last executing test programs: 3m6.437900017s ago: executing program 1 (id=1030): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r3 = syz_clone(0x440c0000, &(0x7f0000000200)="eb987a9c7f72b27097ee97b232", 0xd, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)="64aec300b0043c84f0b8722257f8b3134261111644b6c6642ce92fc5f110ee57006132dc8a4228bc74289647f430164e47d5baafb4535b4cb9c1eb77e34110971edf1fd1b21f559fc48532e4a5cc12b3c4") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @netfilter, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7, 0x0, 0x1000000000000008}, 0x18) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x54}, &(0x7f0000000240)=0x5, &(0x7f0000000540)=0x81, 0x3, 0x80000000, 0x7, 0x7f4, 0x20, 0x9}}], 0x58, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3m6.175531353s ago: executing program 1 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) acct(&(0x7f0000000240)='./file0\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d0d89fd", 0xa, 0x0, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:333'], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r2}) 3m6.066100423s ago: executing program 1 (id=1038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000100) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x2, 0x1, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r1, r0, 0x27, 0x0, r0, @void, @value=r0, @void, @void, r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x6}, 0x18) listen(0xffffffffffffffff, 0x0) 3m5.098311997s ago: executing program 1 (id=1055): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x21bf, &(0x7f0000000b00)={0x0, 0x6b85, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xc, r3, 0x800005, &(0x7f0000000100)=""/62) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000005c0)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x80}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d00)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xa, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe34, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6f, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x40010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x29, 0x41, 0x1b, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x20, 0x1, 0xd, 0xcc4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000c80)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000cc0)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000ec0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f00000010c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="00082cbd7000fcdbdf2509000000700001801400020076657468305f746f5f626f6e64000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006272696467655f736c6176652000018008000300010000001400020076657468315f746f5f68737200000000040001805c0001801400020070696d7265673100000000000000000008000100274697e0b9aca565079e740f487b9a250e67d67bf0d89604b75bd6029cd3fbc8fe7d52", @ANYRES32=r12, @ANYRES64=r13, @ANYRES32=r13, @ANYBLOB="14000200626f6e6430000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="1400018008000100", @ANYRES32, @ANYBLOB="08000300030000004800018014000200766c616e3000000000000000000000001400020076657468315f746f5f7465616d000000140002006e69637666300000000000000000000008000100", @ANYRES32=r15, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 3m4.511267545s ago: executing program 1 (id=1062): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190da) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3m3.655173548s ago: executing program 1 (id=1070): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000016c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7d9f455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b80d8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48610ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fb9bbcd92d47098ae27a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee4c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7f87030000000000008992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b312715a8216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a1626dffe49d0c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d5807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c949ca930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0xfb1f, 0x0, 0x2}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 3m3.581706866s ago: executing program 32 (id=1070): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0xfb1f, 0x0, 0x2}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 3.031430884s ago: executing program 5 (id=3936): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000280)=0x4, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x2, 0x6, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x707, 0x7800, 0x6, 0x7fff}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], 0x0, 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x94) syz_emit_ethernet(0xd42, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd34, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1}, {0x0, 0x0, 0xd20, 0x0, @opaque="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"}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 2.423030423s ago: executing program 5 (id=3941): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='nilfs2_mdt_submit_block\x00', 0xffffffffffffffff, 0x0, 0x12}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0xb7, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='uid_map\x00') r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x36}}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x58, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x41, 0x82}}]}, 0x58}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x8000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 2.400186545s ago: executing program 3 (id=3942): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x49) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = socket$inet(0x2, 0x2, 0x1) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x100000001, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2.289272076s ago: executing program 5 (id=3943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001a00)="92", 0x1}], 0x1}}], 0x1, 0x20000005) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)='Y', 0x1}], 0x1) r3 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 2.205727315s ago: executing program 3 (id=3945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000a80), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 2.095153155s ago: executing program 3 (id=3946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r2, &(0x7f0000000480)={0x11, 0x17, r4, 0x1, 0x82, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x100, 0x81, 0x4, 0x400, 0x8, 0x5900002, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x20}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x10001) write(r7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r14 = inotify_init1(0x0) inotify_add_watch(r14, &(0x7f0000000400)='.\x00', 0xa4000021) close_range(r13, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) close(r10) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) 1.756023648s ago: executing program 3 (id=3950): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x10a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa4910075ad2b981002e0086dd"], 0x0) 1.657576678s ago: executing program 3 (id=3952): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x3, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x145d81, 0x4) write$binfmt_misc(r1, &(0x7f0000000780)="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", 0x7d9) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) syz_read_part_table(0x4097, &(0x7f00000040c0)="$eJzsz7FN61AYBeDjxE5elCdFUFAioKF1FsgWWQchWIIOiTLDsANDUNBg5FwcZ4EIhL6v8Dn2//tKN/yo17FWSZ727a0+fOhNxpqcl5gnZ0murvPYtsm/eZJ1Gd0fdpu0627VH/A/Sf0y6aer+nu6TLa7094OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4TaqxPi9Lzkt8JJkeL3RHu4skd5uL2+H9oUmzuayGf/cms+H82bR/fnZFku3udDcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6gqi7ZLPLe582y/mJ/jm0YhIEwjF5iWwlLULMQS7B/Q3VIiIMJ6N7r/Ptz4bpqMT1dZuZvafd5zJ8xKv3X2uOatnoT/XvmVewZa773HQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBgBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwQAIAAAAg6P/rdgQKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMBAAD//33UI0E=") r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') pread64(r2, &(0x7f000001a240)=""/102379, 0x18feb, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='nmi_handler\x00', r3}, 0x18) socket$kcm(0x21, 0x2, 0x2) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r4, &(0x7f0000000000)='\x00', 0x2, 0x1100) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d3010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) 1.449589598s ago: executing program 4 (id=3953): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 1.424073101s ago: executing program 5 (id=3954): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x4, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r4, @ANYBLOB="000000000000070000b200950000000000000000000000000052f906e7df37b35266eed3e1dd94453796d7555285df1e0063ac3d9f334f6175bf885ac8524b1417fc5672c395c223ea679dfdf903cea35978472859472c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='ata_tf_load\x00', r5, 0x0, 0x4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x100, 0x4a, 0x20}, 0x18) getdents(r7, &(0x7f0000000d00)=""/176, 0xb0) arch_prctl$ARCH_GET_CPUID(0x1011) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0, 0x300}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) linkat(r10, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40080) dup(r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x11800c8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESHEX=r11, @ANYBLOB, @ANYRES16=r11, @ANYRES32=r3]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0f00000020f3000226bd7000ffdbdf2502940001040000060a0000000800100064010101"], 0x24}, 0x1, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 1.33022221s ago: executing program 4 (id=3955): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000280)=0x4, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x2, 0x6, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x707, 0x7800, 0x6, 0x7fff}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x94) syz_emit_ethernet(0xd42, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd34, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1}, {0x0, 0x0, 0xd20, 