last executing test programs: 1m36.779010095s ago: executing program 3 (id=1027): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550d, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20008000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x80000000, 0x4) 1m36.757787127s ago: executing program 3 (id=1028): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x10, &(0x7f0000000440)=@raw=[@alu={0x4, 0x0, 0x7, 0x2, 0xb, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f00000004c0)='syzkaller\x00', 0xfffffe4c, 0x3e, &(0x7f0000000500)=""/62, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0xa, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000800)=[r0, r0, r0], &(0x7f0000000840)=[{0x1, 0x3, 0x0, 0xc}, {0x1, 0x2, 0x9, 0x4}, {0x0, 0x5, 0xe}, {0x2, 0x4, 0x2, 0x2}, {0x1, 0x2, 0xf, 0xc}, {0x1, 0x5, 0x3}, {0x5, 0x3, 0x0, 0x9}], 0x10, 0x4}, 0x94) move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x5, 0x6, 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="a40800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="015006f0bc114f2786a4b73e7bae81e7660000000400000002000000"], 0x50) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) bind$phonet(r3, &(0x7f0000000300)={0x23, 0x7, 0xc, 0x2}, 0x10) shmat(r4, &(0x7f0000f62000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000100)={0x0, 0x80da61, 0x1, 0x20000000, 0x40000337}, &(0x7f0000000240), &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r6}, 0x14) 1m36.280028613s ago: executing program 3 (id=1038): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x45, 0x9, 0x0, 0x2}]}) (fail_nth: 3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd04) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x6, 0x79}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) 1m35.169661358s ago: executing program 3 (id=1050): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setlease(r0, 0x400, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r3, @ANYRES16=r6], 0x0, 0xfffffffc}, 0x94) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000b00)='sched_switch\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r11}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x18) syz_clone3(&(0x7f00000009c0)={0x2000, 0x0, &(0x7f0000000780), &(0x7f00000007c0), {0x2f}, &(0x7f0000001180)=""/249, 0xf9, 0x0, &(0x7f0000000b40)=[0xffffffffffffffff], 0x1}, 0x58) 1m34.115779919s ago: executing program 3 (id=1059): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioprio_set$pid(0x3, 0x0, 0x4007) gettid() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x200000002000300) timer_create(0x3, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x50020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x2, 0xfffffffa, 0xb95b5ec032cc8e84, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c4000000c000000050000000400000000060007000000000000000000"], 0x0, 0x29, 0x0, 0x1}, 0x28) 1m33.296024317s ago: executing program 3 (id=1061): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x210) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) syz_emit_ethernet(0x6c, &(0x7f0000000080)=ANY=[], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) connect$inet6(r8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m33.248339352s ago: executing program 32 (id=1061): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x210) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) syz_emit_ethernet(0x6c, &(0x7f0000000080)=ANY=[], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) connect$inet6(r8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.795350343s ago: executing program 4 (id=2876): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000400)=[{0x50, 0x4e, 0x0, 0x7deffffd}, {0x0, 0x0, 0x4, 0xa1}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000100)=0xfff) readlink(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) 2.72069741s ago: executing program 4 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 1.849454023s ago: executing program 4 (id=2906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14}, 0x94) 1.823608895s ago: executing program 4 (id=2908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@loopback}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100027bd7000fbdbdf25370000000c0099000300000055000000080027000000000008002201ef020000080026008c1400000800260071090000080026006c09000005001901090000000800a0000600000008002600f415000008009f0000000000080057008a000000b71ec70bb068e0d0ddb482f4c4dc7e793ccad59d2e9937c17c657af40466cd9093220e19"], 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r10, 0x0, 0x2}, 0x18) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r13, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) listen(r13, 0x0) close(r13) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x36, 0x66, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x35, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_lt={'fowner<', r14}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 1.717245316s ago: executing program 0 (id=2911): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rfkill(0xffffff9c, 0x0, 0xc81, 0x0) write$rfkill(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c250000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) 1.680390589s ago: executing program 4 (id=2913): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x9, 0x6, 0x1000, 0x18048, r0, 0x93, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x7, @value, @void, @value=r3}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sigaltstack(&(0x7f0000000400)={&(0x7f0000000640)=""/75, 0x80000000, 0x4b}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000040)={0x7, 0x7, 0x6, 0x2, 0x3, 0x824b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f0000000540)="1896d7236edfb216dee397ee16d6fe256f02c72fe4598171b27b52260a4d7263166f74a87f71d1b15991208eedddd582ba68bbdbe5a1f55593a464aaea925a06c25a01e409956f07364a36c8fbc687f62b27275382311c63df0ac18ba97838ef4e61cf7e2c3bca73014a5f92eb6d59f1f11a2b3cacbdcf51f78337363a5213108ec9f2fef7ad237b0829efb5fd4f1cf67464948dee43ed91b4ccae37469230bbc7af8e31361181cfa6e632df2d4cf6a77ada450b4f32823919bde831934c96e2ccba578bacc51b16fc711ab8e7be6d9bd48eff98316c", 0xd6, 0x880, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}]}]}, 0x28}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, r6, &(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r10 = socket$kcm(0x11, 0x3, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2, 0xee1}, 0x1c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1.546002502s ago: executing program 0 (id=2919): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f0000000440)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x7c}}, 0x944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000019440)={&(0x7f0000000440)=ANY=[@ANYBLOB="4e82735afdd4a7f2b038a06e953936d43e4419441941679e4d48b66bf3e9f69297812e991f2db341f16990ece85e97fa", @ANYRESHEX=r3, @ANYBLOB="010025bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000000fa02000001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000270001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00010000002b456c2a9aae8f5395499c67b5f6224185724f7d5e52a1aac7bf6ed1f9b684b5beda5eaeca5918a2f165164af0ab7a536693a1629a93b8e32c7edc743c275d847fd4d25d657127ff22d5a814fb66e01e47fab3a54c6d526c24693ede6512c96b0b7126ead3f9cf075cab7b77d7233461a06621328357e43c3d9b8e6c0c62716a8f4b55"], 0x140}, 0x1, 0x0, 0x0, 0x2400c040}, 0x24040811) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000740)={0x0, 0x2c, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x550}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r5, 0x101, 0xfffffffb}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x14) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) syz_clone(0x14000, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x4, @thr={&(0x7f0000002400)="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", &(0x7f0000000640)="31ccbe14aac27ab1cf9d60280c6c0cb8bf802c63200c4e8ad90ec2a7d83f68a2fe117956a0c034cf90cab366be35ec8d722a30307f646e8d1a334d4d3e18a1e3d0ef7fed09c91e383ff6919dde65016b820388da7847b4a56de00291119c35d3092dd2ca974a6caf40378152b191bd75a95dffb895b2e54c62eaeda015044e5dffc00d72e18c13ea06af368f787ec7e24273f988aea0ae64083ed5214983800069aec3cec86c71871f114a7130b3e80d4b0c0103b41e7a110e39b89bcd36138ed56a483f3e2a422924c4bdd81ec74063223b"}}) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.486129258s ago: executing program 1 (id=2920): perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xa82, &(0x7f0000000400)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000001d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0}) io_uring_enter(r1, 0x5535, 0x3acd, 0x22, 0x0, 0x0) 1.443301191s ago: executing program 2 (id=2921): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000400)=[{0x50, 0x4e, 0x0, 0x7deffffd}, {0x0, 0x0, 0x4, 0xa1}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000100)=0xfff) readlink(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) 1.431604933s ago: executing program 1 (id=2922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x20050890) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6}, 0x18) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc) 1.240647251s ago: executing program 2 (id=2923): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r2, 0x0, 0x15) 774.335325ms ago: executing program 4 (id=2928): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x10908b, 0x0, 0xfffffffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x7c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000e00000000000000fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0xb0000015}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) msgget$private(0x0, 0x190) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r11 = dup(r10) ioctl$GIO_UNISCRNMAP(r11, 0x43403d0e, 0x0) 659.782296ms ago: executing program 0 (id=2930): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES8=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioprio_set$pid(0x3, 0x0, 0x4007) gettid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x3, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x50020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x2, 0xfffffffa, 0xb95b5ec032cc8e84, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x5}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c4000000c000000050000000400000000060007000000000000000000"], 0x0, 0x29, 0x0, 0x1}, 0x28) 473.980554ms ago: executing program 1 (id=2931): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setrlimit(0x0, &(0x7f0000000000)={0x1, 0x200000000000000}) 443.651057ms ago: executing program 1 (id=2933): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = open(0x0, 0x1050c3, 0x170) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x70, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x8, 0x1, 0x0, 0xb7a, {{0x51, 0x4, 0x0, 0x3a, 0x144, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0x0, [{@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010101, 0x6d3b}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x23e2e815}, {@remote, 0x5}]}, @timestamp_prespec={0x44, 0x4c, 0x73, 0x3, 0x1, [{@private=0xa010101, 0x2}, {@empty, 0x3}, {@multicast2, 0x9}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xf5}, {@remote, 0x4}, {@multicast2, 0x8}, {@empty, 0x3240}, {@private=0xa010100, 0x8}]}, @generic={0x94, 0x9, "32c50a6650c15e"}, @timestamp_prespec={0x44, 0xc, 0x24, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xed}]}, @cipso={0x86, 0x5f, 0x0, [{0x1, 0x12, "65a7d47b5b7b5cd79e440d7c209ee683"}, {0x1, 0x5, "64b977"}, {0x1, 0xd, "05b8ad4edf48b7b39a3d2a"}, {0x6, 0x5, "ebcb57"}, {0x5, 0x9, "0bdab1b6b65b64"}, {0x2, 0x6, "b87b53d0"}, {0x4, 0x8, "8f9600b7b981"}, {0x2, 0x3, "18"}, {0x2, 0x10, "889681776c28ba4fcc1cdc89b83e"}, {0x7, 0x6, "282e9770"}]}, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0x1, [{@rand_addr=0x64010100, 0x576}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x50, 0x0, 0xc, [0x0, 0x7, 0x40, 0x8, 0xde62, 0x4]}, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x6, [0x80, 0x3ff, 0xfff, 0x7e6, 0x4]}]}}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="18f8000000000001000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018210000", @ANYRES32=r7, @ANYBLOB="0000000000020000850000002f000000675930000400000018350000020000000000000000000000180000000600000000000000060000008520000001000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x9b74, 0x1000, &(0x7f0000002480)=""/4096, 0x41100, 0x0, '\x00', r8, 0x0, r1, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0xa1f, 0x8444}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r0, r1, r9, r2, r6, r2, r6], &(0x7f0000000700)=[{0x4, 0x2, 0xf}, {0x0, 0x5, 0xf}, {0x4, 0x4, 0x10, 0x9}, {0x5, 0x2, 0x4, 0xc}, {0x2, 0x2, 0x5, 0x305f9737365ad45f}, {0x1, 0x5, 0xd, 0x5}, {0x5, 0x2, 0x8}, {0x5, 0x3, 0xb, 0x2}], 0x10, 0xfffffff8}, 0x94) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 414.236299ms ago: executing program 1 (id=2935): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind(0xffffffffffffffff, &(0x7f00000002c0)=@can={0x1d, r1}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000440)="588addb04cdce416702c5f163f26f8ad8a5ca27b11b5cd854a067e1cab65e8c658d7ce1d01162005bc35c3b95ff1996b161767cfefacb5171bd70ccca1d2b605bde7d150372a9076d04b3d3a00dbe5fbdf53478278e056284960f5c90f3f3e778a2c9e042510920a3536166bf0704b6943694d18011c063fcb63dc31724abd9d5f3eb4b66abd0700ef7aa751729f6929f5", 0x91}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5) mount$cgroup(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2008000, 0x0) iopl(0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000400)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 382.786383ms ago: executing program 2 (id=2937): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x100, 0x0) getdents64(r1, &(0x7f0000000340)=""/206, 0xce) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) getpriority(0x2, 0x0) 361.506235ms ago: executing program 5 (id=2938): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4000000000000007}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfd44) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) 359.407695ms ago: executing program 2 (id=2939): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0x38}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240440c5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 294.360841ms ago: executing program 0 (id=2940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}, 0xffffffff}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 257.211735ms ago: executing program 2 (id=2941): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rfkill(0xffffff9c, 0x0, 0xc81, 