last executing test programs:

3m27.352855563s ago: executing program 4 (id=2026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b7000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400"], 0xfc}}, 0x0)

3m27.319209104s ago: executing program 4 (id=2029):
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
statx(0xffffffffffffff9c, 0x0, 0x6000, 0x2, 0x0)
write$selinux_validatetrans(r0, &(0x7f0000000000)={'system_u:object_r:policy_src_t:s0', 0x20, 'system_u:object_r:dhcp_state_t:s0', 0x20, 0xff, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x87)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x3f}], 0x1}}], 0x2, 0x40448c0)
shutdown(r2, 0x1)

3m27.123155048s ago: executing program 4 (id=2031):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c038ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000100001d440000000000007a0a00fe00ffffffc303000050000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000012ffc225a64a5ebde6e97004dfb01808ab6d27c58f84e175c0eebc4a99cfface719d1076bd1ba26c4e2faf2bb4a0644c119b89b6a5a182bf56f9d416341272d0ceb0ebb6fdfaaf4df879536f28f2160a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x43)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x1b0840, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYBLOB="ae34b88412934ee97ad09f629853276a0a5c477908b4fc", @ANYRESDEC], 0x2, 0x6a3, &(0x7f0000000c00)="$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")
r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdad, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x5d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x180000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}})
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

3m26.151591256s ago: executing program 4 (id=2034):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50)
syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x10, 0x0, "73d21f95de215edac7111374c9eca98d"})

3m25.737492684s ago: executing program 4 (id=2039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804)

3m25.036234287s ago: executing program 4 (id=2043):
r0 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xfed, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x2840, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfd, 0xc, 0x0, 0x0, 0x3], 0x0, [0x5, 0x4, 0x8, 0x0, 0x8, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x8]}}]}}]}, 0x8c}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4)
openat$incfs(0xffffffffffffffff, 0x0, 0x40, 0x143)
syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a824008100020186dd600000000014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10)
r6 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x4ebf, 0x0, 0x2, 0xd5})
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m24.996659878s ago: executing program 32 (id=2043):
r0 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xfed, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x2840, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfd, 0xc, 0x0, 0x0, 0x3], 0x0, [0x5, 0x4, 0x8, 0x0, 0x8, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x8]}}]}}]}, 0x8c}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4)
openat$incfs(0xffffffffffffffff, 0x0, 0x40, 0x143)
syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a824008100020186dd600000000014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e"], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10)
r6 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x4ebf, 0x0, 0x2, 0xd5})
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.371213925s ago: executing program 3 (id=5008):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
utimes(&(0x7f0000000380)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2503000000000000040008"], 0x14}}, 0x0)

2.366204325s ago: executing program 2 (id=5009):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0xfff, 0x2, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3, 0x3a, '*{', 0x3a, '@', 0x3a, './bus', 0x3a, [0x50, 0x4f, 0x43, 0x4f, 0x43]}, 0x2d)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
close_range(r1, 0xffffffffffffffff, 0x0)

2.282860137s ago: executing program 3 (id=5010):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0}, 0x0, &(0x7f0000000340)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)

2.196101478s ago: executing program 3 (id=5012):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0xfff, 0x2, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3, 0x3a, '*{', 0x3a, '@', 0x3a, './bus', 0x3a, [0x4f, 0x43, 0x4f, 0x43]}, 0x2c)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
close_range(r1, 0xffffffffffffffff, 0x0)

1.643697239s ago: executing program 1 (id=5026):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")
sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa0000000000000000000000000000000004"], 0xa8}}, 0x2)

1.473806492s ago: executing program 0 (id=5031):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x6b, 0x3}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @fwd={0xa}]}, {0x0, [0x30, 0x0, 0x30, 0x5f, 0x5f, 0x5f, 0x30, 0x0]}}, &(0x7f0000000540)=""/155, 0x56, 0x9b, 0x0, 0x401}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000200), &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xd, 0x5}, 0x10, 0x80, 0xffffffffffffffff, 0x1, &(0x7f0000000780)=[r1], &(0x7f00000007c0)=[{0x1, 0x1, 0x5, 0x3}], 0x10, 0x10000}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}])
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61]}}, 0x0, 0x37}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.464674112s ago: executing program 1 (id=5032):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)

1.436854713s ago: executing program 0 (id=5033):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpjquota}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$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")
r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400), &(0x7f0000000040))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0)

1.425273483s ago: executing program 1 (id=5034):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x1, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
mount$nfs4(&(0x7f0000000040)='$%}Z[,[\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x1000000, &(0x7f00000002c0)={[{}, {'.%@\\'}, {'$}+#'}, {'/dev/virtual_nci\x00'}, {'.\'/'}, {}, {'s,}+\xf1*'}, {'\x00'}], [{@permit_directio}, {@obj_type={'obj_type', 0x3d, '/dev/ptmx\x00'}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000800)=ANY=[], 0x9)

1.387422724s ago: executing program 0 (id=5036):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a94}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5)

1.353639325s ago: executing program 1 (id=5037):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0xfff, 0x2, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3, 0x3a, '*{', 0x3a, '@', 0x3a, './bus', 0x3a, [0x50, 0x4f, 0x43, 0x4f, 0x43]}, 0x2d)
write$binfmt_elf64(r5, 0x0, 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
close_range(r1, 0xffffffffffffffff, 0x0)

1.352832515s ago: executing program 2 (id=5039):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e26, 0x8, @local, 0x4}, 0x1c)
getsockopt$inet6_opts(r1, 0x29, 0x1, 0x0, &(0x7f0000000240))
r2 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x9}, 0xf81, 0x1ffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x234c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000300)=""/127, 0x7f, <r4=>0x0, &(0x7f0000000000)=""/92, 0x5c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000013c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x0, 0x2, 0x5, 0x7f2, 0x7ed}, 0x20)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0)
unshare(0x2c040000)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1408009, 0x0)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0xee)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.312769615s ago: executing program 3 (id=5040):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpjquota}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$eJzs3c9rHFUcAPDvbH71lzaFUlREAj1Yqd00iT8qeKhH0WJB73VJpqFk0y3ZTWliwfZgL16kCCIWxLvePRb/Af+KghaKlKAHL5HZzCZps5ts0013634+MOG9mdl9892Z78ubfbtsAH1rLPtTiHg5Ir5JIg5HRJJvG4x849jafisPr09nSxKrq5/+ldT3y+qN52o87mBeeSkifvsq4mRha7vVpeW5UrmcLuT18dr8lfHq0vKpS/Ol2XQ2vTw5NXXm7anJ9959p2OxvnH+n+8/ufvhma+Pr3z3y/0jt5M4G4fybZvjeAo3NlfGYix/TYbi7GM7TnSgsV6SdPsA2JWBPM+HIusDDsdAnvXA/9+XEbEK9KlE/kOfaowDGvf2HboPfm48+GDtBmhr/INr743Evvq90YGV5JE7o+x+d7QD7Wdt/PrnndvZEp17HwJgRzduRsTpwcGt/V+S93+7d7qNfR5vQ/8Hz87dbPzzZrPxT2F9/BNNxj8jTXJ3N3bO/8L9DjTTUjb+e7/p+Hd90mp0IK+9UB/zDSUXL5XTrG97MSJOxNBIVt9uPufMyr3VVts2j/+yJWu/MRbMj+P+4Mijj5kp1UpPE/NmD25GvNJ0/Jusn/+kyfnPXo/zbbZxLL3zWqttO8e/t1Z/ini96fnfmNFKtp+fHK9fD+ONq2Krv28d+71V+63ivzqyB8E2kZ3/A9vHP5psnq+tPnkbP+77N2217ZH4o/3rfzj5rF4eztddK9VqCxMRw8nHW9dPbjy2UW/sn8V/4vj2/d+hJtf//oj4vM34bx39+dW24u/C9Z/FP/NE5//JC/c++uKHVu231/+9VS+dyNe00/+1e4BP89oBAAAAAABArylExKFICsX1cqFQLK59h/doHCiUK9XayYuVxcszUZ8HHY2hQmOm+/Cmz0NM5J+HbdQnH6tPRcSRiPh2YH+9XpyulGe6HTwAAAAAAAAAAAAAAAAAAAD0iIMtvv+f+WOg20cH7Dk/+Q39a8f878QvPQE9yf9/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/If+Jf8BAAAAAAAAAAAAAAAAAAAAAAAAAACgo86fO5ctqysPr09n9ZmrS4tzlaunZtLqXHF+cbo4XVm4UpytVGbLaXG6Mr/T85UrlSsTk7F4bbyWVmvj1aXlC/OVxcu1C5fmS7PphXTomUQFAAAAAAAAAAAAAAAAAAAAz5fq0vJcqVxOFxQUdlUY7I3D6GZhODbWjPbA8XSk0O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BcAAP//k4E29A==")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0xf, 0x3, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000007})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f0000000040)='%pI4   \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0)

1.224783777s ago: executing program 2 (id=5041):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0)
r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0x5)
write$cgroup_subtree(r9, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
syz_usb_connect$cdc_ncm(0x3, 0x73, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010003020000ef2505a1a44000010203010902610002010e40cc0904000001020d00000524060001052400ff030d240f0101000000080004009d06241a7f00120524150900090581031000090c060904010000020d000009040101021d0d000009058202400004390c09050302ff03"], &(0x7f0000001900)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x340, 0x8, 0x2, 0x1c, 0xff, 0x6}, 0x0, 0x0, 0x8, [{0x7, &(0x7f0000001580)=@string={0x7, 0x3, "e142540359"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x402}}, {0x83, &(0x7f0000001680)=@string={0x83, 0x3, "1a75a33cb3d3f9a0254dd9e87666b628b2a62ecf1ad81df26fccd112adfeb254494531ded2a699486d69e6124960214bea718f2e1e8645ef633d90a70010bc796a4fb02d27a320e664afa0465ab56e7388720f9a0eac355b1605c3bdd269e781e276ce4e138e7c17385e648c9d4b8bf0b882d031f9ea879a30fe66d9642ce4047c"}}, {0xf3, &(0x7f0000001740)=@string={0xf3, 0x3, "05651594d5c9efc5e77e85a88ef9329a67b4c66c1b189192c11387cd40d0cbeaa1976c9f7af87f54797373bc22b9e71d3183229ec931e58d0a58d6e302215ca23857ebca25a794ede499ec7b2ce2a3c60d1e08a79b8eb68410b0a3fa9ab5fb056b40302a77f3f1210f891265dbee2227f86385315d104dc0d3b04122f965817686514196506e016e9e32f61c992364c441bd9c8d6bc72b95b14f73e97550b56eaae692c42d93a7216c06ecb68cc282e66b7ba64256e83099263bd439c2bb29cc9e1cb9d14106548a9a19965e229a0fadd612c3eb3959cab6e81d08bef49ec1a8259c80bb4ba062e0efe65330a0961f8a01"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1801}}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r10, &(0x7f00000000c0)=ANY=[], 0x20)
r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)

1.125240029s ago: executing program 3 (id=5042):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4)
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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")
sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa0000000000000000000000000000000004"], 0xa8}}, 0x2)

1.124791749s ago: executing program 3 (id=5043):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r3=>0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001480)={0x2, &(0x7f0000000640)=[{0x6, 0x0, 0x3}, {0x6, 0x3, 0x1, 0xedc8}]}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b0000000776680700b4257d5600000005fa69f2fc2a9af945ed5fe7afba0c2db57e46131eaf"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x3}, 0x18)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r1, 0x0, r6, 0x0, 0x1, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000004c0))
mkdir(0x0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000000000000000000000000c5a09902b06517ac834b12ea72ebd7bd128d0a9f67b125be33a59e1c784ddd71b8152082f584b87927518f323ae25104fe3aaaea4b6a3b57a7afe61d224923bfaa3ab39a6cf44eccb5571c5efa95c0b8425d664bab0e80d2d823f44c2d05bbb41a326a7cd0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc09}, @tail_call, @map_fd={0x18, 0x8b091c1516904eb7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18)
r8 = socket$inet(0x2, 0x3, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]})
getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000500000e00000000000000008500000027000000850000009c00000095"], &(0x7f0000000300)='syzkaller\x00', 0x86, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = inotify_init1(0x0)
inotify_add_watch(r10, &(0x7f0000000200)='.\x00', 0x10000a0)

527.61896ms ago: executing program 0 (id=5045):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x2, 0x15, 0x4, 0x9, 0x1c, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sec_ctx={0x3, 0x18, 0x3, 0x5d, 0x9, "085646846e639f8523"}, @sadb_lifetime={0x4, 0x3, 0x7, 0x3, 0xb50e, 0x3}, @sadb_key={0x4, 0x8, 0x98, 0x0, "795da4c06333896695c491bfb529288d0427fb"}, @sadb_ident={0x2, 0x0, 0x39, 0x0, 0xffffffffffffffff}, @sadb_address={0x5, 0x17, 0xff, 0x80, 0x0, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6d}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0xe0}}, 0x20008040)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast})