0x0, @opaque="1d79d21d88164611201c4a021c07d88e1e7d1de449e9c66d475463269b0aef357b103d15f29cba041e4bdfd9ae4df80675e2afe6c94da46105a0aee17f8dca3f9223e1c06d9a3e7864cdb4ecb64b7844983cb418dc2c5006d51df1d6ce9f666cb7e9f696124edd465be218ba185b4e49e4cd0d967771ee88dc135c6745402b2d5633a84eb81319e348cdd7e292692ad7f4ca2c893a8d85bd4c72e2cc9c7d5f7d8274a7828152e2870a5efb59142f30a6e9fde7a84db120eedacc95a65d94dd27a98a83db5c8cdae49dc402213faba9138634e74c2ce55a21a72f8bc058483d976697de63edb6999a048ca472991d36c1799c6d30ca1c9f377024dd7a62f2f0a5b20700afdada6e3fd48c24872cfaa118705d8b65e6d2aacb45bcd9e82240b40f9031d7da572eca3a7f706e54becd2f3812850517af5c2f73cf35d9ce04404b9e787bd345cd4a991dce59e744a0b78387086888651ea00b6735ae3ba272617f88c2d58620d91eeaf74dea55a434089abae8c82d3b8c4f804fda51e80925fa50f930fdf21ff9b4e06c13246c616e97ffbb2bd59f7405f9bae6cf864a28633f35fecce944c4cee58b2cb63bebe177fddc62cbcd6b370f9d8368c75d1915c5b873edca037528c32403c7545cbcc5313b7a00d954612855e01c5172fc22df534e27a14cd2ecaa9ef81c809f9a5caeea56e6fe2ca49f53a9f62d9617ee39002d16fd1c47dc3331ba211ccf394c74b6a44e2cbb84497410bf7af88d008cb18888aae6c3ca17a2481261e1200ccbd5b2e5fae62a7aa09807efb949790d8d4fd49e8100ad1601da3ae869091085b75a7376057c50d72891a383400fa1f905e45e542545a001db85107b65b22b8480b057aa4aef9e05e0bad0099f8b324bb011f0af233d16ca25dd20d846549f9bba2b97561e00c5dbe0e4bc6d9d15e60dc206ecef39d692df0d960d0e43721fb383720074dc83cd3b800221f01fec6049a711ba81de69934bc1637e85ede4de4be0173171130257bbd899ec99b2ace0dbb0c301055d68d13381a21a3c6ec4651f4adfb5487e251c6b785c273824b668f38166f92b4ad36973d42720a58c7e37f413484e305dbde6192f8580e3da10f79ccef3d14a8176d5460725d09d995e965202aef03431be6df7b163cf2d6d838850978c2dfa23924cc2590485be88544d05b200e8f1d543794a8332a45688a07a346231bc6667aa2f57d7d76c7ef27fe42e1e8d1159f63db5fd8c416ce22630f7e85e68d3985e5980cfddba11fed4da0ba3b905cfbede5b509bd03d8c7d08b924d474892fd8a1bc7941ae25b10606bbe440f406a6a372c1defa6773b4ae1aaba7cdee25e462f36445a3c1a1db40db16394b9e4c45c21c98515b79fdefce063dbe3034e93d2bc20c3355aef892a07a1ec00447113199051994a6d3f6a713f75493eb697343f47e7cf206b03d2b0dc4506ca4de63def608ac9f36de0c37be28f546940e280d06a34b87e98e5749a5e7a264535893240dc4814f29a7307ab0baebd19375e1013e5cd20b40e45c02c74aee2222ac457783e021bff161acae7cec1f6b3b3eb22dffeff18a567db5ecc67357d9c7a819d50a92232e79cbe896e676807f70dfa615bc3fb908cda0d553cdc4463cc3bd104ecd7e89d42167e5aacb474ee899f28ea451be8b7152760a25f586183fdb2ee7003455f194a1d352a9f116a8b5e924535acbe912c2b98078ef19604530287e45d02f51916a255d91ab7bcb0e62ea5c8ffb68ff3263763999d63522a5d8795bcb405c2c87e813396a6530b6602b820a34016b6f97f8a23ce005eb861607165e6ae71f774bb77208d22d4af9249a13b598e5bd5f9cf8619a5d9124a2074026ac3f9a2109fb0660827bf1fb52c77d15165a99827595b5d1ccc26ce8751f0a1b722a2a7f64783e849c0b95267db3e1a489a571c1574994931982523afa24137e848ce38abcd60bbadbfe99c7d66af3a7ba7a6357806769369e9c8530440dd2821ecfdb467badb0ba306f03c1504d97d44feb0a715fcb4b2e25eda4321f94539a99db7f7a9437d6f5841b61ae96014da20ceb4d67df84496b793fd09c71fbd6d37636ac51099e104efbec5a1549572d8e9051de2e88d26148e06f8f7f56d7b11cef2c4edac450ce33b3c516deef477a4c038aa4e119a5c99739ea716beb9aa02088b1d7732c4d915f15f08f1f972ee4f53c42ccdb84bcee7914e412096133703960fa5b0156b1f8715f892b986161377410ea6b5c2e3c50b459151b6b1a12ccc52748f39e9b0a3c88c774d6643c080b748eb61ea8fc567eefc1c7195977ea57c008689c796df780739f50407a3040b921a7929387d544bf991125a4806a3bbd4c3bdf8728d9cf911167184d401b15a04763200e371986ed941733374daf7370441ac76feb921ebdaddbd46990518bd0924dc6da6f6b1f8d54ab71e1d4056fc8f5bbe2f5df8a0efe14530f25461cf16bb57a8cf3ec0a116cb0234eb91f5c861beb9fde1e5db85df3c92d8a3bd7ce3e70a4aa947d0c6536a2443dd9bb9cf72f22a93403bff9d3ad479ce9e3dc8714a083c573e37dc086ee0712d7050aef65c756623b0d711e6defe24c0abf5fdd17c41dccc85c635b34b928310a36bf4e3e39db9240504698e4174f891fbe45d2cc4595d7fa28b3623694ac7969cd5f5c7a431f69de75d695f3b4c987c1ef12127e11fd0d59ed26fc1565591ad03174e3817067666141b39c82dca542140320f648e850d4a6d461fdbe8ea15ed3d400c25f263113718d9f72af580b8a9fad5ab5019018fae98b88c63526b2d62f2d0f64b56509541f3051974576da69524439b83ff91782701e397647f4449cb1d93f6a53ee738a8555d36e99bacc9c2027100a6cf35b6bd6a94f7e28038b19b6d1bd5b6c22d8097f2a0e12443c2b275f9f87519e44d12f94816b9f7e1c18c0dbb97f4d82ea74fafc2034865f963d02fe321a53479256e6b4193bfaf0ce37c2bb993fb5b5c9e00df9173628ab02ecdcf62014af95b886de1de4315f3eadae8874902a316c6c661e88d19be0b0c8f4c26af8edf78b5f385cabab515a52e22ddd6bd4f87446ee4a5e08b4ef7cad0dd6b8a4fbc9d544b8e57750cd9ee2d8d291fe57306e3a0914ae771d9a73fd07fa1768d2a9383ccb6a9bbfc990369cc92e48cc52b806d19f595121628605f5beb699522670a73fa56e86b1e6b3b826db0510eb8ef7c5a4f4fc455362f8461246d906acb4fe1a5b80f436d6aa948cedf5874ee3d05774bf7ddd3775324595e19de5b166ed20620fe63cb526cf599a7a32d290d69941738dc1663a8c118a61f5ad7c316cd001009b3feea0ee87ef0d3f98cb476151b85277da627ef5c5d376f358e497644df7710df4256d8ba176249c5e4e462ab5b2bd0cdeb862bae1dcde040d854a976b50173ed2f032da01059222cfb8daccc774e852bee1c173691dcabe49352f379dcbb2103863bb13ba6b0f2336d53ee1ef6449070f1f4b26c7976583f9285cb0bc9d023a809eeba89fd1fda992b47481363206b380ebd479359f252a5093b50abc64cb85e39d66aa0e89821a5a17d069839b5329af0cd4e8f29a4f3a03804725efafed0d8c44d1ec28c4f504a1e737da80b5c17982b107a8644a073c460011ee902a0d765096d72101ba0cca0850bce193fc841774f091d45720f1dff10c3be31bd2fab286d8e9aaaa4b01a9eaf219e2460f6b548ab27825435a5ea6f96468688862c3be6a35ce549f14519ef7e3fd4e350a52dd2fcd2eedb5b08968d88975a6c93d035b50afe8f73c4c7b5c2126462651eb9e9a2946eb2ffa368cf1b80cbbd9fee2c830e515c8758da518bb8c81f8ebd1dc8067d91870b42bf094bb2623b135010313dfc095fd680bf9f7a431a7b1d040e7ce6fa7e6bc747a3bb1ae718676de7a23299112b8487f2586fa780c7e7121deb4d812742efb6e5efe052f2831d075654c7197e2958324b5917d280d947f9f565de9f6213bbcef869bc2fcffb8500a84b8f28de41d70d0389be6d06a8ecd64a797fcaccfa1b73aa706afcb80a2a2e3513b3b2985fba178880f47cce402f8cadae076eeafcb2b4ca2f15e4883f09ecde1606beb48c18923b9cf48542e484838bffd21419ca2ab009a34f6ef84a94aeb6e9819391ae4f3fe464f2abb3a68600ee83dcbc4c28a3bfa829d4229d9529216275186dd88c934721f077624bd006e0d925059a393630a8d480399709f24e545e242e9758c47a4122b4f8cf2096d4e67e7bf10f2972250df45e9fe04297b3f1d215826a15fdac0be790c5d81664c523e536275e873d32cb29def4444ad3cb60eec90c511752f42b6da6e223c056712bfd9ae5480b72dbb4bbc1b1476506a443c3c59986a950de35cc0834554b07339863d8a6b7279b897a66f5ec53764209889c8731de04a354bc6c32a210ae2510b257ea465eb365ae39413d74a4b4d2c27e779c7ed033281b7531098f5ff2fbacb1e83a3daee9d4f69ed6ec00c8e544036d963cd7372d773c4acbaa6fffe3f408adee8f3af8e29abb94a1f382f1bc8764b7be1e2f0519dac35e64583472d1bf235d92693a5118f01ef78cd7dae6f892568f76f550fc4d961b8a9a29aa291549d721b5035201942ba3459c2b5b7657c7e1318a5eb1b60a2801a8c2bc1461f2a6fa19008bff24fe74a09bbf505fd168e222551201c935afd3c49ba57b5aad1c5a52788ea6df79e2ae6e46da66e29485fb69d14c3ed8d1416b496"}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 1.030694899s ago: executing program 5 (id=3957): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='block_plug\x00', r0}, 0x18) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x40004580, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 971.510875ms ago: executing program 0 (id=3959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x34}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="0800c846", 0x4}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 911.180891ms ago: executing program 0 (id=3960): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x4, 0x0, 0x0) 910.617171ms ago: executing program 0 (id=3961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) flistxattr(r2, 0x0, 0x0) lsm_set_self_attr(0x0, 0x0, 0x65, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x4, 0xfffffffffffff003) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x204880, &(0x7f0000000240)={[{@shortname_winnt}, {@numtail}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}]}, 0x11, 0x305, &(0x7f0000002480)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) close(r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYBLOB="4770e17aa2045e9fc52196d2b57cf883349df1927e83b6dd5615c8b2daa0a8df36a2fdccffac55da8cda1d1774a6806a6d384d46347dc3c34e9de5816a5c896d0b422807f0aa7a293fe6a260638526a380db8ad235e6a57c1bd783b027203c2e353ae1b9b1c41befc35e4b9ed261da65450c56914551e1f1120a208335b112d7aa437379acc99b2639235a5b724f739b62918b1f111088592c013458951b0b5dc76b0eefc9b8ec489a0962397063ca7775a4c4b573745ee0ee0e6775347aeb0c183daea2a94014e0f77d6b0f73acc4e41750b74706335390f772c7c1b0d369eed55cdecd834a208896d30add053e70a1491d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e25, 0xb878, @private2={0xfc, 0x2, '\x00', 0x9}, 0xe}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'nr0\x00', 0x1200}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20080, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:adjtime_t:s0\x00', 0x1f, 0x2) syz_clone(0x0, &(0x7f0000000100)="3303b83a1bef360c1e128049c5a29dac39", 0x11, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000580)="57e909f64d6d68347c47e7d26342b51963f4d6e518ce78c860354b2383af9b9c45239a9e38c94d1cc08d423750420b3a081e73ae41f0f53cb4324765dae7350d78a5cf0bad8cacbeab516b71fa43aab88c75fbca9a50a28042938b0db55b3201092feba9bfb2147a0a512da856d12f9e4825303c57d40d5989342df9565c54df0c19634e282fabc754051983d11a788baf5f45b0dcad08baa92679932753b499ccee301bc19d7f104d9b04650c01696952497396a76aa0f143425b91d16bb501ea9522c453773f2fa0e531083b0527e3e5ec4c178b78436e79120d87a44bdf6ec4b78889c9fed7") 902.771462ms ago: executing program 0 (id=3962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000a80), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 884.605003ms ago: executing program 3 (id=3963): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 835.538399ms ago: executing program 2 (id=3964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sendmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001a00)="92", 0x1}], 0x1}}], 0x1, 0x20000005) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)='Y', 0x1}], 0x1) r3 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 834.767299ms ago: executing program 0 (id=3965): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) 745.050877ms ago: executing program 0 (id=3966): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985167ce06bbace8017cbec4c2ee5e496f4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb61dbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbc7b8f2ed565055a09e15ee5de6ccd40dd6e4edef3d93", 0xd7}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r6 = dup(r5) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x2209d, 0x3, 0x0, 0xfffffffc}, 0x10) write(r7, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) write$UHID_INPUT(r6, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 671.509834ms ago: executing program 2 (id=3967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x23, 0xa, 0x2f) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES64=r4, @ANYRESDEC=r4, @ANYRESDEC=0x0, @ANYRES64=r4, @ANYBLOB="71885d168e08dd487991308e92d177fb42489c4bd9f4fc93922c70a94f9b4bb522"], 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x80) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 606.431721ms ago: executing program 4 (id=3968): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa00) (fail_nth: 2) 563.042175ms ago: executing program 2 (id=3969): bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r0, &(0x7f0000000000), 0x0}, 0x20) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x810, r2, 0x0) 491.072532ms ago: executing program 4 (id=3970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x34}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="0800c846", 0x4}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 455.074345ms ago: executing program 2 (id=3971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000a80), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 413.54781ms ago: executing program 4 (id=3972): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x4, 0x0, 0x0) 412.897ms ago: executing program 2 (id=3973): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7ab}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7ff, 0x0) splice(r3, 0x0, r2, 0x0, 0x114, 0xe) (fail_nth: 1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 326.752328ms ago: executing program 4 (id=3974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de85000000040000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=@delchain={0x1e8, 0x65, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xfff2, 