0x0) write$rfkill(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) 195.899111ms ago: executing program 2 (id=2942): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x21202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10800, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") unshare(0x8000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r4 = epoll_create(0xaf2) epoll_pwait2(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xe000200f}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) close(r8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") fallocate(0xffffffffffffffff, 0x3, 0x2, 0x8000c62) 195.097671ms ago: executing program 5 (id=2943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) unlinkat(0xffffffffffffffff, &(0x7f0000003380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000008}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='/dev/net/tun\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r8 = dup(r7) sendto$packet(r8, 0x0, 0x0, 0x24004090, 0x0, 0x0) connect$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r2) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)=""/93, 0x5d) 88.596561ms ago: executing program 5 (id=2944): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) getpriority(0x2, 0x0) 67.632983ms ago: executing program 5 (id=2945): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) setrlimit(0x0, &(0x7f0000000000)={0x1, 0x200000000000000}) 21.224867ms ago: executing program 5 (id=2946): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = open(0x0, 0x1050c3, 0x170) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x70, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x8, 0x1, 0x0, 0xb7a, {{0x51, 0x4, 0x0, 0x3a, 0x144, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0x0, [{@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010101, 0x6d3b}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x23e2e815}, {@remote, 0x5}]}, @timestamp_prespec={0x44, 0x4c, 0x73, 0x3, 0x1, [{@private=0xa010101, 0x2}, {@empty, 0x3}, {@multicast2, 0x9}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xf5}, {@remote, 0x4}, {@multicast2, 0x8}, {@empty, 0x3240}, {@private=0xa010100, 0x8}]}, @generic={0x94, 0x9, "32c50a6650c15e"}, @timestamp_prespec={0x44, 0xc, 0x24, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xed}]}, @cipso={0x86, 0x5f, 0x0, [{0x1, 0x12, "65a7d47b5b7b5cd79e440d7c209ee683"}, {0x1, 0x5, "64b977"}, {0x1, 0xd, "05b8ad4edf48b7b39a3d2a"}, {0x6, 0x5, "ebcb57"}, {0x5, 0x9, "0bdab1b6b65b64"}, {0x2, 0x6, "b87b53d0"}, {0x4, 0x8, "8f9600b7b981"}, {0x2, 0x3, "18"}, {0x2, 0x10, "889681776c28ba4fcc1cdc89b83e"}, {0x7, 0x6, "282e9770"}]}, @timestamp_prespec={0x44, 0xc, 0x44, 0x3, 0x1, [{@rand_addr=0x64010100, 0x576}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x50, 0x0, 0xc, [0x0, 0x7, 0x40, 0x8, 0xde62, 0x4]}, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x6, [0x80, 0x3ff, 0xfff, 0x7e6, 0x4]}]}}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="18f8000000000001000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018210000", @ANYRES32=r7, @ANYBLOB="0000000000020000850000002f000000675930000400000018350000020000000000000000000000180000000600000000000000060000008520000001000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x9b74, 0x1000, &(0x7f0000002480)=""/4096, 0x41100, 0x0, '\x00', r8, 0x0, r1, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0xa1f, 0x8444}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r0, r1, r9, r2, r6, r2, r6], &(0x7f0000000700)=[{0x4, 0x2, 0xf}, {0x0, 0x5, 0xf}, {0x4, 0x4, 0x10, 0x9}, {0x5, 0x2, 0x4, 0xc}, {0x2, 0x2, 0x5, 0x305f9737365ad45f}, {0x1, 0x5, 0xd, 0x5}, {0x5, 0x2, 0x8}, {0x5, 0x3, 0xb, 0x2}], 0x10, 0xfffffff8}, 0x94) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 0s ago: executing program 5 (id=2947): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = dup3(0xffffffffffffffff, r0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x13b) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000800)={'\x00', 0x40, 0xa, 0x0, 0x5b, 0x10}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x80}, 0x100800, 0x2, 0x2, 0x9}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000000b0000000009"], 0x18}}], 0x1, 0x810) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x12, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(r3, &(0x7f0000000000)='.\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r5, 0x1f8bd000) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x11, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) kernel console output (not intermixed with test programs): 2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.030888][ T8782] RSP: 002b:00007f072d4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 166.030906][ T8782] RAX: ffffffffffffffda RBX: 00007f072ecb5fa0 RCX: 00007f072ea5f749 [ 166.030964][ T8782] RDX: 0000000000001800 RSI: 0000200000001dc0 RDI: 0000000000000004 [ 166.030976][ T8782] RBP: 00007f072d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.030988][ T8782] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000001 [ 166.030999][ T8782] R13: 00007f072ecb6038 R14: 00007f072ecb5fa0 R15: 00007fff9bcd4868 [ 166.031019][ T8782] [ 166.234159][ T8788] 9p: Bad value for 'rfdno' [ 166.254640][ T8790] FAULT_INJECTION: forcing a failure. [ 166.254640][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.267858][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.2.1591 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.267886][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.267906][ T8790] Call Trace: [ 166.267914][ T8790] [ 166.267922][ T8790] __dump_stack+0x1d/0x30 [ 166.267963][ T8790] dump_stack_lvl+0xe8/0x140 [ 166.268017][ T8790] dump_stack+0x15/0x1b [ 166.268074][ T8790] should_fail_ex+0x265/0x280 [ 166.268164][ T8790] should_fail+0xb/0x20 [ 166.268190][ T8790] should_fail_usercopy+0x1a/0x20 [ 166.268258][ T8790] _copy_from_user+0x1c/0xb0 [ 166.268285][ T8790] vmemdup_user+0x5e/0xd0 [ 166.268303][ T8790] path_setxattrat+0x1b6/0x310 [ 166.268382][ T8790] __x64_sys_fsetxattr+0x6b/0x80 [ 166.268406][ T8790] x64_sys_call+0x23c4/0x3000 [ 166.268429][ T8790] do_syscall_64+0xd8/0x2c0 [ 166.268473][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.268493][ T8790] RIP: 0033:0x7feb891ef749 [ 166.268507][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.268557][ T8790] RSP: 002b:00007feb87c4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 166.268574][ T8790] RAX: ffffffffffffffda RBX: 00007feb89445fa0 RCX: 00007feb891ef749 [ 166.268586][ T8790] RDX: 0000200000000200 RSI: 0000200000000000 RDI: 0000000000000003 [ 166.268605][ T8790] RBP: 00007feb87c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.268616][ T8790] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001 [ 166.268627][ T8790] R13: 00007feb89446038 R14: 00007feb89445fa0 R15: 00007ffcb9dc7468 [ 166.268646][ T8790] [ 166.562143][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 166.576826][ T8802] bridge_slave_1: left allmulticast mode [ 166.582680][ T8802] bridge_slave_1: left promiscuous mode [ 166.588419][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.596992][ T8802] bridge_slave_0: left allmulticast mode [ 166.602946][ T8802] bridge_slave_0: left promiscuous mode [ 166.608918][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.629186][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 166.683579][ T8812] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 166.729983][ T8821] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 167.341602][ T8885] FAULT_INJECTION: forcing a failure. [ 167.341602][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 167.354417][ T8885] CPU: 1 UID: 0 PID: 8885 Comm: syz.0.1628 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.354447][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.354460][ T8885] Call Trace: [ 167.354467][ T8885] [ 167.354475][ T8885] __dump_stack+0x1d/0x30 [ 167.354547][ T8885] dump_stack_lvl+0xe8/0x140 [ 167.354652][ T8885] dump_stack+0x15/0x1b [ 167.354676][ T8885] should_fail_ex+0x265/0x280 [ 167.354799][ T8885] should_failslab+0x8c/0xb0 [ 167.354826][ T8885] kmem_cache_alloc_noprof+0x69/0x4b0 [ 167.354850][ T8885] ? skb_clone+0x151/0x1f0 [ 167.355045][ T8885] skb_clone+0x151/0x1f0 [ 167.355104][ T8885] nfnetlink_rcv+0x2fc/0x16c0 [ 167.355195][ T8885] ? kmem_cache_free+0xe3/0x3a0 [ 167.355231][ T8885] ? __kfree_skb+0x109/0x150 [ 167.355275][ T8885] ? consume_skb+0x49/0x150 [ 167.355304][ T8885] ? nlmon_xmit+0x4f/0x60 [ 167.355324][ T8885] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 167.355427][ T8885] ? __dev_queue_xmit+0x138d/0x1ec0 [ 167.355462][ T8885] ? __dev_queue_xmit+0x148/0x1ec0 [ 167.355537][ T8885] ? refill_obj_stock+0x254/0x2e0 [ 167.355589][ T8885] ? ref_tracker_free+0x37d/0x3e0 [ 167.355639][ T8885] netlink_unicast+0x5c0/0x690 [ 167.355696][ T8885] netlink_sendmsg+0x58b/0x6b0 [ 167.355739][ T8885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.355843][ T8885] __sock_sendmsg+0x145/0x180 [ 167.355870][ T8885] ____sys_sendmsg+0x31e/0x4a0 [ 167.355911][ T8885] ___sys_sendmsg+0x17b/0x1d0 [ 167.355986][ T8885] __x64_sys_sendmsg+0xd4/0x160 [ 167.356033][ T8885] x64_sys_call+0x17ba/0x3000 [ 167.356111][ T8885] do_syscall_64+0xd8/0x2c0 [ 167.356152][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.356174][ T8885] RIP: 0033:0x7f072ea5f749 [ 167.356189][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.356280][ T8885] RSP: 002b:00007f072d4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.356300][ T8885] RAX: ffffffffffffffda RBX: 00007f072ecb5fa0 RCX: 00007f072ea5f749 [ 167.356341][ T8885] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 167.356359][ T8885] RBP: 00007f072d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.356375][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.356392][ T8885] R13: 00007f072ecb6038 R14: 00007f072ecb5fa0 R15: 00007fff9bcd4868 [ 167.356415][ T8885] [ 167.631508][ T8888] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1629'. [ 167.765432][ T8903] netlink: 'syz.2.1636': attribute type 2 has an invalid length. [ 167.848490][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 167.952764][ T8915] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 168.014759][ T8916] bond1: entered promiscuous mode [ 168.530512][ T8949] netlink: 'syz.0.1651': attribute type 10 has an invalid length. [ 168.543749][ T8949] netlink: 'syz.0.1651': attribute type 4 has an invalid length. [ 168.572931][ T8952] macvtap0: refused to change device tx_queue_len [ 168.654347][ T8961] SELinux: security_context_str_to_sid ()KQڛ5&X!Svv:õQݫRSzQConC+MͬF&n4Wzfg ᕜXr suULJJ [ 170.438539][ T9038] ) failed with errno=-22 [ 170.494036][ T9041] __nla_validate_parse: 2 callbacks suppressed [ 170.494070][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1680'. [ 170.516668][ T9041] team2: entered promiscuous mode [ 170.521896][ T9041] team2: entered allmulticast mode [ 170.527534][ T9041] 8021q: adding VLAN 0 to HW filter on device team2 [ 170.817559][ T9066] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1690'. [ 171.135262][ T9096] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 171.276644][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 171.302816][ T9104] lo speed is unknown, defaulting to 1000 [ 171.309068][ T9104] lo speed is unknown, defaulting to 1000 [ 171.441356][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 171.669963][ T9123] wg2: entered promiscuous mode [ 171.674904][ T9123] wg2: entered allmulticast mode [ 171.942855][ T9131] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.956878][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 171.965982][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 171.975070][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 171.994470][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 172.003551][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 172.014510][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1711'. [ 172.249605][ T9152] lo speed is unknown, defaulting to 1000 [ 172.255954][ T9152] lo speed is unknown, defaulting to 1000 [ 173.136170][ T9204] team2: entered promiscuous mode [ 173.141325][ T9204] team2: entered allmulticast mode [ 173.146742][ T9204] 8021q: adding VLAN 0 to HW filter on device team2 [ 173.948399][ T36] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 173.974725][ T36] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.529103][ T9277] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 174.538490][ T9277] netlink: 'syz.4.1761': attribute type 29 has an invalid length. [ 174.575418][ T9280] FAULT_INJECTION: forcing a failure. [ 174.575418][ T9280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.582449][ T9281] team1: entered promiscuous mode [ 174.588572][ T9280] CPU: 1 UID: 0 PID: 9280 Comm: syz.5.1762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.588700][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.588719][ T9280] Call Trace: [ 174.588798][ T9280] [ 174.588809][ T9280] __dump_stack+0x1d/0x30 [ 174.588845][ T9280] dump_stack_lvl+0xe8/0x140 [ 174.588879][ T9280] dump_stack+0x15/0x1b [ 174.588983][ T9280] should_fail_ex+0x265/0x280 [ 174.589021][ T9280] should_fail+0xb/0x20 [ 174.589051][ T9280] should_fail_usercopy+0x1a/0x20 [ 174.589088][ T9280] _copy_to_user+0x20/0xa0 [ 174.589196][ T9280] simple_read_from_buffer+0xb5/0x130 [ 174.589241][ T9280] proc_fail_nth_read+0x10e/0x150 [ 174.589286][ T9280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.589334][ T9280] vfs_read+0x1a8/0x770 [ 174.589361][ T9280] ? __rcu_read_unlock+0x4f/0x70 [ 174.589391][ T9280] ? __fget_files+0x184/0x1c0 [ 174.589441][ T9280] ? mutex_lock+0x58/0x90 [ 174.589484][ T9280] ksys_read+0xda/0x1a0 [ 174.589581][ T9280] __x64_sys_read+0x40/0x50 [ 174.589611][ T9280] x64_sys_call+0x2889/0x3000 [ 174.589645][ T9280] do_syscall_64+0xd8/0x2c0 [ 174.589742][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.589775][ T9280] RIP: 0033:0x7fcaaed9e15c [ 174.589796][ T9280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.589823][ T9280] RSP: 002b:00007fcaad7ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.589851][ T9280] RAX: ffffffffffffffda RBX: 00007fcaaeff5fa0 RCX: 00007fcaaed9e15c [ 174.589870][ T9280] RDX: 000000000000000f RSI: 00007fcaad7ff0a0 RDI: 0000000000000006 [ 174.589919][ T9280] RBP: 00007fcaad7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 174.589937][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.589954][ T9280] R13: 00007fcaaeff6038 R14: 00007fcaaeff5fa0 R15: 00007ffe6eca0878 [ 174.589982][ T9280] [ 174.786013][ T9281] team1: entered allmulticast mode [ 174.791682][ T9281] 8021q: adding VLAN 0 to HW filter on device team1 [ 174.841772][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 174.841870][ T29] audit: type=1326 audit(1766196085.866:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 174.873532][ T29] audit: type=1326 audit(1766196085.866:11947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 174.897144][ T29] audit: type=1326 audit(1766196085.866:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 174.920731][ T29] audit: type=1326 audit(1766196085.866:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 174.944451][ T29] audit: type=1326 audit(1766196085.866:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 174.968030][ T29] audit: type=1326 audit(1766196085.866:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 174.991357][ T29] audit: type=1326 audit(1766196085.866:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 175.014981][ T29] audit: type=1326 audit(1766196085.866:11953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 175.038455][ T29] audit: type=1326 audit(1766196085.866:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 175.062240][ T29] audit: type=1326 audit(1766196085.866:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9287 comm="syz.4.