last executing test programs:

3.934339259s ago: executing program 1 (id=1959):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10)
sendfile(r1, r0, 0x0, 0x3fffff)

3.90532526s ago: executing program 3 (id=1960):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, 0xfffffffffffffffd)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x54, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @val={@val={0x88a8, 0x4, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0x9, 0x4, 0x3, 0x6, 0x3e, 0x67, 0x0, 0x51, 0x6, 0x0, @loopback, @loopback, {[@generic={0x7, 0xf, "1aaca62c4614d6b5f3412bed22"}, @end]}}, @payload_conn={{{0x1a, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, 0x2, 0x0, 0x0, 0x1, 0xa, 0x4, 0x0, 0xfb, 0xd93, 0x0, 0x0, 0x4e24}}, [0x0, 0x0]}}}}}, 0x0)

3.90495152s ago: executing program 1 (id=1961):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=tcp'])

3.863645641s ago: executing program 1 (id=1964):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/84, 0x54}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386", 0xc4}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b2", 0x7a}], 0x3}}], 0x2, 0xc0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.795670051s ago: executing program 3 (id=1968):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000d00)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x2}], {}, {0x20, 0x1}}, 0x2c, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x21)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b700000000000700"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

3.759478482s ago: executing program 3 (id=1970):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0xfad)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000b80))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0x13, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0}, 0x40)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
dup3(r1, r0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)
socket$inet6(0xa, 0x2, 0x0)

2.947281774s ago: executing program 1 (id=1982):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = fsopen(&(0x7f0000000380)='debugfs\x00', 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0", 0x76}], 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})

2.909767355s ago: executing program 1 (id=1983):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10)
sendfile(r1, r0, 0x0, 0x3fffff)

2.886398425s ago: executing program 1 (id=1985):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r2, 0x4, 0x7c00)
dup3(r3, r2, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r2, 0x0, 0x0)

2.047294648s ago: executing program 0 (id=1995):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3fffff)

2.024919498s ago: executing program 0 (id=1996):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.970815089s ago: executing program 0 (id=1999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000340)="659efcf9f900a9b5d263622a6a16492bec8499f9a77ab2cc8435977c4181eed5b9dfc7dcf17ede1cbffd0cb3c8dd74d019e8fef937f0bd3f5322ec4739f1edbe1ac4d830013e89d41c489bd9b90f55469285541de01b89dc1f", 0x59}, {&(0x7f00000004c0)="bdc3d54811050e66a1fcb1f68b1fab74472d07869c72884787fc70520b8825aca2b377d7cc5d5480ba45eec28e7825c1ab37cd2123dc08ca83d8db310c22492922851da4eb69677e838ed96b67aa7b201858cc5fb9af3308d4dcf3a4eedf3b8305026b5f13f0262d03a59f6b44e998de168b558ed8f1c5adf8063c28997cc3bfab1dc603731da8270f9fe3a1c12b67ed05cb48634ba3a13be9411946c2e1fced2eb5b556199cad0d0c965b5bd2bc24488331ac6a7ad850cf7c25b52e8c1e63dffd66b4b583add80ce810e18fdc9968668bd7d3128ddf73c7846791e66c6a73910287611abbc716ff5ee6a8b2f4f314252979eeb64bdeb50c", 0xf8}, {&(0x7f00000003c0)="60badba0745ebe749eddf2b5868f49730bf614396fd156f65f7341e2ac3b7a6b398a6f396b098cd43f9c01c2da7ea0abcd293129eb8afee1ca93dd822f504a9c8e6afc88540ce37bb81598888a900ec2705f03a7fdfb334046e2a06b113762cae06d4bdc3f0158717171e0351fc1f9f26a5a1006c12c2abd62207acc0ba3f18d9a09b339f59d", 0x86}, {&(0x7f00000002c0)="6396fc20cbf8eb", 0x7}, {&(0x7f00000005c0)="fdf6f954c88ecfe96386eda1682772a58d8e324275959443273060637ac84c6a693ea5bdbe7ea11d79682e503c514d3cc664682f79dcbeaabae76493749551b2096cba2cbadc627a439134360281b301b8014db644a2178346da9ad9e014ebe4f697e54dd503b4b9b1", 0x69}, {&(0x7f00000006c0)="d0fd66a667812b01d2545447d8ae0c6ec858c31d060a8ba8ea612376eb5d014116f7408d917bf1bf2cb03f3b1ed32b19962a36972202487d5ded289bfbf9cb3cdffeef167863dc78bdfb8f6b0e836dd91fb8d705d5416362290e3d69b668a6", 0x5f}, {&(0x7f0000000740)}, {&(0x7f0000000840)="aa9818b53f9a5ae073eed4f1043ca2dcca2e08da4478d397f339d994777a3400d8000700f3f045b21924e1f79f71ccbbb730f0942e9d42877821e3c63a83c9b041487b0fa6d4a65cc6ff742f1c6b46a7566e956743a44bd1ed201e189b8382c8a822d88a6cf6f18ebc1788faf8168e54bd5edb5564489e49e0a7791cad2ec7fe5870130e7ae70df5ff", 0x89}, {&(0x7f0000000d80)="ae491a98fe733d4c3bd3ee6e9b68c63474dbb87fbdc520e8c9a422abd9ce8b770f0b6b0a5310fe175d9190f49a3f4a693ba920ff422aaed46de91f93967c6c0d5f2777e20a18450b19caf50f008c08df80ef571a2cb42bf7e78c7be84857ef078094b7302a1cc0e8518db70a716485f448aa41d39767e93d", 0x78}, {&(0x7f0000000e00)="7c1bd1ebe68b410e735ead4cd2666c79b9b071557b598667a3af1f8350b2f28441604cfdf69a8205dcea39237eec50f187c810656e881b628ce8676f2bb302c95c1da3587be93ccc470d2f70160ba09fe23cc5ef8aa77f48be6551fd0175c61125f0a5f823eedde6e4f2b6604240d59c0a799e7d8af65dd65ed10faacc5c715687a136a892dcd19bd0dd66550d3637034040fdb0e23557bdbe998834", 0x9c}], 0xa, &(0x7f0000000f80)="22b77bf5a959082343afaa8c49499ec9d5d11fa40b308782030708367f44a657006b10392fe18f1fa1706f762068f6729aff24f3fbcd6888ffdc870d5796d9c3cb80c7eefa5dde15d87d82af4f9a7a1ba456690479361f395f5815ca8ba4bfcfe23511a0e30677d6ed28ada2fd06a9519dbec8d3b8b08ea9174c4cae99252fb4", 0x80, 0x80}, 0x2000c054)
ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000feffffffffbf000000bd4786e667d86f1ee0fab0861fd447149db52737b0cd641f"], 0x198}}, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.569556005s ago: executing program 0 (id=2004):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000340)="659efcf9f900a9b5d263622a6a16492bec8499f9a77ab2cc8435977c4181eed5b9dfc7dcf17ede1cbffd0cb3c8dd74d019e8fef937f0bd3f5322ec4739f1edbe1ac4d830013e89d41c489bd9b90f55469285541de01b89dc1f", 0x59}, {&(0x7f00000004c0)="bdc3d54811050e66a1fcb1f68b1fab74472d07869c72884787fc70520b8825aca2b377d7cc5d5480ba45eec28e7825c1ab37cd2123dc08ca83d8db310c22492922851da4eb69677e838ed96b67aa7b201858cc5fb9af3308d4dcf3a4eedf3b8305026b5f13f0262d03a59f6b44e998de168b558ed8f1c5adf8063c28997cc3bfab1dc603731da8270f9fe3a1c12b67ed05cb48634ba3a13be9411946c2e1fced2eb5b556199cad0d0c965b5bd2bc24488331ac6a7ad850cf7c25b52e8c1e63dffd66b4b583add80ce810e18fdc9968668bd7d3128ddf73c7846791e66c6a73910287611abbc716ff5ee6a8b2f4f314252979eeb64bdeb50c", 0xf8}, {&(0x7f00000003c0)="60badba0745ebe749eddf2b5868f49730bf614396fd156f65f7341e2ac3b7a6b398a6f396b098cd43f9c01c2da7ea0abcd293129eb8afee1ca93dd822f504a9c8e6afc88540ce37bb81598888a900ec2705f03a7fdfb334046e2a06b113762cae06d4bdc3f0158717171e0351fc1f9f26a5a1006c12c2abd62207acc0ba3f18d9a09b339f59d", 0x86}, {&(0x7f00000002c0)="6396fc20cbf8eb", 0x7}, {&(0x7f00000005c0)="fdf6f954c88ecfe96386eda1682772a58d8e324275959443273060637ac84c6a693ea5bdbe7ea11d79682e503c514d3cc664682f79dcbeaabae76493749551b2096cba2cbadc627a439134360281b301b8014db644a2178346da9ad9e014ebe4f697e54dd503b4b9b1", 0x69}, {&(0x7f00000006c0)="d0fd66a667812b01d2545447d8ae0c6ec858c31d060a8ba8ea612376eb5d014116f7408d917bf1bf2cb03f3b1ed32b19962a36972202487d5ded289bfbf9cb3cdffeef167863dc78bdfb8f6b0e836dd91fb8d705d5416362290e3d69b668a6", 0x5f}, {&(0x7f0000000740)}, {&(0x7f0000000840)="aa9818b53f9a5ae073eed4f1043ca2dcca2e08da4478d397f339d994777a3400d8000700f3f045b21924e1f79f71ccbbb730f0942e9d42877821e3c63a83c9b041487b0fa6d4a65cc6ff742f1c6b46a7566e956743a44bd1ed201e189b8382c8a822d88a6cf6f18ebc1788faf8168e54bd5edb5564489e49e0a7791cad2ec7fe5870130e7ae70df5ff", 0x89}, {&(0x7f0000000d80)="ae491a98fe733d4c3bd3ee6e9b68c63474dbb87fbdc520e8c9a422abd9ce8b770f0b6b0a5310fe175d9190f49a3f4a693ba920ff422aaed46de91f93967c6c0d5f2777e20a18450b19caf50f008c08df80ef571a2cb42bf7e78c7be84857ef078094b7302a1cc0e851", 0x69}, {&(0x7f0000000e00)="7c1bd1ebe68b410e735ead4cd2666c79b9b071557b598667a3af1f8350b2f28441604cfdf69a8205dcea39237eec50f187c810656e881b628ce8676f2bb302c95c1da3587be93ccc470d2f70160ba09fe23cc5ef8aa77f48be6551fd0175c61125f0a5f823eedde6e4f2b6604240d59c0a799e7d8af65dd65ed10faacc5c715687a136a892dcd19bd0dd66550d3637034040fdb0e23557bdbe998834b2", 0x9d}], 0xa, &(0x7f0000000f80)="22b77bf5a959082343afaa8c49499ec9d5d11fa40b308782030708367f44a657006b10392fe18f1fa1706f762068f6729aff24f3fbcd6888ffdc870d5796d9c3cb80c7eefa5dde15d87d82af4f9a7a1ba456690479361f395f5815ca8ba4bfcfe23511a0e30677d6ed28ada2fd06a9519dbec8d3b8b08ea9174c4cae99252fb4", 0x80, 0x80}, 0x2000c054)
ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
socket$key(0xf, 0x3, 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000feffffffffbf000000bd4786e667d86f1ee0fab0861fd447149db52737b0cd641f"], 0x198}}, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.496436746s ago: executing program 2 (id=2005):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)

1.29187581s ago: executing program 4 (id=2006):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3fffff)

1.27254046s ago: executing program 4 (id=2007):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async, rerun: 64)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="c21c215f1400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESDEC=r3, @ANYRESOCT=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000764e6e000007010000f8ffffffbfa400000000000007040000f770408209aad2890800000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) (async)
r7 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaee2, 0x0, 0x2, 0xbf9ffffc}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) (rerun: 64)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async)
io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x18) (async)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x7f, &(0x7f0000002400)=<r13=>0x0)
io_submit(r13, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x0, 0x3, r12, &(0x7f0000000040)="5400ffff0000", 0x6, 0x1000000000, 0x0, 0x3, r3}])
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="181b0081e0000002000000000000000018110000", @ANYRES32=r1, @ANYBLOB="55bcb6f6dc0b8dddb7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70e02000000000000000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) (rerun: 32)
memfd_secret(0x80000) (async, rerun: 32)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="030b00000800000000000e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.252908311s ago: executing program 0 (id=2008):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18)
fsopen(&(0x7f00000000c0)='proc\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0)
write$eventfd(r3, &(0x7f0000000240), 0xffffff14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8aa6bad86e9c46f7b3d3bd9d70ffc6dff00000000bfa200080000000007e90000f8ffff7f7e5fb2aaac40b300b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_procfs(0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)

1.218418181s ago: executing program 4 (id=2009):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.217605101s ago: executing program 4 (id=2010):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000110000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendfile(r2, r4, &(0x7f0000000180)=0x18a0000, 0x6399)
mount$bind(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0)
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x578410e9)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000000)

731.416928ms ago: executing program 2 (id=2011):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000340)="659efcf9f900a9b5d263622a6a16492bec8499f9a77ab2cc8435977c4181eed5b9dfc7dcf17ede1cbffd0cb3c8dd74d019e8fef937f0bd3f5322ec4739f1edbe1ac4d830013e89d41c489bd9b90f55469285541de01b89dc1f", 0x59}, {&(0x7f00000004c0)="bdc3d54811050e66a1fcb1f68b1fab74472d07869c72884787fc70520b8825aca2b377d7cc5d5480ba45eec28e7825c1ab37cd2123dc08ca83d8db310c22492922851da4eb69677e838ed96b67aa7b201858cc5fb9af3308d4dcf3a4eedf3b8305026b5f13f0262d03a59f6b44e998de168b558ed8f1c5adf8063c28997cc3bfab1dc603731da8270f9fe3a1c12b67ed05cb48634ba3a13be9411946c2e1fced2eb5b556199cad0d0c965b5bd2bc24488331ac6a7ad850cf7c25b52e8c1e63dffd66b4b583add80ce810e18fdc9968668bd7d3128ddf73c7846791e66c6a73910287611abbc716ff5ee6a8b2f4f314252979eeb64bdeb50c", 0xf8}, {&(0x7f00000003c0)="60badba0745ebe749eddf2b5868f49730bf614396fd156f65f7341e2ac3b7a6b398a6f396b098cd43f9c01c2da7ea0abcd293129eb8afee1ca93dd822f504a9c8e6afc88540ce37bb81598888a900ec2705f03a7fdfb334046e2a06b113762cae06d4bdc3f0158717171e0351fc1f9f26a5a1006c12c2abd62207acc0ba3f18d9a09b339f59d", 0x86}, {&(0x7f00000002c0)="6396fc20cbf8eb", 0x7}, {&(0x7f00000005c0)="fdf6f954c88ecfe96386eda1682772a58d8e324275959443273060637ac84c6a693ea5bdbe7ea11d79682e503c514d3cc664682f79dcbeaabae76493749551b2096cba2cbadc627a439134360281b301b8014db644a2178346da9ad9e014ebe4f697e54dd503b4b9b1", 0x69}, {&(0x7f00000006c0)="d0fd66a667812b01d2545447d8ae0c6ec858c31d060a8ba8ea612376eb5d014116f7408d917bf1bf2cb03f3b1ed32b19962a36972202487d5ded289bfbf9cb3cdffeef167863dc78bdfb8f6b0e836dd91fb8d705d5416362290e3d69b668a6", 0x5f}, {&(0x7f0000000740)}, {&(0x7f0000000840)="aa9818b53f9a5ae073eed4f1043ca2dcca2e08da4478d397f339d994777a3400d8000700f3f045b21924e1f79f71ccbbb730f0942e9d42877821e3c63a83c9b041487b0fa6d4a65cc6ff742f1c6b46a7566e956743a44bd1ed201e189b8382c8a822d88a6cf6f18ebc1788faf8168e54bd5edb5564489e49e0a7791cad2ec7fe5870130e7ae70df5ff", 0x89}, {&(0x7f0000000d80)="ae491a98fe733d4c3bd3ee6e9b68c63474dbb87fbdc520e8c9a422abd9ce8b770f0b6b0a5310fe175d9190f49a3f4a693ba920ff422aaed46de91f93967c6c0d5f2777e20a18450b19caf50f008c08df80ef571a2cb42bf7e78c7be84857ef078094b7302a1cc0e8518db70a716485f448", 0x71}, {&(0x7f0000000e00)="7c1bd1ebe68b410e735ead4cd2666c79b9b071557b598667a3af1f8350b2f28441604cfdf69a8205dcea39237eec50f187c810656e881b628ce8676f2bb302c95c1da3587be93ccc470d2f70160ba09fe23cc5ef8aa77f48be6551fd0175c61125f0a5f823eedde6e4f2b6604240d59c0a799e7d8af65dd65ed10faacc5c715687a136a892dcd19bd0dd66550d3637034040fdb0e23557bdbe998834b2", 0x9d}], 0xa, &(0x7f0000000f80)="22b77bf5a959082343afaa8c49499ec9d5d11fa40b308782030708367f44a657006b10392fe18f1fa1706f762068f6729aff24f3fbcd6888ffdc870d5796d9c3cb80c7eefa5dde15d87d82af4f9a7a1ba456690479361f395f5815ca8ba4bfcfe23511a0e30677d6ed28ada2fd06a9519dbec8d3b8b08ea9174c4cae99252fb4", 0x80, 0x80}, 0x2000c054)
ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
socket$key(0xf, 0x3, 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000feffffffffbf000000bd4786e667d86f1ee0fab0861fd447149db52737b0cd641f"], 0x198}}, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