0x6}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x49, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0x188, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x3b}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_bpf={0x170, 0x17, 0x0, 0x0, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3, 0x8, 0x2, 0xb}, {0x8001, 0x5, 0x8, 0x5}, {0x2, 0x9, 0x5, 0x4}, {0x10, 0x8c, 0x8, 0x5}, {0xa, 0x0, 0x0, 0x396}, {0x8, 0x9, 0x6, 0x4974}, {0x9, 0xd4, 0x9, 0x80000001}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0xf, 0x4, 0x81, 0xb}, {0x5, 0x89, 0x4, 0x2}, {0xf, 0x7, 0x1, 0x8001}, {0x6, 0x5, 0xad, 0x5}, {0xd, 0x7f, 0x1, 0xb}, {0x40, 0x9, 0x59, 0x6}, {0x1, 0x9, 0x50, 0xffff}, {0x0, 0x6, 0x10, 0x9}, {0x5, 0x0, 0x6f, 0x4}, {0x0, 0xfd, 0x2, 0xfffffff2}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xf, 0x0, 0x0, 0x400}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x400, 0x5, 0x8, 0x9, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x51, 0x6, "214989e6e79044877fa13228494ea4afd961096b4207d4a4d1421926ec7c23e2aada215659a4328c645f3be8bb3ab7997e54b813b40307c6e42cc1278b27178fc5edae81add7683b16fc1acea4"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc0}, 0x24013) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r10, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r6, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r12, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r11, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) 16.895358ms ago: executing program 2 (id=3975): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0xcf50, 0x2925, 0xffff, 0x9dfe, 0x11, "80feff00001000"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8007}}, 0xffffffffffffff30}, 0x1, 0x0, 0x0, 0x2004c010}, 0x40) 0s ago: executing program 5 (id=3976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=@delchain={0x1e8, 0x65, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9}, {0xfff2, 0x6}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x49, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_route={{0xa}, {0x188, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x3b}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_bpf={0x170, 0x17, 0x0, 0x0, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3, 0x8, 0x2, 0xb}, {0x8001, 0x5, 0x8, 0x5}, {0x2, 0x9, 0x5, 0x4}, {0x10, 0x8c, 0x8, 0x5}, {0xa, 0x0, 0x0, 0x396}, {0x8, 0x9, 0x6, 0x4974}, {0x9, 0xd4, 0x9, 0x80000001}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0xf, 0x4, 0x81, 0xb}, {0x5, 0x89, 0x4, 0x2}, {0xf, 0x7, 0x1, 0x8001}, {0x6, 0x5, 0xad, 0x5}, {0xd, 0x7f, 0x1, 0xb}, {0x40, 0x9, 0x59, 0x6}, {0x1, 0x9, 0x50, 0xffff}, {0x0, 0x6, 0x10, 0x9}, {0x5, 0x0, 0x6f, 0x4}, {0x0, 0xfd, 0x2, 0xfffffff2}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xf, 0x0, 0x0, 0x400}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x400, 0x5, 0x8, 0x9, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x51, 0x6, "214989e6e79044877fa13228494ea4afd961096b4207d4a4d1421926ec7c23e2aada215659a4328c645f3be8bb3ab7997e54b813b40307c6e42cc1278b27178fc5edae81add7683b16fc1acea4"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc0}, 0x24013) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r11, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r7, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r13, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r12, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) kernel console output (not intermixed with test programs): 2996] dump_stack_lvl+0x95/0xd0 [ 226.757000][T12996] dump_stack+0x15/0x1b [ 226.757018][T12996] should_fail_ex+0x265/0x280 [ 226.757094][T12996] should_failslab+0x8c/0xb0 [ 226.757122][T12996] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 226.757191][T12996] ? __alloc_skb+0x2ff/0x4b0 [ 226.757236][T12996] __alloc_skb+0x2ff/0x4b0 [ 226.757300][T12996] ? __alloc_skb+0x228/0x4b0 [ 226.757325][T12996] alloc_skb_with_frags+0x7d/0x470 [ 226.757349][T12996] ? selinux_file_open+0x2dc/0x330 [ 226.757400][T12996] sock_alloc_send_pskb+0x430/0x4e0 [ 226.757442][T12996] tun_get_user+0x9b4/0x2670 [ 226.757475][T12996] ? ref_tracker_alloc+0x1f2/0x2f0 [ 226.757506][T12996] ? selinux_file_permission+0x2ee/0x320 [ 226.757608][T12996] tun_chr_write_iter+0x15e/0x210 [ 226.757658][T12996] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 226.757684][T12996] vfs_write+0x52a/0x960 [ 226.757789][T12996] ksys_write+0xda/0x1a0 [ 226.757811][T12996] __x64_sys_write+0x40/0x50 [ 226.757829][T12996] x64_sys_call+0x2847/0x3000 [ 226.757852][T12996] do_syscall_64+0xca/0x2b0 [ 226.757896][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.757917][T12996] RIP: 0033:0x7f2fc6dbe1ff [ 226.757939][T12996] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 226.757982][T12996] RSP: 002b:00007f2fc5827000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 226.758001][T12996] RAX: ffffffffffffffda RBX: 00007f2fc7015fa0 RCX: 00007f2fc6dbe1ff [ 226.758015][T12996] RDX: 0000000000001186 RSI: 0000200000003000 RDI: 00000000000000c8 [ 226.758094][T12996] RBP: 00007f2fc5827090 R08: 0000000000000000 R09: 0000000000000000 [ 226.758109][T12996] R10: 0000000000001186 R11: 0000000000000293 R12: 0000000000000001 [ 226.758159][T12996] R13: 00007f2fc7016038 R14: 00007f2fc7015fa0 R15: 00007ffe130f5548 [ 226.758222][T12996] [ 227.535115][ T3402] usb 11-1: enqueue for inactive port 0 [ 227.540948][ T3402] usb 11-1: enqueue for inactive port 0 [ 227.624738][ T3402] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 227.639637][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 228.114305][T13026] netlink: 'syz.2.3083': attribute type 1 has an invalid length. [ 228.148541][T13028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3084'. [ 228.210930][T13030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3085'. [ 228.230621][T13030] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3085'. [ 228.301963][T13032] hub 1-0:1.0: USB hub found [ 228.313647][T13032] hub 1-0:1.0: 8 ports detected [ 228.381963][T13037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3088'. [ 228.530059][T13039] FAULT_INJECTION: forcing a failure. [ 228.530059][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 228.542786][T13039] CPU: 1 UID: 0 PID: 13039 Comm: syz.4.3089 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.542817][T13039] Tainted: [W]=WARN [ 228.542823][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.542837][T13039] Call Trace: [ 228.542845][T13039] [ 228.542920][T13039] __dump_stack+0x1d/0x30 [ 228.542946][T13039] dump_stack_lvl+0x95/0xd0 [ 228.542966][T13039] dump_stack+0x15/0x1b [ 228.542990][T13039] should_fail_ex+0x265/0x280 [ 228.543291][T13039] should_failslab+0x8c/0xb0 [ 228.543312][T13039] __kmalloc_cache_noprof+0x65/0x4c0 [ 228.543334][T13039] ? audit_log_d_path+0x8d/0x150 [ 228.543358][T13039] audit_log_d_path+0x8d/0x150 [ 228.543383][T13039] audit_log_d_path_exe+0x42/0x70 [ 228.543435][T13039] audit_log_task+0x1e9/0x250 [ 228.543473][T13039] ? kstrtouint+0x76/0xc0 [ 228.543519][T13039] audit_seccomp+0x61/0x100 [ 228.543546][T13039] ? __seccomp_filter+0x832/0x1260 [ 228.543575][T13039] __seccomp_filter+0x843/0x1260 [ 228.543613][T13039] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 228.543646][T13039] ? vfs_write+0x7e8/0x960 [ 228.543671][T13039] __secure_computing+0x82/0x150 [ 228.543702][T13039] syscall_trace_enter+0xcf/0x1e0 [ 228.543731][T13039] do_syscall_64+0xa4/0x2b0 [ 228.543768][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.543837][T13039] RIP: 0033:0x7f03f320f749 [ 228.543856][T13039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.543873][T13039] RSP: 002b:00007f03f1c6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 228.543892][T13039] RAX: ffffffffffffffda RBX: 00007f03f3465fa0 RCX: 00007f03f320f749 [ 228.543919][T13039] RDX: 0000000000000000 RSI: 0000200000000540 RDI: ffffffffffffffff [ 228.543931][T13039] RBP: 00007f03f1c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.543943][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.544001][T13039] R13: 00007f03f3466038 R14: 00007f03f3465fa0 R15: 00007ffd7a50ef18 [ 228.544018][T13039] [ 228.783785][T13052] random: crng reseeded on system resumption [ 229.743236][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 229.743257][ T29] audit: type=1326 audit(228.819:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.772634][ T29] audit: type=1326 audit(228.829:11665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.795632][ T29] audit: type=1326 audit(228.829:11666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.818711][ T29] audit: type=1326 audit(228.829:11667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13038 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.841846][ T29] audit: type=1326 audit(228.859:11668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13055 comm="syz.4.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.864926][ T29] audit: type=1326 audit(228.859:11669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13055 comm="syz.4.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.887933][ T29] audit: type=1326 audit(228.859:11670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13055 comm="syz.4.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.910912][ T29] audit: type=1326 audit(228.859:11671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13055 comm="syz.4.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.933913][ T29] audit: type=1326 audit(228.859:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13055 comm="syz.4.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 229.956903][ T29] audit: type=1326 audit(228.859:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13055 comm="syz.4.