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 175.184080][ T9306] pim6reg1: entered promiscuous mode [ 175.189442][ T9306] pim6reg1: entered allmulticast mode [ 175.287914][ T9308] FAULT_INJECTION: forcing a failure. [ 175.287914][ T9308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.301123][ T9308] CPU: 0 UID: 0 PID: 9308 Comm: syz.0.1775 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.301148][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.301160][ T9308] Call Trace: [ 175.301166][ T9308] [ 175.301172][ T9308] __dump_stack+0x1d/0x30 [ 175.301279][ T9308] dump_stack_lvl+0xe8/0x140 [ 175.301307][ T9308] dump_stack+0x15/0x1b [ 175.301326][ T9308] should_fail_ex+0x265/0x280 [ 175.301349][ T9308] should_fail+0xb/0x20 [ 175.301367][ T9308] should_fail_usercopy+0x1a/0x20 [ 175.301421][ T9308] _copy_from_user+0x1c/0xb0 [ 175.301447][ T9308] perf_copy_attr+0x145/0x610 [ 175.301474][ T9308] ? get_pid_task+0x96/0xd0 [ 175.301508][ T9308] __se_sys_perf_event_open+0x67/0x1210 [ 175.301538][ T9308] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.301566][ T9308] ? vfs_write+0x7e8/0x960 [ 175.301627][ T9308] ? __rcu_read_unlock+0x4f/0x70 [ 175.301774][ T9308] __x64_sys_perf_event_open+0x67/0x80 [ 175.301837][ T9308] x64_sys_call+0x78c/0x3000 [ 175.301901][ T9308] do_syscall_64+0xd8/0x2c0 [ 175.301934][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.301960][ T9308] RIP: 0033:0x7f072ea5f749 [ 175.301974][ T9308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.302072][ T9308] RSP: 002b:00007f072d4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 175.302090][ T9308] RAX: ffffffffffffffda RBX: 00007f072ecb5fa0 RCX: 00007f072ea5f749 [ 175.302139][ T9308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 175.302150][ T9308] RBP: 00007f072d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.302161][ T9308] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 175.302172][ T9308] R13: 00007f072ecb6038 R14: 00007f072ecb5fa0 R15: 00007fff9bcd4868 [ 175.302191][ T9308] [ 175.510851][ T9313] __nla_validate_parse: 8 callbacks suppressed [ 175.510868][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1776'. [ 175.537607][ T9313] team3: entered promiscuous mode [ 175.542905][ T9313] team3: entered allmulticast mode [ 175.563283][ T9313] 8021q: adding VLAN 0 to HW filter on device team3 [ 175.799422][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1781'. [ 176.255304][ T9358] SELinux: security_context_str_to_sid (BaNENNG9.ä4PzOt @z!AIm,s"!ŝ4t([>l2>j1=j1_u 񠽛&z`H?JekMR') failed with errno=-22 [ 176.489928][ T9362] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1793'. [ 176.921592][ T9384] loop1: detected capacity change from 0 to 512 [ 176.957482][ T9384] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 176.958684][ T9388] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1804'. [ 176.987587][ T9384] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.005365][ T9384] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1803: corrupted inode contents [ 177.021217][ T9384] EXT4-fs (loop1): Remounting filesystem read-only [ 177.039952][ T9384] EXT4-fs (loop1): 1 truncate cleaned up [ 177.045773][ T923] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.056381][ T923] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.084809][ T923] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 177.095714][ T9384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.169046][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.361631][ T9414] 9p: Could not find request transport: fd0x0000000000000003 [ 177.387264][ T9417] dvmrp0: entered allmulticast mode [ 177.612580][ T9446] netlink: 'syz.2.1830': attribute type 29 has an invalid length. [ 177.640238][ T9446] netlink: 'syz.2.1830': attribute type 29 has an invalid length. [ 177.705865][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1833'. [ 177.738394][ T9454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1833'. [ 177.872942][ T9478] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1843'. [ 178.603152][ T9511] dns_resolver: Unsupported server list version (8) [ 178.675091][ T9511] loop1: detected capacity change from 0 to 8192 [ 178.784591][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1859'. [ 178.866176][ T9517] team4: entered promiscuous mode [ 178.871482][ T9517] team4: entered allmulticast mode [ 178.904926][ T9517] 8021q: adding VLAN 0 to HW filter on device team4 [ 179.098809][ T9540] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1864'. [ 179.137052][ T9544] loop1: detected capacity change from 0 to 512 [ 179.261525][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 179.916352][ T9564] team5: entered promiscuous mode [ 179.921608][ T9564] team5: entered allmulticast mode [ 179.937532][ T9564] 8021q: adding VLAN 0 to HW filter on device team5 [ 180.006430][ T29] kauditd_printk_skb: 1281 callbacks suppressed [ 180.006446][ T29] audit: type=1326 audit(1766196091.026:13231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 180.039398][ T29] audit: type=1326 audit(1766196091.026:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 180.063042][ T29] audit: type=1326 audit(1766196091.026:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 180.086666][ T29] audit: type=1326 audit(1766196091.026:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 180.110207][ T29] audit: type=1326 audit(1766196091.026:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 180.133800][ T29] audit: type=1326 audit(1766196091.026:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 180.157617][ T29] audit: type=1326 audit(1766196091.026:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 180.181230][ T29] audit: type=1326 audit(1766196091.026:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f179f7d1667 code=0x7ffc0000 [ 180.204743][ T29] audit: type=1326 audit(1766196091.026:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f179f7d15dc code=0x7ffc0000 [ 180.228260][ T29] audit: type=1326 audit(1766196091.026:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9577 comm="syz.4.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f179f7d1514 code=0x7ffc0000 [ 180.399855][ T9602] FAULT_INJECTION: forcing a failure. [ 180.399855][ T9602] name failslab, interval 1, probability 0, space 0, times 0 [ 180.412626][ T9602] CPU: 1 UID: 0 PID: 9602 Comm: syz.0.1889 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.412711][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.412727][ T9602] Call Trace: [ 180.412734][ T9602] [ 180.412742][ T9602] __dump_stack+0x1d/0x30 [ 180.412767][ T9602] dump_stack_lvl+0xe8/0x140 [ 180.412793][ T9602] dump_stack+0x15/0x1b [ 180.412823][ T9602] should_fail_ex+0x265/0x280 [ 180.412856][ T9602] should_failslab+0x8c/0xb0 [ 180.412916][ T9602] kmem_cache_alloc_noprof+0x69/0x4b0 [ 180.412939][ T9602] ? prepare_creds+0x39/0x550 [ 180.412957][ T9602] ? get_random_u64+0x164/0x210 [ 180.413051][ T9602] prepare_creds+0x39/0x550 [ 180.413079][ T9602] copy_creds+0x8f/0x340 [ 180.413098][ T9602] ? dup_task_struct+0x60b/0x950 [ 180.413126][ T9602] copy_process+0x638/0x1ef0 [ 180.413178][ T9602] ? 0xffffffff81000000 [ 180.413196][ T9602] kernel_clone+0x16c/0x5c0 [ 180.413220][ T9602] ? vfs_write+0x7e8/0x960 [ 180.413249][ T9602] __x64_sys_clone+0xe6/0x120 [ 180.413300][ T9602] x64_sys_call+0x12d0/0x3000 [ 180.413332][ T9602] do_syscall_64+0xd8/0x2c0 [ 180.413380][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.413465][ T9602] RIP: 0033:0x7f072ea5f749 [ 180.413484][ T9602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.413508][ T9602] RSP: 002b:00007f072d4c6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 180.413530][ T9602] RAX: ffffffffffffffda RBX: 00007f072ecb5fa0 RCX: 00007f072ea5f749 [ 180.413543][ T9602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 180.413614][ T9602] RBP: 00007f072d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.413631][ T9602] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 180.413648][ T9602] R13: 00007f072ecb6038 R14: 00007f072ecb5fa0 R15: 00007fff9bcd4868 [ 180.413675][ T9602] [ 181.055241][ T9645] __nla_validate_parse: 2 callbacks suppressed [ 181.055254][ T9645] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1907'. [ 181.080777][ T9610] loop5: detected capacity change from 0 to 512 [ 181.103690][ T9610] EXT4-fs: Ignoring removed nobh option [ 181.138579][ T9610] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.156131][ T9610] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 181.460017][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 181.747594][ T9677] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1919'. [ 181.836089][ T9674] loop5: detected capacity change from 0 to 1024 [ 181.861890][ T9674] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.873134][ T9674] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 181.884451][ T9674] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 181.885250][ T9696] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 181.896873][ T9674] JBD2: no valid journal superblock found [ 181.906896][ T9674] EXT4-fs (loop5): Could not load journal inode [ 181.970555][ T9670] cgroup: fork rejected by pids controller in /syz0 [ 182.069895][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 182.078891][ T9773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1923'. [ 182.113486][ T9807] loop5: detected capacity change from 0 to 512 [ 182.137686][ T9807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.171523][ T9807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.208393][ T9807] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.282483][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.339152][ T9980] SELinux: security_context_str_to_sid (Ca5xSn"Ҷe9k/2M4 #KE `stއcNJ;#P_4uk .2CtMI [ 182.339152][ T9980] ycz'!x'8*yZaerR) failed with errno=-22 [ 182.387230][T10017] FAULT_INJECTION: forcing a failure. [ 182.387230][T10017] name failslab, interval 1, probability 0, space 0, times 0 [ 182.400040][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.5.1927 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.400076][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.400147][T10017] Call Trace: [ 182.400155][T10017] [ 182.400191][T10017] __dump_stack+0x1d/0x30 [ 182.400240][T10017] dump_stack_lvl+0xe8/0x140 [ 182.400272][T10017] dump_stack+0x15/0x1b [ 182.400300][T10017] should_fail_ex+0x265/0x280 [ 182.400357][T10017] should_failslab+0x8c/0xb0 [ 182.400389][T10017] __kmalloc_cache_noprof+0x65/0x4c0 [ 182.400417][T10017] ? sctp_add_bind_addr+0x71/0x1e0 [ 182.400507][T10017] sctp_add_bind_addr+0x71/0x1e0 [ 182.400544][T10017] sctp_copy_local_addr_list+0x199/0x220 [ 182.400585][T10017] sctp_copy_one_addr+0x7f/0x280 [ 182.400621][T10017] sctp_bind_addr_copy+0x79/0x290 [ 182.400693][T10017] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 182.400724][T10017] sctp_connect_new_asoc+0x1c3/0x3a0 [ 182.400773][T10017] sctp_sendmsg+0xf10/0x18d0 [ 182.400891][T10017] ? selinux_socket_sendmsg+0x131/0x1b0 [ 182.400926][T10017] ? __pfx_sctp_sendmsg+0x10/0x10 [ 182.400964][T10017] inet_sendmsg+0xc5/0xd0 [ 182.400997][T10017] __sock_sendmsg+0x102/0x180 [ 182.401105][T10017] ____sys_sendmsg+0x345/0x4a0 [ 182.401164][T10017] ___sys_sendmsg+0x17b/0x1d0 [ 182.401218][T10017] __sys_sendmmsg+0x178/0x300 [ 182.401273][T10017] __x64_sys_sendmmsg+0x57/0x70 [ 182.401325][T10017] x64_sys_call+0x1e28/0x3000 [ 182.401410][T10017] do_syscall_64+0xd8/0x2c0 [ 182.401459][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.401561][T10017] RIP: 0033:0x7fcaaed9f749 [ 182.401582][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.401606][T10017] RSP: 002b:00007fcaad7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.401627][T10017] RAX: ffffffffffffffda RBX: 00007fcaaeff5fa0 RCX: 00007fcaaed9f749 [ 182.401645][T10017] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000005 [ 182.401663][T10017] RBP: 00007fcaad7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 182.401679][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.401696][T10017] R13: 00007fcaaeff6038 R14: 00007fcaaeff5fa0 R15: 00007ffe6eca0878 [ 182.401753][T10017] [ 182.952052][T10077] lo speed is unknown, defaulting to 1000 [ 182.958732][T10077] lo speed is unknown, defaulting to 1000 [ 183.396200][T10108] FAULT_INJECTION: forcing a failure. [ 183.396200][T10108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.409542][T10108] CPU: 1 UID: 0 PID: 10108 Comm: syz.5.1948 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.409574][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.409591][T10108] Call Trace: [ 183.409600][T10108] [ 183.409609][T10108] __dump_stack+0x1d/0x30 [ 183.409642][T10108] dump_stack_lvl+0xe8/0x140 [ 183.409730][T10108] dump_stack+0x15/0x1b [ 183.409775][T10108] should_fail_ex+0x265/0x280 [ 183.409808][T10108] should_fail_alloc_page+0xf2/0x100 [ 183.409872][T10108] __alloc_frozen_pages_noprof+0x109/0x360 [ 183.409916][T10108] alloc_pages_mpol+0xb3/0x260 [ 183.409954][T10108] vma_alloc_folio_noprof+0x1aa/0x300 [ 183.409991][T10108] do_wp_page+0xf60/0x2510 [ 183.410066][T10108] ? css_rstat_updated+0xbb/0x280 [ 183.410086][T10108] ? __rcu_read_lock+0x37/0x50 [ 183.410172][T10108] handle_mm_fault+0x7b0/0x2c60 [ 183.410231][T10108] do_user_addr_fault+0x630/0x1080 [ 183.410333][T10108] exc_page_fault+0x62/0xa0 [ 183.410371][T10108] asm_exc_page_fault+0x26/0x30 [ 