 UID: 0 PID: 30183 Comm: syz.7.19881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1358.716888][T30183] Tainted: [W]=WARN [ 1358.716970][T30183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1358.716986][T30183] Call Trace: [ 1358.716994][T30183] [ 1358.717002][T30183] __dump_stack+0x1d/0x30 [ 1358.717022][T30183] dump_stack_lvl+0xe8/0x140 [ 1358.717041][T30183] dump_stack+0x15/0x1b [ 1358.717057][T30183] should_fail_ex+0x265/0x280 [ 1358.717087][T30183] should_failslab+0x8c/0xb0 [ 1358.717169][T30183] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1358.717278][T30183] ? shmem_alloc_inode+0x34/0x50 [ 1358.717366][T30183] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1358.717390][T30183] shmem_alloc_inode+0x34/0x50 [ 1358.717416][T30183] alloc_inode+0x40/0x170 [ 1358.717445][T30183] new_inode+0x1d/0xe0 [ 1358.717510][T30183] shmem_get_inode+0x244/0x750 [ 1358.717531][T30183] ? __se_sys_memfd_create+0x1cc/0x590 [ 1358.717562][T30183] __shmem_file_setup+0x113/0x210 [ 1358.717606][T30183] shmem_file_setup+0x3b/0x50 [ 1358.717623][T30183] __se_sys_memfd_create+0x2c3/0x590 [ 1358.717655][T30183] __x64_sys_memfd_create+0x31/0x40 [ 1358.717677][T30183] x64_sys_call+0x2abe/0x2ff0 [ 1358.717705][T30183] do_syscall_64+0xd2/0x200 [ 1358.717809][T30183] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1358.717840][T30183] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1358.717869][T30183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.717917][T30183] RIP: 0033:0x7f14439eeba9 [ 1358.717935][T30183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.717957][T30183] RSP: 002b:00007f1442456e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1358.718055][T30183] RAX: ffffffffffffffda RBX: 0000000000000561 RCX: 00007f14439eeba9 [ 1358.718071][T30183] RDX: 00007f1442456ef0 RSI: 0000000000000000 RDI: 00007f1443a727e8 [ 1358.718088][T30183] RBP: 0000200000000f80 R08: 00007f1442456bb7 R09: 00007f1442456e40 [ 1358.718103][T30183] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 1358.718118][T30183] R13: 00007f1442456ef0 R14: 00007f1442456eb0 R15: 0000200000000080 [ 1358.718137][T30183] [ 1358.750752][T30185] ipvlan0: entered promiscuous mode [ 1358.751424][T30185] bridge0: port 1(ipvlan0) entered blocking state [ 1358.751462][T30185] bridge0: port 1(ipvlan0) entered disabled state [ 1358.751669][T30185] ipvlan0: entered allmulticast mode [ 1358.751686][T30185] bridge0: entered allmulticast mode [ 1358.752115][T30185] ipvlan0: left allmulticast mode [ 1358.752133][T30185] bridge0: left allmulticast mode [ 1358.953760][T30188] ipvlan0: entered promiscuous mode [ 1359.050065][T30188] bridge0: port 1(ipvlan0) entered blocking state [ 1359.050154][T30188] bridge0: port 1(ipvlan0) entered disabled state [ 1359.050329][T30188] ipvlan0: entered allmulticast mode [ 1359.050350][T30188] bridge0: entered allmulticast mode [ 1359.050869][T30188] ipvlan0: left allmulticast mode [ 1359.079212][T30188] bridge0: left allmulticast mode [ 1359.124124][T30198] netlink: 'syz.6.19887': attribute type 1 has an invalid length. [ 1359.132357][T30198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1359.135721][T30198] __nla_validate_parse: 2 callbacks suppressed [ 1359.135868][T30198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19887'. [ 1359.177735][T30198] bond2 (unregistering): Released all slaves [ 1359.266088][T30210] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19892'. [ 1359.279517][T30210] program syz.9.19892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1359.296260][T30204] SELinux: ebitmap: truncated map [ 1359.302783][T30204] SELinux: failed to load policy [ 1359.311025][T30212] netlink: 'syz.6.19893': attribute type 1 has an invalid length. [ 1359.345237][T30212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1359.387228][T30221] netlink: 36 bytes leftover after parsing attributes in process `syz.9.19896'. [ 1359.387250][T30221] netlink: 24 bytes leftover after parsing attributes in process `syz.9.19896'. [ 1359.387274][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19893'. [ 1359.435642][T30212] bond2 (unregistering): Released all slaves [ 1359.539042][T30233] FAULT_INJECTION: forcing a failure. [ 1359.539042][T30233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.552282][T30233] CPU: 0 UID: 0 PID: 30233 Comm: syz.7.19901 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1359.552319][T30233] Tainted: [W]=WARN [ 1359.552381][T30233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1359.552398][T30233] Call Trace: [ 1359.552406][T30233] [ 1359.552416][T30233] __dump_stack+0x1d/0x30 [ 1359.552512][T30233] dump_stack_lvl+0xe8/0x140 [ 1359.552538][T30233] dump_stack+0x15/0x1b [ 1359.552561][T30233] should_fail_ex+0x265/0x280 [ 1359.552589][T30233] should_fail+0xb/0x20 [ 1359.552660][T30233] should_fail_usercopy+0x1a/0x20 [ 1359.552694][T30233] _copy_from_iter+0xd2/0xe80 [ 1359.552731][T30233] ? __build_skb_around+0x1a0/0x200 [ 1359.552815][T30233] ? __alloc_skb+0x223/0x320 [ 1359.552856][T30233] netlink_sendmsg+0x471/0x6b0 [ 1359.552937][T30233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1359.552973][T30233] __sock_sendmsg+0x142/0x180 [ 1359.553017][T30233] ____sys_sendmsg+0x345/0x4e0 [ 1359.553126][T30233] ___sys_sendmsg+0x17b/0x1d0 [ 1359.553180][T30233] __sys_sendmmsg+0x178/0x300 [ 1359.553277][T30233] __x64_sys_sendmmsg+0x57/0x70 [ 1359.553313][T30233] x64_sys_call+0x1c4a/0x2ff0 [ 1359.553391][T30233] do_syscall_64+0xd2/0x200 [ 1359.553610][T30233] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1359.553642][T30233] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1359.553675][T30233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.553709][T30233] RIP: 0033:0x7f14439eeba9 [ 1359.553729][T30233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.553754][T30233] RSP: 002b:00007f1442457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1359.553819][T30233] RAX: ffffffffffffffda RBX: 00007f1443c35fa0 RCX: 00007f14439eeba9 [ 1359.553836][T30233] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 1359.553853][T30233] RBP: 00007f1442457090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.553909][T30233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.553921][T30233] R13: 00007f1443c36038 R14: 00007f1443c35fa0 R15: 00007ffdad1720f8 [ 1359.553942][T30233] [ 1359.796777][T30252] hub 2-0:1.0: USB hub found [ 1359.796853][T30252] hub 2-0:1.0: 8 ports detected [ 1359.821018][T30255] FAULT_INJECTION: forcing a failure. [ 1359.821018][T30255] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.821059][T30255] CPU: 0 UID: 0 PID: 30255 Comm: syz.7.19907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1359.821095][T30255] Tainted: [W]=WARN [ 1359.821154][T30255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1359.821170][T30255] Call Trace: [ 1359.821178][T30255] [ 1359.821187][T30255] __dump_stack+0x1d/0x30 [ 1359.821214][T30255] dump_stack_lvl+0xe8/0x140 [ 1359.821270][T30255] dump_stack+0x15/0x1b [ 1359.821288][T30255] should_fail_ex+0x265/0x280 [ 1359.821313][T30255] should_failslab+0x8c/0xb0 [ 1359.821422][T30255] kmem_cache_alloc_noprof+0x50/0x310 [ 1359.821451][T30255] ? security_file_alloc+0x32/0x100 [ 1359.821564][T30255] security_file_alloc+0x32/0x100 [ 1359.821668][T30255] init_file+0x5c/0x1d0 [ 1359.821711][T30255] alloc_empty_file+0x8b/0x200 [ 1359.821742][T30255] path_openat+0x68/0x2170 [ 1359.821764][T30255] ? mntput+0x4b/0x80 [ 1359.821815][T30255] ? terminate_walk+0x27f/0x2a0 [ 1359.821891][T30255] ? path_openat+0x1bf8/0x2170 [ 1359.821918][T30255] ? _parse_integer_limit+0x170/0x190 [ 1359.821957][T30255] do_filp_open+0x109/0x230 [ 1359.821991][T30255] do_open_execat+0xd8/0x260 [ 1359.822012][T30255] alloc_bprm+0x25/0x350 [ 1359.822148][T30255] do_execveat_common+0x12e/0x750 [ 1359.822175][T30255] __x64_sys_execve+0x5c/0x70 [ 1359.822198][T30255] x64_sys_call+0x2716/0x2ff0 [ 1359.822229][T30255] do_syscall_64+0xd2/0x200 [ 1359.822271][T30255] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1359.822323][T30255] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1359.822388][T30255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.822416][T30255] RIP: 0033:0x7f14439eeba9 [ 1359.822434][T30255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1359.822457][T30255] RSP: 002b:00007f1442457038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1359.822481][T30255] RAX: ffffffffffffffda RBX: 00007f1443c35fa0 RCX: 00007f14439eeba9 [ 1359.822545][T30255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1359.822560][T30255] RBP: 00007f1442457090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.822575][T30255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.822588][T30255] R13: 00007f1443c36038 R14: 00007f1443c35fa0 R15: 00007ffdad1720f8 [ 1359.822611][T30255] [ 1359.946964][T30259] SELinux: ebitmap: truncated map [ 1359.950028][T30259] SELinux: failed to load policy [ 1360.164289][T30268] netlink: 'syz.0.19912': attribute type 1 has an invalid length. [ 1360.191926][T30268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1360.234600][T30274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19912'. [ 1360.408699][T30274] bond2 (unregistering): Released all slaves [ 1360.467195][T30285] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1360.479797][T30285] SELinux: failed to load policy [ 1360.537131][T30287] netlink: 'syz.6.19919': attribute type 4 has an invalid length. [ 1360.554739][T30297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19924'. [ 1360.563971][T30297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19924'. [ 1360.661041][T30308] ipvlan2: entered promiscuous mode [ 1360.667042][T30308] bridge0: port 1(ipvlan2) entered blocking state [ 1360.673560][T30308] bridge0: port 1(ipvlan2) entered disabled state [ 1360.682071][T30308] ipvlan2: entered allmulticast mode [ 1360.682092][T30308] bridge0: entered allmulticast mode [ 1360.682548][T30308] ipvlan2: left allmulticast mode [ 1360.697879][T30308] bridge0: left allmulticast mode [ 1360.778872][T30314] program syz.7.19927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1360.888587][T30305] lo speed is unknown, defaulting to 1000 [ 1360.959104][T30325] netlink: 'syz.6.19931': attribute type 1 has an invalid length. [ 1360.978174][T30305] lo speed is unknown, defaulting to 1000 [ 1360.993081][T30325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1361.012367][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19931'. [ 1361.037202][T30328] bond2 (unregistering): Released all slaves [ 1361.188600][T30336] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1361.210706][T30336] SELinux: failed to load policy [ 1361.277409][T30343] ipvlan2: entered promiscuous mode [ 1361.285040][T30343] bridge0: port 1(ipvlan2) entered blocking state [ 1361.291647][T30343] bridge0: port 1(ipvlan2) entered disabled state [ 1361.298577][T30343] ipvlan2: entered allmulticast mode [ 1361.303902][T30343] bridge0: entered allmulticast mode [ 1361.310831][T30345] netlink: 'syz.0.19939': attribute type 1 has an invalid length. [ 1361.319013][T30343] ipvlan2: left allmulticast mode [ 1361.324156][T30343] bridge0: left allmulticast mode [ 1361.343950][T30345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1361.352045][T30347] netlink: 'syz.7.19938': attribute type 1 has an invalid length. [ 1361.360698][T30350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19939'. [ 1361.429744][T30347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1361.475725][T30353] bond2 (unregistering): Released all slaves [ 1361.509065][T30350] bond2 (unregistering): Released all slaves [ 1361.688328][T30363] netlink: 'syz.0.19945': attribute