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03f320f749 code=0x7ffc0000 [ 230.002381][ T9502] usb 5-1: enqueue for inactive port 0 [ 230.017147][ T9502] usb 5-1: enqueue for inactive port 0 [ 230.065447][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3097'. [ 230.184576][ T9502] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 230.293842][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3099'. [ 230.537276][T13079] netlink: 'syz.5.3102': attribute type 39 has an invalid length. [ 230.677746][T13087] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3105'. [ 230.968802][ T2049] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.236731][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'. [ 231.265352][T13113] team0 (unregistering): Port device team_slave_0 removed [ 231.436443][T13123] SELinux: failed to load policy [ 231.497503][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'. [ 231.507141][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3123'. [ 231.620686][T13136] SELinux: failed to load policy [ 231.894148][T13171] FAULT_INJECTION: forcing a failure. [ 231.894148][T13171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.907423][T13171] CPU: 1 UID: 0 PID: 13171 Comm: syz.2.3139 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.907457][T13171] Tainted: [W]=WARN [ 231.907506][T13171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.907517][T13171] Call Trace: [ 231.907523][T13171] [ 231.907531][T13171] __dump_stack+0x1d/0x30 [ 231.907560][T13171] dump_stack_lvl+0x95/0xd0 [ 231.907610][T13171] dump_stack+0x15/0x1b [ 231.907630][T13171] should_fail_ex+0x265/0x280 [ 231.907658][T13171] should_fail+0xb/0x20 [ 231.907679][T13171] should_fail_usercopy+0x1a/0x20 [ 231.907701][T13171] strncpy_from_user+0x27/0x260 [ 231.907787][T13171] getname_flags+0xae/0x3b0 [ 231.907816][T13171] do_sys_openat2+0x60/0x150 [ 231.907899][T13171] __x64_sys_openat+0xf2/0x120 [ 231.907928][T13171] x64_sys_call+0x2b07/0x3000 [ 231.907982][T13171] do_syscall_64+0xca/0x2b0 [ 231.908078][T13171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.908099][T13171] RIP: 0033:0x7f61b59bf749 [ 231.908114][T13171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.908183][T13171] RSP: 002b:00007f61b441f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.908207][T13171] RAX: ffffffffffffffda RBX: 00007f61b5c15fa0 RCX: 00007f61b59bf749 [ 231.908222][T13171] RDX: 000000000000275a RSI: 00002000000006c0 RDI: ffffffffffffff9c [ 231.908237][T13171] RBP: 00007f61b441f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.908296][T13171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.908308][T13171] R13: 00007f61b5c16038 R14: 00007f61b5c15fa0 R15: 00007fff2c078d18 [ 231.908325][T13171] [ 232.307100][T13172] chnl_net:caif_netlink_parms(): no params data found [ 232.390704][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.397893][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.430655][T13172] bridge_slave_0: entered allmulticast mode [ 232.451521][T13172] bridge_slave_0: entered promiscuous mode [ 232.485383][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.492473][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.514688][T13172] bridge_slave_1: entered allmulticast mode [ 232.521193][T13172] bridge_slave_1: entered promiscuous mode [ 232.547427][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.565840][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.597969][T13172] team0: Port device team_slave_0 added [ 232.612314][T13172] team0: Port device team_slave_1 added [ 232.642147][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.649234][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.675382][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.707394][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.714427][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.740536][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.790308][T13172] hsr_slave_0: entered promiscuous mode [ 232.796906][T13172] hsr_slave_1: entered promiscuous mode [ 232.802770][T13172] debugfs: 'hsr0' already exists in 'hsr' [ 232.808517][T13172] Cannot create hsr debugfs directory [ 232.890124][T13172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.946990][T13231] SELinux: failed to load policy [ 232.954788][T13172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.017577][T13172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.054528][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.054570][ T3617] Bluetooth: hci0: command 0x1003 tx timeout [ 233.086018][T13172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.187617][T13172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.197294][T13172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.209859][T13172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.222764][T13172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.273544][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.280782][T13172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.288142][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.295292][T13172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.407402][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.415742][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.491858][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.516124][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.548787][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.556001][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.578766][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.585921][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.650598][T13259] __nla_validate_parse: 5 callbacks suppressed [ 233.650620][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3163'. [ 233.742776][T13267] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3166'. [ 233.797964][T13172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.070409][ T909] Bluetooth: hci0: Frame reassembly failed (-84) [ 234.276807][ T2056] bond0 (unregistering): Released all slaves [ 234.342651][ T2056] hsr_slave_0: left promiscuous mode [ 234.353297][ T2056] hsr_slave_1: left promiscuous mode [ 234.363279][ T2056] veth1_macvtap: left promiscuous mode [ 234.372242][ T2056] veth0_macvtap: left promiscuous mode [ 234.553092][T13172] veth0_vlan: entered promiscuous mode [ 234.568448][T13172] veth1_vlan: entered promiscuous mode [ 234.598689][T13172] veth0_macvtap: entered promiscuous mode [ 234.618683][T13172] veth1_macvtap: entered promiscuous mode [ 234.629103][T13172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.640016][T13172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.651818][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.681152][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.700259][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.711126][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.772792][T13319] 9p: Bad value for 'rfdno' [ 234.818899][T13322] syz_tun: entered allmulticast mode [ 234.824927][T13321] syz_tun: left allmulticast mode [ 234.972293][T13335] bridge_slave_0: left allmulticast mode [ 234.978065][T13335] bridge_slave_0: left promiscuous mode [ 234.983760][T13335] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.995275][T13335] bridge_slave_1: left allmulticast mode [ 235.001001][T13335] bridge_slave_1: left promiscuous mode [ 235.006746][T13335] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.017503][T13335] bond0: (slave bond_slave_0): Releasing backup interface [ 235.028216][T13335] bond0: (slave bond_slave_1): Releasing backup interface [ 235.041602][T13335] team0: Port device team_slave_0 removed [ 235.048779][T13335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.056404][T13335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.068158][T13335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.075624][T13335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.088388][T13335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.111511][T13337] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3187'. [ 235.182441][T13340] FAULT_INJECTION: forcing a failure. [ 235.182441][T13340] name failslab, interval 1, probability 0, space 0, times 0 [ 235.195263][T13340] CPU: 0 UID: 0 PID: 13340 Comm: syz.0.3188 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.195343][T13340] Tainted: [W]=WARN [ 235.195350][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.195365][T13340] Call Trace: [ 235.195372][T13340] [ 235.195381][T13340] __dump_stack+0x1d/0x30 [ 235.195423][T13340] dump_stack_lvl+0x95/0xd0 [ 235.195457][T13340] dump_stack+0x15/0x1b [ 235.195480][T13340] should_fail_ex+0x265/0x280 [ 235.195546][T13340] should_failslab+0x8c/0xb0 [ 235.195586][T13340] __kmalloc_cache_noprof+0x65/0x4c0 [ 235.195615][T13340] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 235.195643][T13340] ? mutex_unlock+0x4f/0x90 [ 235.195750][T13340] __se_sys_memfd_create+0x1d6/0x6b0 [ 235.195788][T13340] __x64_sys_memfd_create+0x31/0x40 [ 235.195900][T13340] x64_sys_call+0x28cb/0x3000 [ 235.196001][T13340] do_syscall_64+0xca/0x2b0 [ 235.196041][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.196088][T13340] RIP: 0033:0x7f0a9607f749 [ 235.196181][T13340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.196203][T13340] RSP: 002b:00007f0a94aded68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 235.196227][T13340] RAX: ffffffffffffffda RBX: 0000000000001059 RCX: 00007f0a9607f749 [ 235.196243][T13340] RDX: 00007f0a94adedec RSI: 0000000000000000 RDI: 00007f0a96104960 [ 235.196319][T13340] RBP: 0000200000000000 R08: 00007f0a94adeb07 R09: 0000000000000000 [ 235.196331][T13340] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 235.196343][T13340] R13: 00007f0a94adedec R14: 00007f0a94adedf0 R15: 00007ffefbc279b8 [ 235.196365][T13340] [ 235.406007][T13335] netlink: 'syz.3.3187': attribute type 10 has an invalid length. [ 235.413961][T13335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3187'. [ 235.426230][T13335] batman_adv: batadv0: Adding interface: veth1_vlan [ 235.433020][T13335] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.489081][T13335] batman_adv: batadv0: Interface activated: veth1_vlan [ 235.655870][T13351] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3193'. [ 235.771119][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 235.771135][ T29] audit: type=1326 audit(235.749:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13362 comm="syz.4.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 235.801742][ T29] audit: type=1326 audit(235.749:11985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13362 comm="syz.4.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 235.824776][ T29] audit: type=1326 audit(235.749:11986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13362 comm="syz.4.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 235.847912][ T29] audit: type=1326 audit(235.749:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13362 comm="syz.4.3198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x0 [ 236.045929][T13388] bridge_slave_0: left allmulticast mode [ 236.051687][T13388] bridge_slave_0: left promiscuous mode [ 236.057418][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.068612][ T29] audit: type=1400 audit(236.049:11988): avc: denied { getopt } for pid=13377 comm="syz.3.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.068798][T13389] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 236.097591][ T3617] Bluetooth: hci0: command 0x1003 tx timeout [ 236.103716][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 236.120199][ T29] audit: type=1400 audit(236.049:11989): avc: denied { relabelfrom } for pid=13377 comm="syz.3.3203" name="UDP" dev="sockfs" ino=38571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 236.142799][ T29] audit: type=1400 audit(236.079:11990): avc: denied { relabelto } for pid=13377 comm="syz.3.3203" name="UDP" dev="sockfs" ino=38571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 236.171773][T13389] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3203'. [ 236.177093][T13388] bridge_slave_1: left allmulticast mode [ 236.181338][T13389] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3203'. [ 236.187025][T13388] bridge_slave_1: left promiscuous mode [ 236.201796][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.231109][T13390] netlink: 400 bytes leftover after parsing attributes in process `syz.2.3207'. [ 236.251571][T13388] bond0: (slave bond_slave_0): Releasing backup interface [ 236.269758][T13388] bond0: (slave bond_slave_1): Releasing backup interface [ 236.286806][T13388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.294220][T13388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.300387][T13393] netlink: 'syz.2.3207': attribute type 10 has an invalid length. [ 236.309215][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3207'. [ 236.331892][T13388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.339545][T13388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.359383][T13396] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3209'. [ 236.375150][T13388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 236.407649][T13393] batman_adv: batadv0: Adding interface: veth1_vlan [ 236.414311][T13393] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.442405][T13393] batman_adv: batadv0: Interface activated: veth1_vlan [ 236.622911][ T29] audit: type=1326 audit(236.589:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13415 comm="syz.2.