183.410414][T10108] RIP: 0033:0x7fcaaec609f0 [ 183.410504][T10108] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 183.410529][T10108] RSP: 002b:00007fcaad7fe4a0 EFLAGS: 00010202 [ 183.410551][T10108] RAX: 000000000000a800 RBX: 00007fcaad7fe540 RCX: 0000000000000004 [ 183.410568][T10108] RDX: 0000000000003ff9 RSI: 0000000000001ffa RDI: 00007fcaad7fe5e0 [ 183.410659][T10108] RBP: 0000000000000005 R08: 00007fcaa53df000 R09: 0000000000000001 [ 183.410677][T10108] R10: 0000200000001302 R11: 000000000000092b R12: 0000000000001801 [ 183.410694][T10108] R13: 00007fcaaee3fc40 R14: 0000000000000019 R15: 00007fcaad7fe5e0 [ 183.410721][T10108] [ 183.582350][T10108] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 183.623280][T10117] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 183.630775][T10108] loop5: detected capacity change from 0 to 2364 [ 183.642642][T10108] ISOFS: Unable to identify CD-ROM format. [ 183.671090][T10119] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 183.773591][T10131] loop5: detected capacity change from 0 to 512 [ 183.792329][T10131] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.830119][T10131] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1957: invalid indirect mapped block 4294967295 (level 0) [ 183.844820][T10131] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1957: invalid indirect mapped block 4294967295 (level 1) [ 183.860692][T10131] EXT4-fs (loop5): 1 orphan inode deleted [ 183.866454][T10131] EXT4-fs (loop5): 1 truncate cleaned up [ 183.879160][T10131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.895665][T10131] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 183.943833][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.944354][T10151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10151 comm=syz.0.1966 [ 184.000128][T10155] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.008525][T10155] FAULT_INJECTION: forcing a failure. [ 184.008525][T10155] name failslab, interval 1, probability 0, space 0, times 0 [ 184.021342][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.5.1965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.021390][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.021405][T10155] Call Trace: [ 184.021411][T10155] [ 184.021419][T10155] __dump_stack+0x1d/0x30 [ 184.021470][T10155] dump_stack_lvl+0xe8/0x140 [ 184.021501][T10155] dump_stack+0x15/0x1b [ 184.021605][T10155] should_fail_ex+0x265/0x280 [ 184.021636][T10155] should_failslab+0x8c/0xb0 [ 184.021666][T10155] __kvmalloc_node_noprof+0x149/0x6b0 [ 184.021749][T10155] ? __nf_hook_entries_try_shrink+0x265/0x460 [ 184.021823][T10155] __nf_hook_entries_try_shrink+0x265/0x460 [ 184.021875][T10155] __nf_unregister_net_hook+0x2db/0x370 [ 184.021919][T10155] nf_unregister_net_hooks+0xab/0xe0 [ 184.021976][T10155] nf_ct_netns_do_put+0x1e9/0x260 [ 184.022029][T10155] nf_ct_netns_put+0xea/0x1f0 [ 184.022141][T10155] connmark_tg_destroy+0x2f/0x40 [ 184.022173][T10155] ? __pfx_connmark_tg_destroy+0x10/0x10 [ 184.022257][T10155] cleanup_entry+0x168/0x1c0 [ 184.022295][T10155] translate_table+0x100a/0x1070 [ 184.022342][T10155] do_ip6t_set_ctl+0x678/0x840 [ 184.022426][T10155] ? kstrtoull+0x111/0x140 [ 184.022451][T10155] ? __rcu_read_unlock+0x4f/0x70 [ 184.022487][T10155] nf_setsockopt+0x199/0x1b0 [ 184.022546][T10155] ipv6_setsockopt+0x11a/0x130 [ 184.022574][T10155] tcp_setsockopt+0x98/0xb0 [ 184.022597][T10155] sock_common_setsockopt+0x69/0x80 [ 184.022618][T10155] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 184.022647][T10155] __sys_setsockopt+0x184/0x200 [ 184.022746][T10155] __x64_sys_setsockopt+0x64/0x80 [ 184.022780][T10155] x64_sys_call+0x21d5/0x3000 [ 184.022810][T10155] do_syscall_64+0xd8/0x2c0 [ 184.022882][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.022911][T10155] RIP: 0033:0x7fcaaed9f749 [ 184.022932][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.022957][T10155] RSP: 002b:00007fcaad7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.022982][T10155] RAX: ffffffffffffffda RBX: 00007fcaaeff5fa0 RCX: 00007fcaaed9f749 [ 184.022998][T10155] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 184.023055][T10155] RBP: 00007fcaad7ff090 R08: 00000000000003c0 R09: 0000000000000000 [ 184.023071][T10155] R10: 0000200000001040 R11: 0000000000000246 R12: 0000000000000002 [ 184.023111][T10155] R13: 00007fcaaeff6038 R14: 00007fcaaeff5fa0 R15: 00007ffe6eca0878 [ 184.023135][T10155] [ 184.433645][T10163] loop5: detected capacity change from 0 to 1024 [ 184.441406][T10163] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.471312][T10163] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1970: Invalid block bitmap block 0 in block_group 0 [ 184.485438][T10163] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1970: Failed to acquire dquot type 0 [ 184.506816][T10163] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.1970: Freeing blocks not in datazone - block = 0, count = 4096 [ 184.522251][T10163] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1970: Invalid inode bitmap blk 0 in block_group 0 [ 184.535149][T10163] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 184.544124][ T923] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 184.556103][T10163] EXT4-fs (loop5): 1 orphan inode deleted [ 184.562381][T10163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.593539][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.630940][T10174] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1975'. [ 184.669440][ T9] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 184.692628][ T9] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.693177][T10181] netlink: 'syz.5.1977': attribute type 29 has an invalid length. [ 184.729848][T10181] netlink: 'syz.5.1977': attribute type 29 has an invalid length. [ 184.796063][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 184.827654][T10191] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 184.875336][T10187] team2: entered promiscuous mode [ 184.880460][T10187] team2: entered allmulticast mode [ 184.885927][T10187] 8021q: adding VLAN 0 to HW filter on device team2 [ 184.893732][T10196] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 185.320762][ T29] kauditd_printk_skb: 917 callbacks suppressed [ 185.320780][ T29] audit: type=1326 audit(1766196096.346:14153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.350747][ T29] audit: type=1326 audit(1766196096.346:14154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.374481][ T29] audit: type=1326 audit(1766196096.346:14155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.398242][ T29] audit: type=1326 audit(1766196096.346:14156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.422108][ T29] audit: type=1326 audit(1766196096.346:14157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.445778][ T29] audit: type=1326 audit(1766196096.346:14158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.469471][ T29] audit: type=1326 audit(1766196096.346:14159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.493081][ T29] audit: type=1326 audit(1766196096.346:14160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.516741][ T29] audit: type=1326 audit(1766196096.346:14161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.540378][ T29] audit: type=1326 audit(1766196096.346:14162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10210 comm="syz.4.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 185.631814][T10215] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 185.639774][T10215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1991'. [ 185.709964][T10218] netlink: 'syz.0.1992': attribute type 29 has an invalid length. [ 185.726893][T10218] netlink: 'syz.0.1992': attribute type 29 has an invalid length. [ 185.856225][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 185.997724][T10228] team3: entered promiscuous mode [ 186.002857][T10228] team3: entered allmulticast mode [ 186.066300][T10228] 8021q: adding VLAN 0 to HW filter on device team3 [ 186.417714][T10244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10244 comm=syz.0.2003 [ 186.568255][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 186.577358][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2006'. [ 186.808999][T10284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10284 comm=syz.2.2020 [ 186.824885][T10285] SELinux: security_context_str_to_sid (/gEG `Bg<%$wVbZ|?n܉܉YHmJqNm jKJb1~=2ա0$ 􊬋:" ^)U V%n<㻫.>mF[b AI]ю@Bl~ ; [ 186.824885][T10285] Wvj sRʹjswi h#L!|0h+l/QL]_yOlA) failed with errno=-22 [ 187.002733][T10294] netlink: 'syz.0.2023': attribute type 29 has an invalid length. [ 187.011350][T10294] netlink: 'syz.0.2023': attribute type 29 has an invalid length. [ 187.105201][T10304] netlink: 'syz.4.2028': attribute type 10 has an invalid length. [ 187.113141][T10304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2028'. [ 187.142161][ T37] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.151633][ T37] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.162248][ T37] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.170892][ T37] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.219889][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2030'. [ 187.235228][T10308] team6: entered promiscuous mode [ 187.240454][T10308] team6: entered allmulticast mode [ 187.251986][T10308] 8021q: adding VLAN 0 to HW filter on device team6 [ 187.399030][T10322] netlink: 'syz.5.2036': attribute type 29 has an invalid length. [ 187.408229][T10322] netlink: 'syz.5.2036': attribute type 29 has an invalid length. [ 187.526033][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2040'. [ 187.570618][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2039'. [ 187.859005][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 187.873587][T10362] team2: entered promiscuous mode [ 187.878655][T10362] team2: entered allmulticast mode [ 187.884864][T10362] 8021q: adding VLAN 0 to HW filter on device team2 [ 187.943047][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2058'. [ 188.467897][T10398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2069'. [ 188.535162][T10400] loop1: detected capacity change from 0 to 512 [ 188.724946][T10412] lo speed is unknown, defaulting to 1000 [ 188.731674][T10412] lo speed is unknown, defaulting to 1000 [ 188.940359][ T9] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 188.980462][ T9] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.028486][T10434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2082'. [ 189.737186][T10508] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10508 comm=syz.1.2115 [ 189.912430][T10525] team3: entered promiscuous mode [ 189.917712][T10525] team3: entered allmulticast mode [ 189.923872][T10525] 8021q: adding VLAN 0 to HW filter on device team3 [ 189.935122][T10526] validate_nla: 7 callbacks suppressed [ 189.935136][T10526] netlink: 'syz.5.2124': attribute type 29 has an invalid length. [ 189.953000][T10532] netlink: 'syz.5.2124': attribute type 29 has an invalid length. [ 190.214929][T10549] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 190.341040][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 190.341060][ T29] audit: type=1326 audit(1766196101.366:14950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.383273][ T29] audit: type=1326 audit(1766196101.396:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.407110][ T29] audit: type=1326 audit(1766196101.396:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.430874][ T29] audit: type=1326 audit(1766196101.396:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.454558][ T29] audit: type=1326 audit(1766196101.396:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.477715][ T29] audit: type=1326 audit(1766196101.396:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.501546][ T29] audit: type=1326 audit(1766196101.396:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.525168][ T29] audit: type=1326 audit(1766196101.396:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.548429][ T29] audit: type=1326 audit(1766196101.396:14958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.571565][ T29] audit: type=1326 audit(1766196101.396:14959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10558 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 190.677970][T10569] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 190.891807][T10590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10590 comm=syz.4.2152 [ 190.950955][T10597] team1: entered promiscuous mode [ 190.956179][T10597] team1: entered allmulticast mode [ 190.961699][T10597] 8021q: adding VLAN 0 to HW filter on device team1 [ 191.195432][T10626] team2: entered promiscuous mode [ 191.200569][T10626] team2: entered allmulticast mode [ 191.205999][T10626] 8021q: adding VLAN 0 to HW filter on device team2 [ 191.433287][T10657] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 191.474778][T10664] FAULT_INJECTION: forcing a failure. [ 191.474778][T10664] name failslab, interval 1, probability 0, space 0, times 0 [ 191.487631][T10664] CPU: 0 UID: 0 PID: 10664 Comm: syz.5.2183 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.487729][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.487776][T10664] Call Trace: [ 191.487786][T10664] [ 191.487794][T10664] __dump_stack+0x1d/0x30 [ 191.487820][T10664] dump_stack_lvl+0xe8/0x140 [ 191.487843][T10664] dump_stack+0x15/0x1b [ 191.487925][T10664] should_fail_ex+0x265/0x280 [ 191.487969][T10664] should_failslab+0x8c/0xb0 [ 191.488001][T10664] __kvmalloc_node_noprof+0x149/0x6b0 [ 191.488102][T10664] ? io_alloc_cache_init+0x36/0xb0 [ 191.488143][T10664] io_alloc_cache_init+0x36/0xb0 [ 191.488186][T10664] io_ring_ctx_alloc+0x2a3/0x650 [ 191.488259][T10664] io_uring_create+0x50/0x4e0 [ 191.488287][T10664] ? memchr_inv+0x30/0x2e0 [ 191.488325][T10664] __se_sys_io_uring_setup+0x1be/0x1d0 [ 191.488362][T10664] __x64_sys_io_uring_setup+0x31/0x40 [ 191.488468][T10664] x64_sys_call+0x244c/0x3000 [ 191.488501][T10664] do_syscall_64+0xd8/0x2c0 [ 191.488548][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.488573][T10664] RIP: 0033:0x7fcaaed9f749 [ 191.488592][T10664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.488630][T10664] RSP: 002b:00007fcaad7ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 191.488714][T10664] RAX: ffffffffffffffda RBX: 00007fcaaeff5fa0 RCX: 00007fcaaed9f749 [ 191.488732][T10664] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001828 [ 191.488837][T10664] RBP: 00007fcaad7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 191.488855][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.488871][T10664] R13: 00007fcaaeff6038 R14: 00007fcaaeff5fa0 R15: 00007ffe6eca0878 [ 191.488905][T10664] [ 191.740251][T10680] __nla_validate_parse: 10 callbacks suppressed [ 191.740267][T10680] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2188'. [ 192.004611][T10708] lo speed is unknown, defaulting to 1000 [ 192.021137][T10708] lo speed is unknown, defaulting to 1000 [ 192.156291][T10725] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2207'. [ 192.736958][T10754] netlink: 'syz.1.2213': attribute type 1 has an invalid length. [ 192.748291][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 192.858544][T10762] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 192.866583][T10762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2223'. [ 193.158506][ T3657] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 193.177149][ T3657] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.190872][T10792] loop5: detected capacity change from 0 to 512 [ 193.321369][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 193.330338][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2234'. [ 193.345917][T10798] SELinux: security_context_str_to_sid (V_]=<'.