564.132201ms ago: executing program 2 (id=2012):
r0 = socket(0x10, 0x3, 0x0)
setitimer(0x2, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

545.972391ms ago: executing program 2 (id=2013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000340)="659efcf9f900a9b5d263622a6a16492bec8499f9a77ab2cc8435977c4181eed5b9dfc7dcf17ede1cbffd0cb3c8dd74d019e8fef937f0bd3f5322ec4739f1edbe1ac4d830013e89d41c489bd9b90f55469285541de01b89dc1f", 0x59}, {&(0x7f00000004c0)="bdc3d54811050e66a1fcb1f68b1fab74472d07869c72884787fc70520b8825aca2b377d7cc5d5480ba45eec28e7825c1ab37cd2123dc08ca83d8db310c22492922851da4eb69677e838ed96b67aa7b201858cc5fb9af3308d4dcf3a4eedf3b8305026b5f13f0262d03a59f6b44e998de168b558ed8f1c5adf8063c28997cc3bfab1dc603731da8270f9fe3a1c12b67ed05cb48634ba3a13be9411946c2e1fced2eb5b556199cad0d0c965b5bd2bc24488331ac6a7ad850cf7c25b52e8c1e63dffd66b4b583add80ce810e18fdc9968668bd7d3128ddf73c7846791e66c6a73910287611abbc716ff5ee6a8b2f4f314252979eeb64bdeb50c", 0xf8}, {&(0x7f00000003c0)="60badba0745ebe749eddf2b5868f49730bf614396fd156f65f7341e2ac3b7a6b398a6f396b098cd43f9c01c2da7ea0abcd293129eb8afee1ca93dd822f504a9c8e6afc88540ce37bb81598888a900ec2705f03a7fdfb334046e2a06b113762cae06d4bdc3f0158717171e0351fc1f9f26a5a1006c12c2abd62207acc0ba3f18d9a09b339f59d", 0x86}, {&(0x7f00000002c0)="6396fc20cbf8eb", 0x7}, {&(0x7f00000005c0)="fdf6f954c88ecfe96386eda1682772a58d8e324275959443273060637ac84c6a693ea5bdbe7ea11d79682e503c514d3cc664682f79dcbeaabae76493749551b2096cba2cbadc627a439134360281b301b8014db644a2178346da9ad9e014ebe4f697e54dd503b4b9b1", 0x69}, {&(0x7f00000006c0)="d0fd66a667812b01d2545447d8ae0c6ec858c31d060a8ba8ea612376eb5d014116f7408d917bf1bf2cb03f3b1ed32b19962a36972202487d5ded289bfbf9cb3cdffeef167863dc78bdfb8f6b0e836dd91fb8d705d5416362290e3d69b668a6", 0x5f}, {&(0x7f0000000740)}, {&(0x7f0000000840)="aa9818b53f9a5ae073eed4f1043ca2dcca2e08da4478d397f339d994777a3400d8000700f3f045b21924e1f79f71ccbbb730f0942e9d42877821e3c63a83c9b041487b0fa6d4a65cc6ff742f1c6b46a7566e956743a44bd1ed201e189b8382c8a822d88a6cf6f18ebc1788faf8168e54bd5edb5564489e49e0a7791cad2ec7fe5870130e7ae70df5ff", 0x89}, {&(0x7f0000000d80)="ae491a98fe733d4c3bd3ee6e9b68c63474dbb87fbdc520e8c9a422abd9ce8b770f0b6b0a5310fe175d9190f49a3f4a693ba920ff422aaed46de91f93967c6c0d5f2777e20a18450b19caf50f008c08df80ef571a2cb42bf7e78c7be84857ef078094b7302a1cc0e851", 0x69}, {&(0x7f0000000e00)="7c1bd1ebe68b410e735ead4cd2666c79b9b071557b598667a3af1f8350b2f28441604cfdf69a8205dcea39237eec50f187c810656e881b628ce8676f2bb302c95c1da3587be93ccc470d2f70160ba09fe23cc5ef8aa77f48be6551fd0175c61125f0a5f823eedde6e4f2b6604240d59c0a799e7d8af65dd65ed10faacc5c715687a136a892dcd19bd0dd66550d3637034040fdb0e23557bdbe998834b2", 0x9d}], 0xa, &(0x7f0000000f80)="22b77bf5a959082343afaa8c49499ec9d5d11fa40b308782030708367f44a657006b10392fe18f1fa1706f762068f6729aff24f3fbcd6888ffdc870d5796d9c3cb80c7eefa5dde15d87d82af4f9a7a1ba456690479361f395f5815ca8ba4bfcfe23511a0e30677d6ed28ada2fd06a9519dbec8d3b8b08ea9174c4cae99252fb4", 0x80, 0x80}, 0x2000c054)
ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
socket$key(0xf, 0x3, 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000feffffffffbf000000bd4786e667d86f1ee0fab0861fd447149db52737b0cd641f"], 0x198}}, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

487.873052ms ago: executing program 3 (id=2014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000340)="659efcf9f900a9b5d263622a6a16492bec8499f9a77ab2cc8435977c4181eed5b9dfc7dcf17ede1cbffd0cb3c8dd74d019e8fef937f0bd3f5322ec4739f1edbe1ac4d830013e89d41c489bd9b90f55469285541de01b89dc1f", 0x59}, {&(0x7f00000004c0)="bdc3d54811050e66a1fcb1f68b1fab74472d07869c72884787fc70520b8825aca2b377d7cc5d5480ba45eec28e7825c1ab37cd2123dc08ca83d8db310c22492922851da4eb69677e838ed96b67aa7b201858cc5fb9af3308d4dcf3a4eedf3b8305026b5f13f0262d03a59f6b44e998de168b558ed8f1c5adf8063c28997cc3bfab1dc603731da8270f9fe3a1c12b67ed05cb48634ba3a13be9411946c2e1fced2eb5b556199cad0d0c965b5bd2bc24488331ac6a7ad850cf7c25b52e8c1e63dffd66b4b583add80ce810e18fdc9968668bd7d3128ddf73c7846791e66c6a73910287611abbc716ff5ee6a8b2f4f314252979eeb64bdeb50c", 0xf8}, {&(0x7f00000003c0)="60badba0745ebe749eddf2b5868f49730bf614396fd156f65f7341e2ac3b7a6b398a6f396b098cd43f9c01c2da7ea0abcd293129eb8afee1ca93dd822f504a9c8e6afc88540ce37bb81598888a900ec2705f03a7fdfb334046e2a06b113762cae06d4bdc3f0158717171e0351fc1f9f26a5a1006c12c2abd62207acc0ba3f18d9a09b339f59d", 0x86}, {&(0x7f00000002c0)="6396fc20cbf8eb", 0x7}, {&(0x7f00000005c0)="fdf6f954c88ecfe96386eda1682772a58d8e324275959443273060637ac84c6a693ea5bdbe7ea11d79682e503c514d3cc664682f79dcbeaabae76493749551b2096cba2cbadc627a439134360281b301b8014db644a2178346da9ad9e014ebe4f697e54dd503b4b9b1", 0x69}, {&(0x7f00000006c0)="d0fd66a667812b01d2545447d8ae0c6ec858c31d060a8ba8ea612376eb5d014116f7408d917bf1bf2cb03f3b1ed32b19962a36972202487d5ded289bfbf9cb3cdffeef167863dc78bdfb8f6b0e836dd91fb8d705d5416362290e3d69b668a6", 0x5f}, {&(0x7f0000000740)}, {&(0x7f0000000840)="aa9818b53f9a5ae073eed4f1043ca2dcca2e08da4478d397f339d994777a3400d8000700f3f045b21924e1f79f71ccbbb730f0942e9d42877821e3c63a83c9b041487b0fa6d4a65cc6ff742f1c6b46a7566e956743a44bd1ed201e189b8382c8a822d88a6cf6f18ebc1788faf8168e54bd5edb5564489e49e0a7791cad2ec7fe5870130e7ae70df5ff", 0x89}, {&(0x7f0000000e00)="7c1bd1ebe68b410e735ead4cd2666c79b9b071557b598667a3af1f8350b2f28441604cfdf69a8205dcea39237eec50f187c810656e881b628ce8676f2bb302c95c1da3587be93ccc470d2f70160ba09fe23cc5ef8aa77f48be6551fd0175c61125f0a5f823eedde6e4f2b6604240d59c0a799e7d8af65dd65ed10faacc5c715687a136a892dcd19bd0dd66550d3637034040fdb0e23557bdbe998834b2", 0x9d}], 0x9, &(0x7f0000000f80)="22b77bf5a959082343afaa8c49499ec9d5d11fa40b308782030708367f44a657006b10392fe18f1fa1706f762068f6729aff24f3fbcd6888ffdc870d5796d9c3cb80c7eefa5dde15d87d82af4f9a7a1ba456690479361f395f5815ca8ba4bfcfe23511a0e30677d6ed28ada2fd06a9519dbec8d3b8b08ea9174c4cae99252fb4", 0x80, 0x80}, 0x2000c054)
ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000feffffffffbf000000bd4786e667d86f1ee0fab0861fd447149db52737b0cd641f"], 0x198}}, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

339.949444ms ago: executing program 0 (id=2015):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000340)="659efcf9f900a9b5d263622a6a16492bec8499f9a77ab2cc8435977c4181eed5b9dfc7dcf17ede1cbffd0cb3c8dd74d019e8fef937f0bd3f5322ec4739f1edbe1ac4d830013e89d41c489bd9b90f55469285541de01b89dc1f", 0x59}, {&(0x7f00000004c0)="bdc3d54811050e66a1fcb1f68b1fab74472d07869c72884787fc70520b8825aca2b377d7cc5d5480ba45eec28e7825c1ab37cd2123dc08ca83d8db310c22492922851da4eb69677e838ed96b67aa7b201858cc5fb9af3308d4dcf3a4eedf3b8305026b5f13f0262d03a59f6b44e998de168b558ed8f1c5adf8063c28997cc3bfab1dc603731da8270f9fe3a1c12b67ed05cb48634ba3a13be9411946c2e1fced2eb5b556199cad0d0c965b5bd2bc24488331ac6a7ad850cf7c25b52e8c1e63dffd66b4b583add80ce810e18fdc9968668bd7d3128ddf73c7846791e66c6a73910287611abbc716ff5ee6a8b2f4f314252979eeb64bdeb50c", 0xf8}, {&(0x7f00000003c0)="60badba0745ebe749eddf2b5868f49730bf614396fd156f65f7341e2ac3b7a6b398a6f396b098cd43f9c01c2da7ea0abcd293129eb8afee1ca93dd822f504a9c8e6afc88540ce37bb81598888a900ec2705f03a7fdfb334046e2a06b113762cae06d4bdc3f0158717171e0351fc1f9f26a5a1006c12c2abd62207acc0ba3f18d9a09b339f59d", 0x86}, {&(0x7f00000002c0)="6396fc20cbf8eb", 0x7}, {&(0x7f00000005c0)="fdf6f954c88ecfe96386eda1682772a58d8e324275959443273060637ac84c6a693ea5bdbe7ea11d79682e503c514d3cc664682f79dcbeaabae76493749551b2096cba2cbadc627a439134360281b301b8014db644a2178346da9ad9e014ebe4f697e54dd503b4b9b1", 0x69}, {&(0x7f00000006c0)="d0fd66a667812b01d2545447d8ae0c6ec858c31d060a8ba8ea612376eb5d014116f7408d917bf1bf2cb03f3b1ed32b19962a36972202487d5ded289bfbf9cb3cdffeef167863dc78bdfb8f6b0e836dd91fb8d705d5416362290e3d69b668a6", 0x5f}, {&(0x7f0000000740)}, {&(0x7f0000000840)="aa9818b53f9a5ae073eed4f1043ca2dcca2e08da4478d397f339d994777a3400d8000700f3f045b21924e1f79f71ccbbb730f0942e9d42877821e3c63a83c9b041487b0fa6d4a65cc6ff742f1c6b46a7566e956743a44bd1ed201e189b8382c8a822d88a6cf6f18ebc1788faf8168e54bd5edb5564489e49e0a7791cad2ec7fe5870130e7ae70df5ff", 0x89}, {&(0x7f0000000d80)="ae491a98fe733d4c3bd3ee6e9b68c63474dbb87fbdc520e8c9a422abd9ce8b770f0b6b0a5310fe175d9190f49a3f4a693ba920ff422aaed46de91f93967c6c0d5f2777e20a18450b19caf50f008c08df80ef571a2cb42bf7e78c7be84857ef078094b7302a1cc0e8518db70a716485f448aa41d39767e93d", 0x78}, {&(0x7f0000000e00)="7c1bd1ebe68b410e735ead4cd2666c79b9b071557b598667a3af1f8350b2f28441604cfdf69a8205dcea39237eec50f187c810656e881b628ce8676f2bb302c95c1da3587be93ccc470d2f70160ba09fe23cc5ef8aa77f48be6551fd0175c61125f0a5f823eedde6e4f2b6604240d59c0a799e7d8af65dd65ed10faacc5c715687a136a892dcd19bd0dd66550d3637034040fdb0e23557bdbe9988", 0x9b}], 0xa, &(0x7f0000000f80)="22b77bf5a959082343afaa8c49499ec9d5d11fa40b308782030708367f44a657006b10392fe18f1fa1706f762068f6729aff24f3fbcd6888ffdc870d5796d9c3cb80c7eefa5dde15d87d82af4f9a7a1ba456690479361f395f5815ca8ba4bfcfe23511a0e30677d6ed28ada2fd06a9519dbec8d3b8b08ea9174c4cae99252fb4", 0x80, 0x80}, 0x2000c054)
ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000000)=0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="98010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600001007863626328616573290000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000feffffffffbf000000bd4786e667d86f1ee0fab0861fd447149db52737b0cd641f"], 0x198}}, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13)
perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

281.990505ms ago: executing program 3 (id=2016):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000cb00000000000000000000000000000000000000000400faff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x23, &(0x7f0000000040)="0f7a4da6", 0x4)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x2, r7, 0x3}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', <r8=>0x0, 0x29, 0x7, 0x9, 0x100, 0x2, @mcast2, @private2, 0x7800, 0x1, 0x3, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000640)={'ip6tnl0\x00', <r9=>0x0, 0x4, 0x2, 0x2, 0x0, 0x24, @private2, @private1, 0x80, 0x7800, 0x3, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000880)={'tunl0\x00', <r10=>0x0, 0x7, 0x80, 0x2, 0xa, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x64, 0x0, 0xef, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@end, @noop, @lsrr={0x83, 0x1b, 0x8c, [@empty, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1]}, @timestamp={0x44, 0x1c, 0x98, 0x0, 0x6, [0x6, 0x4, 0x8, 0x7fffffff, 0xfddf, 0xffffffff]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000a80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="00032bbd7000fbdbdf250400000058000180140002007767310000000000000000000000000014000200726f73653000000000000000000000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="84000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3100000000000000000008000100", @ANYRES32=r8, @ANYBLOB="14000200677265746170300000000000000000000800030000000000140002006e72300000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f6873720000000008000300010000004000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f3000000800030003000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300020000003400018014000200626f6e64300000000000000000000000080003000000800014000200687372300000000000000000000000001400018008000100", @ANYRES32=r11, @ANYBLOB="0800030000000000"], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r12=>0xffffffffffffffff})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r13, <r14=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r12}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r14, &(0x7f0000000300), 0x0}, 0x20)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa78, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r15, 0x0, 0x10000000000ac6}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

247.327076ms ago: executing program 4 (id=2017):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x3fffff)

217.275006ms ago: executing program 4 (id=2018):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x24, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x21)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b700000000000700"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

208.480336ms ago: executing program 3 (id=2019):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = fsopen(&(0x7f0000000380)='debugfs\x00', 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0", 0x76}], 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})

178.413557ms ago: executing program 2 (id=2020):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x200, 0x0, 0x0, 0x3, 0x9, 0x7}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = fsmount(r1, 0x0, 0x0)
fchdir(r4) (async)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005) (async)
sendfile(r5, r5, 0x0, 0x1000000201005)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff000)
ftruncate(r5, 0x30)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './bus\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r4, {0x5}}, './bus\x00'})
readv(r7, &(0x7f00000002c0), 0x0)