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b59bf749 code=0x7ffc0000 [ 236.646291][ T29] audit: type=1326 audit(236.589:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13415 comm="syz.2.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61b59bf749 code=0x7ffc0000 [ 236.669570][ T29] audit: type=1326 audit(236.589:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13415 comm="syz.2.3218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b59bf749 code=0x7ffc0000 [ 236.737306][T13423] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 236.914494][T13434] bridge_slave_0: left allmulticast mode [ 236.920205][T13434] bridge_slave_0: left promiscuous mode [ 236.925946][T13434] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.952592][T13434] bridge_slave_1: left allmulticast mode [ 236.958371][T13434] bridge_slave_1: left promiscuous mode [ 236.964026][T13434] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.976646][T13434] bond0: (slave bond_slave_0): Releasing backup interface [ 236.987662][T13434] bond0: (slave bond_slave_1): Releasing backup interface [ 236.999959][T13434] team0: Port device team_slave_0 removed [ 237.154619][T13434] team0: Port device team_slave_1 removed [ 237.173945][T13434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.181443][T13434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.222544][T13438] netlink: 'syz.4.3227': attribute type 10 has an invalid length. [ 237.253248][T13434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.260750][T13434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.320038][T13434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.395366][T13438] batman_adv: batadv0: Adding interface: veth1_vlan [ 237.402041][T13438] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.495014][T13438] batman_adv: batadv0: Interface activated: veth1_vlan [ 237.931207][T13485] FAULT_INJECTION: forcing a failure. [ 237.931207][T13485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.944467][T13485] CPU: 0 UID: 0 PID: 13485 Comm: syz.5.3246 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.944505][T13485] Tainted: [W]=WARN [ 237.944511][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.944523][T13485] Call Trace: [ 237.944530][T13485] [ 237.944537][T13485] __dump_stack+0x1d/0x30 [ 237.944568][T13485] dump_stack_lvl+0x95/0xd0 [ 237.944596][T13485] dump_stack+0x15/0x1b [ 237.944619][T13485] should_fail_ex+0x265/0x280 [ 237.944693][T13485] should_fail+0xb/0x20 [ 237.944711][T13485] should_fail_usercopy+0x1a/0x20 [ 237.944736][T13485] strncpy_from_user+0x27/0x260 [ 237.944766][T13485] getname_flags+0xae/0x3b0 [ 237.944852][T13485] user_path_at+0x28/0x130 [ 237.944879][T13485] __se_sys_pivot_root+0xc5/0x700 [ 237.944900][T13485] ? mutex_unlock+0x4f/0x90 [ 237.944988][T13485] ? fput+0x8f/0xc0 [ 237.945020][T13485] __x64_sys_pivot_root+0x31/0x40 [ 237.945047][T13485] x64_sys_call+0x13a/0x3000 [ 237.945116][T13485] do_syscall_64+0xca/0x2b0 [ 237.945147][T13485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.945173][T13485] RIP: 0033:0x7f2fc6dbf749 [ 237.945202][T13485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.945224][T13485] RSP: 002b:00007f2fc5827038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 237.945288][T13485] RAX: ffffffffffffffda RBX: 00007f2fc7015fa0 RCX: 00007f2fc6dbf749 [ 237.945302][T13485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 237.945314][T13485] RBP: 00007f2fc5827090 R08: 0000000000000000 R09: 0000000000000000 [ 237.945326][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.945342][T13485] R13: 00007f2fc7016038 R14: 00007f2fc7015fa0 R15: 00007ffe130f5548 [ 237.945360][T13485] [ 238.165906][T13489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.195111][T13488] netlink: 'syz.4.3244': attribute type 10 has an invalid length. [ 238.281011][T13501] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 238.287572][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.295180][T13501] vhci_hcd vhci_hcd.0: Device attached [ 238.310608][T13501] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 238.317245][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.324907][T13501] vhci_hcd vhci_hcd.0: Device attached [ 238.349013][T13501] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 238.355709][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 238.363356][T13501] vhci_hcd vhci_hcd.0: Device attached [ 238.413462][T13501] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 238.420180][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.427903][T13501] vhci_hcd vhci_hcd.0: Device attached [ 238.497212][T13501] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(16) [ 238.503856][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.511418][T13501] vhci_hcd vhci_hcd.0: Device attached [ 238.518578][T13501] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 238.525204][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 238.532907][T13501] vhci_hcd vhci_hcd.0: Device attached [ 238.538651][ T4617] usb 11-1: new low-speed USB device number 5 using vhci_hcd [ 238.555495][T13501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.574403][T13501] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 238.728966][T13530] __nla_validate_parse: 5 callbacks suppressed [ 238.728987][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3257'. [ 238.774767][T13501] vhci_hcd vhci_hcd.0: port 0 already used [ 238.823583][T13535] FAULT_INJECTION: forcing a failure. [ 238.823583][T13535] name fail_futex, interval 1, probability 0, space 0, times 1 [ 238.824494][T13502] vhci_hcd: connection reset by peer [ 238.836606][T13535] CPU: 0 UID: 0 PID: 13535 Comm: syz.0.3259 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.836639][T13535] Tainted: [W]=WARN [ 238.836646][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.836659][T13535] Call Trace: [ 238.836667][T13535] [ 238.836676][T13535] __dump_stack+0x1d/0x30 [ 238.836702][T13535] dump_stack_lvl+0x95/0xd0 [ 238.836790][T13535] dump_stack+0x15/0x1b [ 238.836810][T13535] should_fail_ex+0x265/0x280 [ 238.836841][T13535] should_fail+0xb/0x20 [ 238.836861][T13535] get_futex_key+0x5b8/0xc00 [ 238.836890][T13535] futex_wait_requeue_pi+0x15c/0x6a0 [ 238.836932][T13535] ? __pfx_futex_wake_mark+0x10/0x10 [ 238.836972][T13535] ? proc_fail_nth_write+0x13b/0x160 [ 238.837046][T13535] do_futex+0x136/0x380 [ 238.837075][T13535] __se_sys_futex+0x2ed/0x360 [ 238.837101][T13535] ? mutex_unlock+0x4f/0x90 [ 238.837131][T13535] __x64_sys_futex+0x78/0x90 [ 238.837283][T13535] x64_sys_call+0x2bc2/0x3000 [ 238.837355][T13535] do_syscall_64+0xca/0x2b0 [ 238.837441][T13535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.837463][T13535] RIP: 0033:0x7f0a9607f749 [ 238.837508][T13535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.837526][T13535] RSP: 002b:00007f0a94adf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 238.837581][T13535] RAX: ffffffffffffffda RBX: 00007f0a962d5fa0 RCX: 00007f0a9607f749 [ 238.837594][T13535] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 238.837607][T13535] RBP: 00007f0a94adf090 R08: 0000200000048000 R09: 0000000000000300 [ 238.837621][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.837657][T13535] R13: 00007f0a962d6038 R14: 00007f0a962d5fa0 R15: 00007ffefbc279b8 [ 238.837677][T13535] [ 238.837711][T13504] vhci_hcd: connection closed [ 238.877635][T13536] SELinux: failed to load policy [ 238.878479][T13517] vhci_hcd: connection closed [ 238.884606][T13509] vhci_hcd: connection closed [ 238.887105][T13519] vhci_hcd: connection closed [ 238.891896][T13514] vhci_hcd: connection closed [ 238.897281][ T946] vhci_hcd vhci_hcd.5: stop threads [ 239.061981][ T946] vhci_hcd vhci_hcd.5: release socket [ 239.067445][ T946] vhci_hcd vhci_hcd.5: disconnect device [ 239.073988][ T946] vhci_hcd vhci_hcd.5: stop threads [ 239.079485][ T946] vhci_hcd vhci_hcd.5: release socket [ 239.084944][ T946] vhci_hcd vhci_hcd.5: disconnect device [ 239.090893][ T946] vhci_hcd vhci_hcd.5: stop threads [ 239.096162][ T946] vhci_hcd vhci_hcd.5: release socket [ 239.101642][ T946] vhci_hcd vhci_hcd.5: disconnect device [ 239.108289][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3261'. [ 239.121332][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.131139][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 239.148378][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.160748][ T946] vhci_hcd vhci_hcd.5: stop threads [ 239.166060][ T946] vhci_hcd vhci_hcd.5: release socket [ 239.171510][ T946] vhci_hcd vhci_hcd.5: disconnect device [ 239.197162][ T946] vhci_hcd vhci_hcd.5: stop threads [ 239.202432][ T946] vhci_hcd vhci_hcd.5: release socket [ 239.207852][ T946] vhci_hcd vhci_hcd.5: disconnect device [ 239.225792][ T946] vhci_hcd vhci_hcd.5: stop threads [ 239.231044][ T946] vhci_hcd vhci_hcd.5: release socket [ 239.236542][ T946] vhci_hcd vhci_hcd.5: disconnect device [ 239.330082][T13551] SELinux: failed to load policy [ 239.426174][T13566] FAULT_INJECTION: forcing a failure. [ 239.426174][T13566] name failslab, interval 1, probability 0, space 0, times 0 [ 239.438926][T13566] CPU: 1 UID: 0 PID: 13566 Comm: syz.3.3273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.438962][T13566] Tainted: [W]=WARN [ 239.438970][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.439020][T13566] Call Trace: [ 239.439025][T13566] [ 239.439032][T13566] __dump_stack+0x1d/0x30 [ 239.439056][T13566] dump_stack_lvl+0x95/0xd0 [ 239.439081][T13566] dump_stack+0x15/0x1b [ 239.439115][T13566] should_fail_ex+0x265/0x280 [ 239.439141][T13566] should_failslab+0x8c/0xb0 [ 239.439165][T13566] __kmalloc_noprof+0xb9/0x5a0 [ 239.439241][T13566] ? io_cache_alloc_new+0x2a/0xb0 [ 239.439270][T13566] ? __fget_files+0x184/0x1c0 [ 239.439297][T13566] io_cache_alloc_new+0x2a/0xb0 [ 239.439327][T13566] io_arm_apoll+0x20e/0x420 [ 239.439394][T13566] io_arm_poll_handler+0x131/0x160 [ 239.439450][T13566] io_queue_async+0x25d/0x2d0 [ 239.439475][T13566] io_submit_sqes+0xb90/0x11b0 [ 239.439586][T13566] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 239.439621][T13566] ? 