~Um/n6j4.)lT$j`^Vk#q~Zx鐡L6YCNgUSOG:lK#W1Ms6%5MzO_Q@Qzp?e'G0@\i{YDa lC0r|XȘjdo;#O3rdǰ_YwХI [ 193.345917][T10798] \%4j)7\ -0Ͳd) failed with errno=-22 [ 194.353869][T10837] netlink: 'syz.5.2251': attribute type 1 has an invalid length. [ 194.365459][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2251'. [ 194.659609][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2248'. [ 194.895941][T10847] lo speed is unknown, defaulting to 1000 [ 194.902734][T10847] lo speed is unknown, defaulting to 1000 [ 195.029690][T10878] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 195.039840][T10877] netlink: 'syz.0.2268': attribute type 29 has an invalid length. [ 195.044293][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 195.048507][T10877] netlink: 'syz.0.2268': attribute type 29 has an invalid length. [ 195.072076][T10880] team3: entered promiscuous mode [ 195.077160][T10880] team3: entered allmulticast mode [ 195.103088][T10880] 8021q: adding VLAN 0 to HW filter on device team3 [ 195.228119][T10891] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 195.283906][T10891] team0 (unregistering): Port device team_slave_0 removed [ 195.348790][T10891] team0 (unregistering): Port device team_slave_1 removed [ 195.358068][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 195.358087][ T29] audit: type=1326 audit(1766196106.376:15677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb891e65e7 code=0x7ffc0000 [ 195.388302][ T29] audit: type=1326 audit(1766196106.376:15678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb8918b829 code=0x7ffc0000 [ 195.411898][ T29] audit: type=1326 audit(1766196106.376:15679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7feb891ef749 code=0x7ffc0000 [ 195.418724][T10891] team0 (unregistering): Port device geneve1 removed [ 195.435701][ T29] audit: type=1326 audit(1766196106.396:15680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb891e65e7 code=0x7ffc0000 [ 195.435751][ T29] audit: type=1326 audit(1766196106.396:15681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb8918b829 code=0x7ffc0000 [ 195.435790][ T29] audit: type=1326 audit(1766196106.396:15682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7feb891ef749 code=0x7ffc0000 [ 195.435845][ T29] audit: type=1326 audit(1766196106.396:15683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb891e65e7 code=0x7ffc0000 [ 195.435884][ T29] audit: type=1326 audit(1766196106.396:15684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb8918b829 code=0x7ffc0000 [ 195.435923][ T29] audit: type=1326 audit(1766196106.396:15685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7feb891ef749 code=0x7ffc0000 [ 195.436014][ T29] audit: type=1326 audit(1766196106.396:15686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10895 comm="syz.2.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb891e65e7 code=0x7ffc0000 [ 195.769250][T10909] team0: entered promiscuous mode [ 195.774391][T10909] team0: entered allmulticast mode [ 195.780206][T10909] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.090619][T10925] netlink: 'syz.2.2289': attribute type 29 has an invalid length. [ 196.100221][T10925] netlink: 'syz.2.2289': attribute type 29 has an invalid length. [ 196.256176][T10940] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 196.298935][T10944] netlink: 'syz.2.2297': attribute type 10 has an invalid length. [ 196.709295][T10955] netlink: 'syz.4.2302': attribute type 29 has an invalid length. [ 196.718038][T10955] netlink: 'syz.4.2302': attribute type 29 has an invalid length. [ 196.964527][T10973] netlink: 'syz.5.2310': attribute type 10 has an invalid length. [ 196.972789][T10973] __nla_validate_parse: 4 callbacks suppressed [ 196.972808][T10973] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2310'. [ 196.994006][T10976] netlink: 'syz.4.2312': attribute type 10 has an invalid length. [ 196.998644][T10973] team0: Failed to send options change via netlink (err -105) [ 197.002044][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2312'. [ 197.009521][T10973] team0: Port device geneve1 added [ 197.024140][T10977] netlink: 'syz.0.2311': attribute type 1 has an invalid length. [ 197.025018][T10976] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 197.068619][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 197.207342][T10996] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.208740][T10990] lo speed is unknown, defaulting to 1000 [ 197.220952][T10990] lo speed is unknown, defaulting to 1000 [ 197.265837][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2318'. [ 197.330606][T11008] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 197.602122][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 197.620733][ T3399] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.689486][T11049] FAULT_INJECTION: forcing a failure. [ 197.689486][T11049] name failslab, interval 1, probability 0, space 0, times 0 [ 197.702506][T11049] CPU: 0 UID: 0 PID: 11049 Comm: syz.1.2341 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.702543][T11049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.702638][T11049] Call Trace: [ 197.702647][T11049] [ 197.702658][T11049] __dump_stack+0x1d/0x30 [ 197.702719][T11049] dump_stack_lvl+0xe8/0x140 [ 197.702748][T11049] dump_stack+0x15/0x1b [ 197.702773][T11049] should_fail_ex+0x265/0x280 [ 197.702819][T11049] should_failslab+0x8c/0xb0 [ 197.702859][T11049] kmem_cache_alloc_noprof+0x69/0x4b0 [ 197.702889][T11049] ? getname_flags+0x80/0x3b0 [ 197.702919][T11049] getname_flags+0x80/0x3b0 [ 197.703019][T11049] path_setxattrat+0x223/0x310 [ 197.703071][T11049] __x64_sys_lsetxattr+0x71/0x90 [ 197.703096][T11049] x64_sys_call+0x2ef0/0x3000 [ 197.703128][T11049] do_syscall_64+0xd8/0x2c0 [ 197.703177][T11049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.703205][T11049] RIP: 0033:0x7fcd4d39f749 [ 197.703230][T11049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.703253][T11049] RSP: 002b:00007fcd4bdff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 197.703277][T11049] RAX: ffffffffffffffda RBX: 00007fcd4d5f5fa0 RCX: 00007fcd4d39f749 [ 197.703294][T11049] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 197.703311][T11049] RBP: 00007fcd4bdff090 R08: 0000000000000002 R09: 0000000000000000 [ 197.703327][T11049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.703410][T11049] R13: 00007fcd4d5f6038 R14: 00007fcd4d5f5fa0 R15: 00007ffd7b667558 [ 197.703481][T11049] [ 197.884195][T11055] xt_connbytes: Forcing CT accounting to be enabled [ 197.891045][T11055] Cannot find set identified by id 0 to match [ 197.955138][T11061] loop5: detected capacity change from 0 to 1024 [ 197.966555][T11061] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.995798][T11061] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 198.010016][T11061] EXT4-fs (loop5): orphan cleanup on readonly fs [ 198.019496][T11061] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.2348: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.033387][T11061] EXT4-fs (loop5): 1 orphan inode deleted [ 198.036890][T11068] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2351'. [ 198.039903][T11061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.076293][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.213891][T11081] unsupported nla_type 52263 [ 198.702173][T11106] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2364'. [ 198.764467][T11106] batadv_slave_0: Caught tx_queue_len zero misconfig [ 199.208724][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'. [ 199.331402][ T36] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 199.407700][ T36] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.483205][T11139] syz.2.2377 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 200.143112][T11167] validate_nla: 7 callbacks suppressed [ 200.143132][T11167] netlink: 'syz.4.2386': attribute type 3 has an invalid length. [ 200.157018][T11167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2386'. [ 200.166050][T11167] openvswitch: netlink: Flow key attr not present in new flow. [ 200.214557][T11169] Cannot find add_set index 0 as target [ 200.364598][ T29] kauditd_printk_skb: 1055 callbacks suppressed [ 200.364614][ T29] audit: type=1326 audit(1766196111.386:16742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.412907][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2390'. [ 200.421948][T11178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2390'. [ 200.468645][ T29] audit: type=1326 audit(1766196111.416:16743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.492560][ T29] audit: type=1326 audit(1766196111.416:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.516529][ T29] audit: type=1326 audit(1766196111.416:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.540178][ T29] audit: type=1326 audit(1766196111.416:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.563845][ T29] audit: type=1326 audit(1766196111.416:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.587449][ T29] audit: type=1326 audit(1766196111.426:16748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.611138][ T29] audit: type=1326 audit(1766196111.426:16749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.629126][T11187] SELinux: security_context_str_to_sid (Ļ]Cx KrMJ!W{^_\Dtի=OO$w8+m![HћM%H𡸗~ً) failed with errno=-22 [ 200.634747][ T29] audit: type=1326 audit(1766196111.426:16750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.674796][ T29] audit: type=1326 audit(1766196111.426:16751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11174 comm="syz.4.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f179f7cf749 code=0x7ffc0000 [ 200.783191][T11202] netlink: 'syz.0.2397': attribute type 29 has an invalid length. [ 200.818642][T11202] netlink: 'syz.0.2397': attribute type 29 has an invalid length. [ 200.830082][ T3657] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 200.854293][ T3657] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.183365][T11222] netlink: 'syz.4.2405': attribute type 1 has an invalid length. [ 201.417811][T11238] netlink: 'syz.1.2411': attribute type 29 has an invalid length. [ 201.434077][T11238] netlink: 'syz.1.2411': attribute type 29 has an invalid length. [ 201.482819][T11242] netlink: 'syz.1.2413': attribute type 10 has an invalid length. [ 201.555545][T11250] Process accounting resumed [ 201.625053][T11255] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 201.823180][T11267] SELinux: security_context_str_to_sid (dę,]XN˝)*nT$?Jpvv`=% [ 201.823180][T11267] ]Jd1&?N:yHHgLiS<[B01|ߕlh] 8lw [ 201.823180][T11267] 9ibk 8(\uVכK*bWK!9D:1&rÔEjEi_ t\ kQ!/pp"Cj{ dAJ)jM?#?bt6}) failed with errno=-22 [ 201.982598][T11279] netlink: 'syz.0.2425': attribute type 10 has an invalid length. [ 201.990542][T11279] __nla_validate_parse: 6 callbacks suppressed [ 201.990580][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2425'. [ 202.131466][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 202.173420][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 202.181878][ T9] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.456840][T11303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11303 comm=syz.1.2434 [ 202.493857][T11307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11307 comm=syz.4.2436 [ 202.650967][T11328] netlink: 'syz.5.2446': attribute type 29 has an invalid length. [ 202.659347][T11328] netlink: 'syz.5.2446': attribute type 29 has an invalid length. [ 202.706753][T11333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11333 comm=syz.4.2448 [ 202.793144][T11343] loop1: detected capacity change from 0 to 512 [ 202.801094][T11341] loop5: detected capacity change from 0 to 128 [ 202.807851][T11343] EXT4-fs: Ignoring removed oldalloc option [ 202.817789][T11343] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.827856][T11343] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 202.837393][T11343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102] [ 202.845937][T11343] System zones: 0-2, 18-18, 34-34 [ 202.851820][T11343] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2453: iget: bad i_size value: 360287970189639680 [ 202.865557][T11343] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2453: couldn't read orphan inode 15 (err -117) [ 202.881400][T11343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.918562][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.034261][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2461'. [ 203.104131][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 203.187073][T11381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11381 comm=syz.0.2468 [ 203.318417][T11393] lo speed is unknown, defaulting to 1000 [ 203.325721][T11393] lo speed is unknown, defaulting to 1000 [ 203.425175][T11398] dvmrp0: entered allmulticast mode [ 203.522726][T11407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11407 comm=syz.2.2479 [ 203.762219][T11433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11433 comm=syz.4.2490 [ 203.865157][T11364] 9pnet_fd: p9_fd_create_tcp (11364): problem connecting socket to 127.0.0.1 [ 204.092760][T11460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11460 comm=syz.1.2502 [ 204.135320][T11464] loop1: detected capacity change from 0 to 128 [ 204.146602][T11464] EXT4-fs: Ignoring removed nobh option [ 204.158695][ T3671] udevd[3671]: incorrect ext4 checksum on /dev/loop1 [ 