type 4 has an invalid length. [ 1361.870472][T30367] netlink: 'syz.9.19946': attribute type 4 has an invalid length. [ 1362.017901][T30375] lo speed is unknown, defaulting to 1000 [ 1362.046904][T30375] lo speed is unknown, defaulting to 1000 [ 1362.192370][T30386] pim6reg: entered allmulticast mode [ 1362.203391][T30386] pim6reg: left allmulticast mode [ 1362.409106][T30394] netlink: 'syz.2.19954': attribute type 1 has an invalid length. [ 1362.435612][T30394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1362.500429][T30394] bond1 (unregistering): Released all slaves [ 1362.569706][T30404] hub 9-0:1.0: USB hub found [ 1362.580091][T30404] hub 9-0:1.0: 8 ports detected [ 1362.699442][T30409] netlink: 'syz.2.19957': attribute type 4 has an invalid length. [ 1362.987574][T30426] hub 2-0:1.0: USB hub found [ 1362.992462][T30426] hub 2-0:1.0: 8 ports detected [ 1363.113253][T30436] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=30436 comm=syz.9.19967 [ 1363.127433][T30442] netlink: 'syz.6.19970': attribute type 1 has an invalid length. [ 1363.133428][T30444] can0: slcan on ptm0. [ 1363.147064][T30442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1363.170108][T30442] bond2 (unregistering): Released all slaves [ 1363.184690][T30443] can0 (unregistered): slcan off ptm0. [ 1363.253104][T30456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1363.278187][T30456] bond2 (unregistering): Released all slaves [ 1363.404690][T30472] FAULT_INJECTION: forcing a failure. [ 1363.404690][T30472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.417852][T30472] CPU: 0 UID: 0 PID: 30472 Comm: syz.7.19979 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1363.417930][T30472] Tainted: [W]=WARN [ 1363.417937][T30472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1363.417950][T30472] Call Trace: [ 1363.417959][T30472] [ 1363.417968][T30472] __dump_stack+0x1d/0x30 [ 1363.417996][T30472] dump_stack_lvl+0xe8/0x140 [ 1363.418054][T30472] dump_stack+0x15/0x1b [ 1363.418074][T30472] should_fail_ex+0x265/0x280 [ 1363.418154][T30472] should_fail+0xb/0x20 [ 1363.418183][T30472] should_fail_usercopy+0x1a/0x20 [ 1363.418218][T30472] _copy_from_iter+0xd2/0xe80 [ 1363.418303][T30472] ? __build_skb_around+0x1a0/0x200 [ 1363.418328][T30472] ? __alloc_skb+0x223/0x320 [ 1363.418356][T30472] netlink_sendmsg+0x471/0x6b0 [ 1363.418471][T30472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.418504][T30472] __sock_sendmsg+0x142/0x180 [ 1363.418621][T30472] ____sys_sendmsg+0x31e/0x4e0 [ 1363.418696][T30472] ___sys_sendmsg+0x17b/0x1d0 [ 1363.418744][T30472] __x64_sys_sendmsg+0xd4/0x160 [ 1363.418786][T30472] x64_sys_call+0x191e/0x2ff0 [ 1363.418816][T30472] do_syscall_64+0xd2/0x200 [ 1363.418859][T30472] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1363.418892][T30472] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1363.418986][T30472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.419015][T30472] RIP: 0033:0x7f14439eeba9 [ 1363.419035][T30472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.419158][T30472] RSP: 002b:00007f1442436038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.419180][T30472] RAX: ffffffffffffffda RBX: 00007f1443c36090 RCX: 00007f14439eeba9 [ 1363.419195][T30472] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 1363.419212][T30472] RBP: 00007f1442436090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.419229][T30472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.419291][T30472] R13: 00007f1443c36128 R14: 00007f1443c36090 R15: 00007ffdad1720f8 [ 1363.419314][T30472] [ 1363.459193][T30474] hub 9-0:1.0: USB hub found [ 1363.660451][T30474] hub 9-0:1.0: 8 ports detected [ 1363.863417][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 1363.863435][ T29] audit: type=1326 audit(1416.843:145891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956277][ T29] audit: type=1326 