0s ago: executing program 2 (id=2021):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666d", 0x23}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f252", 0x5a}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d0", 0x59}], 0x4}}], 0x1, 0xc0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

kernel console output (not intermixed with test programs):

m_r:sysadm_t pid=4225 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   49.679986][   T29] audit: type=1326 audit(1750319457.924:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   49.703352][   T29] audit: type=1326 audit(1750319457.924:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   49.729281][   T29] audit: type=1326 audit(1750319457.954:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   49.840950][ T4234] siw: device registration error -23
[   49.873769][ T4237] netlink: 56 bytes leftover after parsing attributes in process `syz.4.244'.
[   49.902416][ T4240] netlink: 'syz.4.245': attribute type 21 has an invalid length.
[   49.910353][ T4240] netlink: 156 bytes leftover after parsing attributes in process `syz.4.245'.
[   49.932430][ T4240] lo speed is unknown, defaulting to 1000
[   49.954785][ T4241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'.
[   50.120978][ T4264] lo speed is unknown, defaulting to 1000
[   50.231645][ T4279] netlink: 'syz.1.256': attribute type 21 has an invalid length.
[   50.239560][ T4279] netlink: 156 bytes leftover after parsing attributes in process `syz.1.256'.
[   50.263945][ T4279] lo speed is unknown, defaulting to 1000
[   50.349631][ T4288] netlink: 'syz.2.257': attribute type 13 has an invalid length.
[   50.357504][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'.
[   50.485710][ T4299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'.
[   50.670686][ T4313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.262'.
[   50.807609][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'.
[   50.821274][ T4317] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   50.830167][ T4317] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   50.838972][ T4317] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   50.847783][ T4317] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   50.859051][ T4317] vxlan0: entered promiscuous mode
[   51.474696][ T4340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.272'.
[   51.612538][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.620153][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.638858][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.646395][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.864492][ T4361] hub 9-0:1.0: USB hub found
[   51.869247][ T4361] hub 9-0:1.0: 8 ports detected
[   51.929720][ T4367] netlink: 'syz.3.282': attribute type 21 has an invalid length.
[   51.950657][ T4367] lo speed is unknown, defaulting to 1000
[   52.390383][ T4403] lo speed is unknown, defaulting to 1000
[   52.571305][ T4425] siw: device registration error -23
[   52.907333][ T4454] siw: device registration error -23
[   52.983484][ T4458] lo speed is unknown, defaulting to 1000
[   53.341889][ T4483] siw: device registration error -23
[   54.191124][ T4505] siw: device registration error -23
[   54.290484][   T29] kauditd_printk_skb: 309 callbacks suppressed
[   54.290503][   T29] audit: type=1326 audit(1750319462.654:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.349499][   T29] audit: type=1326 audit(1750319462.654:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.372917][   T29] audit: type=1326 audit(1750319462.654:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.396360][   T29] audit: type=1326 audit(1750319462.654:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.419879][   T29] audit: type=1326 audit(1750319462.654:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.443141][   T29] audit: type=1326 audit(1750319462.654:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.448433][ T4511] __nla_validate_parse: 11 callbacks suppressed
[   54.448454][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'.
[   54.466597][   T29] audit: type=1326 audit(1750319462.654:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.466635][   T29] audit: type=1326 audit(1750319462.654:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19b65bd3df code=0x7ffc0000
[   54.528276][   T29] audit: type=1326 audit(1750319462.654:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.551557][   T29] audit: type=1326 audit(1750319462.654:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4507 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   54.620424][ T4516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.629297][ T4516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.638182][ T4516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.646994][ T4516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.657368][ T4516] geneve2: entered promiscuous mode
[   54.697208][ T4524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'.
[   54.700008][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'.
[   54.735504][ T4527] siw: device registration error -23
[   55.237792][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.348'.
[   55.462302][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'.
[   55.531735][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'.
[   55.616092][ T4568] netlink: 'syz.1.357': attribute type 21 has an invalid length.
[   55.623923][ T4568] netlink: 156 bytes leftover after parsing attributes in process `syz.1.357'.
[   55.651387][ T4568] lo speed is unknown, defaulting to 1000
[   55.829867][ T4578] lo speed is unknown, defaulting to 1000
[   55.925139][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'.
[   56.045279][ T4608] netlink: 'syz.4.370': attribute type 21 has an invalid length.
[   56.053101][ T4608] netlink: 156 bytes leftover after parsing attributes in process `syz.4.370'.
[   56.078758][ T4608] lo speed is unknown, defaulting to 1000
[   56.089930][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'.
[   56.321952][ T4637] lo speed is unknown, defaulting to 1000
[   56.398561][ T4646] netlink: 'syz.3.383': attribute type 21 has an invalid length.
[   56.427709][ T4646] lo speed is unknown, defaulting to 1000
[   57.309995][ T4694] geneve2: entered promiscuous mode
[   57.703503][ T4747] netlink: 'syz.4.421': attribute type 21 has an invalid length.
[   57.726550][ T4747] lo speed is unknown, defaulting to 1000
[   59.065871][ T4842] netlink: 'syz.0.457': attribute type 21 has an invalid length.
[   59.089364][ T4842] lo speed is unknown, defaulting to 1000
[   59.651747][ T4884] __nla_validate_parse: 18 callbacks suppressed
[   59.651769][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'.
[   59.686771][ T4888] FAULT_INJECTION: forcing a failure.
[   59.686771][ T4888] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   59.690419][ T4890] netlink: 'syz.3.473': attribute type 21 has an invalid length.
[   59.700005][ T4888] CPU: 1 UID: 0 PID: 4888 Comm: syz.0.472 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   59.700038][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   59.700056][ T4888] Call Trace:
[   59.700065][ T4888]  <TASK>
[   59.700075][ T4888]  __dump_stack+0x1d/0x30
[   59.700153][ T4888]  dump_stack_lvl+0xe8/0x140
[   59.700178][ T4888]  dump_stack+0x15/0x1b
[   59.700201][ T4888]  should_fail_ex+0x265/0x280
[   59.700245][ T4888]  should_fail+0xb/0x20
[   59.700336][ T4888]  should_fail_usercopy+0x1a/0x20
[   59.700380][ T4888]  strncpy_from_user+0x25/0x230
[   59.700414][ T4888]  ? __kmalloc_cache_noprof+0x189/0x320
[   59.700484][ T4888]  __se_sys_memfd_create+0x1ff/0x590
[   59.700529][ T4888]  __x64_sys_memfd_create+0x31/0x40
[   59.700571][ T4888]  x64_sys_call+0x122f/0x2fb0
[   59.700688][ T4888]  do_syscall_64+0xd2/0x200
[   59.700713][ T4888]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   59.700750][ T4888]  ? clear_bhb_loop+0x40/0x90
[   59.700778][ T4888]  ? clear_bhb_loop+0x40/0x90
[   59.700808][ T4888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.700935][ T4888] RIP: 0033:0x7f19b65be929
[   59.700956][ T4888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.700990][ T4888] RSP: 002b:00007f19b4c26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   59.701016][ T4888] RAX: ffffffffffffffda RBX: 00000000000006b2 RCX: 00007f19b65be929
[   59.701034][ T4888] RDX: 00007f19b4c26ef0 RSI: 0000000000000000 RDI: 00007f19b66414cc
[   59.701130][ T4888] RBP: 0000200000002640 R08: 00007f19b4c26bb7 R09: 00007f19b4c26e40
[   59.701143][ T4888] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100
[   59.701159][ T4888] R13: 00007f19b4c26ef0 R14: 00007f19b4c26eb0 R15: 0000200000000b40
[   59.701182][ T4888]  </TASK>
[   59.787332][ T4892] lo speed is unknown, defaulting to 1000
[   59.790106][ T4890] netlink: 156 bytes leftover after parsing attributes in process `syz.3.473'.
[   59.952556][ T4904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.474'.
[   59.987426][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'.
[   60.192728][   T29] kauditd_printk_skb: 455 callbacks suppressed
[   60.192746][   T29] audit: type=1400 audit(1750319468.554:1321): avc:  denied  { bind } for  pid=4915 comm="syz.3.480" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   60.197072][ T4916] vlan2: entered allmulticast mode
[   60.199451][   T29] audit: type=1400 audit(1750319468.554:1322): avc:  denied  { name_bind } for  pid=4915 comm="syz.3.480" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   60.219313][ T4916] vlan1: entered allmulticast mode
[   60.224442][   T29] audit: type=1400 audit(1750319468.554:1323): avc:  denied  { node_bind } for  pid=4915 comm="syz.3.480" saddr=fe88::104 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   60.273311][ T4916] veth0_vlan: entered allmulticast mode
[   60.280471][ T4916] bridge0: port 1(vlan2) entered blocking state
[   60.286896][ T4916] bridge0: port 1(vlan2) entered disabled state
[   60.294093][ T4916] vlan2: entered promiscuous mode
[   60.299300][ T4916] vlan1: entered promiscuous mode
[   60.305134][ T4916] bridge0: port 1(vlan2) entered blocking state
[   60.311498][ T4916] bridge0: port 1(vlan2) entered forwarding state
[   60.353723][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'.
[   60.375955][   T29] audit: type=1400 audit(1750319468.744:1324): avc:  denied  { kexec_image_load } for  pid=4922 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   60.406935][   T29] audit: type=1400 audit(1750319468.774:1325): avc:  denied  { create } for  pid=4922 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   60.426560][ T4923] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   60.541549][   T29] audit: type=1326 audit(1750319468.904:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   60.566883][   T29] audit: type=1326 audit(1750319468.904:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   60.590269][   T29] audit: type=1326 audit(1750319468.904:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   60.613621][   T29] audit: type=1326 audit(1750319468.904:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   60.637113][   T29] audit: type=1326 audit(1750319468.904:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4941 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   60.637807][ T4943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'.
[   60.773852][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'.
[   60.848981][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'.
[   61.114394][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'.
[   61.638781][ T4977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.503'.
[   62.065697][ T5000] FAULT_INJECTION: forcing a failure.
[   62.065697][ T5000] name failslab, interval 1, probability 0, space 0, times 0
[   62.078460][ T5000] CPU: 1 UID: 0 PID: 5000 Comm: syz.3.509 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   62.078493][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.078505][ T5000] Call Trace:
[   62.078512][ T5000]  <TASK>
[   62.078520][ T5000]  __dump_stack+0x1d/0x30
[   62.078545][ T5000]  dump_stack_lvl+0xe8/0x140
[   62.078570][ T5000]  dump_stack+0x15/0x1b
[   62.078657][ T5000]  should_fail_ex+0x265/0x280
[   62.078714][ T5000]  should_failslab+0x8c/0xb0
[   62.078756][ T5000]  __kmalloc_noprof+0xa5/0x3e0
[   62.078789][ T5000]  ? copy_splice_read+0xc2/0x5f0
[   62.078818][ T5000]  copy_splice_read+0xc2/0x5f0
[   62.078887][ T5000]  ? __pfx_shmem_file_splice_read+0x10/0x10
[   62.078916][ T5000]  splice_direct_to_actor+0x290/0x680
[   62.078948][ T5000]  ? __pfx_direct_splice_actor+0x10/0x10
[   62.079084][ T5000]  do_splice_direct+0xda/0x150
[   62.079122][ T5000]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   62.079190][ T5000]  do_sendfile+0x380/0x650
[   62.079255][ T5000]  __x64_sys_sendfile64+0x105/0x150
[   62.079334][ T5000]  x64_sys_call+0xb39/0x2fb0
[   62.079359][ T5000]  do_syscall_64+0xd2/0x200
[   62.079443][ T5000]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   62.079476][ T5000]  ? clear_bhb_loop+0x40/0x90
[   62.079546][ T5000]  ? clear_bhb_loop+0x40/0x90
[   62.079603][ T5000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.079706][ T5000] RIP: 0033:0x7fac31d2e929
[   62.079726][ T5000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.079749][ T5000] RSP: 002b:00007fac30376038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   62.079773][ T5000] RAX: ffffffffffffffda RBX: 00007fac31f56080 RCX: 00007fac31d2e929
[   62.079785][ T5000] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[   62.079796][ T5000] RBP: 00007fac30376090 R08: 0000000000000000 R09: 0000000000000000
[   62.079808][ T5000] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001
[   62.079821][ T5000] R13: 0000000000000000 R14: 00007fac31f56080 R15: 00007fffa685a688
[   62.079898][ T5000]  </TASK>
[   62.322892][ T4999] xt_CT: You must specify a L4 protocol and not use inversions on it
[   62.359277][ T3402] Process accounting resumed
[   62.768314][ T5021] SELinux: ebitmap: truncated map
[   62.777222][ T5021] SELinux: failed to load policy
[   62.813835][ T5029] netlink: 'syz.2.520': attribute type 21 has an invalid length.
[   62.837596][ T5029] lo speed is unknown, defaulting to 1000
[   63.661277][ T5109] hub 9-0:1.0: USB hub found
[   63.666463][ T5109] hub 9-0:1.0: 8 ports detected
[   64.035137][ T5147] netlink: 'syz.4.538': attribute type 21 has an invalid length.
[   64.071443][ T5147] lo speed is unknown, defaulting to 1000
[   64.716135][ T5195] netlink: 'syz.2.545': attribute type 21 has an invalid length.
[   64.724094][ T5195] __nla_validate_parse: 8 callbacks suppressed
[   64.724110][ T5195] netlink: 156 bytes leftover after parsing attributes in process `syz.2.545'.
[   64.756618][ T5195] lo speed is unknown, defaulting to 1000
[   64.841434][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'.
[   64.873057][ T5211] netlink: 'syz.4.550': attribute type 21 has an invalid length.
[   64.880931][ T5211] netlink: 156 bytes leftover after parsing attributes in process `syz.4.550'.
[   64.902813][ T5211] lo speed is unknown, defaulting to 1000
[   65.051732][ T5229] vlan2: entered allmulticast mode
[   65.057085][ T5229] vlan1: entered allmulticast mode
[   65.062294][ T5229] veth0_vlan: entered allmulticast mode
[   65.069798][ T5229] bridge0: port 3(vlan2) entered blocking state
[   65.076397][ T5229] bridge0: port 3(vlan2) entered disabled state
[   65.084004][ T5229] vlan2: entered promiscuous mode
[   65.089162][ T5229] vlan1: entered promiscuous mode
[   65.094840][ T5229] bridge0: port 3(vlan2) entered blocking state
[   65.101951][ T5229] bridge0: port 3(vlan2) entered forwarding state
[   65.151175][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.556'.
[   65.196511][   T29] kauditd_printk_skb: 240 callbacks suppressed
[   65.196529][   T29] audit: type=1400 audit(1750319473.564:1571): avc:  denied  { mounton } for  pid=5236 comm="syz.4.558" path="/95/bus" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   65.241923][   T29] audit: type=1326 audit(1750319473.604:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.265898][   T29] audit: type=1326 audit(1750319473.604:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.268655][ T5244] netlink: 56 bytes leftover after parsing attributes in process `syz.3.561'.
[   65.289435][   T29] audit: type=1326 audit(1750319473.604:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.289477][   T29] audit: type=1326 audit(1750319473.604:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.289553][   T29] audit: type=1326 audit(1750319473.604:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.289590][   T29] audit: type=1326 audit(1750319473.604:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.289626][   T29] audit: type=1326 audit(1750319473.604:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f35c43ed3df code=0x7ffc0000
[   65.289678][   T29] audit: type=1326 audit(1750319473.604:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.289715][   T29] audit: type=1326 audit(1750319473.604:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5241 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   65.482486][ T5249] netlink: 'syz.3.562': attribute type 21 has an invalid length.
[   65.490431][ T5249] netlink: 156 bytes leftover after parsing attributes in process `syz.3.562'.
[   65.514660][ T5249] lo speed is unknown, defaulting to 1000
[   65.607605][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'.
[   65.749598][ T5272] vlan2: entered allmulticast mode
[   65.754876][ T5272] vlan1: entered allmulticast mode
[   65.760074][ T5272] veth0_vlan: entered allmulticast mode
[   65.768281][ T5272] bridge0: port 3(vlan2) entered blocking state
[   65.774649][ T5272] bridge0: port 3(vlan2) entered disabled state
[   65.781841][ T5272] vlan2: entered promiscuous mode
[   65.786982][ T5272] vlan1: entered promiscuous mode
[   65.792405][ T5272] bridge0: port 3(vlan2) entered blocking state
[   65.798773][ T5272] bridge0: port 3(vlan2) entered forwarding state