518.44004ms ago: executing program 5 (id=5046):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpjquota}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$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")
r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400), &(0x7f0000000040))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0)

483.798451ms ago: executing program 0 (id=5047):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x5}}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000140)=""/168, &(0x7f0000000240)=0xa8)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

468.739521ms ago: executing program 5 (id=5048):
r0 = syz_io_uring_setup(0x1dbb, &(0x7f0000000480)={0x0, 0x5125, 0x0, 0x0, 0x2c9}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'})
io_uring_enter(r0, 0x47ba, 0x3e00, 0x0, 0x0, 0x0)

457.002182ms ago: executing program 1 (id=5049):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop, @ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
preadv(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000400)=""/83, 0x53}], 0x2, 0x3, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040004}, 0x40)

437.644652ms ago: executing program 2 (id=5050):
shmctl$IPC_RMID(0x0, 0xe00)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', <r4=>0x0, 0x29, 0x9, 0x9, 0xa, 0x0, @remote, @rand_addr=' \x01\x00', 0x703, 0x20, 0x7fff}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRES8=r2, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
process_vm_readv(0x0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r7=>r6, {r0}}, './file0\x00'})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r7, 0x9, 0x0, @void}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10)
timerfd_create(0x7, 0x800)
r9 = socket$kcm(0x10, 0x2, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r12, 0x0, 0xfffffffffffffffe}, 0x18)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/softnet_stat\x00')

178.688197ms ago: executing program 5 (id=5051):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x2}, 0x4c0b})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x3, 0x7, 0x102, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1400000000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6bf9b480}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xd}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x220602)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f00000001c0)={0x2, 0x5, 0x18000000, 0xb, 0x1ff, 0x200})
connect$netlink(r1, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0, {0x80}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280)=0x9, 0x4)
bind$nfc_llcp(r3, &(0x7f00000002c0)={0x27, 0x0, 0x1, 0x3, 0x0, 0x9d, "764fb1d61c08f2fcbe7f719fc591f7bb439f7a223348d69c606fb5cd72767c0706406bc8e942acb093e6682c9a3cc60d9befe79b908e2cb0848bd7f95dda44", 0x30}, 0x60)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040090)
r5 = gettid()
tkill(r5, 0x16)
r6 = socket(0x25, 0x5, 0x5)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1, 0xf489, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}}, 0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = accept$packet(r6, 0x0, &(0x7f00000005c0))
ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, &(0x7f0000000600)={0x8, 0xb00000, 0x2, 0x6f23, 0x1, [0x7, 0xdd6e, 0x4, 0xb33]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r9=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0x61, &(0x7f0000000700)=""/97, 0x41000, 0x54, '\x00', r9, 0x0, r3, 0x8, &(0x7f00000007c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x10, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[r3], &(0x7f0000000880)=[{0x5, 0x3, 0x9, 0x5}, {0x4, 0x5, 0xd, 0x9}, {0x4, 0x1, 0x0, 0x2}], 0x10, 0x2}, 0x94)
ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000980)=r5)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x2, 0x6, 0x903, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000ac0)=r5)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000b00)={0x7, 0x531, 0x2, 0x3, 0x7fff, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x17, 0x12, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x14}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query, @exit]}, &(0x7f0000000c80)='GPL\x00', 0x4, 0xba, &(0x7f0000000cc0)=""/186, 0x0, 0x4, '\x00', r9, @fallback=0x2e, r3, 0x8, &(0x7f0000000d80)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001000)=[{0x3, 0x5, 0x9, 0xdfabdcb3fdd6ff37}], 0x10, 0x8}, 0x94)

65.928929ms ago: executing program 2 (id=5052):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x6b, 0x3}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @fwd={0xa}]}, {0x0, [0x30, 0x0, 0x61, 0x5f, 0x5f, 0x5f, 0x30, 0x0]}}, &(0x7f0000000540)=""/155, 0x56, 0x9b, 0x0, 0x401}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x0, &(0x7f0000000200), &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xd, 0x5}, 0x10, 0x80, 0xffffffffffffffff, 0x1, &(0x7f0000000780)=[r1], &(0x7f00000007c0)=[{0x1, 0x1, 0x5, 0x3}], 0x10, 0x10000}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}])
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61]}}, 0x0, 0x37}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000400)='\x00', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

65.534969ms ago: executing program 5 (id=5053):
syz_open_dev$sg(0x0, 0x0, 0x401)
getpid()
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(r0, 0x66020000)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6}, 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r1, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r2}, 0x20)
recvmmsg(r2, &(0x7f0000000040), 0x400006a, 0x40001140, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x1004c10, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{}, 0x0, 0x7})
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x2}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

65.236229ms ago: executing program 1 (id=5054):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{}, {0x0, 0x8}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44040)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x56}, 0x1, 0x0, 0x0, 0x40815}, 0x40404)
r3 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000)
shmdt(r3)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
io_setup(0x3fe, &(0x7f00000001c0)=<r4=>0x0)
io_getevents(r4, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441d3e189e87fe30600000000000f000200", 0x4, 0x200})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x8)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r6 = syz_clone(0x814080, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = semget$private(0x0, 0x3, 0x200)
semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000ac0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x4, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0xfffe})
semctl$IPC_INFO(r7, 0x0, 0x3, &(0x7f0000000380)=""/215)
ptrace(0x4206, r6)

34.44497ms ago: executing program 0 (id=5055):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
bind$inet6(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0))
lseek(0xffffffffffffffff, 0x9, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004004}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newnexthop={0x50, 0x68, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x3}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_GROUP_TYPE={0x6}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}]}]}, 0x50}}, 0x4005)

34.09512ms ago: executing program 5 (id=5056):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)

10.68097ms ago: executing program 2 (id=5057):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x2, 0x15, 0x4, 0x9, 0x1c, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sec_ctx={0x3, 0x18, 0x3, 0x5d, 0x9, "085646846e639f8523"}, @sadb_lifetime={0x4, 0x3, 0x7, 0x3, 0xb50e, 0x3}, @sadb_key={0x4, 0x8, 0x98, 0x0, "795da4c06333896695c491bfb529288d0427fb"}, @sadb_ident={0x2, 0x0, 0x39, 0x0, 0xffffffffffffffff}, @sadb_address={0x5, 0x17, 0xff, 0x80, 0x0, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6d}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0xe0}}, 0x20008040)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast})

0s ago: executing program 5 (id=5058):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@grpjquota}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x565, &(0x7f00000003c0)="$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")
r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400), &(0x7f0000000040))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
msgsnd(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