audit(1416.875:145892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956316][ T29] audit: type=1326 audit(1416.875:145893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956351][ T29] audit: type=1326 audit(1416.875:145894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956386][ T29] audit: type=1326 audit(1416.875:145895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956509][ T29] audit: type=1326 audit(1416.875:145896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956579][ T29] audit: type=1326 audit(1416.875:145897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956615][ T29] audit: type=1326 audit(1416.875:145898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956688][ T29] audit: type=1326 audit(1416.875:145899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1363.956721][ T29] audit: type=1326 audit(1416.875:145900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30477 comm="syz.9.19981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2763eba9 code=0x7ffc0000 [ 1364.207279][T30486] hub 9-0:1.0: USB hub found [ 1364.207382][T30486] hub 9-0:1.0: 8 ports detected [ 1364.293172][T30496] FAULT_INJECTION: forcing a failure. [ 1364.293172][T30496] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.306089][T30496] CPU: 0 UID: 0 PID: 30496 Comm: syz.6.19986 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1364.306193][T30496] Tainted: [W]=WARN [ 1364.306202][T30496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1364.306220][T30496] Call Trace: [ 1364.306228][T30496] [ 1364.306237][T30496] __dump_stack+0x1d/0x30 [ 1364.306266][T30496] dump_stack_lvl+0xe8/0x140 [ 1364.306292][T30496] dump_stack+0x15/0x1b [ 1364.306374][T30496] should_fail_ex+0x265/0x280 [ 1364.306405][T30496] ? __snd_timer_user_ioctl+0xe82/0x2470 [ 1364.306433][T30496] should_failslab+0x8c/0xb0 [ 1364.306467][T30496] __kmalloc_cache_noprof+0x4c/0x320 [ 1364.306533][T30496] __snd_timer_user_ioctl+0xe82/0x2470 [ 1364.306608][T30496] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 1364.306636][T30496] snd_timer_user_ioctl+0x45/0x90 [ 1364.306703][T30496] __se_sys_ioctl+0xce/0x140 [ 1364.306766][T30496] __x64_sys_ioctl+0x43/0x50 [ 1364.306784][T30496] x64_sys_call+0x1816/0x2ff0 [ 1364.306810][T30496] do_syscall_64+0xd2/0x200 [ 1364.306922][T30496] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1364.306947][T30496] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1364.306983][T30496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.307011][T30496] RIP: 0033:0x7fa69badeba9 [ 1364.307031][T30496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.307121][T30496] RSP: 002b:00007fa69a547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.307146][T30496] RAX: ffffffffffffffda RBX: 00007fa69bd25fa0 RCX: 00007fa69badeba9 [ 1364.307163][T30496] RDX: 0000200000000300 RSI: 0000000040345410 RDI: 0000000000000005 [ 1364.307179][T30496] RBP: 00007fa69a547090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.307191][T30496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.307207][T30496] R13: 00007fa69bd26038 R14: 00007fa69bd25fa0 R15: 00007ffc010b4348 [ 1364.307231][T30496] [ 1364.574090][T30500] __nla_validate_parse: 17 callbacks suppressed [ 1364.574111][T30500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19989'. [ 1364.574145][T30500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19989'. [ 1364.590188][T30500] bridge0: port 1(vlan1) entered blocking state [ 1364.590246][T30500] bridge0: port 1(vlan1) entered disabled state [ 1364.590497][T30500] vlan1: entered allmulticast mode [ 1364.590512][T30500] bridge0: entered allmulticast mode [ 1364.591936][T30500] vlan1: left allmulticast mode [ 1364.591950][T30500] bridge0: left allmulticast mode [ 1364.880165][T30507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19991'. [ 1364.889367][T30507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19991'. [ 