[   65.817900][ T5275] netlink: 'syz.1.569': attribute type 21 has an invalid length.
[   65.825802][ T5275] netlink: 156 bytes leftover after parsing attributes in process `syz.1.569'.
[   65.838366][ T5277] siw: device registration error -23
[   65.855877][ T5275] lo speed is unknown, defaulting to 1000
[   65.919838][ T5283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.572'.
[   65.970594][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[   66.098581][ T5303] netlink: 'syz.0.578': attribute type 21 has an invalid length.
[   66.121670][ T5303] lo speed is unknown, defaulting to 1000
[   66.192775][ T5311] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.201800][ T5311] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.211176][ T5311] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.221593][ T5311] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.232639][ T5311] vxlan0: entered promiscuous mode
[   66.424102][ T5321] siw: device registration error -23
[   66.676522][ T5341] hsr_slave_0: left promiscuous mode
[   66.682253][ T5341] hsr_slave_1: left promiscuous mode
[   66.776584][ T5345] netlink: 'syz.3.592': attribute type 21 has an invalid length.
[   66.800791][ T5345] lo speed is unknown, defaulting to 1000
[   66.890222][ T5357] netlink: 'syz.1.595': attribute type 21 has an invalid length.
[   66.914112][ T5357] lo speed is unknown, defaulting to 1000
[   67.162915][ T5390] netlink: 'syz.4.606': attribute type 21 has an invalid length.
[   67.186830][ T5390] lo speed is unknown, defaulting to 1000
[   67.502677][ T5420] lo speed is unknown, defaulting to 1000
[   67.648082][ T5436] siw: device registration error -23
[   67.672746][ T5438] FAULT_INJECTION: forcing a failure.
[   67.672746][ T5438] name failslab, interval 1, probability 0, space 0, times 0
[   67.686114][ T5438] CPU: 0 UID: 0 PID: 5438 Comm: syz.2.621 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   67.686206][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   67.686219][ T5438] Call Trace:
[   67.686224][ T5438]  <TASK>
[   67.686233][ T5438]  __dump_stack+0x1d/0x30
[   67.686300][ T5438]  dump_stack_lvl+0xe8/0x140
[   67.686325][ T5438]  dump_stack+0x15/0x1b
[   67.686354][ T5438]  should_fail_ex+0x265/0x280
[   67.686392][ T5438]  ? __se_sys_mount+0xef/0x2e0
[   67.686476][ T5438]  should_failslab+0x8c/0xb0
[   67.686502][ T5438]  __kmalloc_cache_noprof+0x4c/0x320
[   67.686529][ T5438]  ? memdup_user+0x99/0xd0
[   67.686553][ T5438]  __se_sys_mount+0xef/0x2e0
[   67.686590][ T5438]  ? fput+0x8f/0xc0
[   67.686639][ T5438]  ? ksys_write+0x192/0x1a0
[   67.686661][ T5438]  __x64_sys_mount+0x67/0x80
[   67.686698][ T5438]  x64_sys_call+0xd36/0x2fb0
[   67.686719][ T5438]  do_syscall_64+0xd2/0x200
[   67.686736][ T5438]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   67.686764][ T5438]  ? clear_bhb_loop+0x40/0x90
[   67.686790][ T5438]  ? clear_bhb_loop+0x40/0x90
[   67.686814][ T5438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.686840][ T5438] RIP: 0033:0x7f5beb5fe929
[   67.686859][ T5438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.686890][ T5438] RSP: 002b:00007f5be9c67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   67.686910][ T5438] RAX: ffffffffffffffda RBX: 00007f5beb825fa0 RCX: 00007f5beb5fe929
[   67.686925][ T5438] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000
[   67.686940][ T5438] RBP: 00007f5be9c67090 R08: 0000200000000400 R09: 0000000000000000
[   67.686955][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.686970][ T5438] R13: 0000000000000000 R14: 00007f5beb825fa0 R15: 00007ffd9415a248
[   67.686995][ T5438]  </TASK>
[   68.048512][ T5453] validate_nla: 1 callbacks suppressed
[   68.048529][ T5453] netlink: 'syz.2.627': attribute type 21 has an invalid length.
[   68.090379][ T5447] hub 9-0:1.0: USB hub found
[   68.095316][ T5447] hub 9-0:1.0: 8 ports detected
[   68.140573][ T5458] lo speed is unknown, defaulting to 1000
[   68.162446][ T5462] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   68.652358][ T5503] bond_slave_0: entered promiscuous mode
[   68.658205][ T5503] bond_slave_1: entered promiscuous mode
[   69.166173][ T5512] netlink: 'syz.0.648': attribute type 21 has an invalid length.
[   69.190936][ T5512] lo speed is unknown, defaulting to 1000
[   69.207456][ T5516] FAULT_INJECTION: forcing a failure.
[   69.207456][ T5516] name failslab, interval 1, probability 0, space 0, times 0
[   69.220388][ T5516] CPU: 1 UID: 0 PID: 5516 Comm: syz.2.650 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   69.220420][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   69.220472][ T5516] Call Trace:
[   69.220480][ T5516]  <TASK>
[   69.220508][ T5516]  __dump_stack+0x1d/0x30
[   69.220535][ T5516]  dump_stack_lvl+0xe8/0x140
[   69.220606][ T5516]  dump_stack+0x15/0x1b
[   69.220628][ T5516]  should_fail_ex+0x265/0x280
[   69.220662][ T5516]  should_failslab+0x8c/0xb0
[   69.220686][ T5516]  kmem_cache_alloc_node_noprof+0x57/0x320
[   69.220794][ T5516]  ? __alloc_skb+0x101/0x320
[   69.220824][ T5516]  ? avc_has_perm+0xd3/0x150
[   69.220851][ T5516]  __alloc_skb+0x101/0x320
[   69.220885][ T5516]  sock_wmalloc+0x7e/0xc0
[   69.220942][ T5516]  pppol2tp_sendmsg+0xfb/0x440
[   69.221007][ T5516]  ? __pfx_pppol2tp_sendmsg+0x10/0x10
[   69.221098][ T5516]  __sock_sendmsg+0x145/0x180
[   69.221129][ T5516]  sock_write_iter+0x165/0x1b0
[   69.221198][ T5516]  do_iter_readv_writev+0x421/0x4c0
[   69.221290][ T5516]  vfs_writev+0x2df/0x8b0
[   69.221323][ T5516]  do_writev+0xe7/0x210
[   69.221426][ T5516]  __x64_sys_writev+0x45/0x50
[   69.221446][ T5516]  x64_sys_call+0x2006/0x2fb0
[   69.221466][ T5516]  do_syscall_64+0xd2/0x200
[   69.221483][ T5516]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   69.221545][ T5516]  ? clear_bhb_loop+0x40/0x90
[   69.221573][ T5516]  ? clear_bhb_loop+0x40/0x90
[   69.221610][ T5516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.221634][ T5516] RIP: 0033:0x7f5beb5fe929
[   69.221653][ T5516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.221676][ T5516] RSP: 002b:00007f5be9c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   69.221700][ T5516] RAX: ffffffffffffffda RBX: 00007f5beb825fa0 RCX: 00007f5beb5fe929
[   69.221771][ T5516] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[   69.221783][ T5516] RBP: 00007f5be9c67090 R08: 0000000000000000 R09: 0000000000000000
[   69.221794][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.221806][ T5516] R13: 0000000000000000 R14: 00007f5beb825fa0 R15: 00007ffd9415a248
[   69.221826][ T5516]  </TASK>
[   69.704560][ T5533] hub 9-0:1.0: USB hub found
[   69.709386][ T5533] hub 9-0:1.0: 8 ports detected
[   69.799255][ T5534] hub 9-0:1.0: USB hub found
[   69.804064][ T5534] hub 9-0:1.0: 8 ports detected
[   69.882629][ T5552] __nla_validate_parse: 20 callbacks suppressed
[   69.882726][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'.
[   70.467780][ T5568] siw: device registration error -23
[   70.510410][   T29] kauditd_printk_skb: 176 callbacks suppressed
[   70.510429][   T29] audit: type=1326 audit(1750319478.874:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.615359][   T29] audit: type=1326 audit(1750319478.874:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.639045][   T29] audit: type=1326 audit(1750319478.874:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.662808][   T29] audit: type=1326 audit(1750319478.874:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.665942][ T5574] netlink: 'syz.1.670': attribute type 21 has an invalid length.
[   70.686465][   T29] audit: type=1326 audit(1750319478.874:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.694050][ T5574] netlink: 156 bytes leftover after parsing attributes in process `syz.1.670'.
[   70.717635][   T29] audit: type=1326 audit(1750319478.874:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.749775][   T29] audit: type=1326 audit(1750319478.874:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.762048][ T5574] lo speed is unknown, defaulting to 1000
[   70.773128][   T29] audit: type=1326 audit(1750319478.874:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.802304][   T29] audit: type=1326 audit(1750319478.904:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   70.825816][   T29] audit: type=1326 audit(1750319478.904:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   71.073623][ T5584] hub 9-0:1.0: USB hub found
[   71.080436][ T5584] hub 9-0:1.0: 8 ports detected
[   71.298724][ T5617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'.
[   71.372631][ T5625] netlink: 56 bytes leftover after parsing attributes in process `syz.0.688'.
[   71.525182][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[   71.912919][ T5651] FAULT_INJECTION: forcing a failure.
[   71.912919][ T5651] name failslab, interval 1, probability 0, space 0, times 0
[   71.925710][ T5651] CPU: 0 UID: 0 PID: 5651 Comm: syz.1.700 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   71.925742][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   71.925754][ T5651] Call Trace:
[   71.925761][ T5651]  <TASK>
[   71.925769][ T5651]  __dump_stack+0x1d/0x30
[   71.925805][ T5651]  dump_stack_lvl+0xe8/0x140
[   71.925893][ T5651]  dump_stack+0x15/0x1b
[   71.925908][ T5651]  should_fail_ex+0x265/0x280
[   71.925937][ T5651]  should_failslab+0x8c/0xb0
[   71.925998][ T5651]  kmem_cache_alloc_node_noprof+0x57/0x320
[   71.926037][ T5651]  ? __alloc_skb+0x101/0x320
[   71.926066][ T5651]  __alloc_skb+0x101/0x320
[   71.926092][ T5651]  netlink_alloc_large_skb+0xba/0xf0
[   71.926189][ T5651]  netlink_sendmsg+0x3cf/0x6b0
[   71.926207][ T5651]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.926362][ T5651]  __sock_sendmsg+0x145/0x180
[   71.926385][ T5651]  ____sys_sendmsg+0x31e/0x4e0
[   71.926418][ T5651]  ___sys_sendmsg+0x17b/0x1d0
[   71.926514][ T5651]  __x64_sys_sendmsg+0xd4/0x160
[   71.926550][ T5651]  x64_sys_call+0x2999/0x2fb0
[   71.926570][ T5651]  do_syscall_64+0xd2/0x200
[   71.926586][ T5651]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   71.926621][ T5651]  ? clear_bhb_loop+0x40/0x90
[   71.926641][ T5651]  ? clear_bhb_loop+0x40/0x90
[   71.926668][ T5651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.926811][ T5651] RIP: 0033:0x7faf8751e929
[   71.926832][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.926897][ T5651] RSP: 002b:00007faf85b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.926915][ T5651] RAX: ffffffffffffffda RBX: 00007faf87745fa0 RCX: 00007faf8751e929
[   71.926926][ T5651] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   71.926940][ T5651] RBP: 00007faf85b87090 R08: 0000000000000000 R09: 0000000000000000
[   71.926950][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   71.926961][ T5651] R13: 0000000000000000 R14: 00007faf87745fa0 R15: 00007ffe643042a8
[   71.926978][ T5651]  </TASK>
[   72.168537][ T5654] siw: device registration error -23
[   72.207447][ T5660] siw: device registration error -23
[   72.285351][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'.
[   72.317165][ T5672] netlink: 56 bytes leftover after parsing attributes in process `syz.4.710'.
[   72.358163][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'.
[   72.367089][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'.
[   72.376509][ T5673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'.
[   72.394764][ T5673] bridge0: port 1(vlan2) entered disabled state
[   72.418771][ T5673] vlan2 (unregistering): left promiscuous mode
[   72.425074][ T5673] vlan1 (unregistering): left promiscuous mode
[   72.431295][ T5673] bridge0: port 1(vlan2) entered disabled state
[   73.309263][ T5709] siw: device registration error -23
[   73.463084][ T5724] FAULT_INJECTION: forcing a failure.
[   73.463084][ T5724] name failslab, interval 1, probability 0, space 0, times 0
[   73.476296][ T5724] CPU: 0 UID: 0 PID: 5724 Comm: syz.4.727 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   73.476324][ T5724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   73.476339][ T5724] Call Trace:
[   73.476347][ T5724]  <TASK>
[   73.476357][ T5724]  __dump_stack+0x1d/0x30
[   73.476382][ T5724]  dump_stack_lvl+0xe8/0x140
[   73.476432][ T5724]  dump_stack+0x15/0x1b
[   73.476450][ T5724]  should_fail_ex+0x265/0x280
[   73.476518][ T5724]  should_failslab+0x8c/0xb0
[   73.476542][ T5724]  __kmalloc_noprof+0xa5/0x3e0
[   73.476567][ T5724]  ? copy_splice_read+0xc2/0x5f0
[   73.476609][ T5724]  copy_splice_read+0xc2/0x5f0
[   73.476650][ T5724]  ? __pfx_shmem_file_splice_read+0x10/0x10
[   73.476672][ T5724]  splice_direct_to_actor+0x290/0x680
[   73.476777][ T5724]  ? __pfx_direct_splice_actor+0x10/0x10
[   73.476932][ T5724]  do_splice_direct+0xda/0x150
[   73.476963][ T5724]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   73.477006][ T5724]  do_sendfile+0x380/0x650
[   73.477093][ T5724]  __x64_sys_sendfile64+0x105/0x150
[   73.477189][ T5724]  x64_sys_call+0xb39/0x2fb0
[   73.477210][ T5724]  do_syscall_64+0xd2/0x200
[   73.477232][ T5724]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   73.477259][ T5724]  ? clear_bhb_loop+0x40/0x90
[   73.477308][ T5724]  ? clear_bhb_loop+0x40/0x90
[   73.477335][ T5724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.477358][ T5724] RIP: 0033:0x7f35c43ee929
[   73.477373][ T5724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.477398][ T5724] RSP: 002b:00007f35c2a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   73.477421][ T5724] RAX: ffffffffffffffda RBX: 00007f35c4615fa0 RCX: 00007f35c43ee929
[   73.477464][ T5724] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[   73.477546][ T5724] RBP: 00007f35c2a57090 R08: 0000000000000000 R09: 0000000000000000
[   73.477560][ T5724] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001
[   73.477573][ T5724] R13: 0000000000000000 R14: 00007f35c4615fa0 R15: 00007ffdabfc6358
[   73.477589][ T5724]  </TASK>
[   73.711227][ T5727] siw: device registration error -23
[   73.732771][ T5731] netlink: 'syz.4.730': attribute type 21 has an invalid length.
[   73.759873][ T5731] lo speed is unknown, defaulting to 1000
[   73.824591][ T5741] netlink: 'syz.2.733': attribute type 21 has an invalid length.
[   73.851656][ T5741] lo speed is unknown, defaulting to 1000
[   74.017734][ T5761] siw: device registration error -23
[   74.213336][ T5764] hub 9-0:1.0: USB hub found
[   74.218672][ T5764] hub 9-0:1.0: 8 ports detected
[   74.293288][ T5776] vlan2: entered allmulticast mode
[   74.298538][ T5776] vlan1: entered allmulticast mode
[   74.303736][ T5776] veth0_vlan: entered allmulticast mode
[   74.319888][ T5776] bridge0: port 3(vlan2) entered blocking state
[   74.326750][ T5776] bridge0: port 3(vlan2) entered disabled state
[   74.336715][ T5776] vlan2: entered promiscuous mode
[   74.342113][ T5776] vlan1: entered promiscuous mode
[   74.349162][ T5776] bridge0: port 3(vlan2) entered blocking state
[   74.355610][ T5776] bridge0: port 3(vlan2) entered forwarding state
[   74.427706][ T5790] FAULT_INJECTION: forcing a failure.
[   74.427706][ T5790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.441145][ T5790] CPU: 1 UID: 0 PID: 5790 Comm: syz.3.750 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   74.441176][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   74.441189][ T5790] Call Trace:
[   74.441196][ T5790]  <TASK>
[   74.441203][ T5790]  __dump_stack+0x1d/0x30
[   74.441223][ T5790]  dump_stack_lvl+0xe8/0x140
[   74.441289][ T5790]  dump_stack+0x15/0x1b
[   74.441306][ T5790]  should_fail_ex+0x265/0x280
[   74.441345][ T5790]  should_fail+0xb/0x20
[   74.441372][ T5790]  should_fail_usercopy+0x1a/0x20
[   74.441444][ T5790]  _copy_from_user+0x1c/0xb0
[   74.441463][ T5790]  ___sys_sendmsg+0xc1/0x1d0
[   74.441504][ T5790]  __sys_sendmmsg+0x178/0x300
[   74.441581][ T5790]  __x64_sys_sendmmsg+0x57/0x70
[   74.441603][ T5790]  x64_sys_call+0x2f2f/0x2fb0
[   74.441622][ T5790]  do_syscall_64+0xd2/0x200
[   74.441638][ T5790]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   74.441662][ T5790]  ? clear_bhb_loop+0x40/0x90
[   74.441750][ T5790]  ? clear_bhb_loop+0x40/0x90
[   74.441769][ T5790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.441853][ T5790] RIP: 0033:0x7fac31d2e929
[   74.441900][ T5790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.441915][ T5790] RSP: 002b:00007fac30397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   74.441931][ T5790] RAX: ffffffffffffffda RBX: 00007fac31f55fa0 RCX: 00007fac31d2e929
[   74.442020][ T5790] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003
[   74.442031][ T5790] RBP: 00007fac30397090 R08: 0000000000000000 R09: 0000000000000000
[   74.442047][ T5790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.442061][ T5790] R13: 0000000000000000 R14: 00007fac31f55fa0 R15: 00007fffa685a688
[   74.442160][ T5790]  </TASK>
[   74.640417][ T5794] netlink: 'syz.3.751': attribute type 21 has an invalid length.
[   74.674477][ T5794] lo speed is unknown, defaulting to 1000
[   75.275361][ T5834] __nla_validate_parse: 10 callbacks suppressed
[   75.275394][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'.
[   75.607368][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'.
[   75.616255][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'.
[   75.625232][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'.
[   75.634863][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'.
[   75.651014][ T5839] bridge0: port 3(vlan2) entered disabled state
[   75.678226][ T5839] vlan2 (unregistering): left promiscuous mode
[   75.684531][ T5839] vlan1 (unregistering): left promiscuous mode
[   75.690858][ T5839] bridge0: port 3(vlan2) entered disabled state
[   75.719572][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'.
[   76.008807][ T5865] netlink: 'syz.3.775': attribute type 21 has an invalid length.
[   76.016843][ T5865] netlink: 156 bytes leftover after parsing attributes in process `syz.3.775'.
[   76.042207][ T5865] lo speed is unknown, defaulting to 1000
[   76.104613][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'.