bj=root:sysadm_r:sysadm_t pid=13977 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  319.686973][   T29] audit: type=1326 audit(1759488708.801:26113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  319.711828][   T29] audit: type=1326 audit(1759488708.801:26114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  319.735951][   T29] audit: type=1326 audit(1759488708.811:26115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  319.760184][   T29] audit: type=1326 audit(1759488708.811:26116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  319.867060][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.874895][T13984] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  319.877172][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.045369][T14000] vlan2: entered promiscuous mode
[  320.050591][T14000] vlan2: entered allmulticast mode
[  320.055835][T14000] hsr_slave_1: entered allmulticast mode
[  320.075095][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3534'.
[  320.095456][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.104766][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.114068][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.146571][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.155807][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.165321][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.288552][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.297485][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'.
[  320.689673][T14009] futex_wake_op: syz.0.3526 tries to shift op by 144; fix this program
[  320.711212][T14013] IPv4: Oversized IP packet from 127.202.26.0
[  320.917074][T14027] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  321.346568][T14047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.361655][T14047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.568736][T14060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.577524][T14060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.601465][T14060] lo speed is unknown, defaulting to 1000
[  322.243668][T14118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  322.251130][T14118] IPv6: NLM_F_CREATE should be set when creating new route
[  322.288635][T14119] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  322.374416][T14138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.405113][T14138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.435012][T14145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.448977][T14145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.458281][T14147] IPv4: Oversized IP packet from 127.202.26.0
[  322.473818][T14145] lo speed is unknown, defaulting to 1000
[  322.884624][T14176] IPv4: Oversized IP packet from 127.202.26.0
[  323.273514][T14203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  323.280949][T14203] IPv6: NLM_F_CREATE should be set when creating new route
[  323.353260][T14208] IPv4: Oversized IP packet from 127.202.26.0
[  323.536958][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.545784][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.576610][T14221] lo speed is unknown, defaulting to 1000
[  323.638932][T14229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.647699][T14229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.164368][T14244] futex_wake_op: syz.5.3632 tries to shift op by 144; fix this program
[  324.261141][T14250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  324.888330][   T29] kauditd_printk_skb: 2213 callbacks suppressed
[  324.888352][   T29] audit: type=1326 audit(1759488714.171:28330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14275 comm="syz.5.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  324.918937][   T29] audit: type=1326 audit(1759488714.171:28331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14275 comm="syz.5.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  324.943238][   T29] audit: type=1326 audit(1759488714.171:28332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14275 comm="syz.5.3643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.073195][T14282] ªªªªª1: renamed from veth0_to_bond (while UP)
[  325.243806][   T29] audit: type=1326 audit(1759488714.531:28333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.268064][   T29] audit: type=1326 audit(1759488714.531:28334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.300639][   T29] audit: type=1326 audit(1759488714.531:28335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.325301][   T29] audit: type=1326 audit(1759488714.531:28336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.351316][   T29] audit: type=1326 audit(1759488714.531:28337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.376518][   T29] audit: type=1326 audit(1759488714.531:28338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.400675][   T29] audit: type=1326 audit(1759488714.531:28339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  325.563489][T14323] __nla_validate_parse: 13 callbacks suppressed
[  325.563511][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3663'.
[  326.114598][T14349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.141842][T14349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.159562][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'.
[  326.325076][T14355] lo speed is unknown, defaulting to 1000
[  326.390179][T14359] bridge_slave_0: left allmulticast mode
[  326.395882][T14359] bridge_slave_0: left promiscuous mode
[  326.401988][T14359] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.411962][T14359] bridge_slave_1: left allmulticast mode
[  326.417719][T14359] bridge_slave_1: left promiscuous mode
[  326.423534][T14359] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.434712][T14359] bond0: (slave bond_slave_0): Releasing backup interface
[  326.453851][T14359] bond0: (slave bond_slave_1): Releasing backup interface
[  326.470912][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'.
[  326.489757][T14359] team0: Port device team_slave_0 removed
[  326.506861][T14359] team0: Port device team_slave_1 removed
[  326.531972][T14359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.539954][T14359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.566658][T14359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.574124][T14359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.595433][T14359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  326.709049][T14360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  326.750912][T14388] IPv4: Oversized IP packet from 127.202.26.0
[  326.784786][T14394] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  327.141541][T14419] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  327.313559][T14426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.371021][T14426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.418168][T14426] lo speed is unknown, defaulting to 1000
[  327.758653][T14455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  327.765976][T14455] IPv6: NLM_F_CREATE should be set when creating new route
[  328.731832][T14484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.739646][T14484] IPv6: NLM_F_CREATE should be set when creating new route
[  328.751809][T14486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.759444][T14486] IPv6: NLM_F_CREATE should be set when creating new route
[  329.162698][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[  329.171732][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[  329.180647][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[  329.210810][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[  329.220143][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[  329.229271][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[  329.334406][T14511] futex_wake_op: syz.5.3734 tries to shift op by 144; fix this program
[  329.379507][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3734'.
[  329.952766][   T29] kauditd_printk_skb: 207 callbacks suppressed
[  329.952783][   T29] audit: type=1326 audit(1759488719.241:28547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  329.982962][   T29] audit: type=1326 audit(1759488719.241:28548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.007417][   T29] audit: type=1326 audit(1759488719.291:28549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.031410][   T29] audit: type=1326 audit(1759488719.291:28550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.055315][   T29] audit: type=1326 audit(1759488719.291:28551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.201963][   T29] audit: type=1326 audit(1759488719.491:28552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.226845][   T29] audit: type=1326 audit(1759488719.491:28553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.251143][   T29] audit: type=1326 audit(1759488719.491:28554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.291703][   T29] audit: type=1326 audit(1759488719.491:28555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  330.315841][   T29] audit: type=1326 audit(1759488719.491:28556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14526 comm="syz.2.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  331.434563][T14582] lo speed is unknown, defaulting to 1000
[  331.514191][T14590] team0: Port device dummy0 removed
[  331.533074][T14590] bridge_slave_0: left allmulticast mode
[  331.539325][T14590] bridge_slave_0: left promiscuous mode
[  331.545153][T14590] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.557730][T14597] netlink: 'syz.5.3769': attribute type 10 has an invalid length.
[  331.565728][T14597] __nla_validate_parse: 2 callbacks suppressed
[  331.565784][T14597] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3769'.
[  331.587488][T14590] bridge_slave_1: left allmulticast mode
[  331.593767][T14590] bridge_slave_1: left promiscuous mode
[  331.599681][T14590] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.622876][T14590] bond0: (slave bond_slave_0): Releasing backup interface
[  331.634390][T14590] bond0: (slave bond_slave_1): Releasing backup interface
[  331.648719][T14590] team0: Port device team_slave_0 removed
[  331.661664][T14590] team0: Port device team_slave_1 removed
[  331.669443][T14590] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.676851][T14590] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.687645][T14590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.695668][T14590] batman_adv: batadv0: Removing interface: batadv_slave_1
[  331.706726][T14590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  331.726192][   T23] lo speed is unknown, defaulting to 1000
[  331.739702][T14597] batman_adv: batadv0: Adding interface: veth1_vlan
[  331.746643][T14597] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.774164][T14597] batman_adv: batadv0: Interface activated: veth1_vlan
[  331.822084][T14611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14611 comm=syz.5.3775
[  332.505911][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.522990][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.787710][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.797037][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.806116][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.827188][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.836386][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.845393][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.878597][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.887954][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.897130][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'.
[  332.932625][T14663] FAULT_INJECTION: forcing a failure.
[  332.932625][T14663] name failslab, interval 1, probability 0, space 0, times 0
[  332.946201][T14663] CPU: 1 UID: 0 PID: 14663 Comm: syz.0.3796 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  332.946237][T14663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  332.946254][T14663] Call Trace:
[  332.946263][T14663]  <TASK>
[  332.946274][T14663]  __dump_stack+0x1d/0x30
[  332.946344][T14663]  dump_stack_lvl+0xe8/0x140
[  332.946446][T14663]  dump_stack+0x15/0x1b
[  332.946560][T14663]  should_fail_ex+0x265/0x280
[  332.946601][T14663]  should_failslab+0x8c/0xb0
[  332.946636][T14663]  kmem_cache_alloc_noprof+0x50/0x480
[  332.946668][T14663]  ? security_file_alloc+0x32/0x100
[  332.946735][T14663]  security_file_alloc+0x32/0x100
[  332.946762][T14663]  init_file+0x5c/0x1d0
[  332.946804][T14663]  alloc_empty_file+0x8b/0x200
[  332.946914][T14663]  path_openat+0x68/0x2170
[  332.946937][T14663]  ? __rcu_read_unlock+0x34/0x70
[  332.946968][T14663]  ? filemap_map_pages+0xae0/0xd40
[  332.947052][T14663]  do_filp_open+0x109/0x230
[  332.947092][T14663]  do_sys_openat2+0xa6/0x110
[  332.947118][T14663]  __x64_sys_openat+0xf2/0x120
[  332.947194][T14663]  x64_sys_call+0x2eab/0x3000
[  332.947216][T14663]  do_syscall_64+0xd2/0x200
[  332.947246][T14663]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  332.947282][T14663]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  332.947321][T14663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.947371][T14663] RIP: 0033:0x7f521b9ad710
[  332.947389][T14663] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  332.947412][T14663] RSP: 002b:00007f521a40ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  332.947436][T14663] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f521b9ad710
[  332.947453][T14663] RDX: 0000000000000000 RSI: 00007f521a40efa0 RDI: 00000000ffffff9c
[  332.947470][T14663] RBP: 00007f521a40efa0 R08: 0000000000000000 R09: 0000000000000000
[  332.947488][T14663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  332.947578][T14663] R13: 00007f521bc06038 R14: 00007f521bc05fa0 R15: 00007fff865e97f8
[  332.947609][T14663]  </TASK>
[  333.165731][T14664] futex_wake_op: syz.2.3788 tries to shift op by 144; fix this program
[  333.247939][T14673] IPv4: Oversized IP packet from 127.202.26.0
[  335.094001][   T29] kauditd_printk_skb: 731 callbacks suppressed
[  335.094020][   T29] audit: type=1326 audit(1759488724.381:29288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  335.124350][   T29] audit: type=1326 audit(1759488724.381:29289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  335.149822][   T29] audit: type=1326 audit(1759488724.381:29290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  335.189387][   T29] audit: type=1326 audit(1759488724.381:29291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  335.214113][   T29] audit: type=1326 audit(1759488724.431:29292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  335.239343][   T29] audit: type=1326 audit(1759488724.431:29293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  335.263461][   T29] audit: type=1326 audit(1759488724.431:29294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  335.288069][   T29] audit: type=1326 audit(1759488724.431:29295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb35ba9ef03 code=0x7ffc0000
[  335.312928][   T29] audit: type=1326 audit(1759488724.431:29296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb35ba9ef87 code=0x7ffc0000
[  335.337486][   T29] audit: type=1326 audit(1759488724.431:29297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.2.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb35ba5632d code=0x7ffc0000
[  336.181584][T14773] IPv4: Oversized IP packet from 127.202.26.0
[  336.273893][T14783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  337.349102][T14910] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.229034][T14941] IPv4: Oversized IP packet from 127.202.26.0
[  338.297479][T14947] IPv4: Oversized IP packet from 127.202.26.0
[  338.329998][T14953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.369978][T14951] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  338.370001][ T3405] IPVS: starting estimator thread 0...
[  338.469493][T14957] IPVS: using max 2112 ests per chain, 105600 per kthread
[  339.637066][T15017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.658897][T15017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.872614][T15024] lo speed is unknown, defaulting to 1000
[  340.109821][   T29] kauditd_printk_skb: 731 callbacks suppressed
[  340.109840][   T29] audit: type=1326 audit(1759488729.401:30029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  340.178464][T15061] IPv4: Oversized IP packet from 127.202.26.0