0xffffffff81000000 [ 239.439637][T13566] ? __rcu_read_unlock+0x4f/0x70 [ 239.439661][T13566] ? proc_fail_nth_write+0x13b/0x160 [ 239.439767][T13566] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.439794][T13566] ? vfs_write+0x7e8/0x960 [ 239.439811][T13566] ? __rcu_read_unlock+0x4f/0x70 [ 239.439829][T13566] ? __fget_files+0x184/0x1c0 [ 239.439944][T13566] ? mutex_unlock+0x4f/0x90 [ 239.439995][T13566] ? fput+0x8f/0xc0 [ 239.440025][T13566] __x64_sys_io_uring_enter+0x78/0x90 [ 239.440060][T13566] x64_sys_call+0x27e4/0x3000 [ 239.440129][T13566] do_syscall_64+0xca/0x2b0 [ 239.440159][T13566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.440181][T13566] RIP: 0033:0x7fa3aa78f749 [ 239.440200][T13566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.440287][T13566] RSP: 002b:00007fa3a91f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 239.440308][T13566] RAX: ffffffffffffffda RBX: 00007fa3aa9e5fa0 RCX: 00007fa3aa78f749 [ 239.440321][T13566] RDX: 0000000000000620 RSI: 00000000000006e2 RDI: 0000000000000003 [ 239.440336][T13566] RBP: 00007fa3a91f7090 R08: 0000000000000000 R09: 0000000000000000 [ 239.440350][T13566] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 239.440371][T13566] R13: 00007fa3aa9e6038 R14: 00007fa3aa9e5fa0 R15: 00007ffedc34d538 [ 239.440392][T13566] [ 239.717347][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3276'. [ 239.726671][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3276'. [ 239.979935][T13588] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3282'. [ 240.193770][ T2056] Bluetooth: hci0: Frame reassembly failed (-84) [ 240.282307][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3288'. [ 240.291496][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3288'. [ 240.484995][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.499873][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.785352][T13621] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3295'. [ 241.106533][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 241.106552][ T29] audit: type=1400 audit(241.089:12286): avc: denied { ioctl } for pid=13633 comm="syz.2.3300" path="socket:[39713]" dev="sockfs" ino=39713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 241.139890][ T29] audit: type=1326 audit(241.089:12287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.163155][ T29] audit: type=1326 audit(241.089:12288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.186239][ T29] audit: type=1326 audit(241.089:12289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.209258][ T29] audit: type=1326 audit(241.089:12290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.232532][ T29] audit: type=1326 audit(241.089:12291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.255649][ T29] audit: type=1326 audit(241.119:12292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.278641][ T29] audit: type=1326 audit(241.119:12293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.280512][T13643] SELinux: failed to load policy [ 241.301657][ T29] audit: type=1326 audit(241.119:12294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 241.329968][T13645] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 241.336682][T13645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.344225][T13645] vhci_hcd vhci_hcd.0: Device attached [ 241.350168][T13642] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 241.356756][T13642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.364394][T13642] vhci_hcd vhci_hcd.0: Device attached [ 241.374528][T13645] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 241.381203][T13645] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.388852][T13645] vhci_hcd vhci_hcd.0: Device attached [ 241.394424][ T29] audit: type=1326 audit(241.359:12295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.2.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61b59bf749 code=0x7ffc0000 [ 241.422749][T13642] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 241.429438][T13642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.436986][T13642] vhci_hcd vhci_hcd.0: Device attached [ 241.464403][T13642] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 241.471056][T13642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.478686][T13642] vhci_hcd vhci_hcd.0: Device attached [ 241.492118][T13642] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 241.498760][T13642] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.506487][T13642] vhci_hcd vhci_hcd.0: Device attached [ 241.513177][T13642] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.522145][T13642] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.581375][T13642] vhci_hcd vhci_hcd.0: port 0 already used [ 241.634957][T13659] vhci_hcd: connection closed [ 241.635125][T13655] vhci_hcd: connection closed [ 241.652894][T13649] vhci_hcd: connection closed [ 241.657864][T13646] vhci_hcd: connection closed [ 241.662625][T13644] vhci_hcd: connection closed [ 241.703890][T13671] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3307'. [ 241.711803][T13651] vhci_hcd: connection closed [ 241.724634][ T2056] vhci_hcd vhci_hcd.4: stop threads [ 241.734610][ T2056] vhci_hcd vhci_hcd.4: release socket [ 241.740183][ T2056] vhci_hcd vhci_hcd.4: disconnect device [ 241.748274][ T2056] vhci_hcd vhci_hcd.4: stop threads [ 241.753508][ T2056] vhci_hcd vhci_hcd.4: release socket [ 241.758984][ T2056] vhci_hcd vhci_hcd.4: disconnect device [ 241.799025][ T2056] vhci_hcd vhci_hcd.4: stop threads [ 241.804355][ T2056] vhci_hcd vhci_hcd.4: release socket [ 241.809832][ T2056] vhci_hcd vhci_hcd.4: disconnect device [ 241.843556][ T2056] vhci_hcd vhci_hcd.4: stop threads [ 241.849001][ T2056] vhci_hcd vhci_hcd.4: release socket [ 241.854495][ T2056] vhci_hcd vhci_hcd.4: disconnect device [ 241.876998][ T2056] vhci_hcd vhci_hcd.4: stop threads [ 241.882344][ T2056] vhci_hcd vhci_hcd.4: release socket [ 241.882873][T13678] bridge_slave_0: left allmulticast mode [ 241.887834][ T2056] vhci_hcd vhci_hcd.4: disconnect device [ 241.899063][ T2056] vhci_hcd vhci_hcd.4: stop threads [ 241.899329][T13678] bridge_slave_0: left promiscuous mode [ 241.904621][ T2056] vhci_hcd vhci_hcd.4: release socket [ 241.910184][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.915547][ T2056] vhci_hcd vhci_hcd.4: disconnect device [ 241.937309][T13678] bridge_slave_1: left allmulticast mode [ 241.943114][T13678] bridge_slave_1: left promiscuous mode [ 241.949042][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.965694][T13678] bond0: (slave bond_slave_0): Releasing backup interface [ 241.976218][T13678] bond0: (slave bond_slave_1): Releasing backup interface [ 241.988354][T13678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.995827][T13678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.005749][T13678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.013308][T13678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.023618][T13678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.024436][T13680] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 242.048780][T13680] batman_adv: batadv0: Adding interface: veth1_vlan [ 242.055523][T13680] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.089199][T13680] batman_adv: batadv0: Interface activated: veth1_vlan [ 242.167556][T13687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.176692][T13687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.264744][ T3617] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.273106][T13689] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 242.279703][T13689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.287336][T13689] vhci_hcd vhci_hcd.0: Device attached [ 242.330627][T13689] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 242.337273][T13689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.344820][T13689] vhci_hcd vhci_hcd.0: Device attached [ 242.355634][T13689] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 242.362291][T13689] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 242.369924][T13689] vhci_hcd vhci_hcd.0: Device attached [ 242.409084][T13689] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 242.415734][T13689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.423377][T13689] vhci_hcd vhci_hcd.0: Device attached [ 242.482284][T13707] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 242.488934][T13707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.496558][T13707] vhci_hcd vhci_hcd.0: Device attached [ 242.539275][T13689] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 242.545964][T13689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 242.553775][T13689] vhci_hcd vhci_hcd.0: Device attached [ 242.563120][T13689] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 242.571828][T13689] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 242.641200][T13689] vhci_hcd vhci_hcd.0: port 0 already used [ 242.643839][T13722] FAULT_INJECTION: forcing a failure. [ 242.643839][T13722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.652464][T13713] vhci_hcd: connection closed [ 242.660203][T13722] CPU: 0 UID: 0 PID: 13722 Comm: syz.2.3321 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.660265][T13722] Tainted: [W]=WARN [ 242.660274][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.660287][T13722] Call Trace: [ 242.660295][T13722] [ 242.660312][T13722] __dump_stack+0x1d/0x30 [ 242.660341][T13722] dump_stack_lvl+0x95/0xd0 [ 242.660434][T13722] dump_stack+0x15/0x1b [ 242.660454][T13722] should_fail_ex+0x265/0x280 [ 242.660478][T13722] should_fail+0xb/0x20 [ 242.660499][T13722] should_fail_usercopy+0x1a/0x20 [ 242.660526][T13722] _copy_from_user+0x1c/0xb0 [ 242.660625][T13722] __sys_bpf+0x183/0x7c0 [ 242.660647][T13704] vhci_hcd: connection closed [ 242.660655][T13722] __x64_sys_bpf+0x41/0x50 [ 242.660689][T13722] x64_sys_call+0x28e1/0x3000 [ 242.660716][T13722] do_syscall_64+0xca/0x2b0 [ 242.660831][T13722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.660862][T13722] RIP: 0033:0x7f61b59bf749 [ 242.660880][T13722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.660962][T13722] RSP: 002b:00007f61b441f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.660984][T13722] RAX: ffffffffffffffda RBX: 00007f61b5c15fa0 RCX: 00007f61b59bf749 [ 242.660998][T13722] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 242.661012][T13722] RBP: 00007f61b441f090 R08: 0000000000000000 R09: 0000000000000000 [ 242.661025][T13722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.661038][T13722] R13: 00007f61b5c16038 R14: 00007f61b5c15fa0 R15: 00007fff2c078d18 [ 242.661058][T13722] [ 242.665749][T13708] vhci_hcd: connection closed [ 242.677181][T13699] vhci_hcd: connection closed [ 242.734995][T13696] vhci_hcd: connection closed [ 242.759053][T13690] vhci_hcd: connection closed [ 242.824549][ T6741] vhci_hcd vhci_hcd.4: stop threads [ 242.857871][ T6741] vhci_hcd vhci_hcd.4: release socket [ 242.863278][ T6741] vhci_hcd vhci_hcd.4: disconnect device [ 242.922614][T13729] SELinux: failed to load policy [ 242.949072][ T6741] vhci_hcd vhci_hcd.4: stop threads [ 242.954355][ T6741] vhci_hcd vhci_hcd.4: release socket [ 242.959896][ T6741] vhci_hcd vhci_hcd.4: disconnect device [ 243.030776][ T6741] vhci_hcd vhci_hcd.4: stop threads [ 243.036094][ T6741] vhci_hcd vhci_hcd.4: release socket [ 243.041505][ T6741] vhci_hcd vhci_hcd.4: disconnect device [ 243.068334][ T6741] vhci_hcd vhci_hcd.4: stop threads [ 243.073598][ T6741] vhci_hcd vhci_hcd.4: release socket [ 243.079128][ T6741] vhci_hcd vhci_hcd.4: disconnect device [ 243.131081][ T6741] vhci_hcd vhci_hcd.4: stop threads [ 243.136443][ T6741] vhci_hcd vhci_hcd.4: release socket [ 243.141935][ T6741] vhci_hcd vhci_hcd.4: disconnect device [ 243.167065][ T6741] vhci_hcd vhci_hcd.4: stop threads [ 243.171167][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.172380][ T6741] vhci_hcd vhci_hcd.4: release socket [ 243.186235][ T6741] vhci_hcd vhci_hcd.4: disconnect device [ 243.191312][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.426088][T13767] FAULT_INJECTION: forcing a failure. [ 