[   76.216087][ T5882] netlink: 44 bytes leftover after parsing attributes in process `syz.3.778'.
[   76.228223][   T29] kauditd_printk_skb: 95 callbacks suppressed
[   76.228348][   T29] audit: type=1400 audit(1750319484.594:1862): avc:  denied  { watch watch_reads } for  pid=5881 comm="syz.3.778" path="/167" dev="tmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   76.362768][   T29] audit: type=1326 audit(1750319484.724:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.386775][   T29] audit: type=1326 audit(1750319484.724:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.410469][   T29] audit: type=1326 audit(1750319484.724:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.433964][   T29] audit: type=1326 audit(1750319484.724:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.457416][   T29] audit: type=1326 audit(1750319484.724:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.480792][   T29] audit: type=1326 audit(1750319484.724:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.504387][   T29] audit: type=1326 audit(1750319484.724:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.527750][   T29] audit: type=1326 audit(1750319484.724:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.551248][   T29] audit: type=1326 audit(1750319484.724:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac31d2e929 code=0x7ffc0000
[   76.601706][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.784'.
[   76.816497][ T5910] siw: device registration error -23
[   76.833468][ T5913] netlink: 'syz.3.790': attribute type 21 has an invalid length.
[   76.858816][ T5913] lo speed is unknown, defaulting to 1000
[   77.077315][ T5938] netlink: 'syz.3.799': attribute type 21 has an invalid length.
[   77.097910][ T5938] lo speed is unknown, defaulting to 1000
[   77.660590][ T5980] netlink: 'syz.3.814': attribute type 21 has an invalid length.
[   77.682906][ T5980] lo speed is unknown, defaulting to 1000
[   78.201816][ T6018] hub 9-0:1.0: USB hub found
[   78.206682][ T6018] hub 9-0:1.0: 8 ports detected
[   78.547988][ T6048] FAULT_INJECTION: forcing a failure.
[   78.547988][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   78.561184][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.2.841 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   78.561298][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   78.561322][ T6048] Call Trace:
[   78.561330][ T6048]  <TASK>
[   78.561340][ T6048]  __dump_stack+0x1d/0x30
[   78.561367][ T6048]  dump_stack_lvl+0xe8/0x140
[   78.561393][ T6048]  dump_stack+0x15/0x1b
[   78.561414][ T6048]  should_fail_ex+0x265/0x280
[   78.561552][ T6048]  should_fail+0xb/0x20
[   78.561589][ T6048]  should_fail_usercopy+0x1a/0x20
[   78.561632][ T6048]  _copy_to_user+0x20/0xa0
[   78.561718][ T6048]  simple_read_from_buffer+0xb5/0x130
[   78.561840][ T6048]  proc_fail_nth_read+0x100/0x140
[   78.561875][ T6048]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   78.561919][ T6048]  vfs_read+0x1a0/0x6f0
[   78.561958][ T6048]  ? __rcu_read_unlock+0x4f/0x70
[   78.562057][ T6048]  ? __fget_files+0x184/0x1c0
[   78.562115][ T6048]  ksys_read+0xda/0x1a0
[   78.562157][ T6048]  __x64_sys_read+0x40/0x50
[   78.562201][ T6048]  x64_sys_call+0x2d77/0x2fb0
[   78.562236][ T6048]  do_syscall_64+0xd2/0x200
[   78.562259][ T6048]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   78.562293][ T6048]  ? clear_bhb_loop+0x40/0x90
[   78.562320][ T6048]  ? clear_bhb_loop+0x40/0x90
[   78.562427][ T6048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.562548][ T6048] RIP: 0033:0x7f5beb5fd33c
[   78.562567][ T6048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   78.562590][ T6048] RSP: 002b:00007f5be9c67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   78.562615][ T6048] RAX: ffffffffffffffda RBX: 00007f5beb825fa0 RCX: 00007f5beb5fd33c
[   78.562629][ T6048] RDX: 000000000000000f RSI: 00007f5be9c670a0 RDI: 0000000000000005
[   78.562642][ T6048] RBP: 00007f5be9c67090 R08: 0000000000000000 R09: 0000000000000000
[   78.562730][ T6048] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[   78.562742][ T6048] R13: 0000000000000000 R14: 00007f5beb825fa0 R15: 00007ffd9415a248
[   78.562762][ T6048]  </TASK>
[   78.836017][ T6053] macsec1: entered promiscuous mode
[   78.841313][ T6053] bond0: entered promiscuous mode
[   78.846495][ T6053] bond_slave_0: entered promiscuous mode
[   78.852263][ T6053] bond_slave_1: entered promiscuous mode
[   78.860117][ T6053] bond0: left promiscuous mode
[   78.864992][ T6053] bond_slave_0: left promiscuous mode
[   78.870736][ T6053] bond_slave_1: left promiscuous mode
[   79.194394][ T6079] hub 9-0:1.0: USB hub found
[   79.199253][ T6079] hub 9-0:1.0: 8 ports detected
[   79.276338][ T6085] hub 9-0:1.0: USB hub found
[   79.281104][ T6085] hub 9-0:1.0: 8 ports detected
[   79.312297][ T6087] netlink: 'syz.4.859': attribute type 10 has an invalid length.
[   79.320785][ T6087] bridge0: port 3(vlan2) entered disabled state
[   79.327306][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.334702][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.347004][ T6087] bridge0: port 3(vlan2) entered blocking state
[   79.353543][ T6087] bridge0: port 3(vlan2) entered forwarding state
[   79.360638][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.367934][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.375383][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.383083][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.392215][ T6087] bridge0: entered promiscuous mode
[   79.398817][ T6087] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   79.427261][ T6091] FAULT_INJECTION: forcing a failure.
[   79.427261][ T6091] name failslab, interval 1, probability 0, space 0, times 0
[   79.440121][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: +}[@ Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[   79.440178][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   79.440198][ T6091] Call Trace:
[   79.440205][ T6091]  <TASK>
[   79.440215][ T6091]  __dump_stack+0x1d/0x30
[   79.440245][ T6091]  dump_stack_lvl+0xe8/0x140
[   79.440274][ T6091]  dump_stack+0x15/0x1b
[   79.440371][ T6091]  should_fail_ex+0x265/0x280
[   79.440508][ T6091]  should_failslab+0x8c/0xb0
[   79.440532][ T6091]  kmem_cache_alloc_noprof+0x50/0x310
[   79.440559][ T6091]  ? security_inode_alloc+0x37/0x100
[   79.440654][ T6091]  security_inode_alloc+0x37/0x100
[   79.440751][ T6091]  inode_init_always_gfp+0x4b7/0x500
[   79.440788][ T6091]  ? __pfx_sock_alloc_inode+0x10/0x10
[   79.440813][ T6091]  alloc_inode+0x58/0x170
[   79.440886][ T6091]  __sock_create+0x122/0x5b0
[   79.441075][ T6091]  __sys_socket+0xb0/0x180
[   79.441136][ T6091]  __x64_sys_socket+0x3f/0x50
[   79.441168][ T6091]  x64_sys_call+0x285a/0x2fb0
[   79.441196][ T6091]  do_syscall_64+0xd2/0x200
[   79.441244][ T6091]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   79.441268][ T6091]  ? clear_bhb_loop+0x40/0x90
[   79.441287][ T6091]  ? clear_bhb_loop+0x40/0x90
[   79.441306][ T6091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.441325][ T6091] RIP: 0033:0x7f35c43f0847
[   79.441356][ T6091] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.441372][ T6091] RSP: 002b:00007f35c2a55fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   79.441428][ T6091] RAX: ffffffffffffffda RBX: 00007f35c4615fa0 RCX: 00007f35c43f0847
[   79.441439][ T6091] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   79.441450][ T6091] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   79.441461][ T6091] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000001
[   79.441522][ T6091] R13: 0000000000000000 R14: 00007f35c4615fa0 R15: 00007ffdabfc6358
[   79.441540][ T6091]  </TASK>
[   79.441561][ T6091] socket: no more sockets
[   79.703310][ T6095] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   79.715906][ T6095] syz.4.862 uses obsolete (PF_INET,SOCK_PACKET)
[   79.844440][ T6105] hub 9-0:1.0: USB hub found
[   79.853812][ T6105] hub 9-0:1.0: 8 ports detected
[   80.313809][ T6144] hub 9-0:1.0: USB hub found
[   80.318646][ T6144] hub 9-0:1.0: 8 ports detected
[   80.377502][ T6146] __nla_validate_parse: 29 callbacks suppressed
[   80.377518][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[   80.392850][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[   80.401815][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'.
[   80.529549][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'.
[   80.633092][ T6161] netlink: 'syz.2.891': attribute type 21 has an invalid length.
[   80.640983][ T6161] netlink: 156 bytes leftover after parsing attributes in process `syz.2.891'.
[   80.664904][ T6161] lo speed is unknown, defaulting to 1000
[   80.773244][ T6168] netlink: 44 bytes leftover after parsing attributes in process `syz.3.892'.
[   80.913562][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'.
[   80.944943][ T6194] hub 9-0:1.0: USB hub found
[   80.949779][ T6194] hub 9-0:1.0: 8 ports detected
[   80.977030][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'.
[   81.071164][ T6201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.906'.
[   81.100285][ T6203] netlink: 'syz.4.907': attribute type 21 has an invalid length.
[   81.108240][ T6203] netlink: 156 bytes leftover after parsing attributes in process `syz.4.907'.
[   81.131301][ T6203] lo speed is unknown, defaulting to 1000
[   81.268373][ T6222] siw: device registration error -23
[   81.315790][ T6224] hub 9-0:1.0: USB hub found
[   81.320698][ T6224] hub 9-0:1.0: 8 ports detected
[   81.692317][ T6254] netlink: 'syz.0.925': attribute type 21 has an invalid length.
[   81.713859][ T6254] lo speed is unknown, defaulting to 1000
[   81.899578][ T6279] siw: device registration error -23
[   82.081518][   T29] kauditd_printk_skb: 223 callbacks suppressed
[   82.081538][   T29] audit: type=1326 audit(1750319490.444:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   82.111307][   T29] audit: type=1326 audit(1750319490.444:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   82.111345][   T29] audit: type=1326 audit(1750319490.444:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   82.111441][   T29] audit: type=1326 audit(1750319490.444:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   82.111475][   T29] audit: type=1326 audit(1750319490.444:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.4.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   82.285026][ T6310] netlink: 'syz.1.944': attribute type 21 has an invalid length.
[   82.308253][ T6310] lo speed is unknown, defaulting to 1000
[   82.419137][ T6316] bridge0: port 3(vlan2) entered disabled state
[   82.439302][ T6316] vlan2 (unregistering): left promiscuous mode
[   82.445773][ T6316] vlan1 (unregistering): left promiscuous mode
[   82.452089][ T6316] bridge0: port 3(vlan2) entered disabled state
[   82.495939][   T29] audit: type=1326 audit(1750319490.864:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   82.520104][   T29] audit: type=1326 audit(1750319490.864:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   82.543760][   T29] audit: type=1326 audit(1750319490.864:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   82.567141][   T29] audit: type=1326 audit(1750319490.864:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   82.590562][   T29] audit: type=1326 audit(1750319490.864:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6334 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[   82.720462][ T6351] hub 9-0:1.0: USB hub found
[   82.727202][ T6351] hub 9-0:1.0: 8 ports detected
[   82.891374][ T6371] siw: device registration error -23
[   83.379214][ T6413] bridge0: port 3(vlan2) entered disabled state
[   83.403164][ T6413] vlan2 (unregistering): left promiscuous mode
[   83.409469][ T6413] vlan1 (unregistering): left promiscuous mode
[   83.415943][ T6413] bridge0: port 3(vlan2) entered disabled state
[   83.526251][ T6421] hub 9-0:1.0: USB hub found
[   83.531241][ T6421] hub 9-0:1.0: 8 ports detected
[   84.079282][ T6458] hub 9-0:1.0: USB hub found
[   84.084090][ T6458] hub 9-0:1.0: 8 ports detected
[   84.141344][ T6470] siw: device registration error -23
[   84.228731][ T6481] netlink: 'syz.3.1007': attribute type 21 has an invalid length.
[   84.252077][ T6481] lo speed is unknown, defaulting to 1000
[   84.429966][ T6496] hub 9-0:1.0: USB hub found
[   84.436393][ T6496] hub 9-0:1.0: 8 ports detected
[   84.598291][ T6526] netlink: 'syz.3.1019': attribute type 21 has an invalid length.
[   84.618641][ T6526] lo speed is unknown, defaulting to 1000
[   84.905516][ T6540] hub 9-0:1.0: USB hub found
[   84.910297][ T6540] hub 9-0:1.0: 8 ports detected
[   85.124121][ T6553] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.133007][ T6553] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.141899][ T6553] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.150725][ T6553] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.159543][ T6553] vxlan0: entered promiscuous mode
[   85.190653][ T6557] siw: device registration error -23
[   85.353057][ T6567] netlink: 'syz.2.1033': attribute type 21 has an invalid length.
[   85.373232][ T6567] lo speed is unknown, defaulting to 1000
[   85.628147][ T6591] siw: device registration error -23
[   85.870572][ T6603] __nla_validate_parse: 33 callbacks suppressed
[   85.870589][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1046'.
[   85.887632][ T6605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1047'.
[   85.999590][ T6614] netlink: 'syz.3.1051': attribute type 10 has an invalid length.
[   86.007986][ T6614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1051'.
[   86.018553][ T6614] dummy0: entered promiscuous mode
[   86.026638][ T6614] bridge0: port 1(dummy0) entered blocking state
[   86.033182][ T6614] bridge0: port 1(dummy0) entered disabled state
[   86.040741][ T6614] dummy0: entered allmulticast mode
[   86.047088][ T6614] bridge0: port 1(dummy0) entered blocking state
[   86.053753][ T6614] bridge0: port 1(dummy0) entered forwarding state
[   86.216784][ T6619] siw: device registration error -23
[   86.249310][ T6621] hub 9-0:1.0: USB hub found
[   86.254122][ T6621] hub 9-0:1.0: 8 ports detected
[   86.406329][ T6628] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1057'.
[   86.499728][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'.
[   86.602669][ T6646] siw: device registration error -23
[   86.603426][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1058'.
[   86.708276][ T6661] netlink: 'syz.2.1070': attribute type 21 has an invalid length.
[   86.716203][ T6661] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1070'.
[   86.748198][ T6661] lo speed is unknown, defaulting to 1000
[   86.944372][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'.
[   87.363023][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'.
[   87.411117][ T6738] hub 9-0:1.0: USB hub found
[   87.416114][ T6738] hub 9-0:1.0: 8 ports detected
[   87.520755][ T6749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1088'.
[   87.616459][ T6757] siw: device registration error -23
[   87.922025][ T6806] hub 9-0:1.0: USB hub found
[   87.930417][ T6806] hub 9-0:1.0: 8 ports detected
[   88.072580][ T6828] siw: device registration error -23
[   88.186727][ T6839] netlink: 'syz.4.1106': attribute type 21 has an invalid length.
[   88.222512][ T6839] lo speed is unknown, defaulting to 1000
[   88.540578][ T6867] siw: device registration error -23
[   88.657248][ T6874] hub 9-0:1.0: USB hub found
[   88.667703][ T6874] hub 9-0:1.0: 8 ports detected
[   88.773281][ T6882] netlink: 'syz.4.1121': attribute type 21 has an invalid length.
[   88.828408][ T6882] lo speed is unknown, defaulting to 1000
[   88.995842][ T6898] siw: device registration error -23
[   89.042778][ T6906] netlink: 'syz.1.1127': attribute type 21 has an invalid length.
[   89.080495][ T6906] lo speed is unknown, defaulting to 1000
[   89.108504][ T6908] hub 9-0:1.0: USB hub found
[   89.123148][ T6908] hub 9-0:1.0: 8 ports detected
[   89.343515][ T6923] siw: device registration error -23
[   89.563783][ T6945] siw: device registration error -23
[   90.235716][ T6975] siw: device registration error -23
[   90.314982][   T29] kauditd_printk_skb: 6 callbacks suppressed
[   90.315001][   T29] audit: type=1326 audit(1750319498.270:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   90.344919][   T29] audit: type=1326 audit(1750319498.270:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   90.372902][   T29] audit: type=1326 audit(1750319498.326:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   90.397024][   T29] audit: type=1326 audit(1750319498.326:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   90.420526][   T29] audit: type=1326 audit(1750319498.326:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6979 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   90.639586][ T7011] netlink: 'syz.4.1162': attribute type 10 has an invalid length.
[   90.648417][ T7011] dummy0: entered promiscuous mode
[   90.654416][ T7011] bridge0: port 3(dummy0) entered blocking state
[   90.660863][ T7011] bridge0: port 3(dummy0) entered disabled state
[   90.667760][ T7011] dummy0: entered allmulticast mode
[   90.674183][ T7011] bridge0: port 3(dummy0) entered blocking state
[   90.680665][ T7011] bridge0: port 3(dummy0) entered forwarding state
[   90.709828][ T7017] netlink: 'syz.2.1164': attribute type 21 has an invalid length.
[   90.734329][ T7017] lo speed is unknown, defaulting to 1000
[   90.921606][   T29] audit: type=1326 audit(1750319498.841:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   90.945752][   T29] audit: type=1326 audit(1750319498.841:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   90.969377][   T29] audit: type=1326 audit(1750319498.841:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   90.992911][   T29] audit: type=1326 audit(1750319498.841:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   91.016371][   T29] audit: type=1326 audit(1750319498.869:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[   91.253815][ T7054] netlink: 'syz.2.1178': attribute type 21 has an invalid length.