[  340.207081][   T29] audit: type=1326 audit(1759488729.441:30030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  340.231406][   T29] audit: type=1326 audit(1759488729.441:30031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  340.255498][   T29] audit: type=1326 audit(1759488729.441:30032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  340.279551][   T29] audit: type=1326 audit(1759488729.441:30033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.5.3902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  340.431188][   T29] audit: type=1326 audit(1759488729.681:30034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15071 comm="syz.2.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  340.455499][   T29] audit: type=1326 audit(1759488729.681:30035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15071 comm="syz.2.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  340.480233][   T29] audit: type=1326 audit(1759488729.681:30036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15071 comm="syz.2.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  340.508116][   T29] audit: type=1326 audit(1759488729.681:30037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15071 comm="syz.2.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  340.533667][   T29] audit: type=1326 audit(1759488729.681:30038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15071 comm="syz.2.3908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  340.668177][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.682337][T15089] IPv4: Oversized IP packet from 127.202.26.0
[  340.688188][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.938525][T15100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  340.947358][T15100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.021415][T15108] lo speed is unknown, defaulting to 1000
[  341.103461][T15100] lo speed is unknown, defaulting to 1000
[  341.163251][T15120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  342.291306][T15149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.338288][T15149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.448504][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.469986][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.996221][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.005364][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.014629][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.134193][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.143308][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.152219][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.200998][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.210182][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.219710][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  344.308262][T15182] futex_wake_op: syz.1.3940 tries to shift op by 144; fix this program
[  344.782299][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3956'.
[  345.163318][   T29] kauditd_printk_skb: 121 callbacks suppressed
[  345.163339][   T29] audit: type=1326 audit(1759488734.451:30160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.296749][   T29] audit: type=1326 audit(1759488734.481:30161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.320730][   T29] audit: type=1326 audit(1759488734.481:30162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.345937][   T29] audit: type=1326 audit(1759488734.481:30163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.370193][   T29] audit: type=1326 audit(1759488734.481:30164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.394183][   T29] audit: type=1326 audit(1759488734.481:30165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.417954][   T29] audit: type=1326 audit(1759488734.481:30166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.441677][   T29] audit: type=1326 audit(1759488734.481:30167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.465711][   T29] audit: type=1326 audit(1759488734.481:30168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  345.490117][   T29] audit: type=1326 audit(1759488734.491:30169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15233 comm="syz.0.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521b9aeec9 code=0x7ffc0000
[  346.098646][T15254] netlink: 'syz.3.3970': attribute type 10 has an invalid length.
[  346.124650][T15254] dummy0: entered promiscuous mode
[  346.284314][T15271] IPv4: Oversized IP packet from 127.202.26.0
[  347.472330][T15305] IPv4: Oversized IP packet from 127.202.26.0
[  347.581657][T15317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  348.073913][T15350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.082796][T15350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.104224][T15350] lo speed is unknown, defaulting to 1000
[  348.270584][T15364] lo speed is unknown, defaulting to 1000
[  348.822062][T15374] IPv4: Oversized IP packet from 127.202.26.0
[  349.099930][T15403] IPv4: Oversized IP packet from 127.202.26.0
[  349.650458][T15419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.664473][T15419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.758448][T15427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  349.765726][T15427] IPv6: NLM_F_CREATE should be set when creating new route
[  349.870038][T15419] __nla_validate_parse: 1 callbacks suppressed
[  349.870057][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  349.885288][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  349.894481][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  349.933945][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  349.943052][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  349.952322][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  350.042791][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4039'.
[  350.052118][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4039'.
[  350.061385][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4039'.
[  350.132438][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'.
[  350.508174][T15445] futex_wake_op: syz.2.4037 tries to shift op by 144; fix this program
[  350.517111][T15446] futex_wake_op: syz.5.4039 tries to shift op by 144; fix this program
[  350.670552][   T29] kauditd_printk_skb: 709 callbacks suppressed
[  350.670571][   T29] audit: type=1326 audit(1759488739.961:30879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.1.4045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x0
[  350.704945][   T29] audit: type=1400 audit(1759488739.961:30880): avc:  denied  { write } for  pid=15441 comm="syz.3.4044" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  350.765075][T15456] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15456 comm=syz.3.4047
[  350.778206][   T29] audit: type=1400 audit(1759488740.071:30881): avc:  denied  { audit_write } for  pid=15455 comm="syz.3.4047" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  350.897254][   T29] audit: type=1326 audit(1759488740.181:30882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  350.921333][   T29] audit: type=1326 audit(1759488740.181:30883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  350.946935][   T29] audit: type=1326 audit(1759488740.181:30884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  350.972446][   T29] audit: type=1326 audit(1759488740.181:30885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  350.996886][   T29] audit: type=1326 audit(1759488740.181:30886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  351.020731][   T29] audit: type=1326 audit(1759488740.181:30887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  351.045962][   T29] audit: type=1326 audit(1759488740.181:30888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15461 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  351.459949][T15491] FAULT_INJECTION: forcing a failure.
[  351.459949][T15491] name failslab, interval 1, probability 0, space 0, times 0
[  351.473196][T15491] CPU: 0 UID: 0 PID: 15491 Comm: syz.0.4059 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  351.473235][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  351.473327][T15491] Call Trace:
[  351.473335][T15491]  <TASK>
[  351.473346][T15491]  __dump_stack+0x1d/0x30
[  351.473393][T15491]  dump_stack_lvl+0xe8/0x140
[  351.473437][T15491]  dump_stack+0x15/0x1b
[  351.473507][T15491]  should_fail_ex+0x265/0x280
[  351.473585][T15491]  should_failslab+0x8c/0xb0
[  351.473679][T15491]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  351.473708][T15491]  ? __alloc_skb+0x101/0x320
[  351.473739][T15491]  __alloc_skb+0x101/0x320
[  351.473803][T15491]  netlink_alloc_large_skb+0xbf/0xf0
[  351.473903][T15491]  netlink_sendmsg+0x3cf/0x6b0
[  351.473943][T15491]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.473979][T15491]  __sock_sendmsg+0x142/0x180
[  351.474047][T15491]  ____sys_sendmsg+0x31e/0x4e0
[  351.474089][T15491]  ___sys_sendmsg+0x17b/0x1d0
[  351.474190][T15491]  __x64_sys_sendmsg+0xd4/0x160
[  351.474297][T15491]  x64_sys_call+0x191e/0x3000
[  351.474326][T15491]  do_syscall_64+0xd2/0x200
[  351.474355][T15491]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  351.474391][T15491]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  351.474438][T15491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.474488][T15491] RIP: 0033:0x7f521b9aeec9
[  351.474507][T15491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.474605][T15491] RSP: 002b:00007f521a40f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.474625][T15491] RAX: ffffffffffffffda RBX: 00007f521bc05fa0 RCX: 00007f521b9aeec9
[  351.474638][T15491] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003
[  351.474650][T15491] RBP: 00007f521a40f090 R08: 0000000000000000 R09: 0000000000000000
[  351.474665][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.474681][T15491] R13: 00007f521bc06038 R14: 00007f521bc05fa0 R15: 00007fff865e97f8
[  351.474763][T15491]  </TASK>
[  352.076978][T15497] lo speed is unknown, defaulting to 1000
[  352.169768][T15508] IPv6: addrconf: prefix option has invalid lifetime
[  352.841492][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.850364][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.873354][T15560] lo speed is unknown, defaulting to 1000
[  352.970471][T15568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  353.123600][T15586] FAULT_INJECTION: forcing a failure.
[  353.123600][T15586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.137165][T15586] CPU: 1 UID: 0 PID: 15586 Comm: syz.1.4100 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  353.137202][T15586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  353.137223][T15586] Call Trace:
[  353.137231][T15586]  <TASK>
[  353.137241][T15586]  __dump_stack+0x1d/0x30
[  353.137280][T15586]  dump_stack_lvl+0xe8/0x140
[  353.137360][T15586]  dump_stack+0x15/0x1b
[  353.137401][T15586]  should_fail_ex+0x265/0x280
[  353.137580][T15586]  should_fail+0xb/0x20
[  353.137615][T15586]  should_fail_usercopy+0x1a/0x20
[  353.137649][T15586]  _copy_from_user+0x1c/0xb0
[  353.137670][T15586]  perf_copy_attr+0x145/0x610
[  353.137698][T15586]  __se_sys_perf_event_open+0x67/0x11c0
[  353.137743][T15586]  ? vfs_write+0x7e8/0x960
[  353.137829][T15586]  ? __rcu_read_unlock+0x4f/0x70
[  353.137872][T15586]  __x64_sys_perf_event_open+0x67/0x80
[  353.138049][T15586]  x64_sys_call+0x7bd/0x3000
[  353.138077][T15586]  do_syscall_64+0xd2/0x200
[  353.138108][T15586]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  353.138143][T15586]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  353.138188][T15586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.138237][T15586] RIP: 0033:0x7f4ef6bdeec9
[  353.138258][T15586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.138382][T15586] RSP: 002b:00007f4ef5647038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  353.138470][T15586] RAX: ffffffffffffffda RBX: 00007f4ef6e35fa0 RCX: 00007f4ef6bdeec9
[  353.138488][T15586] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180
[  353.138505][T15586] RBP: 00007f4ef5647090 R08: 0000000000000000 R09: 0000000000000000
[  353.138521][T15586] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[  353.138537][T15586] R13: 00007f4ef6e36038 R14: 00007f4ef6e35fa0 R15: 00007ffd47bc9498
[  353.138564][T15586]  </TASK>
[  353.415344][T15591] 9pnet_fd: Insufficient options for proto=fd
[  353.441990][T15596] FAULT_INJECTION: forcing a failure.
[  353.441990][T15596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  353.455402][T15596] CPU: 1 UID: 0 PID: 15596 Comm: syz.1.4105 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  353.455470][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  353.455488][T15596] Call Trace:
[  353.455496][T15596]  <TASK>
[  353.455513][T15596]  __dump_stack+0x1d/0x30
[  353.455560][T15596]  dump_stack_lvl+0xe8/0x140
[  353.455674][T15596]  dump_stack+0x15/0x1b
[  353.455705][T15596]  should_fail_ex+0x265/0x280
[  353.455837][T15596]  should_fail+0xb/0x20
[  353.455924][T15596]  should_fail_usercopy+0x1a/0x20
[  353.455959][T15596]  _copy_from_user+0x1c/0xb0
[  353.455980][T15596]  ___sys_sendmsg+0xc1/0x1d0
[  353.456114][T15596]  __x64_sys_sendmsg+0xd4/0x160
[  353.456157][T15596]  x64_sys_call+0x191e/0x3000
[  353.456180][T15596]  do_syscall_64+0xd2/0x200
[  353.456207][T15596]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  353.456300][T15596]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  353.456341][T15596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.456363][T15596] RIP: 0033:0x7f4ef6bdeec9
[  353.456383][T15596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.456492][T15596] RSP: 002b:00007f4ef5647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.456561][T15596] RAX: ffffffffffffffda RBX: 00007f4ef6e35fa0 RCX: 00007f4ef6bdeec9
[  353.456573][T15596] RDX: 00000000000000c4 RSI: 00002000000007c0 RDI: 0000000000000006
[  353.456590][T15596] RBP: 00007f4ef5647090 R08: 0000000000000000 R09: 0000000000000000
[  353.456602][T15596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.456639][T15596] R13: 00007f4ef6e36038 R14: 00007f4ef6e35fa0 R15: 00007ffd47bc9498
[  353.456660][T15596]  </TASK>
[  353.782230][T15615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  353.803580][T15597] lo speed is unknown, defaulting to 1000
[  353.889605][ T9414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.929904][T15597] chnl_net:caif_netlink_parms(): no params data found
[  353.982818][T15630] netlink: 'syz.2.4115': attribute type 30 has an invalid length.
[  353.994084][ T9414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.044984][T15597] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.052517][T15597] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.060015][T15597] bridge_slave_0: entered allmulticast mode
[  354.066902][T15597] bridge_slave_0: entered promiscuous mode
[  354.077691][ T9414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.095604][T15597] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.102984][T15597] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.113037][T15597] bridge_slave_1: entered allmulticast mode
[  354.120317][T15597] bridge_slave_1: entered promiscuous mode
[  354.143870][T15597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.155186][T15597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.179027][T15597] team0: Port device team_slave_0 added
[  354.198911][ T9414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.212549][T15597] team0: Port device team_slave_1 added
[  354.241138][T15597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.248263][T15597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.274661][T15597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.286591][T15597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.293926][T15597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.321733][T15597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.358210][T15597] hsr_slave_0: entered promiscuous mode
[  354.364588][T15597] hsr_slave_1: entered promiscuous mode
[  354.370808][T15597] debugfs: 'hsr0' already exists in 'hsr'
[  354.376593][T15597] Cannot create hsr debugfs directory
[  354.450987][ T9414] bridge_slave_1: left allmulticast mode
[  354.457414][ T9414] bridge_slave_1: left promiscuous mode
[  354.463167][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.472131][ T9414] bridge_slave_0: left allmulticast mode
[  354.477897][ T9414] bridge_slave_0: left promiscuous mode
[  354.483812][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.504591][T15652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  354.560450][ T9414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.572130][ T9414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.583843][ T9414] bond0 (unregistering): Released all slaves