204.166122][T11464] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.198711][T11464] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.363252][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.395790][T11488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11488 comm=syz.0.2515 [ 204.484744][T11499] FAULT_INJECTION: forcing a failure. [ 204.484744][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 204.497450][T11499] CPU: 1 UID: 0 PID: 11499 Comm: syz.2.2517 Not tainted syzkaller #0 PREEMPT(voluntary) [ 204.497487][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.497505][T11499] Call Trace: [ 204.497513][T11499] [ 204.497522][T11499] __dump_stack+0x1d/0x30 [ 204.497549][T11499] dump_stack_lvl+0xe8/0x140 [ 204.497668][T11499] dump_stack+0x15/0x1b [ 204.497691][T11499] should_fail_ex+0x265/0x280 [ 204.497823][T11499] should_failslab+0x8c/0xb0 [ 204.497847][T11499] __kmalloc_noprof+0xb9/0x5a0 [ 204.497874][T11499] ? bpf_test_init+0x86/0x140 [ 204.497902][T11499] ? _parse_integer_limit+0x170/0x190 [ 204.497952][T11499] bpf_test_init+0x86/0x140 [ 204.497993][T11499] bpf_prog_test_run_skb+0x2b6/0xf50 [ 204.498035][T11499] ? __rcu_read_unlock+0x4f/0x70 [ 204.498058][T11499] ? __fget_files+0x184/0x1c0 [ 204.498133][T11499] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 204.498173][T11499] bpf_prog_test_run+0x22a/0x390 [ 204.498277][T11499] __sys_bpf+0x4c0/0x7c0 [ 204.498317][T11499] __x64_sys_bpf+0x41/0x50 [ 204.498477][T11499] x64_sys_call+0x28e1/0x3000 [ 204.498511][T11499] do_syscall_64+0xd8/0x2c0 [ 204.498638][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.498668][T11499] RIP: 0033:0x7feb891ef749 [ 204.498690][T11499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.498728][T11499] RSP: 002b:00007feb87c4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.498754][T11499] RAX: ffffffffffffffda RBX: 00007feb89445fa0 RCX: 00007feb891ef749 [ 204.498772][T11499] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 204.498789][T11499] RBP: 00007feb87c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.498805][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.498822][T11499] R13: 00007feb89446038 R14: 00007feb89445fa0 R15: 00007ffcb9dc7468 [ 204.498924][T11499] [ 204.906991][T11523] FAULT_INJECTION: forcing a failure. [ 204.906991][T11523] name failslab, interval 1, probability 0, space 0, times 0 [ 204.908794][T11524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11524 comm=syz.5.2526 [ 204.919731][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.1.2524 Not tainted syzkaller #0 PREEMPT(voluntary) [ 204.919766][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.919822][T11523] Call Trace: [ 204.919877][T11523] [ 204.919889][T11523] __dump_stack+0x1d/0x30 [ 204.919925][T11523] dump_stack_lvl+0xe8/0x140 [ 204.919960][T11523] dump_stack+0x15/0x1b [ 204.919994][T11523] should_fail_ex+0x265/0x280 [ 204.920030][T11523] should_failslab+0x8c/0xb0 [ 204.920062][T11523] __kvmalloc_node_noprof+0x149/0x6b0 [ 204.920101][T11523] ? alloc_netdev_mqs+0x6e3/0xa40 [ 204.920221][T11523] alloc_netdev_mqs+0x6e3/0xa40 [ 204.920268][T11523] rtnl_create_link+0x239/0x6e0 [ 204.920323][T11523] rtnl_newlink_create+0x14c/0x620 [ 204.920390][T11523] ? security_capable+0x83/0x90 [ 204.920445][T11523] rtnl_newlink+0xf5b/0x1360 [ 204.920538][T11523] ? xas_load+0x413/0x430 [ 204.920582][T11523] ? xas_load+0x413/0x430 [ 204.920626][T11523] ? __rcu_read_unlock+0x4f/0x70 [ 204.920656][T11523] ? __rcu_read_unlock+0x4f/0x70 [ 204.920746][T11523] ? avc_has_perm_noaudit+0xab/0x130 [ 204.920780][T11523] ? cred_has_capability+0x210/0x280 [ 204.920896][T11523] ? selinux_capable+0x31/0x40 [ 204.920953][T11523] ? security_capable+0x83/0x90 [ 204.921082][T11523] ? ns_capable+0x7d/0xb0 [ 204.921246][T11523] ? __pfx_rtnl_newlink+0x10/0x10 [ 204.921331][T11523] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 204.921361][T11523] ? avc_has_perm_noaudit+0xab/0x130 [ 204.921410][T11523] netlink_rcv_skb+0x123/0x220 [ 204.921454][T11523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.921504][T11523] rtnetlink_rcv+0x1c/0x30 [ 204.921550][T11523] netlink_unicast+0x5c0/0x690 [ 204.921590][T11523] netlink_sendmsg+0x58b/0x6b0 [ 204.921640][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.921766][T11523] __sock_sendmsg+0x145/0x180 [ 204.921810][T11523] ____sys_sendmsg+0x31e/0x4a0 [ 204.921857][T11523] ___sys_sendmsg+0x17b/0x1d0 [ 204.921924][T11523] __x64_sys_sendmsg+0xd4/0x160 [ 204.921977][T11523] x64_sys_call+0x17ba/0x3000 [ 204.922014][T11523] do_syscall_64+0xd8/0x2c0 [ 204.922066][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.922138][T11523] RIP: 0033:0x7fcd4d39f749 [ 204.922163][T11523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.922204][T11523] RSP: 002b:00007fcd4bdde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.922231][T11523] RAX: ffffffffffffffda RBX: 00007fcd4d5f6090 RCX: 00007fcd4d39f749 [ 204.922251][T11523] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 204.922314][T11523] RBP: 00007fcd4bdde090 R08: 0000000000000000 R09: 0000000000000000 [ 204.922332][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.922350][T11523] R13: 00007fcd4d5f6128 R14: 00007fcd4d5f6090 R15: 00007ffd7b667558 [ 204.922381][T11523] [ 205.399865][ T29] kauditd_printk_skb: 1149 callbacks suppressed [ 205.399884][ T29] audit: type=1326 audit(1766196116.426:17901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.452584][ T5159] Bluetooth: hci0: sending frame failed (-49) [ 205.458867][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 205.475731][ T29] audit: type=1326 audit(1766196116.456:17902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.499585][ T29] audit: type=1326 audit(1766196116.456:17903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.523316][ T29] audit: type=1326 audit(1766196116.456:17904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.547059][ T29] audit: type=1326 audit(1766196116.456:17905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.570920][ T29] audit: type=1326 audit(1766196116.456:17906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.594946][ T29] audit: type=1326 audit(1766196116.466:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.618573][ T29] audit: type=1326 audit(1766196116.466:17908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.642399][ T29] audit: type=1326 audit(1766196116.466:17909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.666069][ T29] audit: type=1326 audit(1766196116.466:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f179f802005 code=0x7ffc0000 [ 205.871041][T11553] program syz.0.2539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.902905][T11555] validate_nla: 5 callbacks suppressed [ 205.902990][T11555] netlink: 'syz.5.2540': attribute type 29 has an invalid length. [ 205.924775][T11555] netlink: 'syz.5.2540': attribute type 29 has an invalid length. [ 205.986335][T11556] lo speed is unknown, defaulting to 1000 [ 205.992622][T11556] lo speed is unknown, defaulting to 1000 [ 206.232670][T11579] FAULT_INJECTION: forcing a failure. [ 206.232670][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 206.245513][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.5.2545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.245595][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.245613][T11579] Call Trace: [ 206.245622][T11579] [ 206.245632][T11579] __dump_stack+0x1d/0x30 [ 206.245663][T11579] dump_stack_lvl+0xe8/0x140 [ 206.245758][T11579] dump_stack+0x15/0x1b [ 206.245785][T11579] should_fail_ex+0x265/0x280 [ 206.245893][T11579] should_failslab+0x8c/0xb0 [ 206.245924][T11579] kmem_cache_alloc_noprof+0x69/0x4b0 [ 206.245947][T11579] ? alloc_empty_file+0x76/0x200 [ 206.246096][T11579] alloc_empty_file+0x76/0x200 [ 206.246193][T11579] path_openat+0x63/0x23b0 [ 206.246287][T11579] ? __rcu_read_unlock+0x34/0x70 [ 206.246312][T11579] ? filemap_map_pages+0xc0e/0xe50 [ 206.246343][T11579] ? css_rstat_updated+0xbb/0x280 [ 206.246368][T11579] do_filp_open+0x109/0x230 [ 206.246501][T11579] do_sys_openat2+0xa6/0x150 [ 206.246584][T11579] __x64_sys_openat+0xf2/0x120 [ 206.246622][T11579] x64_sys_call+0x2b07/0x3000 [ 206.246727][T11579] do_syscall_64+0xd8/0x2c0 [ 206.246773][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.246798][T11579] RIP: 0033:0x7fcaaed9df90 [ 206.246812][T11579] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 206.246891][T11579] RSP: 002b:00007fcaad7bcb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 206.246911][T11579] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007fcaaed9df90 [ 206.246928][T11579] RDX: 0000000000101301 RSI: 00007fcaad7bcc10 RDI: 00000000ffffff9c [ 206.246944][T11579] RBP: 00007fcaad7bcc10 R08: 0000000000000000 R09: 0000000000000000 [ 206.246961][T11579] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 206.247018][T11579] R13: 00007fcaaeff6218 R14: 00007fcaaeff6180 R15: 00007ffe6eca0878 [ 206.247045][T11579] [ 206.456409][T11579] lo speed is unknown, defaulting to 1000 [ 206.463052][T11579] lo speed is unknown, defaulting to 1000 [ 206.587953][T11578] loop0: detected capacity change from 0 to 2048 [ 206.635340][T11578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.774166][T11590] FAULT_INJECTION: forcing a failure. [ 206.774166][T11590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.787314][T11590] CPU: 1 UID: 0 PID: 11590 Comm: ,&#^% Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.787358][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.787376][T11590] Call Trace: [ 206.787385][T11590] [ 206.787395][T11590] __dump_stack+0x1d/0x30 [ 206.787474][T11590] dump_stack_lvl+0xe8/0x140 [ 206.787497][T11590] dump_stack+0x15/0x1b [ 206.787577][T11590] should_fail_ex+0x265/0x280 [ 206.787601][T11590] should_fail+0xb/0x20 [ 206.787624][T11590] should_fail_usercopy+0x1a/0x20 [ 206.787658][T11590] _copy_to_user+0x20/0xa0 [ 206.787709][T11590] simple_read_from_buffer+0xb5/0x130 [ 206.787732][T11590] proc_fail_nth_read+0x10e/0x150 [ 206.787791][T11590] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.787896][T11590] vfs_read+0x1a8/0x770 [ 206.787915][T11590] ? __rcu_read_unlock+0x4f/0x70 [ 206.787936][T11590] ? __fget_files+0x184/0x1c0 [ 206.787968][T11590] ? mutex_lock+0x58/0x90 [ 206.788054][T11590] ksys_read+0xda/0x1a0 [ 206.788087][T11590] __x64_sys_read+0x40/0x50 [ 206.788114][T11590] x64_sys_call+0x2889/0x3000 [ 206.788141][T11590] do_syscall_64+0xd8/0x2c0 [ 206.788187][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.788325][T11590] RIP: 0033:0x7feb891ee15c [ 206.788345][T11590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.788370][T11590] RSP: 002b:00007feb87c4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.788397][T11590] RAX: ffffffffffffffda RBX: 00007feb89445fa0 RCX: 00007feb891ee15c [ 206.788413][T11590] RDX: 000000000000000f RSI: 00007feb87c4f0a0 RDI: 0000000000000005 [ 206.788430][T11590] RBP: 00007feb87c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.788447][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.788541][T11590] R13: 00007feb89446038 R14: 00007feb89445fa0 R15: 00007ffcb9dc7468 [ 206.788567][T11590] [ 207.142677][T11604] netlink: 'syz.4.2560': attribute type 10 has an invalid length. [ 207.150572][T11604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2560'. [ 207.178384][T11604] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 207.224058][ T3327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.271708][T11611] netlink: 'syz.2.2563': attribute type 29 has an invalid length. [ 207.390805][T11618] netlink: 'syz.2.2563': attribute type 29 has an invalid length. [ 207.402042][T11615] loop1: detected capacity change from 0 to 128 [ 207.768024][T11609] lo speed is unknown, defaulting to 1000 [ 207.817090][T11609] lo speed is unknown, defaulting to 1000 [ 207.879868][T11619] lo speed is unknown, defaulting to 1000 [ 208.157228][ T177] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.223093][ T177] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.273123][T11619] lo speed is unknown, defaulting to 1000 [ 208.311907][ T177] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.361880][ T177] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.443134][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 208.464156][ T177] bridge_slave_1: left allmulticast mode [ 208.469979][ T177] bridge_slave_1: left promiscuous mode [ 208.475644][ T177] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.515354][ T177] bridge_slave_0: left allmulticast mode [ 208.521415][ T177] bridge_slave_0: left promiscuous mode [ 208.527227][ T177] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.625726][T11671] FAULT_INJECTION: forcing a failure. [ 208.625726][T11671] name failslab, interval 1, probability 0, space 0, times 0 [ 208.638464][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.5.2583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.638500][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.638517][T11671] Call Trace: [ 208.638523][T11671] [ 208.638531][T11671] __dump_stack+0x1d/0x30 [ 208.638608][T11671] dump_stack_lvl+0xe8/0x140 [ 208.638641][T11671] dump_stack+0x15/0x1b [ 208.638668][T11671] should_fail_ex+0x265/0x280 [ 208.638748][T11671] should_failslab+0x8c/0xb0 [ 208.638779][T11671] kmem_cache_alloc_noprof+0x69/0x4b0 [ 208.638809][T11671] ? alloc_empty_file+0x76/0x200 [ 208.638841][T11671] alloc_empty_file+0x76/0x200 [ 208.638905][T11671] path_openat+0x63/0x23b0 [ 208.638940][T11671] ? __rcu_read_unlock+0x34/0x70 [ 208.639012][T11671] ? filemap_map_pages+0xc0e/0xe50 [ 208.639046][T11671] ? css_rstat_updated+0xbb/0x280 [ 208.639136][T11671] ? kstrtouint+0x76/0xc0 [ 208.639243][T11671] do_filp_open+0x109/0x230 [ 208.639337][T11671] do_sys_openat2+0xa6/0x150 [ 208.639381][T11671] __x64_sys_openat+0xf2/0x120 [ 208.639424][T11671] x64_sys_call+0x2b07/0x3000 [ 208.639510][T11671] do_syscall_64+0xd8/0x2c0 [ 208.639561][T11671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.639591][T11671] RIP: 0033:0x7fcaaed9df90 [ 208.639611][T11671] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 208.639716][T11671] RSP: 002b:00007fcaad7feb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 208.639742][T11671] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcaaed9df90 [ 208.639755][T11671] RDX: 0000000000000000 RSI: 00007fcaad7fec10 RDI: 00000000ffffff9c [ 208.639768][T11671] RBP: 00007fcaad7fec10 R08: 0000000000000000 R09: 0072736d2f232f75 [ 208.639818][T11671] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 208.639834][T11671] R13: 00007fcaaeff6038 R14: 00007fcaaeff5fa0 R15: 00007ffe6eca0878 [ 208.639861][T11671] [ 208.922369][ T177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.932173][ T177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.942786][ T177] bond0 (unregistering): Released all slaves [ 208.955874][ T177] bond1 (unregistering): Released all slaves [ 209.064351][T11662] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 209.166770][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 209.212039][T11619] chnl_net:caif_netlink_parms(): no params data found [ 209.242679][ T177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.264057][ T177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.368396][T11714] SELinux: security_context_str_to_sid (ū63{Ns@2tThZ^X=vt5􄛱( |pP3 L/Y - ҁN%Sk~i^JKR `T'P`ji^9Z{) failed with errno=-22 [ 209.522465][T11704] netlink: 'syz.5.2593': attribute type 29 has an invalid length. [ 209.576319][T11712] netlink: 'syz.5.2593': attribute type 29 has an invalid length. [ 209.590587][T11733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11733 comm=syz.2.2600 [ 209.652538][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.659768][T11619] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.684999][T11619] bridge_slave_0: entered allmulticast mode [ 209.701854][T11619] bridge_slave_0: entered promiscuous mode [ 209.718453][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.725663][T11619] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.754034][T11619] bridge_slave_1: entered allmulticast mode [ 209.862323][T11619] bridge_slave_1: entered promiscuous mode [ 209.882623][T11619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.893262][T11619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.918689][T11619] team0: Port device team_slave_0 added [ 209.926260][T11619] team0: Port device team_slave_1 added [ 209.947089][T11619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.954192][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.980282][T11619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.048355][T11749] loop1: detected capacity change from 0 to 256 [ 210.238229][T11753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2605'. [ 210.874658][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 210.874727][ T29] audit: type=1326 audit(1766196121.896:18253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 210.945555][T11747] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 210.965692][ T29] audit: type=1326 audit(1766196121.936:18254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 210.989449][ T29] audit: type=1326 audit(1766196121.936:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.013072][ T29] audit: type=1326 audit(1766196121.936:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.036685][ T29] audit: type=1326 audit(1766196121.936:18257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.060387][ T29] audit: type=1326 audit(1766196121.936:18258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.084060][ T29] audit: type=1326 audit(1766196121.936:18259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.107759][ T29] audit: type=1326 audit(1766196121.936:18260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.131564][ T29] audit: type=1326 audit(1766196121.936:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.155330][ T29] audit: type=1326 audit(1766196121.936:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaed9f749 code=0x7ffc0000 [ 211.244339][T11781] netlink: 'syz.2.2610': attribute type 29 has an invalid length. [ 211.284211][T11781] netlink: 'syz.2.2610': attribute type 29 has an invalid length. [ 211.311058][T11619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.318125][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.344237][T11619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.529310][T11777] syzkaller0: entered promiscuous mode [ 211.534943][T11777] syzkaller0: entered allmulticast mode [ 211.575682][ T177] IPVS: stop unused estimator thread 0... [ 211.657837][T11619] hsr_slave_0: entered promiscuous mode [ 211.683252][T11619] hsr_slave_1: entered promiscuous mode [ 211.713131][T11619] debugfs: 'hsr0' already exists in 'hsr' [ 211.718992][T11619] Cannot create hsr debugfs directory [ 212.183897][T11830] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 212.224423][T11832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11832 comm=syz.0.2620 [ 212.341405][T11619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.362427][T11619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.372206][T11619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.383044][T11619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.426747][T11856] netlink: 'syz.1.2624': attribute type 10 has an invalid length. [ 212.434747][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2624'. [ 212.467195][T11619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.505573][T11619] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.529959][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2622'. [ 212.530762][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.545965][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.569407][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 212.582941][T11619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.593514][T11619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.616901][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.624028][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.701355][T11619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.828466][T11904] SELinux: security_context_str_to_sid (F9@3v6#Սrl2E"L5~m%[!jg0;?@#p0UYKFM [ 212.828466][T11904] p) failed with errno=-22 [ 212.954360][T11619] veth0_vlan: entered promiscuous mode [ 212.972459][T11619] veth1_vlan: entered promiscuous mode [ 213.007686][T11619] veth0_macvtap: entered promiscuous mode [ 213.019194][T11619] veth1_macvtap: entered promiscuous mode [ 213.036173][T11619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.051271][T11619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.095164][ T177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.136138][ T177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.145446][ T177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.174312][ T177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.186033][T11937] loop0: detected capacity change from 0 to 512 [ 213.596638][T11995] netlink: 'syz.5.2646': attribute type 10 has an invalid length. [ 213.604557][T11995] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2646'. [ 213.885370][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2657'. [ 213.906837][T12032] netlink: 'syz.4.2660': attribute type 10 has an invalid length. [ 213.914776][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2660'. [ 213.940625][T12032] team0: Failed to send options change via netlink (err -105) [ 213.948159][T12032] team0: Port device geneve1 added [ 214.034655][T12040] loop1: detected capacity change from 0 to 1024 [ 214.042518][T12040] EXT4-fs: inline encryption not supported [ 214.067513][T12040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.237249][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.279584][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 214.288822][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 214.329423][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2677'. [ 214.343536][T12077] FAULT_INJECTION: forcing a failure. [ 214.343536][T12077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.356656][T12077] CPU: 1 UID: 0 PID: 12077 Comm: syz.0.2678 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.356689][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.356745][T12077] Call Trace: [ 214.356752][T12077] [ 214.356761][T12077] __dump_stack+0x1d/0x30 [ 214.356794][T12077] dump_stack_lvl+0xe8/0x140 [ 214.356826][T12077] dump_stack+0x15/0x1b [ 214.356852][T12077] should_fail_ex+0x265/0x280 [ 214.356893][T12077] should_fail+0xb/0x20 [ 214.356920][T12077] should_fail_usercopy+0x1a/0x20 [ 214.356954][T12077] _copy_from_iter+0xcf/0xe70 [ 214.356990][T12077] ? __alloc_skb+0x3bb/0x4d0 [ 214.357093][T12077] ? __alloc_skb+0x24d/0x4d0 [ 214.357131][T12077] netlink_sendmsg+0x471/0x6b0 [ 214.357179][T12077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.357299][T12077] __sock_sendmsg+0x145/0x180 [ 214.357327][T12077] ____sys_sendmsg+0x31e/0x4a0 [ 214.357438][T12077] ___sys_sendmsg+0x17b/0x1d0 [ 214.357492][T12077] __x64_sys_sendmsg+0xd4/0x160 [ 214.357573][T12077] x64_sys_call+0x17ba/0x3000 [ 214.357605][T12077] do_syscall_64+0xd8/0x2c0 [ 214.357738][T12077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.357775][T12077] RIP: 0033:0x7f072ea5f749 [ 214.357795][T12077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.357819][T12077] RSP: 002b:00007f072d4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.357842][T12077] RAX: ffffffffffffffda RBX: 00007f072ecb5fa0 RCX: 00007f072ea5f749 [ 214.357855][T12077] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 214.357867][T12077] RBP: 00007f072d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 214.357880][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.357944][T12077] R13: 00007f072ecb6038 R14: 00007f072ecb5fa0 R15: 00007fff9bcd4868 [ 214.358011][T12077] [ 214.817840][T12114] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2693'. [ 214.883161][ T3923] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 214.919832][ T3923] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.087774][T12152] IPv6: Can't replace route, no match found [ 215.125032][T12152] loop5: detected capacity change from 0 to 512 [ 215.136280][T12152] EXT4-fs: dax option not supported [ 215.350229][T12178] netlink: 'syz.4.2717': attribute type 29 has an invalid length. [ 215.358956][T12178] netlink: 'syz.4.2717': attribute type 29 has an invalid length. [ 215.538989][T12196] SELinux: security_context_str_to_sid (u](U0_evص9lSיMτ0[LjByr>ˢ.mBp 5bS0s]a('w~ޏ'9fQֹfpR#kvN.:{+nB_!;(N]@j XY6~hp4~9mO~K :;f$ QNypO67) D-) failed with errno=-22 [ 215.688969][T12198] SELinux: failed to load policy [ 215.743756][T12198] lo speed is unknown, defaulting to 1000 [ 215.753463][T12203] netlink: 'syz.5.2725': attribute type 10 has an invalid length. [ 215.760217][T12198] lo speed is unknown, defaulting to 1000 [ 215.923922][ T29] kauditd_printk_skb: 992 callbacks suppressed [ 215.923936][ T29] audit: type=1326 audit(1766196126.946:19255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 215.995092][ T29] audit: type=1326 audit(1766196126.986:19256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.018848][ T29] audit: type=1326 audit(1766196126.986:19257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.042736][ T29] audit: type=1326 audit(1766196126.986:19258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.066431][ T29] audit: type=1326 audit(1766196126.986:19259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.090166][ T29] audit: type=1326 audit(1766196126.986:19260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.113987][ T29] audit: type=1326 audit(1766196126.986:19261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.137629][ T29] audit: type=1326 audit(1766196126.986:19262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.161480][ T29] audit: type=1326 audit(1766196126.986:19263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.185262][ T29] audit: type=1326 audit(1766196126.986:19264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12219 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f072ea5f749 code=0x7ffc0000 [ 216.251987][T12236] loop1: detected capacity change from 0 to 128 [ 216.262352][T12236] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.321091][T12236] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.354075][ T3490] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 216.420637][ T3490] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.591105][T11767] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.842302][T12265] netlink: 'syz.1.2748': attribute type 29 has an invalid length. [ 216.851560][T12265] netlink: 'syz.1.2748': attribute type 29 has an invalid length. [ 217.268762][T12293] netlink: 'syz.2.2759': attribute type 10 has an invalid length. [ 217.341907][T12305] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 217.432298][T12316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12316 comm=syz.4.2769 [ 217.490862][ T3399] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 217.510172][ T3399] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.639148][T12326] netlink: 'syz.5.2773': attribute type 29 has an invalid length. [ 217.668232][T12326] netlink: 'syz.5.2773': attribute type 29 has an invalid length. [ 217.843133][T12347] __nla_validate_parse: 10 callbacks suppressed [ 217.843170][T12347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'. [ 217.858609][T12347] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2783'. [ 217.871248][T12347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'. [ 217.882058][T12347] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2783'. [ 217.891671][T12349] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 218.229297][T12376] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12376 comm=syz.1.2795 [ 218.313033][T12386] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.441436][T12401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12401 comm=syz.1.2807 [ 218.553090][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.568900][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.896868][ T3489] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 219.006670][ T3489] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.178657][T12427] loop5: detected capacity change from 0 to 512 [ 219.328902][T12427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.341786][T12427] ext4 filesystem being mounted at /362/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.950815][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'. [ 220.177700][T12462] syzkaller0: entered promiscuous mode [ 220.183411][T12462] syzkaller0: entered allmulticast mode [ 220.247677][T12469] FAULT_INJECTION: forcing a failure. [ 220.247677][T12469] name failslab, interval 1, probability 0, space 0, times 0 [ 220.260391][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.0.2832 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.260418][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.260433][T12469] Call Trace: [ 220.260441][T12469] [ 220.260448][T12469] __dump_stack+0x1d/0x30 [ 220.260474][T12469] dump_stack_lvl+0xe8/0x140 [ 220.260515][T12469] dump_stack+0x15/0x1b [ 220.260535][T12469] should_fail_ex+0x265/0x280 [ 220.260624][T12469] should_failslab+0x8c/0xb0 [ 220.260650][T12469] kmem_cache_alloc_noprof+0x69/0x4b0 [ 220.260673][T12469] ? skb_clone+0x151/0x1f0 [ 220.260711][T12469] skb_clone+0x151/0x1f0 [ 220.260800][T12469] __netlink_deliver_tap+0x2c9/0x500 [ 220.260846][T12469] netlink_unicast+0x66b/0x690 [ 220.260877][T12469] netlink_sendmsg+0x58b/0x6b0 [ 220.260970][T12469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.261005][T12469] __sock_sendmsg+0x145/0x180 [ 220.261071][T12469] ____sys_sendmsg+0x345/0x4a0 [ 220.261114][T12469] ___sys_sendmsg+0x17b/0x1d0 [ 220.261219][T12469] __sys_sendmmsg+0x178/0x300 [ 220.261371][T12469] __x64_sys_sendmmsg+0x57/0x70 [ 220.261402][T12469] x64_sys_call+0x1e28/0x3000 [ 220.261457][T12469] do_syscall_64+0xd8/0x2c0 [ 220.261504][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.261534][T12469] RIP: 0033:0x7f072ea5f749 [ 220.261554][T12469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.261573][T12469] RSP: 002b:00007f072d4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.261621][T12469] RAX: ffffffffffffffda RBX: 00007f072ecb5fa0 RCX: 00007f072ea5f749 [ 220.261639][T12469] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 220.261654][T12469] RBP: 00007f072d4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.261669][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.261685][T12469] R13: 00007f072ecb6038 R14: 00007f072ecb5fa0 R15: 00007fff9bcd4868 [ 220.261712][T12469] [ 220.506247][T12472] netlink: 'syz.0.2834': attribute type 4 has an invalid length. [ 220.514060][T12472] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2834'. [ 220.523330][T12473] netlink: 'syz.0.2834': attribute type 4 has an invalid length. [ 220.531175][T12473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2834'. [ 220.556348][T12472] .