[   91.261909][ T7054] __nla_validate_parse: 33 callbacks suppressed
[   91.261925][ T7054] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1178'.
[   91.300674][ T7054] lo speed is unknown, defaulting to 1000
[   91.407947][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'.
[   91.463207][ T7071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1182'.
[   91.540822][ T7077] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 !
[   91.579743][ T7083] netlink: 'syz.4.1188': attribute type 21 has an invalid length.
[   91.587873][ T7083] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1188'.
[   91.617412][ T7083] lo speed is unknown, defaulting to 1000
[   91.722842][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'.
[   91.856181][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'.
[   91.914510][ T7111] netlink: 'syz.3.1195': attribute type 21 has an invalid length.
[   91.922632][ T7111] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1195'.
[   91.925908][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'.
[   91.950809][ T7111] lo speed is unknown, defaulting to 1000
[   91.994095][ T7113] netlink: 'syz.1.1196': attribute type 10 has an invalid length.
[   92.002238][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1196'.
[   92.012201][ T7113] dummy0: entered promiscuous mode
[   92.018528][ T7113] bridge0: port 3(dummy0) entered blocking state
[   92.025132][ T7113] bridge0: port 3(dummy0) entered disabled state
[   92.032738][ T7113] dummy0: entered allmulticast mode
[   92.283748][ T7137] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   92.340625][ T7144] hub 9-0:1.0: USB hub found
[   92.345522][ T7144] hub 9-0:1.0: 8 ports detected
[   92.385374][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'.
[   92.430245][ T7152] siw: device registration error -23
[   92.484722][ T7159] netlink: 'syz.0.1212': attribute type 21 has an invalid length.
[   92.510961][ T7159] lo speed is unknown, defaulting to 1000
[   92.529697][ T7163] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   92.576456][ T7167] hub 9-0:1.0: USB hub found
[   92.581829][ T7167] hub 9-0:1.0: 8 ports detected
[   92.702665][ T7183] siw: device registration error -23
[   92.926690][ T7212] netlink: 'syz.2.1231': attribute type 21 has an invalid length.
[   92.950086][ T7212] lo speed is unknown, defaulting to 1000
[   92.977826][ T7217] netlink: 'syz.0.1232': attribute type 21 has an invalid length.
[   93.065365][ T7217] lo speed is unknown, defaulting to 1000
[   93.179963][ T7235] hub 9-0:1.0: USB hub found
[   93.193700][ T7235] hub 9-0:1.0: 8 ports detected
[   93.231195][ T7240] hub 9-0:1.0: USB hub found
[   93.235956][ T7240] hub 9-0:1.0: 8 ports detected
[   93.298858][ T7244] hub 9-0:1.0: USB hub found
[   93.315542][ T7244] hub 9-0:1.0: 8 ports detected
[   93.322707][ T7247] lo speed is unknown, defaulting to 1000
[   93.648577][ T7278] netlink: 'syz.1.1252': attribute type 10 has an invalid length.
[   93.768206][ T7288] hub 9-0:1.0: USB hub found
[   93.776538][ T7288] hub 9-0:1.0: 8 ports detected
[   93.783745][ T7289] lo speed is unknown, defaulting to 1000
[   94.550513][ T7340] lo speed is unknown, defaulting to 1000
[   94.559276][ T7343] lo speed is unknown, defaulting to 1000
[   94.608445][ T7350] hub 9-0:1.0: USB hub found
[   94.619672][ T7350] hub 9-0:1.0: 8 ports detected
[   94.792872][ T7378] dummy0: entered promiscuous mode
[   94.803062][ T7378] bridge0: port 3(dummy0) entered blocking state
[   94.809632][ T7378] bridge0: port 3(dummy0) entered disabled state
[   94.832129][ T7378] dummy0: entered allmulticast mode
[   94.841178][ T7378] bridge0: port 3(dummy0) entered blocking state
[   94.847693][ T7378] bridge0: port 3(dummy0) entered forwarding state
[   94.946503][ T7399] hub 9-0:1.0: USB hub found
[   94.951476][ T7399] hub 9-0:1.0: 8 ports detected
[   95.038518][ T7412] lo speed is unknown, defaulting to 1000
[   95.155282][ T7429] lo speed is unknown, defaulting to 1000
[   95.273045][ T7444] lo speed is unknown, defaulting to 1000
[   95.496972][ T7470] siw: device registration error -23
[   95.594610][ T7480] lo speed is unknown, defaulting to 1000
[   95.670030][ T7484] hub 9-0:1.0: USB hub found
[   95.684108][ T7484] hub 9-0:1.0: 8 ports detected
[   95.950278][ T7514] hub 9-0:1.0: USB hub found
[   95.966724][ T7514] hub 9-0:1.0: 8 ports detected
[   96.358539][ T7555] siw: device registration error -23
[   96.527343][ T7571] lo speed is unknown, defaulting to 1000
[   96.581483][ T7580] validate_nla: 7 callbacks suppressed
[   96.581498][ T7580] netlink: 'syz.3.1353': attribute type 21 has an invalid length.
[   96.599107][ T7578] hub 9-0:1.0: USB hub found
[   96.611010][ T7578] hub 9-0:1.0: 8 ports detected
[   96.674614][ T7580] lo speed is unknown, defaulting to 1000
[   96.773765][ T7601] __nla_validate_parse: 34 callbacks suppressed
[   96.773832][ T7601] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1359'.
[   96.842784][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'.
[   96.939649][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'.
[   97.009629][ T7636] netlink: 'syz.4.1375': attribute type 21 has an invalid length.
[   97.017864][ T7636] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1375'.
[   97.041707][ T7636] lo speed is unknown, defaulting to 1000
[   97.267325][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1377'.
[   97.650409][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1386'.
[   97.692479][ T7669] netlink: 'syz.0.1387': attribute type 21 has an invalid length.
[   97.700504][ T7669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1387'.
[   97.724743][ T7669] lo speed is unknown, defaulting to 1000
[   97.828324][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'.
[   97.882030][ T7686] netlink: 'syz.3.1391': attribute type 21 has an invalid length.
[   97.890012][ T7686] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1391'.
[   97.915318][ T7686] lo speed is unknown, defaulting to 1000
[   98.031574][ T7706] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1398'.
[   98.130377][ T7717] hub 9-0:1.0: USB hub found
[   98.135741][ T7717] hub 9-0:1.0: 8 ports detected
[   98.659757][ T7743] netlink: 'syz.3.1412': attribute type 21 has an invalid length.
[   98.681390][ T7743] lo speed is unknown, defaulting to 1000
[   98.846205][ T7752] hub 9-0:1.0: USB hub found
[   98.851160][ T7752] hub 9-0:1.0: 8 ports detected
[   98.978489][   T29] kauditd_printk_skb: 25 callbacks suppressed
[   98.978540][   T29] audit: type=1326 audit(1750319506.372:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.4.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   99.008293][   T29] audit: type=1326 audit(1750319506.372:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.4.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   99.038780][   T29] audit: type=1326 audit(1750319506.428:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.4.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   99.062588][   T29] audit: type=1326 audit(1750319506.428:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.4.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   99.086140][   T29] audit: type=1326 audit(1750319506.428:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.4.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[   99.136109][ T7780] netlink: 'syz.3.1425': attribute type 21 has an invalid length.
[   99.161194][ T7780] lo speed is unknown, defaulting to 1000
[   99.190271][ T7783] hub 9-0:1.0: USB hub found
[   99.195228][ T7783] hub 9-0:1.0: 8 ports detected
[   99.195453][ T7785] netlink: 'syz.4.1427': attribute type 21 has an invalid length.
[   99.253583][ T7785] lo speed is unknown, defaulting to 1000
[   99.564364][ T7816] lo speed is unknown, defaulting to 1000
[   99.913980][ T7834] siw: device registration error -23
[  100.014112][ T7848] netlink: 'syz.1.1445': attribute type 21 has an invalid length.
[  100.038139][ T7848] lo speed is unknown, defaulting to 1000
[  100.089284][ T7851] lo speed is unknown, defaulting to 1000
[  100.289238][ T7871] hub 9-0:1.0: USB hub found
[  100.303504][ T7871] hub 9-0:1.0: 8 ports detected
[  100.310273][ T7874] siw: device registration error -23
[  100.562398][ T7906] siw: device registration error -23
[  100.606094][ T7908] lo speed is unknown, defaulting to 1000
[  101.090630][ T7934] siw: device registration error -23
[  101.176574][   T29] audit: type=1326 audit(1750319508.430:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb5fe929 code=0x7ffc0000
[  101.200411][   T29] audit: type=1326 audit(1750319508.430:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb5fe929 code=0x7ffc0000
[  101.225153][   T29] audit: type=1326 audit(1750319508.430:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5beb5fe929 code=0x7ffc0000
[  101.249412][   T29] audit: type=1326 audit(1750319508.430:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb5fe929 code=0x7ffc0000
[  101.274240][   T29] audit: type=1326 audit(1750319508.430:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7945 comm="syz.2.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5beb5fe929 code=0x7ffc0000
[  101.420739][ T7965] hub 9-0:1.0: USB hub found
[  101.425769][ T7965] hub 9-0:1.0: 8 ports detected
[  101.574463][ T7988] lo speed is unknown, defaulting to 1000
[  101.878333][ T8009] netlink: 'syz.2.1506': attribute type 21 has an invalid length.
[  101.900990][ T8009] lo speed is unknown, defaulting to 1000
[  102.172710][ T8022] 9pnet: Could not find request transport: t
[  102.200412][ T8025] __nla_validate_parse: 30 callbacks suppressed
[  102.200433][ T8025] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1512'.
[  102.341260][ T8036] hub 9-0:1.0: USB hub found
[  102.346616][ T8036] hub 9-0:1.0: 8 ports detected
[  102.371031][ T8038] netlink: 'syz.2.1518': attribute type 21 has an invalid length.
[  102.379076][ T8038] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1518'.
[  102.403673][ T8038] lo speed is unknown, defaulting to 1000
[  102.545281][ T8052] 9pnet: Could not find request transport: t
[  102.625866][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'.
[  102.701555][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'.
[  102.770794][ T8091] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1539'.
[  102.809968][ T8094] netlink: 'syz.0.1540': attribute type 21 has an invalid length.
[  102.818173][ T8094] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1540'.
[  102.856378][ T8094] lo speed is unknown, defaulting to 1000
[  103.188746][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'.
[  103.306627][ T8120] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1547'.
[  103.436837][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'.
[  103.508310][ T8132] hub 9-0:1.0: USB hub found
[  103.513963][ T8132] hub 9-0:1.0: 8 ports detected
[  103.591151][ T8137] siw: device registration error -23
[  103.657142][ T8145] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1558'.
[  103.866179][ T8165] lo speed is unknown, defaulting to 1000
[  103.933264][ T8169] netlink: 'syz.4.1566': attribute type 10 has an invalid length.
[  104.595862][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  104.595908][   T29] audit: type=1326 audit(1750319511.629:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.1.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  104.654297][   T29] audit: type=1326 audit(1750319511.629:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.1.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  104.677858][   T29] audit: type=1326 audit(1750319511.629:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.1.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  104.701606][   T29] audit: type=1326 audit(1750319511.629:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.1.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  104.725334][   T29] audit: type=1326 audit(1750319511.629:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8175 comm="syz.1.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  104.771303][ T8189] siw: device registration error -23
[  104.793210][ T8191] siw: device registration error -23
[  104.891824][ T8193] lo speed is unknown, defaulting to 1000
[  105.182894][ T8228] hub 9-0:1.0: USB hub found
[  105.188085][ T8228] hub 9-0:1.0: 8 ports detected
[  105.263368][   T29] audit: type=1326 audit(1750319512.256:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[  105.286969][   T29] audit: type=1326 audit(1750319512.256:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[  105.310446][   T29] audit: type=1326 audit(1750319512.256:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[  105.310784][ T8247] hub 9-0:1.0: USB hub found
[  105.333964][   T29] audit: type=1326 audit(1750319512.256:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8242 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[  105.373152][ T8247] hub 9-0:1.0: 8 ports detected
[  105.470391][ T8253] lo speed is unknown, defaulting to 1000
[  105.599019][ T8257] siw: device registration error -23
[  105.795172][ T8273] netlink: 'syz.4.1609': attribute type 21 has an invalid length.
[  105.806122][   T29] audit: type=1326 audit(1750319512.761:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8274 comm="syz.0.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b65be929 code=0x7ffc0000
[  105.870432][ T8273] lo speed is unknown, defaulting to 1000
[  106.049953][ T8288] lo speed is unknown, defaulting to 1000
[  106.142284][ T8295] netlink: 'syz.3.1614': attribute type 21 has an invalid length.
[  106.170040][ T8295] lo speed is unknown, defaulting to 1000
[  106.271359][ T8306] siw: device registration error -23
[  106.498837][ T8327] netlink: 'syz.0.1623': attribute type 21 has an invalid length.
[  106.520727][ T8327] lo speed is unknown, defaulting to 1000
[  106.937255][ T8362] siw: device registration error -23
[  107.016670][ T8370] netlink: 'syz.3.1636': attribute type 21 has an invalid length.
[  107.046515][ T8370] lo speed is unknown, defaulting to 1000
[  107.388736][ T8408] sd 0:0:1:0: device reset
[  107.465739][ T8426] hub 9-0:1.0: USB hub found
[  107.470633][ T8426] hub 9-0:1.0: 8 ports detected
[  107.549561][ T8438] netlink: 'syz.4.1656': attribute type 21 has an invalid length.
[  107.557513][ T8438] __nla_validate_parse: 23 callbacks suppressed
[  107.557530][ T8438] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1656'.
[  107.587868][ T8438] lo speed is unknown, defaulting to 1000
[  107.633805][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'.
[  107.687816][ T8452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1659'.
[  107.723573][ T8454] lo speed is unknown, defaulting to 1000
[  107.859250][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'.
[  107.987053][ T8479] netlink: 'syz.3.1670': attribute type 10 has an invalid length.
[  107.995411][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1670'.
[  108.048522][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'.
[  108.071246][ T8488] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1672'.
[  108.168228][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1677'.
[  108.197444][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'.
[  108.378797][ T8520] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1685'.
[  108.574866][ T8539] siw: device registration error -23
[  108.791754][ T8557] netlink: 'syz.2.1696': attribute type 21 has an invalid length.
[  108.816509][ T8557] lo speed is unknown, defaulting to 1000
[  108.901257][ T8568] hub 9-0:1.0: USB hub found
[  108.906160][ T8568] hub 9-0:1.0: 8 ports detected
[  109.069531][ T8589] netlink: 'syz.4.1705': attribute type 21 has an invalid length.
[  109.108632][ T8589] lo speed is unknown, defaulting to 1000
[  109.234649][ T8607] lo speed is unknown, defaulting to 1000
[  109.369292][ T8616] siw: device registration error -23
[  109.377709][ T8618] netlink: 'syz.3.1715': attribute type 21 has an invalid length.
[  109.403529][ T8618] lo speed is unknown, defaulting to 1000
[  109.510893][ T8635] netlink: 'syz.2.1720': attribute type 21 has an invalid length.
[  109.544712][ T8635] lo speed is unknown, defaulting to 1000
[  109.741716][ T8650] netlink: 'syz.0.1722': attribute type 21 has an invalid length.
[  109.762928][ T8650] lo speed is unknown, defaulting to 1000
[  109.926366][ T8662] siw: device registration error -23
[  109.943522][ T8664] netlink: 'syz.3.1726': attribute type 10 has an invalid length.
[  110.117768][ T8673] lo speed is unknown, defaulting to 1000
[  110.278795][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  110.278852][   T29] audit: type=1326 audit(1750319516.952:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  110.289131][ T8692] netlink: 'syz.4.1735': attribute type 21 has an invalid length.
[  110.308417][   T29] audit: type=1326 audit(1750319516.952:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  110.318746][   T29] audit: type=1326 audit(1750319516.980:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf8751d290 code=0x7ffc0000
[  110.364209][   T29] audit: type=1326 audit(1750319516.980:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  110.387919][   T29] audit: type=1326 audit(1750319516.980:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8751e929 code=0x7ffc0000
[  110.413376][ T8692] lo speed is unknown, defaulting to 1000
[  110.421008][ T8690] FAULT_INJECTION: forcing a failure.
[  110.421008][ T8690] name failslab, interval 1, probability 0, space 0, times 0
[  110.422178][   T29] audit: type=1326 audit(1750319517.083:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf8751d290 code=0x7ffc0000
[  110.433875][ T8690] CPU: 1 UID: 0 PID: 8690 Comm: syz.1.1734 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  110.433929][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  110.433948][ T8690] Call Trace:
[  110.434072][ T8690]  <TASK>
[  110.434086][ T8690]  __dump_stack+0x1d/0x30