[  354.631377][ T9414] tipc: Left network mode
[  354.640510][ T9414] hsr_slave_0: left promiscuous mode
[  354.646446][ T9414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.654375][ T9414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.656118][T15660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  354.668969][T15660] IPv6: NLM_F_CREATE should be set when creating new route
[  354.677281][ T9414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.684936][ T9414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.698181][ T9414] veth1_macvtap: left promiscuous mode
[  354.704944][ T9414] veth0_macvtap: left promiscuous mode
[  354.711363][ T9414] veth1_vlan: left promiscuous mode
[  354.716815][ T9414] veth0_vlan: left promiscuous mode
[  354.816602][ T9414] team0 (unregistering): Port device team_slave_1 removed
[  354.827111][ T9414] team0 (unregistering): Port device team_slave_0 removed
[  354.936849][T15677] pim6reg: entered allmulticast mode
[  354.943403][T15677] pim6reg: left allmulticast mode
[  355.146759][T15597] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  355.167462][T15597] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  355.187114][T15597] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  355.197166][T15597] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  355.268521][T15597] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.292256][T15597] 8021q: adding VLAN 0 to HW filter on device team0
[  355.301773][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.309072][ T9382] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.321025][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.328555][ T9414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.416276][T15597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.493579][T15597] veth0_vlan: entered promiscuous mode
[  355.521781][T15597] veth1_vlan: entered promiscuous mode
[  355.545497][T15597] veth0_macvtap: entered promiscuous mode
[  355.558258][T15597] veth1_macvtap: entered promiscuous mode
[  355.573707][T15597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.589068][T15597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.605529][ T9413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.824970][   T29] kauditd_printk_skb: 797 callbacks suppressed
[  355.824993][   T29] audit: type=1400 audit(1759488744.867:31686): avc:  denied  { mounton } for  pid=15696 comm="syz.1.4137" path="/228" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  355.886710][ T9413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.903107][ T9413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.914252][ T9413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.927794][T15712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  355.954384][   T29] audit: type=1400 audit(1759488745.166:31687): avc:  denied  { mounton } for  pid=15597 comm="syz-executor" path="/root/syzkaller.CKn0pN/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  355.979690][   T29] audit: type=1400 audit(1759488745.166:31688): avc:  denied  { mount } for  pid=15597 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  356.002388][   T29] audit: type=1400 audit(1759488745.166:31689): avc:  denied  { mount } for  pid=15597 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  356.026665][   T29] audit: type=1400 audit(1759488745.166:31690): avc:  denied  { mounton } for  pid=15597 comm="syz-executor" path="/root/syzkaller.CKn0pN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  356.054872][   T29] audit: type=1400 audit(1759488745.166:31691): avc:  denied  { mounton } for  pid=15597 comm="syz-executor" path="/root/syzkaller.CKn0pN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  356.082743][   T29] audit: type=1400 audit(1759488745.166:31692): avc:  denied  { unmount } for  pid=15597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  356.154938][   T29] audit: type=1400 audit(1759488745.316:31693): avc:  denied  { mounton } for  pid=15597 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  356.178655][   T29] audit: type=1400 audit(1759488745.316:31694): avc:  denied  { mount } for  pid=15597 comm="syz-executor" name="/" dev="gadgetfs" ino=3835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  356.201575][   T29] audit: type=1400 audit(1759488745.325:31695): avc:  denied  { write } for  pid=15597 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0"
[  356.382435][T15743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.389738][T15743] IPv6: NLM_F_CREATE should be set when creating new route
[  356.509309][T15757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  356.517678][T15757] IPv6: NLM_F_CREATE should be set when creating new route
[  356.661260][T15766] FAULT_INJECTION: forcing a failure.
[  356.661260][T15766] name failslab, interval 1, probability 0, space 0, times 0
[  356.674286][T15766] CPU: 1 UID: 0 PID: 15766 Comm: syz.1.4160 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  356.674451][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  356.674468][T15766] Call Trace:
[  356.674477][T15766]  <TASK>
[  356.674488][T15766]  __dump_stack+0x1d/0x30
[  356.674536][T15766]  dump_stack_lvl+0xe8/0x140
[  356.674652][T15766]  dump_stack+0x15/0x1b
[  356.674741][T15766]  should_fail_ex+0x265/0x280
[  356.674778][T15766]  should_failslab+0x8c/0xb0
[  356.674812][T15766]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  356.674842][T15766]  ? __alloc_skb+0x101/0x320
[  356.674887][T15766]  __alloc_skb+0x101/0x320
[  356.674921][T15766]  netlink_alloc_large_skb+0xbf/0xf0
[  356.675021][T15766]  netlink_sendmsg+0x3cf/0x6b0
[  356.675063][T15766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.675100][T15766]  __sock_sendmsg+0x142/0x180
[  356.675126][T15766]  ____sys_sendmsg+0x31e/0x4e0
[  356.675211][T15766]  ___sys_sendmsg+0x17b/0x1d0
[  356.675264][T15766]  __x64_sys_sendmsg+0xd4/0x160
[  356.675308][T15766]  x64_sys_call+0x191e/0x3000
[  356.675336][T15766]  do_syscall_64+0xd2/0x200
[  356.675436][T15766]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  356.675472][T15766]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  356.675506][T15766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.675547][T15766] RIP: 0033:0x7f4ef6bdeec9
[  356.675568][T15766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.675592][T15766] RSP: 002b:00007f4ef5647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.675651][T15766] RAX: ffffffffffffffda RBX: 00007f4ef6e35fa0 RCX: 00007f4ef6bdeec9
[  356.675667][T15766] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000005
[  356.675683][T15766] RBP: 00007f4ef5647090 R08: 0000000000000000 R09: 0000000000000000
[  356.675700][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.675715][T15766] R13: 00007f4ef6e36038 R14: 00007f4ef6e35fa0 R15: 00007ffd47bc9498
[  356.675735][T15766]  </TASK>
[  356.911992][T15773] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  356.918654][T15773] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  356.926209][T15773] vhci_hcd vhci_hcd.0: Device attached
[  356.941414][T15774] usbip_core: unknown command
[  356.946249][T15774] vhci_hcd: unknown pdu 2844066640
[  356.951571][T15774] usbip_core: unknown command
[  356.991220][T15773] ªªªªªª: renamed from vlan0 (while UP)
[  357.301028][    T9] vhci_hcd: vhci_device speed not set
[  357.353392][T15778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  357.365829][    T9] usb 3-1: new full-speed USB device number 2 using vhci_hcd
[  357.373888][ T9413] vhci_hcd: stop threads
[  357.378178][ T9413] vhci_hcd: release socket
[  357.382713][ T9413] vhci_hcd: disconnect device
[  357.396749][    T9] usb 3-1: enqueue for inactive port 0
[  357.410447][    T9] usb 3-1: enqueue for inactive port 0
[  357.421368][    T9] usb 3-1: enqueue for inactive port 0
[  357.525795][    T9] vhci_hcd: vhci_device speed not set
[  357.743971][T15813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.758132][T15813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.775383][T15819] ipip0: entered promiscuous mode
[  357.809894][T15813] lo speed is unknown, defaulting to 1000
[  357.951248][T15838] __nla_validate_parse: 12 callbacks suppressed
[  357.951271][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4184'.
[  357.967105][T15838] netlink: 'syz.5.4184': attribute type 5 has an invalid length.
[  357.974970][T15838] netlink: 'syz.5.4184': attribute type 8 has an invalid length.
[  357.982924][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4184'.
[  358.000353][T15838] geneve3: entered promiscuous mode
[  358.006783][T15838] geneve3: entered allmulticast mode
[  358.014502][ T9380] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  358.029995][ T9380] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  358.055518][ T9380] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  358.076959][ T9380] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  358.203290][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4192'.
[  358.505097][ T9377] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  358.515281][ T9377] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  358.524644][ T9377] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  358.534038][ T9377] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  358.972335][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.996981][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.194210][T15963] netlink: 'syz.3.4234': attribute type 1 has an invalid length.
[  360.204236][T15967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  360.212169][T15963] 8021q: adding VLAN 0 to HW filter on device bond2
[  360.241453][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4234'.
[  360.489627][T15998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.548270][   T29] kauditd_printk_skb: 554 callbacks suppressed
[  361.548288][   T29] audit: type=1326 audit(1759488750.395:32250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.579175][   T29] audit: type=1326 audit(1759488750.395:32251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.603802][   T29] audit: type=1326 audit(1759488750.395:32252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.627690][   T29] audit: type=1326 audit(1759488750.395:32253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.652651][   T29] audit: type=1326 audit(1759488750.395:32254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.684188][   T29] audit: type=1326 audit(1759488750.508:32255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.708907][   T29] audit: type=1326 audit(1759488750.508:32256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.733643][   T29] audit: type=1326 audit(1759488750.508:32257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.757765][   T29] audit: type=1326 audit(1759488750.508:32258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  361.781433][   T29] audit: type=1326 audit(1759488750.526:32259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16010 comm="syz.3.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12ea8eec9 code=0x7ffc0000
[  362.128890][T16037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  362.136246][T16037] IPv6: NLM_F_CREATE should be set when creating new route
[  362.368495][T16047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.377365][T16047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.228239][T16073] lo speed is unknown, defaulting to 1000
[  363.652662][T16110] FAULT_INJECTION: forcing a failure.
[  363.652662][T16110] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  363.666538][T16110] CPU: 0 UID: 0 PID: 16110 Comm: syz.1.4293 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  363.666711][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  363.666729][T16110] Call Trace:
[  363.666736][T16110]  <TASK>
[  363.666744][T16110]  __dump_stack+0x1d/0x30
[  363.666789][T16110]  dump_stack_lvl+0xe8/0x140
[  363.666833][T16110]  dump_stack+0x15/0x1b
[  363.666870][T16110]  should_fail_ex+0x265/0x280
[  363.666902][T16110]  should_fail_alloc_page+0xf2/0x100
[  363.666996][T16110]  __alloc_frozen_pages_noprof+0xff/0x360
[  363.667044][T16110]  alloc_pages_mpol+0xb3/0x260
[  363.667155][T16110]  vma_alloc_folio_noprof+0x1aa/0x300
[  363.667192][T16110]  handle_mm_fault+0xec2/0x2be0
[  363.667220][T16110]  ? vma_start_read+0x141/0x1f0
[  363.667299][T16110]  do_user_addr_fault+0x630/0x1080
[  363.667329][T16110]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  363.667363][T16110]  exc_page_fault+0x62/0xa0
[  363.667407][T16110]  asm_exc_page_fault+0x26/0x30
[  363.667448][T16110] RIP: 0033:0x7f4ef6b8c3ab
[  363.667469][T16110] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  363.667561][T16110] RSP: 002b:00007f4ef5644e10 EFLAGS: 00010246
[  363.667583][T16110] RAX: 00007f4ef5646f30 RBX: 00007f4ef6e07640 RCX: 0000000000000000
[  363.667600][T16110] RDX: 00007f4ef5646f78 RSI: 00007f4ef6c3edf8 RDI: 00007f4ef5644e30
[  363.667616][T16110] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  363.667632][T16110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.667644][T16110] R13: 00007f4ef6e36038 R14: 00007f4ef6e35fa0 R15: 00007ffd47bc9498
[  363.667664][T16110]  </TASK>
[  363.667688][T16110] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  364.120778][T16143] Invalid ELF header type: 3 != 1
[  364.541863][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.564460][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.589409][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.598397][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.607647][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.686795][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.696616][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.705797][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.744525][T16198] futex_wake_op: syz.0.4325 tries to shift op by 144; fix this program
[  364.766522][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.775563][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  364.784648][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4325'.
[  365.301985][T16229] FAULT_INJECTION: forcing a failure.
[  365.301985][T16229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.315259][T16229] CPU: 1 UID: 0 PID: 16229 Comm: syz.3.4340 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  365.315339][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  365.315354][T16229] Call Trace:
[  365.315362][T16229]  <TASK>
[  365.315371][T16229]  __dump_stack+0x1d/0x30
[  365.315419][T16229]  dump_stack_lvl+0xe8/0x140
[  365.315464][T16229]  dump_stack+0x15/0x1b
[  365.315506][T16229]  should_fail_ex+0x265/0x280
[  365.315545][T16229]  should_fail+0xb/0x20
[  365.315577][T16229]  should_fail_usercopy+0x1a/0x20
[  365.315689][T16229]  _copy_from_iter+0xd2/0xe80
[  365.315731][T16229]  ? __build_skb_around+0x1ab/0x200
[  365.315820][T16229]  ? __alloc_skb+0x223/0x320
[  365.315851][T16229]  netlink_sendmsg+0x471/0x6b0
[  365.315900][T16229]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.315939][T16229]  __sock_sendmsg+0x142/0x180
[  365.316007][T16229]  ____sys_sendmsg+0x31e/0x4e0
[  365.316043][T16229]  ___sys_sendmsg+0x17b/0x1d0
[  365.316136][T16229]  __x64_sys_sendmsg+0xd4/0x160
[  365.316175][T16229]  x64_sys_call+0x191e/0x3000
[  365.316196][T16229]  do_syscall_64+0xd2/0x200
[  365.316260][T16229]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  365.316296][T16229]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  365.316359][T16229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.316388][T16229] RIP: 0033:0x7fb12ea8eec9
[  365.316409][T16229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.316434][T16229] RSP: 002b:00007fb12d4ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.316459][T16229] RAX: ffffffffffffffda RBX: 00007fb12ece5fa0 RCX: 00007fb12ea8eec9
[  365.316473][T16229] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  365.316541][T16229] RBP: 00007fb12d4ef090 R08: 0000000000000000 R09: 0000000000000000
[  365.316557][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.316573][T16229] R13: 00007fb12ece6038 R14: 00007fb12ece5fa0 R15: 00007ffe334da9f8
[  365.316595][T16229]  </TASK>
[  365.606817][T16235] SELinux: ebitmap: truncated map
[  365.624208][T16235] SELinux: failed to load policy
[  365.664873][T16245] netlink: 'syz.3.4347': attribute type 10 has an invalid length.
[  365.707664][T16245] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  365.783772][T16245] 8021q: adding VLAN 0 to HW filter on device bond3