243.426088][T13767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.439563][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.0.3341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.439599][T13767] Tainted: [W]=WARN [ 243.439607][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.439685][T13767] Call Trace: [ 243.439693][T13767] [ 243.439703][T13767] __dump_stack+0x1d/0x30 [ 243.439733][T13767] dump_stack_lvl+0x95/0xd0 [ 243.439826][T13767] dump_stack+0x15/0x1b [ 243.439849][T13767] should_fail_ex+0x265/0x280 [ 243.439878][T13767] should_fail_alloc_page+0xf2/0x100 [ 243.439981][T13767] __alloc_frozen_pages_noprof+0x109/0x360 [ 243.440090][T13767] alloc_pages_mpol+0xb3/0x260 [ 243.440119][T13767] ? css_rstat_updated+0xbb/0x280 [ 243.440139][T13767] vma_alloc_folio_noprof+0x1aa/0x300 [ 243.440182][T13767] handle_mm_fault+0xef5/0x2c60 [ 243.440217][T13767] ? _raw_spin_lock+0x52/0xa0 [ 243.440315][T13767] ? __pte_offset_map_lock+0x1d9/0x240 [ 243.440400][T13767] __get_user_pages+0x1024/0x1ed0 [ 243.440468][T13767] ? avc_has_perm_noaudit+0xab/0x130 [ 243.440493][T13767] __gup_longterm_locked+0x8ef/0xe60 [ 243.440639][T13767] ? security_ptrace_access_check+0x69/0x80 [ 243.440737][T13767] ? __ptrace_may_access+0x2bd/0x340 [ 243.440773][T13767] pin_user_pages_remote+0x7e/0xb0 [ 243.440937][T13767] process_vm_rw+0x484/0x960 [ 243.440978][T13767] __x64_sys_process_vm_writev+0x78/0x90 [ 243.441049][T13767] x64_sys_call+0x27ef/0x3000 [ 243.441075][T13767] do_syscall_64+0xca/0x2b0 [ 243.441133][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.441159][T13767] RIP: 0033:0x7f0a9607f749 [ 243.441178][T13767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.441314][T13767] RSP: 002b:00007f0a94adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 243.441335][T13767] RAX: ffffffffffffffda RBX: 00007f0a962d5fa0 RCX: 00007f0a9607f749 [ 243.441348][T13767] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 00000000000000c9 [ 243.441376][T13767] RBP: 00007f0a94adf090 R08: 0000000000000001 R09: 0000000000000000 [ 243.441391][T13767] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 243.441406][T13767] R13: 00007f0a962d6038 R14: 00007f0a962d5fa0 R15: 00007ffefbc279b8 [ 243.441427][T13767] [ 243.669242][ T4617] usb 11-1: enqueue for inactive port 0 [ 243.675558][ T4617] usb 11-1: enqueue for inactive port 0 [ 243.744544][ T4617] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 245.065286][T13818] __nla_validate_parse: 4 callbacks suppressed [ 245.065328][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3361'. [ 245.164840][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.189460][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.234114][T13828] xt_CT: No such helper "netbios-ns" [ 245.819710][T13845] Falling back ldisc for ttyS3. [ 245.842994][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3374'. [ 246.265760][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 246.265779][ T29] audit: type=1326 audit(246.249:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.366096][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3386'. [ 246.384910][ T29] audit: type=1326 audit(246.289:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.408072][ T29] audit: type=1326 audit(246.289:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.431339][ T29] audit: type=1326 audit(246.289:12615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.454773][ T29] audit: type=1326 audit(246.299:12616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.477899][ T29] audit: type=1326 audit(246.299:12617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.501005][ T29] audit: type=1326 audit(246.299:12618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.524076][ T29] audit: type=1326 audit(246.299:12619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13878 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 246.782069][T13895] netlink: 'syz.5.3393': attribute type 9 has an invalid length. [ 246.872657][T13904] FAULT_INJECTION: forcing a failure. [ 246.872657][T13904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.885913][T13904] CPU: 1 UID: 0 PID: 13904 Comm: syz.4.3395 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.885961][T13904] Tainted: [W]=WARN [ 246.885970][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.885984][T13904] Call Trace: [ 246.885992][T13904] [ 246.886000][T13904] __dump_stack+0x1d/0x30 [ 246.886030][T13904] dump_stack_lvl+0x95/0xd0 [ 246.886063][T13904] dump_stack+0x15/0x1b [ 246.886160][T13904] should_fail_ex+0x265/0x280 [ 246.886187][T13904] should_fail+0xb/0x20 [ 246.886207][T13904] should_fail_usercopy+0x1a/0x20 [ 246.886249][T13904] _copy_from_user+0x1c/0xb0 [ 246.886282][T13904] bpf_test_init+0xb9/0x140 [ 246.886351][T13904] bpf_prog_test_run_xdp+0x305/0x970 [ 246.886386][T13904] ? __rcu_read_unlock+0x4f/0x70 [ 246.886414][T13904] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 246.886479][T13904] bpf_prog_test_run+0x204/0x340 [ 246.886538][T13904] __sys_bpf+0x4c0/0x7c0 [ 246.886582][T13904] __x64_sys_bpf+0x41/0x50 [ 246.886615][T13904] x64_sys_call+0x28e1/0x3000 [ 246.886644][T13904] do_syscall_64+0xca/0x2b0 [ 246.886812][T13904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.886838][T13904] RIP: 0033:0x7feb7fb0f749 [ 246.886857][T13904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.887001][T13904] RSP: 002b:00007feb7e56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.887025][T13904] RAX: ffffffffffffffda RBX: 00007feb7fd65fa0 RCX: 00007feb7fb0f749 [ 246.887038][T13904] RDX: 000000000000001a RSI: 0000200000000b80 RDI: 000000000000000a [ 246.887060][T13904] RBP: 00007feb7e56f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.887096][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.887158][T13904] R13: 00007feb7fd66038 R14: 00007feb7fd65fa0 R15: 00007ffca0d14b98 [ 246.887180][T13904] [ 247.124875][ T29] audit: type=1326 audit(247.089:12620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.5.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 247.148006][ T29] audit: type=1326 audit(247.089:12621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13908 comm="syz.5.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 247.367094][T13911] SELinux: failed to load policy [ 247.455732][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'. [ 247.567923][T13935] FAULT_INJECTION: forcing a failure. [ 247.567923][T13935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.581119][T13935] CPU: 0 UID: 0 PID: 13935 Comm: syz.2.3407 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 247.581157][T13935] Tainted: [W]=WARN [ 247.581165][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.581246][T13935] Call Trace: [ 247.581255][T13935] [ 247.581265][T13935] __dump_stack+0x1d/0x30 [ 247.581295][T13935] dump_stack_lvl+0x95/0xd0 [ 247.581322][T13935] dump_stack+0x15/0x1b [ 247.581346][T13935] should_fail_ex+0x265/0x280 [ 247.581447][T13935] should_fail+0xb/0x20 [ 247.581471][T13935] should_fail_usercopy+0x1a/0x20 [ 247.581500][T13935] _copy_to_user+0x20/0xa0 [ 247.581549][T13935] simple_read_from_buffer+0xb5/0x130 [ 247.581575][T13935] proc_fail_nth_read+0x10e/0x150 [ 247.581662][T13935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.581694][T13935] vfs_read+0x1a8/0x770 [ 247.581792][T13935] ? __rcu_read_unlock+0x4f/0x70 [ 247.581835][T13935] ? __fget_files+0x184/0x1c0 [ 247.581856][T13935] ? mutex_lock+0x58/0x90 [ 247.581888][T13935] ksys_read+0xda/0x1a0 [ 247.581913][T13935] __x64_sys_read+0x40/0x50 [ 247.581936][T13935] x64_sys_call+0x2889/0x3000 [ 247.582034][T13935] do_syscall_64+0xca/0x2b0 [ 247.582164][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.582187][T13935] RIP: 0033:0x7f61b59be15c [ 247.582203][T13935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.582239][T13935] RSP: 002b:00007f61b441f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.582264][T13935] RAX: ffffffffffffffda RBX: 00007f61b5c15fa0 RCX: 00007f61b59be15c [ 247.582280][T13935] RDX: 000000000000000f RSI: 00007f61b441f0a0 RDI: 0000000000000004 [ 247.582295][T13935] RBP: 00007f61b441f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.582311][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.582327][T13935] R13: 00007f61b5c16038 R14: 00007f61b5c15fa0 R15: 00007fff2c078d18 [ 247.582352][T13935] [ 247.845895][T13940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3409'. [ 247.912950][T13938] SELinux: failed to load policy [ 248.275992][T13956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.392877][T13956] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3416'. [ 248.417196][T13956] netlink: 'syz.0.3416': attribute type 10 has an invalid length. [ 248.425154][T13956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3416'. [ 248.541183][T13973] netlink: 'syz.5.3423': attribute type 21 has an invalid length. [ 248.549172][T13973] netlink: 'syz.5.3423': attribute type 1 has an invalid length. [ 248.557146][T13973] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3423'. [ 248.760523][T13990] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3426'. [ 248.770096][T13990] 9p: Bad value for 'wfdno' [ 248.852187][T13993] SELinux: failed to load policy [ 248.978753][T14012] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3436'. [ 249.124795][T14024] FAULT_INJECTION: forcing a failure. [ 249.124795][T14024] name failslab, interval 1, probability 0, space 0, times 0 [ 249.137567][T14024] CPU: 1 UID: 0 PID: 14024 Comm: syz.5.3443 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.137604][T14024] Tainted: [W]=WARN [ 249.137613][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.137625][T14024] Call Trace: [ 249.137632][T14024] [ 249.137639][T14024] __dump_stack+0x1d/0x30 [ 249.137729][T14024] dump_stack_lvl+0x95/0xd0 [ 249.137751][T14024] dump_stack+0x15/0x1b [ 249.137776][T14024] should_fail_ex+0x265/0x280 [ 249.137833][T14024] should_failslab+0x8c/0xb0 [ 249.137858][T14024] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 249.137884][T14024] ? __alloc_skb+0x2ff/0x4b0 [ 249.137911][T14024] __alloc_skb+0x2ff/0x4b0 [ 249.137996][T14024] ? __alloc_skb+0x228/0x4b0 [ 249.138024][T14024] netlink_alloc_large_skb+0xbf/0xf0 [ 249.138063][T14024] netlink_sendmsg+0x3cf/0x6b0 [ 249.138125][T14024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.138161][T14024] __sock_sendmsg+0x145/0x180 [ 249.138242][T14024] ____sys_sendmsg+0x31e/0x4a0 [ 249.138377][T14024] ___sys_sendmsg+0x17b/0x1d0 [ 249.138421][T14024] __x64_sys_sendmsg+0xd4/0x160 [ 249.138455][T14024] x64_sys_call+0x17ba/0x3000 [ 249.138562][T14024] do_syscall_64+0xca/0x2b0 [ 249.138690][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.138713][T14024] RIP: 0033:0x7f2fc6dbf749 [ 249.138730][T14024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.138753][T14024] RSP: 002b:00007f2fc5827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.138850][T14024] RAX: ffffffffffffffda RBX: 00007f2fc7015fa0 RCX: 00007f2fc6dbf749 [ 249.138867][T14024] RDX: 00000000000400d4 RSI: 0000200000000240 RDI: 0000000000000003 [ 249.138883][T14024] RBP: 00007f2fc5827090 R08: 0000000000000000 R09: 0000000000000000 [ 249.138899][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.138914][T14024] R13: 00007f2fc7016038 R14: 00007f2fc7015fa0 R15: 00007ffe130f5548 [ 249.138960][T14024] [ 250.250540][T14065] netlink: 'syz.5.3457': attribute type 1 has an invalid length. [ 250.271303][T14065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.354085][T14067] bond1: (slave veth7): Enslaving as an active interface with a down link [ 250.424196][T14065] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.467197][T14065] bond1: (slave batadv1): making interface the new active one [ 250.505668][T14065] batadv1: entered promiscuous mode [ 250.511067][T14065] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 251.136448][T14085] __nla_validate_parse: 1 callbacks suppressed [ 251.136467][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3464'. [ 251.930137][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 251.930155][ T29] audit: type=1326 audit(251.909:12765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.023242][ T29] audit: type=1326 audit(251.939:12766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.046197][ T29] audit: type=1326 audit(251.939:12767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.069339][ T29] audit: type=1326 audit(251.939:12768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.092361][ T29] audit: type=1326 audit(251.939:12769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.115407][ T29] audit: type=1326 audit(251.939:12770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.138385][ T29] audit: type=1326 audit(251.939:12771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.161394][ T29] audit: type=1326 audit(251.939:12772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.184525][ T29] audit: type=1326 audit(251.939:12773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.207819][ T29] audit: type=1326 audit(251.939:12774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14107 comm="syz.5.