[  110.434149][ T8690]  dump_stack_lvl+0xe8/0x140
[  110.434178][ T8690]  dump_stack+0x15/0x1b
[  110.434203][ T8690]  should_fail_ex+0x265/0x280
[  110.434288][ T8690]  should_failslab+0x8c/0xb0
[  110.434324][ T8690]  kmem_cache_alloc_noprof+0x50/0x310
[  110.434364][ T8690]  ? audit_log_start+0x365/0x6c0
[  110.434412][ T8690]  audit_log_start+0x365/0x6c0
[  110.434541][ T8690]  audit_seccomp+0x48/0x100
[  110.434580][ T8690]  ? __seccomp_filter+0x68c/0x10d0
[  110.434623][ T8690]  __seccomp_filter+0x69d/0x10d0
[  110.434663][ T8690]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  110.434733][ T8690]  ? vfs_write+0x75e/0x8e0
[  110.434826][ T8690]  ? __rcu_read_unlock+0x4f/0x70
[  110.434859][ T8690]  ? __fget_files+0x184/0x1c0
[  110.434892][ T8690]  __secure_computing+0x82/0x150
[  110.434929][ T8690]  syscall_trace_enter+0xcf/0x1e0
[  110.434966][ T8690]  do_syscall_64+0xac/0x200
[  110.434992][ T8690]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  110.435057][ T8690]  ? clear_bhb_loop+0x40/0x90
[  110.435089][ T8690]  ? clear_bhb_loop+0x40/0x90
[  110.435120][ T8690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.435151][ T8690] RIP: 0033:0x7faf8751e929
[  110.435174][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.435264][ T8690] RSP: 002b:00007faf85b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  110.435293][ T8690] RAX: ffffffffffffffda RBX: 00007faf87745fa0 RCX: 00007faf8751e929
[  110.435312][ T8690] RDX: 0000200000000080 RSI: 0000000000002284 RDI: 0000000000000003
[  110.435330][ T8690] RBP: 00007faf85b87090 R08: 0000000000000000 R09: 0000000000000000
[  110.435348][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.435366][ T8690] R13: 0000000000000000 R14: 00007faf87745fa0 R15: 00007ffe643042a8
[  110.435449][ T8690]  </TASK>
[  110.435461][ T8690] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[  110.457467][   T29] audit: type=1326 audit(1750319517.083:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8689 comm="syz.1.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf8751d3df code=0x7ffc0000
[  110.470097][ T8690] audit: out of memory in audit_log_start
[  110.574856][   T29] audit: type=1400 audit(1750319517.224:2199): avc:  denied  { block_suspend } for  pid=8697 comm="syz.0.1737" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  110.589842][ T8690] sd 0:0:1:0: device reset
[  110.771279][ T8710] siw: device registration error -23
[  110.868563][ T8715] siw: device registration error -23
[  111.040146][ T8734] hub 9-0:1.0: USB hub found
[  111.045734][ T8734] hub 9-0:1.0: 8 ports detected
[  111.052463][ T8738] netlink: 'syz.4.1751': attribute type 21 has an invalid length.
[  111.094106][ T8738] lo speed is unknown, defaulting to 1000
[  111.171706][ T8753] FAULT_INJECTION: forcing a failure.
[  111.171706][ T8753] name failslab, interval 1, probability 0, space 0, times 0
[  111.184437][ T8753] CPU: 1 UID: 0 PID: 8753 Comm: syz.3.1756 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  111.184492][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  111.184514][ T8753] Call Trace:
[  111.184522][ T8753]  <TASK>
[  111.184537][ T8753]  __dump_stack+0x1d/0x30
[  111.184565][ T8753]  dump_stack_lvl+0xe8/0x140
[  111.184591][ T8753]  dump_stack+0x15/0x1b
[  111.184613][ T8753]  should_fail_ex+0x265/0x280
[  111.184682][ T8753]  should_failslab+0x8c/0xb0
[  111.184713][ T8753]  kmem_cache_alloc_noprof+0x50/0x310
[  111.184748][ T8753]  ? __se_sys_mbind+0x3d7/0xac0
[  111.184786][ T8753]  __se_sys_mbind+0x3d7/0xac0
[  111.184832][ T8753]  __x64_sys_mbind+0x78/0x90
[  111.184885][ T8753]  x64_sys_call+0x14af/0x2fb0
[  111.184913][ T8753]  do_syscall_64+0xd2/0x200
[  111.185004][ T8753]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  111.185076][ T8753]  ? clear_bhb_loop+0x40/0x90
[  111.185145][ T8753]  ? clear_bhb_loop+0x40/0x90
[  111.185173][ T8753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.185198][ T8753] RIP: 0033:0x7fac31d2e929
[  111.185213][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.185234][ T8753] RSP: 002b:00007fac30397038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  111.185337][ T8753] RAX: ffffffffffffffda RBX: 00007fac31f55fa0 RCX: 00007fac31d2e929
[  111.185391][ T8753] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000200000000000
[  111.185407][ T8753] RBP: 00007fac30397090 R08: 0000000000000000 R09: 0000000000000002
[  111.185423][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.185435][ T8753] R13: 0000000000000000 R14: 00007fac31f55fa0 R15: 00007fffa685a688
[  111.185458][ T8753]  </TASK>
[  111.462260][ T8769] siw: device registration error -23
[  111.561264][ T8777] hub 9-0:1.0: USB hub found
[  111.566213][ T8777] hub 9-0:1.0: 8 ports detected
[  111.757345][ T8796] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  111.768478][ T8789] IPVS: stopping master sync thread 8796 ...
[  111.775228][ T8795] netlink: 'syz.2.1770': attribute type 10 has an invalid length.
[  111.929051][ T8801] lo speed is unknown, defaulting to 1000
[  112.032239][ T8809] lo speed is unknown, defaulting to 1000
[  112.055647][ T8811] lo speed is unknown, defaulting to 1000
[  112.162726][ T8830] siw: device registration error -23
[  112.466281][ T8850] hsr0: entered promiscuous mode
[  112.616035][ T8856] lo speed is unknown, defaulting to 1000
[  112.730659][ T8865] lo speed is unknown, defaulting to 1000
[  112.736888][ T8870] siw: device registration error -23
[  112.905036][ T8877] lo speed is unknown, defaulting to 1000
[  112.988604][ T8879] __nla_validate_parse: 34 callbacks suppressed
[  112.988625][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'.
[  113.019650][ T8899] siw: device registration error -23
[  113.058998][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'.
[  113.075425][ T8903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1802'.
[  113.075465][ T8905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8905 comm=syz.2.1801
[  113.146598][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'.
[  113.185106][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'.
[  113.199061][ T8921] syz.1.1807 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  113.268125][ T8927] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1809'.
[  113.296373][ T8927] lo speed is unknown, defaulting to 1000
[  113.494269][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'.
[  113.570231][ T8936] siw: device registration error -23
[  113.730215][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'.
[  113.892389][ T8954] validate_nla: 8 callbacks suppressed
[  113.892408][ T8954] netlink: 'syz.0.1817': attribute type 10 has an invalid length.
[  113.906267][ T8954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1817'.
[  113.915934][ T8960] FAULT_INJECTION: forcing a failure.
[  113.915934][ T8960] name failslab, interval 1, probability 0, space 0, times 0
[  113.929207][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.3.1820 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  113.929246][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  113.929262][ T8960] Call Trace:
[  113.929272][ T8960]  <TASK>
[  113.929283][ T8960]  __dump_stack+0x1d/0x30
[  113.929310][ T8960]  dump_stack_lvl+0xe8/0x140
[  113.929337][ T8960]  dump_stack+0x15/0x1b
[  113.929357][ T8960]  should_fail_ex+0x265/0x280
[  113.929395][ T8960]  should_failslab+0x8c/0xb0
[  113.929437][ T8960]  kmem_cache_alloc_noprof+0x50/0x310
[  113.929488][ T8960]  ? mas_alloc_nodes+0x265/0x520
[  113.929512][ T8960]  mas_alloc_nodes+0x265/0x520
[  113.929537][ T8960]  mas_preallocate+0x32b/0x510
[  113.929580][ T8960]  __split_vma+0x240/0x650
[  113.929616][ T8960]  vma_modify+0x3f2/0xc80
[  113.929646][ T8960]  vma_modify_flags+0x101/0x130
[  113.929680][ T8960]  mlock_fixup+0x11d/0x210
[  113.929715][ T8960]  apply_vma_lock_flags+0x193/0x250
[  113.929753][ T8960]  do_mlock+0x3c6/0x520
[  113.929786][ T8960]  ? __bpf_trace_sys_enter+0x10/0x30
[  113.929812][ T8960]  ? trace_sys_enter+0xd0/0x110
[  113.929839][ T8960]  __x64_sys_mlock2+0x71/0x90
[  113.929869][ T8960]  x64_sys_call+0x277e/0x2fb0
[  113.929895][ T8960]  do_syscall_64+0xd2/0x200
[  113.929915][ T8960]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  113.929982][ T8960]  ? clear_bhb_loop+0x40/0x90
[  113.930007][ T8960]  ? clear_bhb_loop+0x40/0x90
[  113.930033][ T8960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.930057][ T8960] RIP: 0033:0x7fac31d2e929
[  113.930076][ T8960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.930097][ T8960] RSP: 002b:00007fac30397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145
[  113.930120][ T8960] RAX: ffffffffffffffda RBX: 00007fac31f55fa0 RCX: 00007fac31d2e929
[  113.930135][ T8960] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000004000
[  113.930150][ T8960] RBP: 00007fac30397090 R08: 0000000000000000 R09: 0000000000000000
[  113.930165][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.930180][ T8960] R13: 0000000000000000 R14: 00007fac31f55fa0 R15: 00007fffa685a688
[  113.930203][ T8960]  </TASK>
[  114.186768][ T8965] netlink: 'syz.3.1821': attribute type 21 has an invalid length.
[  114.194789][ T8965] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1821'.
[  114.218976][ T8965] lo speed is unknown, defaulting to 1000
[  114.911932][ T9007] netlink: 'syz.2.1833': attribute type 10 has an invalid length.
[  114.928707][ T9009] Falling back ldisc for ttyS3.
[  115.056822][ T9024] netlink: 'syz.1.1839': attribute type 21 has an invalid length.
[  115.090549][ T9024] lo speed is unknown, defaulting to 1000
[  115.644728][ T9045] netlink: 'syz.0.1845': attribute type 21 has an invalid length.
[  115.666639][ T9045] lo speed is unknown, defaulting to 1000
[  115.825188][   T29] kauditd_printk_skb: 109 callbacks suppressed
[  115.825205][   T29] audit: type=1400 audit(1750319522.145:2309): avc:  denied  { read } for  pid=9050 comm="syz.0.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  116.149689][ T9070] mmap: syz.4.1853 (9070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  116.172425][ T9070] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  116.209117][   T29] audit: type=1400 audit(1750319522.491:2310): avc:  denied  { firmware_load } for  pid=9069 comm="syz.4.1853" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  116.282664][ T9080] siw: device registration error -23
[  116.296229][ T9081] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  116.308143][ T9083] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  116.319228][ T9081] IPVS: stopping master sync thread 9083 ...
[  116.346165][ T9085] hub 9-0:1.0: USB hub found
[  116.359771][ T9085] hub 9-0:1.0: 8 ports detected
[  116.408461][ T9093] siw: device registration error -23
[  116.440095][ T9090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9090 comm=syz.0.1861
[  116.452778][ T9090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9090 comm=syz.0.1861
[  116.508501][   T29] audit: type=1400 audit(1750319522.771:2311): avc:  denied  { getopt } for  pid=9089 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  116.528475][   T29] audit: type=1400 audit(1750319522.771:2312): avc:  denied  { getopt } for  pid=9089 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  116.767662][   T29] audit: type=1400 audit(1750319523.024:2313): avc:  denied  { sqpoll } for  pid=9120 comm="syz.2.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  116.839257][ T9127] hub 9-0:1.0: USB hub found
[  116.845190][ T9127] hub 9-0:1.0: 8 ports detected
[  117.035767][ T9136] netlink: 'syz.1.1877': attribute type 21 has an invalid length.
[  117.080433][ T9144] siw: device registration error -23
[  117.089827][ T9136] lo speed is unknown, defaulting to 1000
[  117.349999][   T29] audit: type=1400 audit(1750319523.567:2314): avc:  denied  { create } for  pid=9163 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  117.397354][   T29] audit: type=1400 audit(1750319523.585:2315): avc:  denied  { setopt } for  pid=9163 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  117.472649][ T9179] FAULT_INJECTION: forcing a failure.
[  117.472649][ T9179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.485870][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.1.1887 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  117.485906][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.485922][ T9179] Call Trace:
[  117.485931][ T9179]  <TASK>
[  117.485940][ T9179]  __dump_stack+0x1d/0x30
[  117.485967][ T9179]  dump_stack_lvl+0xe8/0x140
[  117.485991][ T9179]  dump_stack+0x15/0x1b
[  117.486028][ T9179]  should_fail_ex+0x265/0x280
[  117.486068][ T9179]  should_fail+0xb/0x20
[  117.486104][ T9179]  should_fail_usercopy+0x1a/0x20
[  117.486160][ T9179]  _copy_from_iter+0xcf/0xe40
[  117.486182][ T9179]  ? __build_skb_around+0x1a0/0x200
[  117.486281][ T9179]  ? __alloc_skb+0x223/0x320
[  117.486320][ T9179]  netlink_sendmsg+0x471/0x6b0
[  117.486388][ T9179]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.486412][ T9179]  __sock_sendmsg+0x145/0x180
[  117.486437][ T9179]  ____sys_sendmsg+0x31e/0x4e0
[  117.486473][ T9179]  ___sys_sendmsg+0x17b/0x1d0
[  117.486605][ T9179]  __x64_sys_sendmsg+0xd4/0x160
[  117.486652][ T9179]  x64_sys_call+0x2999/0x2fb0
[  117.486680][ T9179]  do_syscall_64+0xd2/0x200
[  117.486703][ T9179]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  117.486786][ T9179]  ? clear_bhb_loop+0x40/0x90
[  117.486809][ T9179]  ? clear_bhb_loop+0x40/0x90
[  117.486838][ T9179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.486930][ T9179] RIP: 0033:0x7faf8751e929
[  117.486951][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.486975][ T9179] RSP: 002b:00007faf85b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.487000][ T9179] RAX: ffffffffffffffda RBX: 00007faf87745fa0 RCX: 00007faf8751e929
[  117.487016][ T9179] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  117.487032][ T9179] RBP: 00007faf85b87090 R08: 0000000000000000 R09: 0000000000000000
[  117.487044][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.487057][ T9179] R13: 0000000000000000 R14: 00007faf87745fa0 R15: 00007ffe643042a8
[  117.487144][ T9179]  </TASK>
[  117.992511][ T9189] netlink: 'syz.3.1891': attribute type 10 has an invalid length.
[  118.318483][ T9200] FAULT_INJECTION: forcing a failure.
[  118.318483][ T9200] name failslab, interval 1, probability 0, space 0, times 0
[  118.331471][ T9200] CPU: 1 UID: 0 PID: 9200 Comm: syz.4.1893 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  118.331557][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  118.331573][ T9200] Call Trace:
[  118.331582][ T9200]  <TASK>
[  118.331593][ T9200]  __dump_stack+0x1d/0x30
[  118.331620][ T9200]  dump_stack_lvl+0xe8/0x140
[  118.331647][ T9200]  dump_stack+0x15/0x1b
[  118.331667][ T9200]  should_fail_ex+0x265/0x280
[  118.331773][ T9200]  should_failslab+0x8c/0xb0
[  118.331805][ T9200]  __kmalloc_noprof+0xa5/0x3e0
[  118.331838][ T9200]  ? copy_splice_read+0xc2/0x5f0
[  118.331880][ T9200]  copy_splice_read+0xc2/0x5f0
[  118.331921][ T9200]  ? __pfx_shmem_file_splice_read+0x10/0x10
[  118.331944][ T9200]  splice_direct_to_actor+0x290/0x680
[  118.331982][ T9200]  ? __pfx_direct_splice_actor+0x10/0x10
[  118.332100][ T9200]  do_splice_direct+0xda/0x150
[  118.332134][ T9200]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  118.332251][ T9200]  do_sendfile+0x380/0x650
[  118.332288][ T9200]  __x64_sys_sendfile64+0x105/0x150
[  118.332361][ T9200]  x64_sys_call+0xb39/0x2fb0
[  118.332389][ T9200]  do_syscall_64+0xd2/0x200
[  118.332472][ T9200]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  118.332532][ T9200]  ? clear_bhb_loop+0x40/0x90
[  118.332563][ T9200]  ? clear_bhb_loop+0x40/0x90
[  118.332585][ T9200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.332610][ T9200] RIP: 0033:0x7f35c43ee929
[  118.332626][ T9200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.332644][ T9200] RSP: 002b:00007f35c2a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  118.332686][ T9200] RAX: ffffffffffffffda RBX: 00007f35c4616080 RCX: 00007f35c43ee929
[  118.332698][ T9200] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[  118.332712][ T9200] RBP: 00007f35c2a36090 R08: 0000000000000000 R09: 0000000000000000
[  118.332729][ T9200] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001
[  118.332754][ T9200] R13: 0000000000000000 R14: 00007f35c4616080 R15: 00007ffdabfc6358
[  118.332775][ T9200]  </TASK>
[  118.584092][ T9202] netlink: 'syz.0.1894': attribute type 21 has an invalid length.
[  118.592551][ T9202] __nla_validate_parse: 20 callbacks suppressed
[  118.592568][ T9202] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1894'.
[  118.639066][ T9202] lo speed is unknown, defaulting to 1000
[  118.647055][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1895'.
[  118.741061][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'.
[  118.900710][ T9226] netlink: 'syz.3.1904': attribute type 21 has an invalid length.
[  118.908842][ T9226] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1904'.
[  118.945981][ T9226] lo speed is unknown, defaulting to 1000
[  118.973207][ T9230] netlink: 'syz.0.1907': attribute type 21 has an invalid length.
[  118.981415][ T9230] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1907'.
[  119.010259][ T9230] lo speed is unknown, defaulting to 1000
[  119.042995][ T9237] hub 9-0:1.0: USB hub found
[  119.048626][ T9237] hub 9-0:1.0: 8 ports detected
[  119.141564][ T9248] FAULT_INJECTION: forcing a failure.
[  119.141564][ T9248] name failslab, interval 1, probability 0, space 0, times 0
[  119.155911][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.2.1910 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  119.155945][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.155958][ T9248] Call Trace:
[  119.155965][ T9248]  <TASK>
[  119.155973][ T9248]  __dump_stack+0x1d/0x30
[  119.156001][ T9248]  dump_stack_lvl+0xe8/0x140
[  119.156073][ T9248]  dump_stack+0x15/0x1b
[  119.156094][ T9248]  should_fail_ex+0x265/0x280
[  119.156135][ T9248]  should_failslab+0x8c/0xb0