[  366.812678][T16305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.824886][T16305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.854235][T16305] lo speed is unknown, defaulting to 1000
[  367.348934][   T29] kauditd_printk_skb: 1897 callbacks suppressed
[  367.348953][   T29] audit: type=1400 audit(1759488755.784:34157): avc:  denied  { read } for  pid=16318 comm="syz.5.4370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  367.375316][   T29] audit: type=1326 audit(1759488755.831:34158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.2.4373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x0
[  367.454800][   T29] audit: type=1326 audit(1759488755.915:34159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  367.478561][   T29] audit: type=1326 audit(1759488755.915:34160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  367.502920][   T29] audit: type=1326 audit(1759488755.915:34161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  367.526804][   T29] audit: type=1326 audit(1759488755.915:34162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  367.550625][   T29] audit: type=1326 audit(1759488755.915:34163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  367.575380][   T29] audit: type=1326 audit(1759488755.915:34164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  367.599806][   T29] audit: type=1326 audit(1759488755.915:34165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  367.623537][   T29] audit: type=1326 audit(1759488755.915:34166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.5.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155f71eec9 code=0x7ffc0000
[  369.556782][T16369] lo speed is unknown, defaulting to 1000
[  369.732092][T16388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.743351][T16388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.767767][T16388] lo speed is unknown, defaulting to 1000
[  370.526080][T16403] pimreg: entered allmulticast mode
[  370.578048][T16402] pimreg: left allmulticast mode
[  370.689232][T16412] lo speed is unknown, defaulting to 1000
[  371.056505][T16435] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4415'.
[  372.229024][T16455] netlink: 'syz.0.4420': attribute type 10 has an invalid length.
[  372.252649][T16455] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  372.405517][T16455] 8021q: adding VLAN 0 to HW filter on device bond1
[  372.456482][T16474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  372.464479][T16474] IPv6: NLM_F_CREATE should be set when creating new route
[  372.776589][   T29] kauditd_printk_skb: 231 callbacks suppressed
[  372.776607][   T29] audit: type=1326 audit(1759488760.911:34398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  372.801734][T16505] lo speed is unknown, defaulting to 1000
[  372.826813][T16506] lo speed is unknown, defaulting to 1000
[  372.836353][   T29] audit: type=1326 audit(1759488760.911:34399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  372.861666][   T29] audit: type=1326 audit(1759488760.911:34400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  372.885620][   T29] audit: type=1326 audit(1759488760.920:34401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb35ba9ef03 code=0x7ffc0000
[  372.903932][T16507] block device autoloading is deprecated and will be removed.
[  372.909207][   T29] audit: type=1326 audit(1759488760.920:34402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb35ba9ef03 code=0x7ffc0000
[  372.940539][   T29] audit: type=1326 audit(1759488760.920:34403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  372.964587][   T29] audit: type=1326 audit(1759488760.920:34404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  372.988604][   T29] audit: type=1326 audit(1759488760.920:34405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  373.012416][   T29] audit: type=1326 audit(1759488760.920:34406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  373.036359][   T29] audit: type=1326 audit(1759488760.920:34407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16504 comm="syz.2.4440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  373.195701][T16512] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  373.229871][T16514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4443'.
[  373.242270][T16514] vlan1: entered promiscuous mode
[  373.247362][T16514] bond0: entered promiscuous mode
[  373.252532][T16514] bond_slave_0: entered promiscuous mode
[  373.258435][T16514] bond_slave_1: entered promiscuous mode
[  373.610877][T16529] lo speed is unknown, defaulting to 1000
[  374.084065][T16546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  374.091369][T16546] IPv6: NLM_F_CREATE should be set when creating new route
[  374.408933][T16566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.437066][T16566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.754526][T16590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  374.761908][T16590] IPv6: NLM_F_CREATE should be set when creating new route
[  375.754974][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4484'.
[  375.816508][T16632] FAULT_INJECTION: forcing a failure.
[  375.816508][T16632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.829823][T16632] CPU: 0 UID: 0 PID: 16632 Comm: syz.1.4486 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  375.829851][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  375.829864][T16632] Call Trace:
[  375.829870][T16632]  <TASK>
[  375.829879][T16632]  __dump_stack+0x1d/0x30
[  375.829976][T16632]  dump_stack_lvl+0xe8/0x140
[  375.830026][T16632]  dump_stack+0x15/0x1b
[  375.830108][T16632]  should_fail_ex+0x265/0x280
[  375.830210][T16632]  should_fail+0xb/0x20
[  375.830272][T16632]  should_fail_usercopy+0x1a/0x20
[  375.830304][T16632]  _copy_from_user+0x1c/0xb0
[  375.830333][T16632]  get_user_ifreq+0x53/0x110
[  375.830375][T16632]  sock_ioctl+0x54e/0x610
[  375.830417][T16632]  ? __pfx_sock_ioctl+0x10/0x10
[  375.830461][T16632]  __se_sys_ioctl+0xcb/0x140
[  375.830482][T16632]  __x64_sys_ioctl+0x43/0x50
[  375.830501][T16632]  x64_sys_call+0x1816/0x3000
[  375.830526][T16632]  do_syscall_64+0xd2/0x200
[  375.830553][T16632]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  375.830589][T16632]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  375.830702][T16632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.830731][T16632] RIP: 0033:0x7f4ef6bdeec9
[  375.830750][T16632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.830768][T16632] RSP: 002b:00007f4ef5647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  375.830855][T16632] RAX: ffffffffffffffda RBX: 00007f4ef6e35fa0 RCX: 00007f4ef6bdeec9
[  375.830873][T16632] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004
[  375.830889][T16632] RBP: 00007f4ef5647090 R08: 0000000000000000 R09: 0000000000000000
[  375.830968][T16632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.831081][T16632] R13: 00007f4ef6e36038 R14: 00007f4ef6e35fa0 R15: 00007ffd47bc9498
[  375.831184][T16632]  </TASK>
[  376.090468][T16644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.104860][T16644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.152206][T16624] batman_adv: batadv0: Interface deactivated: veth1_vlan
[  376.228567][ T9415] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.237861][ T9415] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  376.247003][ T1033] lo speed is unknown, defaulting to 1000
[  376.252802][ T1033] syz0: Port: 1 Link DOWN
[  376.317808][ T9415] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.326774][ T9415] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  376.372937][ T9415] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.382455][ T9415] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  376.418585][ T9415] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  376.427650][ T9415] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  376.561582][T16672] lo speed is unknown, defaulting to 1000
[  376.633141][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4496'.
[  376.666871][T16682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  377.150358][T16698] netlink: 'syz.5.4503': attribute type 13 has an invalid length.
[  377.158569][T16698] netlink: 'syz.5.4503': attribute type 17 has an invalid length.
[  377.253601][T16698] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.297631][T16698] 8021q: adding VLAN 0 to HW filter on device team0
[  377.311711][T16698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  377.327976][T16649] lo speed is unknown, defaulting to 1000
[  377.333935][T16649] syz0: Port: 1 Link ACTIVE
[  377.406176][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.415279][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.486021][T16706] lo speed is unknown, defaulting to 1000
[  377.502322][T16712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  377.509599][T16712] IPv6: NLM_F_CREATE should be set when creating new route
[  377.531151][T16710] netlink: 'syz.5.4508': attribute type 4 has an invalid length.
[  377.646536][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4510'.
[  377.714359][T16640] lo speed is unknown, defaulting to 1000
[  377.720273][T16640] syz0: Port: 1 Link DOWN
[  379.119969][T16752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  379.159488][   T29] kauditd_printk_skb: 419 callbacks suppressed
[  379.159510][   T29] audit: type=1326 audit(1759488766.879:34827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16755 comm="syz.0.4522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91047aeec9 code=0x0
[  380.258881][   T29] audit: type=1326 audit(1759488767.908:34828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.400517][   T29] audit: type=1326 audit(1759488767.936:34829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.425349][   T29] audit: type=1326 audit(1759488767.936:34830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.450226][   T29] audit: type=1326 audit(1759488767.936:34831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.474177][   T29] audit: type=1326 audit(1759488767.936:34832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.498955][   T29] audit: type=1326 audit(1759488767.936:34833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.522918][   T29] audit: type=1326 audit(1759488767.936:34834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.546984][   T29] audit: type=1326 audit(1759488767.936:34835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.570765][   T29] audit: type=1326 audit(1759488767.936:34836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.1.4523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  380.732341][T16773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  380.845140][T16786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  380.866795][T16774] lo speed is unknown, defaulting to 1000
[  380.894152][T16790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.919280][T16790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.972871][T16774] chnl_net:caif_netlink_parms(): no params data found
[  381.000070][T16790] lo speed is unknown, defaulting to 1000
[  381.088817][T16774] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.096140][T16774] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.103899][T16774] bridge_slave_0: entered allmulticast mode
[  381.111694][T16774] bridge_slave_0: entered promiscuous mode
[  381.119434][T16774] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.126575][T16774] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.135678][T16774] bridge_slave_1: entered allmulticast mode
[  381.144030][T16774] bridge_slave_1: entered promiscuous mode
[  381.180081][T16774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.192607][T16774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.231614][T16804] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  381.235526][T16774] team0: Port device team_slave_0 added
[  381.239420][T16804] IPv6: NLM_F_CREATE should be set when creating new route
[  381.257128][T16774] team0: Port device team_slave_1 added
[  381.285916][T16774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.293305][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.320287][T16774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.339101][T16774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.346515][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  381.373556][T16774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.379418][T16810] netlink: 'syz.2.4536': attribute type 10 has an invalid length.
[  381.418054][T16810] syz_tun: entered promiscuous mode
[  381.425292][T16810] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  381.471070][T16774] hsr_slave_0: entered promiscuous mode
[  381.477590][T16774] hsr_slave_1: entered promiscuous mode
[  381.484875][T16774] debugfs: 'hsr0' already exists in 'hsr'
[  381.490745][T16774] Cannot create hsr debugfs directory
[  381.503486][T16810] 8021q: adding VLAN 0 to HW filter on device bond1
[  381.622588][T16807] tipc: Started in network mode
[  381.627538][T16807] tipc: Node identity fa0a8947f293, cluster identity 4711
[  381.634864][T16807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.661928][T16823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  381.669314][T16823] IPv6: NLM_F_CREATE should be set when creating new route
[  381.689673][T16806] tipc: Resetting bearer <eth:syzkaller0>
[  381.756099][T16806] tipc: Disabling bearer <eth:syzkaller0>
[  381.961467][T16845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.977266][T16845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.058020][ T9382] bond2 (unregistering): (slave geneve2): Releasing active interface
[  382.066363][ T9382] geneve2 (unregistering): left promiscuous mode
[  382.113842][ T9382] bond0 (unregistering): Released all slaves
[  382.122993][ T9382] bond1 (unregistering): Released all slaves
[  382.162326][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.166508][ T9382] bond2 (unregistering): Released all slaves
[  382.172404][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.189274][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.235539][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.238539][T16774] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  382.258266][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.262723][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.268152][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.285325][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.332543][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.342485][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.352290][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4549'.
[  382.364603][ T9382] hsr_slave_0: left promiscuous mode
[  382.375010][ T9382] batman_adv: batadv0: Removing interface: veth1_vlan
[  382.455474][T16845] futex_wake_op: syz.1.4549 tries to shift op by 144; fix this program
[  382.530648][T16774] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  382.565202][T16774] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  382.583262][T16774] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  382.654663][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4553'.
[  382.676860][T16774] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.840452][T16774] 8021q: adding VLAN 0 to HW filter on device team0
[  382.859099][T16889] futex_wake_op: syz.3.4553 tries to shift op by 144; fix this program
[  382.870371][ T9382] IPVS: stop unused estimator thread 0...
[  382.891384][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.898559][ T9377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.940350][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.947528][ T9377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.060740][T16774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  383.245713][T16774] veth0_vlan: entered promiscuous mode
[  383.256990][T16774] veth1_vlan: entered promiscuous mode
[  383.509383][T16774] veth0_macvtap: entered promiscuous mode
[  383.606212][T16774] veth1_macvtap: entered promiscuous mode
[  383.700929][T16774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.718352][T16774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.737281][ T9382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.756577][ T9382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.777306][ T9377] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.787445][ T9377] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.912751][T16958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  383.920209][T16958] IPv6: NLM_F_CREATE should be set when creating new route