`: renamed from bond0 (while UP) [ 220.645872][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'. [ 220.842317][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 220.871996][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 220.973891][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 220.973907][ T29] audit: type=1326 audit(1766196131.996:20123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.067898][ T29] audit: type=1326 audit(1766196132.036:20124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.091583][ T29] audit: type=1326 audit(1766196132.036:20125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.115257][ T29] audit: type=1326 audit(1766196132.036:20126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.139086][ T29] audit: type=1326 audit(1766196132.036:20127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.162801][ T29] audit: type=1326 audit(1766196132.036:20128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.186659][ T29] audit: type=1326 audit(1766196132.036:20129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.210273][ T29] audit: type=1326 audit(1766196132.036:20130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.234038][ T29] audit: type=1326 audit(1766196132.036:20131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.257813][ T29] audit: type=1326 audit(1766196132.036:20132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12491 comm="syz.1.2843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4d39f749 code=0x7ffc0000 [ 221.282463][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.308938][T12496] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12496 comm=syz.1.2844 [ 221.684712][T12529] SELinux: security_context_str_to_sid ([ r*)*as#&8mK}6BhoKt-P{ZOPG;FJnPc͑?sl۬Px-,VY]{qdwjD="n]͓}Zݑ_Vd#7s/K$Ol#)LMQ4ʜuʎ_Da) failed with errno=-22 [ 222.227988][T12549] FAULT_INJECTION: forcing a failure. [ 222.227988][T12549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.241363][T12549] CPU: 1 UID: 0 PID: 12549 Comm: syz.1.2866 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.241400][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.241417][T12549] Call Trace: [ 222.241428][T12549] [ 222.241436][T12549] __dump_stack+0x1d/0x30 [ 222.241459][T12549] dump_stack_lvl+0xe8/0x140 [ 222.241540][T12549] dump_stack+0x15/0x1b [ 222.241558][T12549] should_fail_ex+0x265/0x280 [ 222.241640][T12549] should_fail_alloc_page+0xf2/0x100 [ 222.241703][T12549] __alloc_frozen_pages_noprof+0x109/0x360 [ 222.241789][T12549] alloc_pages_mpol+0xb3/0x260 [ 222.241822][T12549] alloc_pages_noprof+0x90/0x130 [ 222.241851][T12549] pgd_alloc+0x40/0x2b0 [ 222.241881][T12549] mm_init+0x382/0x650 [ 222.241962][T12549] mm_alloc+0x81/0xa0 [ 222.242072][T12549] alloc_bprm+0x20e/0x350 [ 222.242173][T12549] do_execveat_common+0x12e/0x750 [ 222.242193][T12549] ? getname_flags+0x154/0x3b0 [ 222.242261][T12549] __x64_sys_execveat+0x73/0x90 [ 222.242373][T12549] x64_sys_call+0x1c0e/0x3000 [ 222.242400][T12549] do_syscall_64+0xd8/0x2c0 [ 222.242439][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.242468][T12549] RIP: 0033:0x7fcd4d39f749 [ 222.242488][T12549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.242582][T12549] RSP: 002b:00007fcd4bdff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 222.242599][T12549] RAX: ffffffffffffffda RBX: 00007fcd4d5f5fa0 RCX: 00007fcd4d39f749 [ 222.242611][T12549] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 222.242622][T12549] RBP: 00007fcd4bdff090 R08: 0000000000001000 R09: 0000000000000000 [ 222.242692][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.242703][T12549] R13: 00007fcd4d5f6038 R14: 00007fcd4d5f5fa0 R15: 00007ffd7b667558 [ 222.242766][T12549] [ 222.540124][T12563] FAULT_INJECTION: forcing a failure. [ 222.540124][T12563] name failslab, interval 1, probability 0, space 0, times 0 [ 222.552958][T12563] CPU: 1 UID: 0 PID: 12563 Comm: syz.4.2872 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.553019][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.553034][T12563] Call Trace: [ 222.553041][T12563] [ 222.553049][T12563] __dump_stack+0x1d/0x30 [ 222.553114][T12563] dump_stack_lvl+0xe8/0x140 [ 222.553140][T12563] dump_stack+0x15/0x1b [ 222.553160][T12563] should_fail_ex+0x265/0x280 [ 222.553212][T12563] should_failslab+0x8c/0xb0 [ 222.553237][T12563] __kmalloc_cache_noprof+0x65/0x4c0 [ 222.553270][T12563] ? audit_log_d_path+0x8d/0x150 [ 222.553361][T12563] audit_log_d_path+0x8d/0x150 [ 222.553382][T12563] audit_log_d_path_exe+0x42/0x70 [ 222.553411][T12563] audit_log_task+0x1e9/0x250 [ 222.553489][T12563] audit_seccomp+0x61/0x100 [ 222.553523][T12563] ? __seccomp_filter+0x832/0x1260 [ 222.553551][T12563] __seccomp_filter+0x843/0x1260 [ 222.553581][T12563] ? put_task_struct_rcu_user+0x5e/0x90 [ 222.553632][T12563] ? __schedule+0x85f/0xcd0 [ 222.553662][T12563] __secure_computing+0x82/0x150 [ 222.553698][T12563] syscall_trace_enter+0xcf/0x1e0 [ 222.553732][T12563] do_syscall_64+0xb2/0x2c0 [ 222.553787][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.553828][T12563] RIP: 0033:0x7f1103b7e15c [ 222.553848][T12563] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.553874][T12563] RSP: 002b:00007f11025e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.553968][T12563] RAX: ffffffffffffffda RBX: 00007f1103dd5fa0 RCX: 00007f1103b7e15c [ 222.553985][T12563] RDX: 000000000000000f RSI: 00007f11025e70a0 RDI: 0000000000000006 [ 222.554005][T12563] RBP: 00007f11025e7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.554021][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.554064][T12563] R13: 00007f1103dd6038 R14: 00007f1103dd5fa0 R15: 00007ffc704bfa28 [ 222.554085][T12563] [ 222.762738][T12565] netlink: 'syz.1.2873': attribute type 29 has an invalid length. [ 222.772064][T12565] netlink: 'syz.1.2873': attribute type 29 has an invalid length. [ 222.880517][T12580] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 223.137155][T12606] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12606 comm=syz.1.2890 [ 223.275641][T12612] loop5: detected capacity change from 0 to 2048 [ 223.300536][T12612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.320017][T12612] netlink: 'syz.5.2892': attribute type 10 has an invalid length. [ 223.327916][T12612] __nla_validate_parse: 2 callbacks suppressed [ 223.327929][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2892'. [ 223.350956][T12612] batman_adv: batadv0: Adding interface: veth1_vlan [ 223.357828][T12612] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.387200][T12612] batman_adv: batadv0: Interface activated: veth1_vlan [ 223.403149][T12623] loop1: detected capacity change from 0 to 512 [ 223.411743][T12623] EXT4-fs: dax option not supported [ 223.434772][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.496565][T12632] loop5: detected capacity change from 0 to 164 [ 223.514417][T12632] Unsupported NM flag settings (240) [ 223.576220][T12637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=12637 comm=syz.5.2901 [ 223.817924][T12652] pim6reg: entered allmulticast mode [ 223.835405][T12652] pim6reg: left allmulticast mode [ 223.979393][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 223.988479][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2913'. [ 223.998965][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2910'. [ 224.182871][ T3399] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 224.200704][ T3399] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.254588][T12693] SELinux: security_context_str_to_sid (NW'j`Z[d; GLh gAQp)Xmfbd!DgvQݿ`] O]K#7f+$~QNع) failed with errno=-22 [ 224.645489][T12701] pim6reg: entered allmulticast mode [ 224.654546][T12701] pim6reg: left allmulticast mode [ 224.718315][T12701] loop5: detected capacity change from 0 to 512 [ 224.725340][T12701] journal_path: Non-blockdev passed as './bus' [ 224.731628][T12701] EXT4-fs: error: could not find journal device path [ 224.862438][T12710] loop5: detected capacity change from 0 to 4096 [ 224.872410][T12710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.887032][T12710] FAULT_INJECTION: forcing a failure. [ 224.887032][T12710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.899906][T12712] program syz.4.2928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.900230][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.5.2929 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.900271][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.900361][T12710] Call Trace: [ 224.900370][T12710] [ 224.900379][T12710] __dump_stack+0x1d/0x30 [ 224.900416][T12710] dump_stack_lvl+0xe8/0x140 [ 224.900450][T12710] dump_stack+0x15/0x1b [ 224.900493][T12710] should_fail_ex+0x265/0x280 [ 224.900529][T12710] should_fail+0xb/0x20 [ 224.900568][T12710] should_fail_usercopy+0x1a/0x20 [ 224.900605][T12710] _copy_from_user+0x1c/0xb0 [ 224.900646][T12710] bm_register_write+0xc2/0xb40 [ 224.900693][T12710] ? __pfx_bm_register_write+0x10/0x10 [ 224.900744][T12710] vfs_write+0x269/0x960 [ 224.900773][T12710] ? __rcu_read_unlock+0x4f/0x70 [ 224.900802][T12710] ? __fget_files+0x184/0x1c0 [ 224.900843][T12710] ? mutex_lock+0x58/0x90 [ 224.900885][T12710] ksys_write+0xda/0x1a0 [ 224.900998][T12710] __x64_sys_write+0x40/0x50 [ 224.901024][T12710] x64_sys_call+0x2847/0x3000 [ 224.901057][T12710] do_syscall_64+0xd8/0x2c0 [ 224.901152][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.901174][T12710] RIP: 0033:0x7fcaaed9f749 [ 224.901193][T12710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.901218][T12710] RSP: 002b:00007fcaad7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.901242][T12710] RAX: ffffffffffffffda RBX: 00007fcaaeff5fa0 RCX: 00007fcaaed9f749 [ 224.901295][T12710] RDX: 000000000000005c RSI: 00002000000001c0 RDI: 000000000000000d [ 224.901312][T12710] RBP: 00007fcaad7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 224.901329][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.901363][T12710] R13: 00007fcaaeff6038 R14: 00007fcaaeff5fa0 R15: 00007ffe6eca0878 [ 224.901391][T12710] [ 225.109291][ T7052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.320422][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 225.330246][T12738] SELinux: failed to load policy [ 225.443023][T12750] lo speed is unknown, defaulting to 1000 [ 225.449180][T12750] lo speed is unknown, defaulting to 1000 [ 225.614074][T12762] loop5: detected capacity change from 0 to 512 [ 225.623216][T12762] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.630956][T12762] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2947: bad orphan inode 13 [ 225.641771][T12762] ext4_test_bit(bit=12, block=18) = 1 [ 225.647261][T12762] is_bad_inode(inode)=0 [ 225.651512][T12762] NEXT_ORPHAN(inode)=2130706432 [ 225.656366][T12762] max_ino=32 [ 225.659592][T12762] i_nlink=1 [ 225.679824][T12762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.693757][T12762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.704689][ T3006] ================================================================== [ 225.712617][T12762] /dev/rnullb0: Can't lookup blockdev [ 225.712849][ T3006] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 225.724958][ T3006] [ 225.727292][ T3006] write to 0xffff88810215ba18 of 8 bytes by task 12762 on cpu 0: [ 225.735011][ T3006] inc_diskseq+0x2d/0x40 [ 225.739267][ T3006] disk_force_media_change+0x9e/0xe0 [ 225.744557][ T3006] lo_release+0x2cb/0x400 [ 225.748892][ T3006] bdev_release+0x373/0x3d0 [ 225.753412][ T3006] blkdev_release+0x15/0x20 [ 225.757934][ T3006] __fput+0x29b/0x650 [ 225.761931][ T3006] fput_close_sync+0xad/0x190 [ 225.766622][ T3006] __x64_sys_close+0x56/0xf0 [ 225.771225][ T3006] x64_sys_call+0x2c25/0x3000 [ 225.775920][ T3006] do_syscall_64+0xd8/0x2c0 [ 225.780442][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.786344][ T3006] [ 225.788686][ T3006] read to 0xffff88810215ba18 of 8 bytes by task 3006 on cpu 1: [ 225.796233][ T3006] block_uevent+0x31/0x50 [ 225.800572][ T3006] dev_uevent+0x375/0x400 [ 225.804903][ T3006] uevent_show+0x11a/0x200 [ 225.809333][ T3006] dev_attr_show+0x3f/0xa0 [ 225.813767][ T3006] sysfs_kf_seq_show+0x1a3/0x280 [ 225.818709][ T3006] kernfs_seq_show+0x82/0xa0 [ 225.823322][ T3006] seq_read_iter+0x31e/0x950 [ 225.827955][ T3006] kernfs_fop_read_iter+0xc1/0x330 [ 225.833083][ T3006] vfs_read+0x64c/0x770 [ 225.837243][ T3006] ksys_read+0xda/0x1a0 [ 225.841401][ T3006] __x64_sys_read+0x40/0x50 [ 225.845911][ T3006] x64_sys_call+0x2889/0x3000 [ 225.850596][ T3006] do_syscall_64+0xd8/0x2c0 [ 225.855117][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.861015][ T3006] [ 225.863346][ T3006] value changed: 0x0000000000000107 -> 0x0000000000000108 [ 225.870539][ T3006] [ 225.872864][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 225.879015][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 225.888325][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.898478][ T3006] ==================================================================