[  119.156209][ T9248]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  119.156244][ T9248]  ? proc_alloc_inode+0x34/0x90
[  119.156274][ T9248]  ? __pfx_proc_alloc_inode+0x10/0x10
[  119.156303][ T9248]  proc_alloc_inode+0x34/0x90
[  119.156340][ T9248]  alloc_inode+0x40/0x170
[  119.156439][ T9248]  new_inode+0x1d/0xe0
[  119.156465][ T9248]  proc_get_inode+0x21/0x370
[  119.156493][ T9248]  proc_lookup_de+0x19e/0x220
[  119.156524][ T9248]  proc_tgid_net_lookup+0x43/0xd0
[  119.156552][ T9248]  ? __pfx_proc_tgid_net_lookup+0x10/0x10
[  119.156587][ T9248]  path_openat+0xcf0/0x2170
[  119.156628][ T9248]  do_filp_open+0x109/0x230
[  119.156679][ T9248]  ? __pfx_kfree_link+0x10/0x10
[  119.156793][ T9248]  do_sys_openat2+0xa6/0x110
[  119.156896][ T9248]  __x64_sys_openat+0xf2/0x120
[  119.156933][ T9248]  x64_sys_call+0x1af/0x2fb0
[  119.156961][ T9248]  do_syscall_64+0xd2/0x200
[  119.157002][ T9248]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  119.157168][ T9248]  ? clear_bhb_loop+0x40/0x90
[  119.157188][ T9248]  ? clear_bhb_loop+0x40/0x90
[  119.157214][ T9248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.157242][ T9248] RIP: 0033:0x7f5beb5fd290
[  119.157262][ T9248] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  119.157360][ T9248] RSP: 002b:00007f5be9c66f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  119.157383][ T9248] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5beb5fd290
[  119.157396][ T9248] RDX: 0000000000000002 RSI: 00007f5be9c66fa0 RDI: 00000000ffffff9c
[  119.157409][ T9248] RBP: 00007f5be9c66fa0 R08: 0000000000000000 R09: 0000000000000000
[  119.157493][ T9248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  119.157508][ T9248] R13: 0000000000000001 R14: 00007f5beb825fa0 R15: 00007ffd9415a248
[  119.157533][ T9248]  </TASK>
[  119.449471][   T29] audit: type=1400 audit(1750319525.531:2316): avc:  denied  { getopt } for  pid=9247 comm="syz.2.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  119.518999][   T29] audit: type=1400 audit(1750319525.597:2317): avc:  denied  { name_bind } for  pid=9255 comm="syz.4.1912" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  119.578410][ T9260] netlink: 'syz.0.1914': attribute type 10 has an invalid length.
[  119.586508][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1914'.
[  119.606044][   T29] audit: type=1326 audit(1750319525.671:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.4.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  119.643352][ T9263] FAULT_INJECTION: forcing a failure.
[  119.643352][ T9263] name failslab, interval 1, probability 0, space 0, times 0
[  119.656461][ T9263] CPU: 1 UID: 0 PID: 9263 Comm: syz.3.1915 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  119.656587][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.656604][ T9263] Call Trace:
[  119.656613][ T9263]  <TASK>
[  119.656623][ T9263]  __dump_stack+0x1d/0x30
[  119.656651][ T9263]  dump_stack_lvl+0xe8/0x140
[  119.656723][ T9263]  dump_stack+0x15/0x1b
[  119.656745][ T9263]  should_fail_ex+0x265/0x280
[  119.656787][ T9263]  should_failslab+0x8c/0xb0
[  119.656885][ T9263]  kmem_cache_alloc_noprof+0x50/0x310
[  119.657009][ T9263]  ? skb_clone+0x151/0x1f0
[  119.657036][ T9263]  skb_clone+0x151/0x1f0
[  119.657061][ T9263]  __netlink_deliver_tap+0x2c9/0x500
[  119.657110][ T9263]  netlink_unicast+0x64c/0x670
[  119.657155][ T9263]  netlink_sendmsg+0x58b/0x6b0
[  119.657251][ T9263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.657277][ T9263]  __sock_sendmsg+0x145/0x180
[  119.657319][ T9263]  ____sys_sendmsg+0x31e/0x4e0
[  119.657398][ T9263]  ___sys_sendmsg+0x17b/0x1d0
[  119.657454][ T9263]  __x64_sys_sendmsg+0xd4/0x160
[  119.657496][ T9263]  x64_sys_call+0x2999/0x2fb0
[  119.657580][ T9263]  do_syscall_64+0xd2/0x200
[  119.657605][ T9263]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  119.657689][ T9263]  ? clear_bhb_loop+0x40/0x90
[  119.657718][ T9263]  ? clear_bhb_loop+0x40/0x90
[  119.657744][ T9263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.657766][ T9263] RIP: 0033:0x7fac31d2e929
[  119.657791][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.657814][ T9263] RSP: 002b:00007fac30397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.657842][ T9263] RAX: ffffffffffffffda RBX: 00007fac31f55fa0 RCX: 00007fac31d2e929
[  119.657858][ T9263] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004
[  119.657875][ T9263] RBP: 00007fac30397090 R08: 0000000000000000 R09: 0000000000000000
[  119.657955][ T9263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.657970][ T9263] R13: 0000000000000000 R14: 00007fac31f55fa0 R15: 00007fffa685a688
[  119.657995][ T9263]  </TASK>
[  119.917736][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'.
[  120.051440][ T9279] netlink: 'syz.2.1921': attribute type 21 has an invalid length.
[  120.059509][ T9279] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1921'.
[  120.092394][ T9279] lo speed is unknown, defaulting to 1000
[  120.271812][ T9295] FAULT_INJECTION: forcing a failure.
[  120.271812][ T9295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.285306][ T9295] CPU: 0 UID: 0 PID: 9295 Comm: syz.1.1926 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  120.285345][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  120.285358][ T9295] Call Trace:
[  120.285366][ T9295]  <TASK>
[  120.285376][ T9295]  __dump_stack+0x1d/0x30
[  120.285401][ T9295]  dump_stack_lvl+0xe8/0x140
[  120.285427][ T9295]  dump_stack+0x15/0x1b
[  120.285449][ T9295]  should_fail_ex+0x265/0x280
[  120.285560][ T9295]  should_fail+0xb/0x20
[  120.285588][ T9295]  should_fail_usercopy+0x1a/0x20
[  120.285627][ T9295]  _copy_to_user+0x20/0xa0
[  120.285649][ T9295]  simple_read_from_buffer+0xb5/0x130
[  120.285767][ T9295]  proc_fail_nth_read+0x100/0x140
[  120.285792][ T9295]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  120.285911][ T9295]  vfs_read+0x1a0/0x6f0
[  120.285986][ T9295]  ? __rcu_read_unlock+0x4f/0x70
[  120.286081][ T9295]  ? __rcu_read_unlock+0x4f/0x70
[  120.286109][ T9295]  ? __fget_files+0x184/0x1c0
[  120.286139][ T9295]  ksys_read+0xda/0x1a0
[  120.286172][ T9295]  __x64_sys_read+0x40/0x50
[  120.286262][ T9295]  x64_sys_call+0x2d77/0x2fb0
[  120.286289][ T9295]  do_syscall_64+0xd2/0x200
[  120.286312][ T9295]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  120.286393][ T9295]  ? clear_bhb_loop+0x40/0x90
[  120.286417][ T9295]  ? clear_bhb_loop+0x40/0x90
[  120.286439][ T9295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.286548][ T9295] RIP: 0033:0x7faf8751d33c
[  120.286565][ T9295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  120.286583][ T9295] RSP: 002b:00007faf85b87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  120.286603][ T9295] RAX: ffffffffffffffda RBX: 00007faf87745fa0 RCX: 00007faf8751d33c
[  120.286699][ T9295] RDX: 000000000000000f RSI: 00007faf85b870a0 RDI: 0000000000000005
[  120.286715][ T9295] RBP: 00007faf85b87090 R08: 0000000000000000 R09: 0000000000000000
[  120.286728][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.286740][ T9295] R13: 0000000000000000 R14: 00007faf87745fa0 R15: 00007ffe643042a8
[  120.286766][ T9295]  </TASK>
[  120.517906][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'.
[  120.561067][ T9306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9306 comm=syz.1.1931
[  120.573966][ T9306] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9306 comm=syz.1.1931
[  120.587363][ T9311] siw: device registration error -23
[  120.691880][ T9319] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1934'.
[  120.812766][ T9333] netlink: 'syz.1.1942': attribute type 10 has an invalid length.
[  120.910246][ T9343] siw: device registration error -23
[  120.938482][ T9345] netlink: 'syz.4.1946': attribute type 21 has an invalid length.
[  120.961288][ T9345] lo speed is unknown, defaulting to 1000
[  121.116750][ T9356] smc: net device bond0 applied user defined pnetid SYZ0
[  121.124520][ T9356] smc: net device bond0 erased user defined pnetid SYZ0
[  121.211185][   T29] kauditd_printk_skb: 15 callbacks suppressed
[  121.211204][   T29] audit: type=1326 audit(1750319527.168:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.242666][   T29] audit: type=1326 audit(1750319527.168:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.268986][   T29] audit: type=1326 audit(1750319527.168:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.295201][   T29] audit: type=1326 audit(1750319527.168:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.319103][   T29] audit: type=1326 audit(1750319527.168:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.343403][   T29] audit: type=1326 audit(1750319527.168:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.367252][   T29] audit: type=1326 audit(1750319527.168:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.390791][   T29] audit: type=1326 audit(1750319527.168:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.414397][   T29] audit: type=1326 audit(1750319527.168:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.437865][   T29] audit: type=1326 audit(1750319527.168:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9359 comm="syz.4.1950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c43ee929 code=0x7ffc0000
[  121.496389][ T9367] siw: device registration error -23
[  121.609447][ T9379] siw: device registration error -23
[  122.065629][ T9422] netlink: 'syz.0.1971': attribute type 10 has an invalid length.
[  122.183840][ T9429] FAULT_INJECTION: forcing a failure.
[  122.183840][ T9429] name failslab, interval 1, probability 0, space 0, times 0
[  122.196848][ T9429] CPU: 0 UID: 0 PID: 9429 Comm: syz.2.1974 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  122.196875][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  122.196887][ T9429] Call Trace:
[  122.196892][ T9429]  <TASK>
[  122.196899][ T9429]  __dump_stack+0x1d/0x30
[  122.197027][ T9429]  dump_stack_lvl+0xe8/0x140
[  122.197114][ T9429]  dump_stack+0x15/0x1b
[  122.197146][ T9429]  should_fail_ex+0x265/0x280
[  122.197185][ T9429]  should_failslab+0x8c/0xb0
[  122.197217][ T9429]  kmem_cache_alloc_noprof+0x50/0x310
[  122.197307][ T9429]  ? getname_flags+0x80/0x3b0
[  122.197334][ T9429]  getname_flags+0x80/0x3b0
[  122.197355][ T9429]  user_path_at+0x28/0x130
[  122.197451][ T9429]  __se_sys_mount+0x25b/0x2e0
[  122.197468][ T9429]  ? fput+0x8f/0xc0
[  122.197535][ T9429]  __x64_sys_mount+0x67/0x80
[  122.197552][ T9429]  x64_sys_call+0xd36/0x2fb0
[  122.197571][ T9429]  do_syscall_64+0xd2/0x200
[  122.197588][ T9429]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  122.197613][ T9429]  ? clear_bhb_loop+0x40/0x90
[  122.197707][ T9429]  ? clear_bhb_loop+0x40/0x90
[  122.197799][ T9429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.197824][ T9429] RIP: 0033:0x7f5beb5fe929
[  122.197838][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.197855][ T9429] RSP: 002b:00007f5be9c67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  122.197873][ T9429] RAX: ffffffffffffffda RBX: 00007f5beb825fa0 RCX: 00007f5beb5fe929
[  122.197884][ T9429] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000
[  122.197959][ T9429] RBP: 00007f5be9c67090 R08: 0000200000000a40 R09: 0000000000000000
[  122.198047][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.198077][ T9429] R13: 0000000000000000 R14: 00007f5beb825fa0 R15: 00007ffd9415a248
[  122.198095][ T9429]  </TASK>
[  122.711650][ T9449] block device autoloading is deprecated and will be removed.
[  122.742701][ T9454] netlink: 'syz.4.1984': attribute type 21 has an invalid length.
[  122.765840][ T9454] lo speed is unknown, defaulting to 1000
[  122.816401][ T9454] loop4: detected capacity change from 0 to 512
[  122.825115][ T9454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  122.837423][ T9454] EXT4-fs (loop4): 1 truncate cleaned up
[  122.843617][ T9454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.967400][ T9474] netlink: 'syz.0.1987': attribute type 13 has an invalid length.
[  122.988780][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.056644][ T9474] bridge0: port 3(dummy0) entered disabled state
[  123.063793][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.071833][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.157266][ T9492] loop4: detected capacity change from 0 to 256
[  123.164456][ T9492] FAT-fs (loop4): bogus number of FAT sectors
[  123.170784][ T9492] FAT-fs (loop4): Can't find a valid FAT filesystem
[  123.268941][ T9474] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.278986][ T9474] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.289668][ T9474] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.298987][ T9474] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.324001][ T9474] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.334019][ T9474] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.343320][ T9474] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.352778][ T9474] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.440020][ T9506] netlink: 'syz.4.1991': attribute type 21 has an invalid length.
[  123.463400][ T9506] lo speed is unknown, defaulting to 1000
[  123.520299][ T9511] loop4: detected capacity change from 0 to 512
[  123.528282][ T9511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  123.576525][ T9511] EXT4-fs (loop4): 1 truncate cleaned up
[  123.583659][ T9511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.636249][ T9521] hub 9-0:1.0: USB hub found
[  123.641126][ T9521] hub 9-0:1.0: 8 ports detected
[  123.682464][ T9529] netlink: 'syz.0.1999': attribute type 21 has an invalid length.
[  123.704760][ T9529] lo speed is unknown, defaulting to 1000
[  123.774413][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.082807][ T9549] netlink: 'syz.0.2004': attribute type 21 has an invalid length.
[  124.091056][ T9549] __nla_validate_parse: 22 callbacks suppressed
[  124.091069][ T9549] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2004'.
[  124.121875][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2003'.
[  124.123129][ T9549] lo speed is unknown, defaulting to 1000
[  124.406001][ T9569] hub 9-0:1.0: USB hub found
[  124.410836][ T9569] hub 9-0:1.0: 8 ports detected
[  124.571657][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'.
[  124.921149][ T9579] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2011'.
[  124.943585][ T9579] lo speed is unknown, defaulting to 1000
[  125.114276][ T9588] validate_nla: 1 callbacks suppressed
[  125.114294][ T9588] netlink: 'syz.2.2013': attribute type 21 has an invalid length.
[  125.123724][ T9590] netlink: 'syz.3.2014': attribute type 21 has an invalid length.
[  125.128066][ T9588] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2013'.
[  125.135920][ T9590] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2014'.
[  125.170027][ T9588] lo speed is unknown, defaulting to 1000
[  125.178932][ T9590] lo speed is unknown, defaulting to 1000
[  125.312561][ T9604] netlink: 'syz.0.2015': attribute type 21 has an invalid length.
[  125.320586][ T9604] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2015'.
[  125.353375][ T9604] lo speed is unknown, defaulting to 1000
[  125.401979][ T9606] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2016'.
[  125.452729][ T9612] loop4: detected capacity change from 0 to 512
[  125.472281][ T9612] =======================================================
[  125.472281][ T9612] WARNING: The mand mount option has been deprecated and
[  125.472281][ T9612]          and is ignored by this kernel. Remove the mand
[  125.472281][ T9612]          option from the mount to silence this warning.
[  125.472281][ T9612] =======================================================
[  125.527538][ T9617] ==================================================================
[  125.527588][ T9617] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read
[  125.527766][ T9617] 
[  125.527775][ T9617] write to 0xffff88812d8ed228 of 8 bytes by task 9616 on cpu 0:
[  125.527797][ T9617]  filemap_splice_read+0x47e/0x6b0
[  125.527841][ T9617]  splice_direct_to_actor+0x26c/0x680
[  125.527881][ T9617]  do_splice_direct+0xda/0x150
[  125.527918][ T9617]  do_sendfile+0x380/0x650
[  125.527947][ T9617]  __x64_sys_sendfile64+0x105/0x150
[  125.527976][ T9617]  x64_sys_call+0xb39/0x2fb0
[  125.528005][ T9617]  do_syscall_64+0xd2/0x200
[  125.528027][ T9617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.528048][ T9617] 
[  125.528054][ T9617] write to 0xffff88812d8ed228 of 8 bytes by task 9617 on cpu 1:
[  125.528072][ T9617]  filemap_splice_read+0x47e/0x6b0
[  125.528107][ T9617]  splice_direct_to_actor+0x26c/0x680
[  125.528139][ T9617]  do_splice_direct+0xda/0x150
[  125.528177][ T9617]  do_sendfile+0x380/0x650
[  125.528205][ T9617]  __x64_sys_sendfile64+0x105/0x150
[  125.528233][ T9617]  x64_sys_call+0xb39/0x2fb0
[  125.528254][ T9617]  do_syscall_64+0xd2/0x200
[  125.528276][ T9617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.528303][ T9617] 
[  125.528307][ T9617] value changed: 0x000000000035b000 -> 0x000000000035c000
[  125.528321][ T9617] 
[  125.528325][ T9617] Reported by Kernel Concurrency Sanitizer on:
[  125.528336][ T9617] CPU: 1 UID: 0 PID: 9617 Comm: syz.2.2020 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(voluntary) 
[  125.528364][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.528377][ T9617] ==================================================================
[  125.609946][ T9612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.610024][ T9612] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.631361][ T9612] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2018: corrupted inode contents
[  125.637236][ T9612] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2018: mark_inode_dirty error
[  125.755851][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'.
[  125.765285][ T9612] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2018: corrupted inode contents
[  125.873030][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.