[  384.026634][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.035400][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.072478][T16964] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  384.283722][T16990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  384.291196][T16990] IPv6: NLM_F_CREATE should be set when creating new route
[  384.854131][T17004] rtc_cmos 00:00: Alarms can be up to one day in the future
[  384.862981][T16640] rtc_cmos 00:00: Alarms can be up to one day in the future
[  384.870854][T16640] rtc_cmos 00:00: Alarms can be up to one day in the future
[  384.878876][T16640] rtc_cmos 00:00: Alarms can be up to one day in the future
[  384.886674][T16640] rtc_cmos 00:00: Alarms can be up to one day in the future
[  384.894298][T16640] rtc rtc0: __rtc_set_alarm: err=-22
[  384.945442][   T29] kauditd_printk_skb: 1477 callbacks suppressed
[  384.945465][   T29] audit: type=1326 audit(1759488772.202:36314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  384.976047][   T29] audit: type=1326 audit(1759488772.202:36315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  385.000091][   T29] audit: type=1400 audit(1759488772.202:36316): avc:  denied  { read } for  pid=17003 comm="syz.1.4594" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  385.024107][   T29] audit: type=1326 audit(1759488772.202:36317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  385.048357][   T29] audit: type=1326 audit(1759488772.202:36318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  385.072935][   T29] audit: type=1326 audit(1759488772.202:36319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  385.097281][   T29] audit: type=1400 audit(1759488772.202:36320): avc:  denied  { ioctl } for  pid=17003 comm="syz.1.4594" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  385.123430][   T29] audit: type=1326 audit(1759488772.202:36321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  385.147667][   T29] audit: type=1326 audit(1759488772.202:36322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  385.172170][   T29] audit: type=1326 audit(1759488772.202:36323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17003 comm="syz.1.4594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  385.311855][T17025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.321050][T17025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.415225][T17040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.427505][T17037] lo speed is unknown, defaulting to 1000
[  385.454252][T17037] lo speed is unknown, defaulting to 1000
[  385.475845][T17037] lo speed is unknown, defaulting to 1000
[  385.492738][T17037] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  385.511384][T17037] lo speed is unknown, defaulting to 1000
[  385.520892][T17037] lo speed is unknown, defaulting to 1000
[  385.527124][T17037] lo speed is unknown, defaulting to 1000
[  385.536630][T17037] lo speed is unknown, defaulting to 1000
[  385.543258][T17037] lo speed is unknown, defaulting to 1000
[  385.549646][T17037] lo speed is unknown, defaulting to 1000
[  385.557088][T17037] lo speed is unknown, defaulting to 1000
[  385.563549][T17037] lo speed is unknown, defaulting to 1000
[  385.569919][T17037] lo speed is unknown, defaulting to 1000
[  385.576482][T17037] lo speed is unknown, defaulting to 1000
[  385.582874][T17037] lo speed is unknown, defaulting to 1000
[  385.781912][T17062] netlink: 'syz.3.4614': attribute type 10 has an invalid length.
[  386.090458][T17070] netlink: 'syz.3.4616': attribute type 10 has an invalid length.
[  386.287273][T17088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  386.429846][T17104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.472066][T17104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.527091][T17108] netlink: 'syz.0.4629': attribute type 10 has an invalid length.
[  387.151045][T17104] futex_wake_op: syz.1.4627 tries to shift op by 144; fix this program
[  387.609997][T17161] FAULT_INJECTION: forcing a failure.
[  387.609997][T17161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.623883][T17161] CPU: 0 UID: 0 PID: 17161 Comm: syz.3.4646 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  387.623918][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  387.623934][T17161] Call Trace:
[  387.623943][T17161]  <TASK>
[  387.624009][T17161]  __dump_stack+0x1d/0x30
[  387.624043][T17161]  dump_stack_lvl+0xe8/0x140
[  387.624074][T17161]  dump_stack+0x15/0x1b
[  387.624102][T17161]  should_fail_ex+0x265/0x280
[  387.624166][T17161]  should_fail+0xb/0x20
[  387.624189][T17161]  should_fail_usercopy+0x1a/0x20
[  387.624226][T17161]  _copy_from_user+0x1c/0xb0
[  387.624325][T17161]  dev_ethtool+0x52/0x1670
[  387.624360][T17161]  dev_ioctl+0x2e0/0x960
[  387.624474][T17161]  sock_do_ioctl+0x197/0x220
[  387.624507][T17161]  sock_ioctl+0x41b/0x610
[  387.624568][T17161]  ? __pfx_sock_ioctl+0x10/0x10
[  387.624597][T17161]  __se_sys_ioctl+0xcb/0x140
[  387.624615][T17161]  __x64_sys_ioctl+0x43/0x50
[  387.624735][T17161]  x64_sys_call+0x1816/0x3000
[  387.624755][T17161]  do_syscall_64+0xd2/0x200
[  387.624774][T17161]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  387.624799][T17161]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  387.624837][T17161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.624967][T17161] RIP: 0033:0x7fb12ea8eec9
[  387.624981][T17161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.624997][T17161] RSP: 002b:00007fb12d4ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  387.625014][T17161] RAX: ffffffffffffffda RBX: 00007fb12ece5fa0 RCX: 00007fb12ea8eec9
[  387.625025][T17161] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000004
[  387.625087][T17161] RBP: 00007fb12d4ef090 R08: 0000000000000000 R09: 0000000000000000
[  387.625098][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.625108][T17161] R13: 00007fb12ece6038 R14: 00007fb12ece5fa0 R15: 00007ffe334da9f8
[  387.625125][T17161]  </TASK>
[  387.894498][T17173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  387.964142][T17184] netlink: 'syz.2.4656': attribute type 10 has an invalid length.
[  388.050821][T17184] 8021q: adding VLAN 0 to HW filter on device bond2
[  389.342354][T17221] netlink: 'syz.2.4670': attribute type 39 has an invalid length.
[  389.512774][T17231] netlink: 'syz.5.4672': attribute type 10 has an invalid length.
[  389.526177][T17231] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  389.534630][T17223] SELinux: failed to load policy
[  389.550441][T17224] lo speed is unknown, defaulting to 1000
[  389.565940][T17231] 8021q: adding VLAN 0 to HW filter on device bond1
[  391.050394][   T29] kauditd_printk_skb: 483 callbacks suppressed
[  391.050410][   T29] audit: type=1326 audit(1759488778.003:36807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.108693][T17257] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  391.116153][T17266] netlink: 'syz.0.4686': attribute type 10 has an invalid length.
[  391.127046][T17260] lo speed is unknown, defaulting to 1000
[  391.146876][   T29] audit: type=1326 audit(1759488778.040:36808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.171902][   T29] audit: type=1326 audit(1759488778.040:36809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb35ba9ef03 code=0x7ffc0000
[  391.197638][   T29] audit: type=1326 audit(1759488778.040:36810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb35ba9ef03 code=0x7ffc0000
[  391.201002][T17272] 8021q: adding VLAN 0 to HW filter on device bond2
[  391.221947][   T29] audit: type=1326 audit(1759488778.040:36811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.254237][   T29] audit: type=1326 audit(1759488778.049:36812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.278470][   T29] audit: type=1326 audit(1759488778.049:36813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.302981][   T29] audit: type=1326 audit(1759488778.049:36814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.327523][   T29] audit: type=1326 audit(1759488778.049:36815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.352462][   T29] audit: type=1326 audit(1759488778.049:36816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  391.703470][T17314] __nla_validate_parse: 17 callbacks suppressed
[  391.703493][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4699'.
[  391.776059][T17322] netlink: 'syz.2.4702': attribute type 10 has an invalid length.
[  391.814982][T17322] 8021q: adding VLAN 0 to HW filter on device bond3
[  391.972515][T17335] FAULT_INJECTION: forcing a failure.
[  391.972515][T17335] name failslab, interval 1, probability 0, space 0, times 0
[  391.985451][T17335] CPU: 1 UID: 0 PID: 17335 Comm: syz.3.4707 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  391.985483][T17335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  391.985528][T17335] Call Trace:
[  391.985594][T17335]  <TASK>
[  391.985660][T17335]  __dump_stack+0x1d/0x30
[  391.985707][T17335]  dump_stack_lvl+0xe8/0x140
[  391.985797][T17335]  dump_stack+0x15/0x1b
[  391.985828][T17335]  should_fail_ex+0x265/0x280
[  391.985868][T17335]  should_failslab+0x8c/0xb0
[  391.985898][T17335]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  391.985997][T17335]  ? __alloc_skb+0x101/0x320
[  391.986022][T17335]  __alloc_skb+0x101/0x320
[  391.986051][T17335]  netlink_alloc_large_skb+0xbf/0xf0
[  391.986085][T17335]  netlink_sendmsg+0x3cf/0x6b0
[  391.986136][T17335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.986172][T17335]  __sock_sendmsg+0x142/0x180
[  391.986198][T17335]  ____sys_sendmsg+0x31e/0x4e0
[  391.986320][T17335]  ___sys_sendmsg+0x17b/0x1d0
[  391.986372][T17335]  __x64_sys_sendmsg+0xd4/0x160
[  391.986450][T17335]  x64_sys_call+0x191e/0x3000
[  391.986476][T17335]  do_syscall_64+0xd2/0x200
[  391.986513][T17335]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  391.986556][T17335]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  391.986640][T17335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.986678][T17335] RIP: 0033:0x7fb12ea8eec9
[  391.986698][T17335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.986720][T17335] RSP: 002b:00007fb12d4ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  391.986739][T17335] RAX: ffffffffffffffda RBX: 00007fb12ece5fa0 RCX: 00007fb12ea8eec9
[  391.986751][T17335] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  391.986763][T17335] RBP: 00007fb12d4ef090 R08: 0000000000000000 R09: 0000000000000000
[  391.986833][T17335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.986850][T17335] R13: 00007fb12ece6038 R14: 00007fb12ece5fa0 R15: 00007ffe334da9f8
[  391.986873][T17335]  </TASK>
[  392.296306][T17329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  392.329656][T17344] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  392.695768][T17370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.751371][T17361] tipc: Started in network mode
[  392.757183][T17361] tipc: Node identity 2684d145fa02, cluster identity 4711
[  392.764929][T17361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.802274][T17360] tipc: Resetting bearer <eth:syzkaller0>
[  392.870194][T17360] tipc: Disabling bearer <eth:syzkaller0>
[  392.884375][T17375] syzkaller1: entered promiscuous mode
[  392.890168][T17375] syzkaller1: entered allmulticast mode
[  392.897864][T17375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8236 sclass=netlink_route_socket pid=17375 comm=syz.0.4724
[  392.971045][T17389] netlink: 'syz.3.4728': attribute type 10 has an invalid length.
[  393.014341][T17389] 8021q: adding VLAN 0 to HW filter on device bond4
[  393.159539][T17411] lo speed is unknown, defaulting to 1000
[  393.425020][T17429] netlink: 'syz.5.4742': attribute type 10 has an invalid length.
[  393.474484][T17429] 8021q: adding VLAN 0 to HW filter on device bond2
[  393.634379][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4745'.
[  393.791901][T17448] lo speed is unknown, defaulting to 1000
[  393.926845][T17451] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  394.540424][T17465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  394.775518][T17476] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.782924][T17476] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.790497][T17476] bridge0: entered allmulticast mode
[  394.799025][T17476] bridge_slave_1: left allmulticast mode
[  394.804900][T17476] bridge_slave_1: left promiscuous mode
[  394.810851][T17476] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.818860][T17476] bridge_slave_0: left allmulticast mode
[  394.824845][T17476] bridge_slave_0: left promiscuous mode
[  394.830601][T17476] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.917155][T17492] netlink: 'syz.1.4765': attribute type 10 has an invalid length.
[  394.983399][T17492] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  394.994648][T17476] netlink: 'syz.0.4762': attribute type 31 has an invalid length.
[  395.040807][T17492] 8021q: adding VLAN 0 to HW filter on device bond1
[  395.090642][T17507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  395.098462][T17507] IPv6: NLM_F_CREATE should be set when creating new route
[  396.001166][T17552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.009927][T17552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.034334][T17552] lo speed is unknown, defaulting to 1000
[  396.046520][T17553] tipc: Started in network mode
[  396.051485][T17553] tipc: Node identity 8e55ddf272f4, cluster identity 4711
[  396.058680][T17553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.135327][T17545] tipc: Resetting bearer <eth:syzkaller0>
[  396.170751][T17545] tipc: Disabling bearer <eth:syzkaller0>
[  396.263644][T17561] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  396.449578][T17590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  396.457086][T17590] IPv6: NLM_F_CREATE should be set when creating new route
[  396.585652][T17594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.597252][T17593] tipc: Resetting bearer <eth:syzkaller0>
[  396.977541][T17593] tipc: Disabling bearer <eth:syzkaller0>
[  397.204180][   T29] kauditd_printk_skb: 93 callbacks suppressed
[  397.204200][   T29] audit: type=1326 audit(1759488783.766:36910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.236345][   T29] audit: type=1326 audit(1759488783.784:36911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.260317][   T29] audit: type=1326 audit(1759488783.784:36912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.284454][   T29] audit: type=1326 audit(1759488783.784:36913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.309983][   T29] audit: type=1326 audit(1759488783.794:36914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.321754][   T29] audit: type=1326 audit(1759488783.794:36915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.366103][   T29] audit: type=1326 audit(1759488783.794:36916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.390687][   T29] audit: type=1326 audit(1759488783.794:36917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.414855][   T29] audit: type=1326 audit(1759488783.794:36918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.438761][   T29] audit: type=1326 audit(1759488783.794:36919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17612 comm="syz.1.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ef6bdeec9 code=0x7ffc0000
[  397.744730][T17633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.766186][T17632] tipc: Resetting bearer <eth:syzkaller0>
[  397.814956][T17632] tipc: Disabling bearer <eth:syzkaller0>
[  397.992736][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4825'.
[  398.012693][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4825'.
[  398.062766][T17670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4825'.
[  398.632209][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[  398.642662][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[  398.651991][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[  398.671694][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[  398.681062][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[  398.690072][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[  398.719980][T17698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.751669][T17694] futex_wake_op: syz.2.4831 tries to shift op by 144; fix this program
[  398.808383][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'.