1365.156384][T30520] hub 2-0:1.0: USB hub found [ 1365.156446][T30520] hub 2-0:1.0: 8 ports detected [ 1365.417496][T30528] validate_nla: 1 callbacks suppressed [ 1365.417537][T30528] netlink: 'syz.2.20000': attribute type 10 has an invalid length. [ 1365.417762][T30528] FAULT_INJECTION: forcing a failure. [ 1365.417762][T30528] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.417901][T30528] CPU: 1 UID: 0 PID: 30528 Comm: syz.2.20000 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1365.417984][T30528] Tainted: [W]=WARN [ 1365.417993][T30528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1365.418009][T30528] Call Trace: [ 1365.418017][T30528] [ 1365.418027][T30528] __dump_stack+0x1d/0x30 [ 1365.418051][T30528] dump_stack_lvl+0xe8/0x140 [ 1365.418077][T30528] dump_stack+0x15/0x1b [ 1365.418103][T30528] should_fail_ex+0x265/0x280 [ 1365.418206][T30528] should_failslab+0x8c/0xb0 [ 1365.418295][T30528] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1365.418399][T30528] ? __alloc_skb+0x101/0x320 [ 1365.418434][T30528] __alloc_skb+0x101/0x320 [ 1365.418467][T30528] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 1365.418513][T30528] rtmsg_ifinfo+0x6d/0x110 [ 1365.418657][T30528] __dev_notify_flags+0x76/0x1a0 [ 1365.418691][T30528] netif_change_flags+0xac/0xd0 [ 1365.418724][T30528] do_setlink+0x9d2/0x2810 [ 1365.418805][T30528] ? selinux_capable+0x31/0x40 [ 1365.418846][T30528] ? security_capable+0x83/0x90 [ 1365.418902][T30528] ? ns_capable+0x7d/0xb0 [ 1365.418972][T30528] ? netlink_ns_capable+0x86/0xa0 [ 1365.419006][T30528] rtnl_newlink+0xe75/0x12d0 [ 1365.419136][T30528] ? xas_load+0x413/0x430 [ 1365.419180][T30528] ? xas_load+0x413/0x430 [ 1365.419224][T30528] ? __memcg_slab_free_hook+0x135/0x230 [ 1365.419322][T30528] ? __rcu_read_unlock+0x4f/0x70 [ 1365.419388][T30528] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1365.419495][T30528] ? cred_has_capability+0x210/0x280 [ 1365.419534][T30528] ? selinux_capable+0x31/0x40 [ 1365.419574][T30528] ? security_capable+0x83/0x90 [ 1365.419610][T30528] ? ns_capable+0x7d/0xb0 [ 1365.419641][T30528] ? __pfx_rtnl_newlink+0x10/0x10 [ 1365.419774][T30528] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 1365.419868][T30528] netlink_rcv_skb+0x120/0x220 [ 1365.419902][T30528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1365.419957][T30528] rtnetlink_rcv+0x1c/0x30 [ 1365.420098][T30528] netlink_unicast+0x5c0/0x690 [ 1365.420133][T30528] netlink_sendmsg+0x58b/0x6b0 [ 1365.420175][T30528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1365.420243][T30528] __sock_sendmsg+0x142/0x180 [ 1365.420291][T30528] ____sys_sendmsg+0x31e/0x4e0 [ 1365.420321][T30528] ___sys_sendmsg+0x17b/0x1d0 [ 1365.420387][T30528] __x64_sys_sendmsg+0xd4/0x160 [ 1365.420433][T30528] x64_sys_call+0x191e/0x2ff0 [ 1365.420465][T30528] do_syscall_64+0xd2/0x200 [ 1365.420549][T30528] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1365.420585][T30528] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1365.420676][T30528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.420707][T30528] RIP: 0033:0x7fe49c90eba9 [ 1365.420730][T30528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.420757][T30528] RSP: 002b:00007fe49b377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1365.420790][T30528] RAX: ffffffffffffffda RBX: 00007fe49cb55fa0 RCX: 00007fe49c90eba9 [ 1365.420829][T30528] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1365.420847][T30528] RBP: 00007fe49b377090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.420865][T30528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.420883][T30528] R13: 00007fe49cb56038 R14: 00007fe49cb55fa0 R15: 00007ffcabb97f88 [ 1365.420910][T30528] [ 1365.452665][T30528] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1365.511565][T30532] FAULT_INJECTION: forcing a failure. [ 1365.511565][T30532] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.511603][T30532] CPU: 1 UID: 0 PID: 30532 Comm: syz.2.20002 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1365.511807][T30532] Tainted: [W]=WARN [ 1365.511814][T30532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1365.511827][T30532] Call Trace: [ 1365.511835][T30532] [ 1365.511844][T30532] __dump_stack+0x1d/0x30 [ 1365.511872][T30532] dump_stack_lvl+0xe8/0x140 [ 1365.511930][T30532] dump_stack+0x15/0x1b [ 1365.511949][T30532] should_fail_ex+0x265/0x280 [ 1365.511974][T30532] should_failslab+0x8c/0xb0 [ 1365.512000][T30532] kmem_cache_alloc_noprof+0x50/0x310 [ 1365.512058][T30532] ? audit_log_start+0x365/0x6c0 [ 1365.512092][T30532] audit_log_start+0x365/0x6c0 [ 1365.512135][T30532] audit_seccomp+0x48/0x100 [ 1365.512196][T30532] ? __seccomp_filter+0x68c/0x10d0 [ 1365.512220][T30532] __seccomp_filter+0x69d/0x10d0 [ 1365.512247][T30532] ? getname_flags+0x2be/0x3b0 [ 1365.512291][T30532] __secure_computing+0x82/0x150 [ 1365.512319][T30532] syscall_trace_enter+0xcf/0x1e0 [ 1365.512374][T30532] do_syscall_64+0xac/0x200 [ 1365.512416][T30532] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1365.512448][T30532] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1365.512557][T30532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.512586][T30532] RIP: 0033:0x7fe49c90d5bc [ 1365.512605][T30532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1365.512627][T30532] RSP: 002b:00007fe49b377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1365.512652][T30532] RAX: ffffffffffffffda RBX: 00007fe49cb55fa0 RCX: 00007fe49c90d5bc [ 1365.512735][T30532] RDX: 000000000000000f RSI: 00007fe49b3770a0 RDI: 0000000000000005 [ 1365.512747][T30532] RBP: 00007fe49b377090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.512835][T30532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.512847][T30532] R13: 00007fe49cb56038 R14: 00007fe49cb55fa0 R15: 00007ffcabb97f88 [ 1365.512866][T30532] [ 1365.587112][T30538] hub 9-0:1.0: USB hub found [ 1365.587361][T30538] hub 9-0:1.0: 8 ports detected [ 1366.135310][T30554] ================================================================== [ 1366.143429][T30554] BUG: KCSAN: data-race in copy_creds / prepare_creds [ 1366.150233][T30554] [ 1366.152564][T30554] write to 0xffff8881446d52e8 of 4 bytes by task 30552 on cpu 1: [ 1366.160281][T30554] copy_creds+0x78/0x3f0 [ 1366.164534][T30554] copy_process+0x658/0x2000 [ 1366.169146][T30554] kernel_clone+0x16c/0x5c0 [ 1366.173667][T30554] __se_sys_clone3+0x1c2/0x200 [ 1366.178453][T30554] __x64_sys_clone3+0x31/0x40 [ 1366.183143][T30554] x64_sys_call+0x1fc9/0x2ff0 [ 1366.187833][T30554] do_syscall_64+0xd2/0x200 [ 1366.192355][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.198256][T30554] [ 1366.200585][T30554] read to 0xffff8881446d5240 of 184 bytes by task 30554 on cpu 0: [ 1366.208403][T30554] prepare_creds+0x6c/0x4c0 [ 1366.212920][T30554] lookup_user_key+0x12a/0xd10 [ 1366.217703][T30554] __se_sys_add_key+0x263/0x350 [ 1366.222566][T30554] __x64_sys_add_key+0x67/0x80 [ 1366.227345][T30554] x64_sys_call+0x28c4/0x2ff0 [ 1366.232036][T30554] do_syscall_64+0xd2/0x200 [ 1366.236560][T30554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.242460][T30554] [ 1366.244781][T30554] Reported by Kernel Concurrency Sanitizer on: [ 1366.250937][T30554] CPU: 0 UID: 0 PID: 30554 Comm: syz.9.20007 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1366.262415][T30554] Tainted: [W]=WARN [ 1366.266220][T30554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1366.276277][T30554] ================================================================== [ 1373.529421][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 1373.529456][ T29] audit: type=1400 audit(1426.995:146175): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1373.559217][ T29] audit: type=1400 audit(1426.995:146176): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1