[  398.818232][T17692] tipc: Resetting bearer <eth:syzkaller0>
[  398.849533][T17692] tipc: Disabling bearer <eth:syzkaller0>
[  398.860398][T16651] IPVS: starting estimator thread 0...
[  398.866122][T17701] IPVS: nq: FWM 3 0x00000003 - no destination available
[  398.949166][T17709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.957954][T17702] IPVS: using max 2400 ests per chain, 120000 per kthread
[  398.966634][T17709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.994611][T17714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.998482][T17709] lo speed is unknown, defaulting to 1000
[  399.003529][T17714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.178497][T17728] lo speed is unknown, defaulting to 1000
[  399.541191][T17735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.562230][T17734] tipc: Resetting bearer <eth:syzkaller0>
[  399.574866][T17734] tipc: Disabling bearer <eth:syzkaller0>
[  399.677590][T17760] IPVS: nq: FWM 3 0x00000003 - no destination available
[  399.701873][T16651] IPVS: starting estimator thread 0...
[  399.801514][T17761] IPVS: using max 2448 ests per chain, 122400 per kthread
[  399.965542][T17795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.003902][T17786] tipc: Resetting bearer <eth:syzkaller0>
[  400.028841][T17786] tipc: Disabling bearer <eth:syzkaller0>
[  400.076001][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.085935][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  400.155097][T17799] lo speed is unknown, defaulting to 1000
[  400.324491][T17823] IPVS: nq: FWM 3 0x00000003 - no destination available
[  400.437637][T17828] FAULT_INJECTION: forcing a failure.
[  400.437637][T17828] name failslab, interval 1, probability 0, space 0, times 0
[  400.451612][T17828] CPU: 1 UID: 0 PID: 17828 Comm: syz.3.4883 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  400.451664][T17828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  400.451676][T17828] Call Trace:
[  400.451684][T17828]  <TASK>
[  400.451694][T17828]  __dump_stack+0x1d/0x30
[  400.451783][T17828]  dump_stack_lvl+0xe8/0x140
[  400.451825][T17828]  dump_stack+0x15/0x1b
[  400.451896][T17828]  should_fail_ex+0x265/0x280
[  400.451994][T17828]  ? v9fs_mount+0x51/0x5c0
[  400.452024][T17828]  should_failslab+0x8c/0xb0
[  400.452050][T17828]  __kmalloc_cache_noprof+0x4c/0x4a0
[  400.452128][T17828]  v9fs_mount+0x51/0x5c0
[  400.452219][T17828]  ? selinux_capable+0x31/0x40
[  400.452251][T17828]  ? __pfx_v9fs_mount+0x10/0x10
[  400.452354][T17828]  legacy_get_tree+0x78/0xd0
[  400.452381][T17828]  vfs_get_tree+0x57/0x1d0
[  400.452406][T17828]  do_new_mount+0x207/0x600
[  400.452430][T17828]  ? security_capable+0x83/0x90
[  400.452514][T17828]  path_mount+0x4a4/0xb30
[  400.452573][T17828]  ? user_path_at+0x109/0x130
[  400.452592][T17828]  __se_sys_mount+0x28f/0x2e0
[  400.452617][T17828]  ? fput+0x8f/0xc0
[  400.452765][T17828]  __x64_sys_mount+0x67/0x80
[  400.452791][T17828]  x64_sys_call+0x2b51/0x3000
[  400.452812][T17828]  do_syscall_64+0xd2/0x200
[  400.452864][T17828]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  400.452908][T17828]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  400.453039][T17828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.453062][T17828] RIP: 0033:0x7fb12ea8eec9
[  400.453104][T17828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.453122][T17828] RSP: 002b:00007fb12d4ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  400.453142][T17828] RAX: ffffffffffffffda RBX: 00007fb12ece5fa0 RCX: 00007fb12ea8eec9
[  400.453155][T17828] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[  400.453169][T17828] RBP: 00007fb12d4ef090 R08: 0000200000000240 R09: 0000000000000000
[  400.453181][T17828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.453219][T17828] R13: 00007fb12ece6038 R14: 00007fb12ece5fa0 R15: 00007ffe334da9f8
[  400.453241][T17828]  </TASK>
[  401.411854][T17882] FAULT_INJECTION: forcing a failure.
[  401.411854][T17882] name failslab, interval 1, probability 0, space 0, times 0
[  401.425710][T17882] CPU: 0 UID: 0 PID: 17882 Comm: syz.0.4897 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  401.425736][T17882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  401.425758][T17882] Call Trace:
[  401.425850][T17882]  <TASK>
[  401.425860][T17882]  __dump_stack+0x1d/0x30
[  401.425894][T17882]  dump_stack_lvl+0xe8/0x140
[  401.425926][T17882]  dump_stack+0x15/0x1b
[  401.425976][T17882]  should_fail_ex+0x265/0x280
[  401.426022][T17882]  should_failslab+0x8c/0xb0
[  401.426053][T17882]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  401.426089][T17882]  ? __alloc_skb+0x101/0x320
[  401.426149][T17882]  __alloc_skb+0x101/0x320
[  401.426262][T17882]  netlink_alloc_large_skb+0xbf/0xf0
[  401.426299][T17882]  netlink_sendmsg+0x3cf/0x6b0
[  401.426340][T17882]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.426442][T17882]  __sock_sendmsg+0x142/0x180
[  401.426460][T17882]  sock_write_iter+0x1a7/0x1f0
[  401.426495][T17882]  do_iter_readv_writev+0x4a1/0x540
[  401.426525][T17882]  vfs_writev+0x2df/0x8b0
[  401.426703][T17882]  do_writev+0xe7/0x210
[  401.426732][T17882]  __x64_sys_writev+0x45/0x50
[  401.426767][T17882]  x64_sys_call+0x1e9a/0x3000
[  401.426818][T17882]  do_syscall_64+0xd2/0x200
[  401.426846][T17882]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  401.426871][T17882]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  401.426902][T17882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.426943][T17882] RIP: 0033:0x7f91047aeec9
[  401.426957][T17882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.426973][T17882] RSP: 002b:00007f910320f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  401.426991][T17882] RAX: ffffffffffffffda RBX: 00007f9104a05fa0 RCX: 00007f91047aeec9
[  401.427002][T17882] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004
[  401.427016][T17882] RBP: 00007f910320f090 R08: 0000000000000000 R09: 0000000000000000
[  401.427027][T17882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.427050][T17882] R13: 00007f9104a06038 R14: 00007f9104a05fa0 R15: 00007fff324185c8
[  401.427068][T17882]  </TASK>
[  401.774151][T17896] lo speed is unknown, defaulting to 1000
[  402.042083][T17914] FAULT_INJECTION: forcing a failure.
[  402.042083][T17914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  402.055961][T17914] CPU: 0 UID: 0 PID: 17914 Comm: syz.3.4915 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  402.055992][T17914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  402.056005][T17914] Call Trace:
[  402.056013][T17914]  <TASK>
[  402.056024][T17914]  __dump_stack+0x1d/0x30
[  402.056135][T17914]  dump_stack_lvl+0xe8/0x140
[  402.056179][T17914]  dump_stack+0x15/0x1b
[  402.056220][T17914]  should_fail_ex+0x265/0x280
[  402.056257][T17914]  should_fail+0xb/0x20
[  402.056321][T17914]  should_fail_usercopy+0x1a/0x20
[  402.056361][T17914]  _copy_to_user+0x20/0xa0
[  402.056389][T17914]  simple_read_from_buffer+0xb5/0x130
[  402.056422][T17914]  proc_fail_nth_read+0x10e/0x150
[  402.056485][T17914]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  402.056519][T17914]  vfs_read+0x1a5/0x770
[  402.056542][T17914]  ? __rcu_read_unlock+0x4f/0x70
[  402.056568][T17914]  ? __fget_files+0x184/0x1c0
[  402.056630][T17914]  ksys_read+0xda/0x1a0
[  402.056772][T17914]  __x64_sys_read+0x40/0x50
[  402.056800][T17914]  x64_sys_call+0x27c0/0x3000
[  402.056828][T17914]  do_syscall_64+0xd2/0x200
[  402.056855][T17914]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  402.056904][T17914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.056982][T17914] RIP: 0033:0x7fb12ea8d8dc
[  402.057014][T17914] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  402.057038][T17914] RSP: 002b:00007fb12d4ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  402.057076][T17914] RAX: ffffffffffffffda RBX: 00007fb12ece5fa0 RCX: 00007fb12ea8d8dc
[  402.057092][T17914] RDX: 000000000000000f RSI: 00007fb12d4ef0a0 RDI: 0000000000000004
[  402.057107][T17914] RBP: 00007fb12d4ef090 R08: 0000000000000000 R09: 0000000000000000
[  402.057124][T17914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.057140][T17914] R13: 00007fb12ece6038 R14: 00007fb12ece5fa0 R15: 00007ffe334da9f8
[  402.057166][T17914]  </TASK>
[  402.443193][T17930] lo speed is unknown, defaulting to 1000
[  402.623373][   T29] kauditd_printk_skb: 777 callbacks suppressed
[  402.623388][   T29] audit: type=1326 audit(1759488788.827:37697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91047e1785 code=0x7ffc0000
[  402.792058][   T29] audit: type=1326 audit(1759488788.976:37698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17947 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f91047aeec9 code=0x7ffc0000
[  402.853362][   T29] audit: type=1326 audit(1759488789.014:37699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91047a5d67 code=0x7ffc0000
[  402.877447][   T29] audit: type=1326 audit(1759488789.014:37700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f910474af79 code=0x7ffc0000
[  402.901971][   T29] audit: type=1326 audit(1759488789.014:37701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91047aeec9 code=0x7ffc0000
[  402.925887][   T29] audit: type=1326 audit(1759488789.014:37702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17929 comm="syz.0.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91047aeec9 code=0x7ffc0000
[  403.004507][   T29] audit: type=1326 audit(1759488789.192:37703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17967 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a7f8eec9 code=0x7ffc0000
[  403.029360][   T29] audit: type=1326 audit(1759488789.192:37704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17967 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a7f8eec9 code=0x7ffc0000
[  403.054396][   T29] audit: type=1326 audit(1759488789.192:37705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17967 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a7f8eec9 code=0x7ffc0000
[  403.079306][   T29] audit: type=1326 audit(1759488789.192:37706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17967 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a7f8eec9 code=0x7ffc0000
[  403.244363][T17992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  403.251856][T17992] IPv6: NLM_F_CREATE should be set when creating new route
[  403.411049][T18006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.435833][T18006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.705294][T18019] IPVS: nq: FWM 3 0x00000003 - no destination available
[  403.738611][T18021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  403.818846][T18006] __nla_validate_parse: 5 callbacks suppressed
[  403.818926][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.834639][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.844379][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.882056][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.891130][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.900342][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.968222][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.977491][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  403.986801][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4951'.
[  404.058185][T18006] futex_wake_op: syz.1.4951 tries to shift op by 144; fix this program
[  404.821581][T18071] IPVS: nq: FWM 3 0x00000003 - no destination available
[  405.135856][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4982'.
[  405.243692][T18099] netlink: 'syz.2.4985': attribute type 10 has an invalid length.
[  405.269945][T18101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  405.322632][T18099] 8021q: adding VLAN 0 to HW filter on device bond4
[  406.546010][T18161] netlink: 'syz.0.5006': attribute type 21 has an invalid length.
[  406.649969][T18173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  406.920224][T18187] netlink: 'syz.0.5018': attribute type 10 has an invalid length.
[  406.955214][T18187] 8021q: adding VLAN 0 to HW filter on device bond3
[  406.998635][T18194] random: crng reseeded on system resumption
[  407.353040][T18211] IPVS: nq: FWM 3 0x00000003 - no destination available
[  407.400233][T18218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  407.483562][T18230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.500043][T18230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.521558][T18234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  407.530475][T18234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  407.566853][T18234] lo speed is unknown, defaulting to 1000
[  407.672568][T18241] lo speed is unknown, defaulting to 1000
[  408.392391][T18264] syzkaller0: entered allmulticast mode
[  408.406287][T18264] syzkaller0 (unregistering): left allmulticast mode
[  408.513197][   T29] kauditd_printk_skb: 578 callbacks suppressed
[  408.513214][   T29] audit: type=1326 audit(1759488794.337:38285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.543969][   T29] audit: type=1326 audit(1759488794.337:38286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.569032][   T29] audit: type=1326 audit(1759488794.337:38287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.593940][   T29] audit: type=1326 audit(1759488794.337:38288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.618877][   T29] audit: type=1326 audit(1759488794.337:38289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.643478][   T29] audit: type=1326 audit(1759488794.337:38290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.667635][   T29] audit: type=1326 audit(1759488794.337:38291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.691780][   T29] audit: type=1326 audit(1759488794.337:38292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.716064][   T29] audit: type=1326 audit(1759488794.337:38293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.739911][   T29] audit: type=1326 audit(1759488794.337:38294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.2.5050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb35ba9eec9 code=0x7ffc0000
[  408.806033][T18277] IPVS: nq: FWM 3 0x00000003 - no destination available
[  408.811041][T18281] netlink: 'syz.0.5055': attribute type 10 has an invalid length.
[  408.823888][T18280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  408.831315][T18280] IPv6: NLM_F_CREATE should be set when creating new route
[  408.879366][T18289] ==================================================================
[  408.887616][T18289] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  408.895733][T18289] 
[  408.898076][T18289] write to 0xffffea00042dfcd8 of 8 bytes by task 18290 on cpu 0:
[  408.906247][T18289]  __filemap_remove_folio+0x1a5/0x2a0
[  408.911847][T18289]  filemap_remove_folio+0x6d/0x1d0
[  408.917352][T18289]  truncate_inode_folio+0x42/0x50
[  408.922644][T18289]  shmem_undo_range+0x244/0xa80
[  408.927804][T18289]  shmem_evict_inode+0x134/0x520
[  408.932850][T18289]  evict+0x2e3/0x550
[  408.937182][T18289]  iput+0x4ed/0x650
[  408.941005][T18289]  dentry_unlink_inode+0x24f/0x260
[  408.946275][T18289]  __dentry_kill+0x18d/0x4b0
[  408.950895][T18289]  dput+0x5e/0xd0
[  408.954651][T18289]  __fput+0x444/0x650
[  408.958838][T18289]  fput_close_sync+0x6e/0x120
[  408.963565][T18289]  __x64_sys_close+0x56/0xf0
[  408.968249][T18289]  x64_sys_call+0x273c/0x3000
[  408.972941][T18289]  do_syscall_64+0xd2/0x200
[  408.977534][T18289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.983616][T18289] 
[  408.986047][T18289] read to 0xffffea00042dfcd8 of 8 bytes by task 18289 on cpu 1:
[  408.993985][T18289]  folio_mapping+0xa1/0xe0
[  408.998626][T18289]  lru_add+0x8d/0x480
[  409.002808][T18289]  folio_batch_move_lru+0x1c2/0x280
[  409.008117][T18289]  folio_add_lru+0x14a/0x1f0
[  409.012730][T18289]  folio_add_lru_vma+0x49/0x70
[  409.017520][T18289]  handle_mm_fault+0x27e2/0x2be0
[  409.022463][T18289]  do_user_addr_fault+0x630/0x1080
[  409.027582][T18289]  exc_page_fault+0x62/0xa0
[  409.032325][T18289]  asm_exc_page_fault+0x26/0x30
[  409.037758][T18289] 
[  409.040219][T18289] value changed: 0xffff8881302741f0 -> 0x0000000000000000
[  409.052136][T18289] 
[  409.054552][T18289] Reported by Kernel Concurrency Sanitizer on:
[  409.061058][T18289] CPU: 1 UID: 0 PID: 18289 Comm: modprobe Not tainted syzkaller #0 PREEMPT(voluntary) 
[  409.070791][T18289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  409.081486][T18289] ==================================================================
[  409.108549][T18281] 8021q: adding VLAN 0 to HW filter on device bond4