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2fc6dbf749 code=0x7ffc0000 [ 252.587906][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 253.069087][T14134] SELinux: failed to load policy [ 253.270180][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3484'. [ 253.628114][T14158] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3485'. [ 253.728903][T14159] netlink: 'syz.0.3485': attribute type 10 has an invalid length. [ 253.736854][T14159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3485'. [ 254.096516][T14170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3490'. [ 254.171228][T14179] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3494'. [ 254.269650][T14181] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 254.280083][T14181] SELinux: failed to load policy [ 255.428106][T14212] vhci_hcd vhci_hcd.4: invalid port number 236 [ 255.458741][T14212] FAULT_INJECTION: forcing a failure. [ 255.458741][T14212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.471907][T14212] CPU: 0 UID: 0 PID: 14212 Comm: syz.0.3506 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.471953][T14212] Tainted: [W]=WARN [ 255.472010][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.472072][T14212] Call Trace: [ 255.472080][T14212] [ 255.472091][T14212] __dump_stack+0x1d/0x30 [ 255.472120][T14212] dump_stack_lvl+0x95/0xd0 [ 255.472158][T14212] dump_stack+0x15/0x1b [ 255.472253][T14212] should_fail_ex+0x265/0x280 [ 255.472282][T14212] should_fail+0xb/0x20 [ 255.472306][T14212] should_fail_usercopy+0x1a/0x20 [ 255.472359][T14212] _copy_to_user+0x20/0xa0 [ 255.472444][T14212] simple_read_from_buffer+0xb5/0x130 [ 255.472465][T14212] proc_fail_nth_read+0x10e/0x150 [ 255.472492][T14212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.472518][T14212] vfs_read+0x1a8/0x770 [ 255.472588][T14212] ? __rcu_read_unlock+0x4f/0x70 [ 255.472613][T14212] ? __fget_files+0x184/0x1c0 [ 255.472637][T14212] ? mutex_lock+0x58/0x90 [ 255.472666][T14212] ksys_read+0xda/0x1a0 [ 255.472704][T14212] __x64_sys_read+0x40/0x50 [ 255.472724][T14212] x64_sys_call+0x2889/0x3000 [ 255.472763][T14212] do_syscall_64+0xca/0x2b0 [ 255.472863][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.472886][T14212] RIP: 0033:0x7f0a9607e15c [ 255.472902][T14212] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.472919][T14212] RSP: 002b:00007f0a94adf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.473026][T14212] RAX: ffffffffffffffda RBX: 00007f0a962d5fa0 RCX: 00007f0a9607e15c [ 255.473041][T14212] RDX: 000000000000000f RSI: 00007f0a94adf0a0 RDI: 0000000000000007 [ 255.473056][T14212] RBP: 00007f0a94adf090 R08: 0000000000000000 R09: 0000000000000000 [ 255.473111][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.473127][T14212] R13: 00007f0a962d6038 R14: 00007f0a962d5fa0 R15: 00007ffefbc279b8 [ 255.473150][T14212] [ 257.114540][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 257.114639][ T29] audit: type=1326 audit(257.089:12951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.144183][ T29] audit: type=1326 audit(257.089:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.167214][ T29] audit: type=1326 audit(257.089:12953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.190193][ T29] audit: type=1326 audit(257.089:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.213159][ T29] audit: type=1326 audit(257.089:12955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.236443][ T29] audit: type=1326 audit(257.089:12956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.259472][ T29] audit: type=1326 audit(257.089:12957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.360520][ T29] audit: type=1326 audit(257.219:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.383790][ T29] audit: type=1326 audit(257.219:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.406822][ T29] audit: type=1326 audit(257.219:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 257.515179][T12905] Bluetooth: hci0: Frame reassembly failed (-84) [ 257.692749][T14273] SELinux: failed to load policy [ 257.736963][T14287] tmpfs: Bad value for 'mpol' [ 258.499551][T14310] SELinux: policydb version 0 does not match my version range 15-35 [ 258.507778][T14310] SELinux: failed to load policy [ 258.663684][T14325] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3547'. [ 258.752293][T14330] SELinux: failed to load policy [ 258.868230][T14353] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3555'. [ 259.017340][T14363] netlink: 400 bytes leftover after parsing attributes in process `syz.4.3559'. [ 259.049474][T14364] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 259.059868][T14363] netlink: 'syz.4.3559': attribute type 10 has an invalid length. [ 259.067746][T14363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3559'. [ 259.102676][T14364] SELinux: failed to load policy [ 259.454719][T14389] SELinux: failed to load policy [ 259.534698][ T3617] Bluetooth: hci0: command 0x1003 tx timeout [ 259.540802][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 259.633605][T14411] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 259.675074][T14411] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3581'. [ 259.734238][T14415] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 259.858915][T14432] mmap: syz.0.3587 (14432): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 260.058566][T14441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3590'. [ 260.115575][T14445] SELinux: failed to load policy [ 260.209533][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3597'. [ 260.221384][T14455] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 260.221384][T14455] program syz.0.3598 not setting count and/or reply_len properly [ 260.501384][T14468] kernel profiling enabled (shift: 63) [ 260.506969][T14468] profiling shift: 63 too large [ 260.612302][T14474] netlink: 400 bytes leftover after parsing attributes in process `syz.4.3603'. [ 260.625338][T14474] netlink: 'syz.4.3603': attribute type 10 has an invalid length. [ 260.633190][T14474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3603'. [ 261.387394][T14515] FAULT_INJECTION: forcing a failure. [ 261.387394][T14515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.400589][T14515] CPU: 0 UID: 0 PID: 14515 Comm: syz.2.3616 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 261.400627][T14515] Tainted: [W]=WARN [ 261.400655][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.400667][T14515] Call Trace: [ 261.400673][T14515] [ 261.400681][T14515] __dump_stack+0x1d/0x30 [ 261.400776][T14515] dump_stack_lvl+0x95/0xd0 [ 261.400803][T14515] dump_stack+0x15/0x1b [ 261.400827][T14515] should_fail_ex+0x265/0x280 [ 261.400854][T14515] should_fail+0xb/0x20 [ 261.400892][T14515] should_fail_usercopy+0x1a/0x20 [ 261.400916][T14515] _copy_from_user+0x1c/0xb0 [ 261.400945][T14515] bpf_test_init+0xb9/0x140 [ 261.400988][T14515] bpf_prog_test_run_xdp+0x305/0x970 [ 261.401036][T14515] ? __rcu_read_unlock+0x4f/0x70 [ 261.401064][T14515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 261.401152][T14515] bpf_prog_test_run+0x204/0x340 [ 261.401221][T14515] __sys_bpf+0x4c0/0x7c0 [ 261.401270][T14515] __x64_sys_bpf+0x41/0x50 [ 261.401358][T14515] x64_sys_call+0x28e1/0x3000 [ 261.401386][T14515] do_syscall_64+0xca/0x2b0 [ 261.401424][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.401481][T14515] RIP: 0033:0x7f61b59bf749 [ 261.401501][T14515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.401523][T14515] RSP: 002b:00007f61b441f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.401579][T14515] RAX: ffffffffffffffda RBX: 00007f61b5c15fa0 RCX: 00007f61b59bf749 [ 261.401595][T14515] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 261.401609][T14515] RBP: 00007f61b441f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.401624][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.401638][T14515] R13: 00007f61b5c16038 R14: 00007f61b5c15fa0 R15: 00007fff2c078d18 [ 261.401662][T14515] [ 261.744841][T14535] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3625'. [ 261.785572][T14535] netlink: 'syz.0.3625': attribute type 10 has an invalid length. [ 261.993469][T14544] unsupported nla_type 90 [ 262.157716][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 262.157736][ T29] audit: type=1326 audit(262.139:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.226906][ T29] audit: type=1326 audit(262.139:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.250195][ T29] audit: type=1326 audit(262.139:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.273474][ T29] audit: type=1326 audit(262.169:13178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.296570][ T29] audit: type=1326 audit(262.169:13179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.319961][ T29] audit: type=1326 audit(262.169:13180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.343007][ T29] audit: type=1326 audit(262.169:13181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.366013][ T29] audit: type=1326 audit(262.169:13182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.389085][ T29] audit: type=1326 audit(262.169:13183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.412234][ T29] audit: type=1326 audit(262.169:13184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14555 comm="syz.3.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 262.794924][ T63] batadv1: left promiscuous mode [ 263.074946][T14553] syz.4.3630 (14553) used greatest stack depth: 7432 bytes left [ 263.569166][T14596] netlink: 'syz.4.3645': attribute type 10 has an invalid length. [ 263.960762][T14622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.014741][T14622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.031824][T14630] __nla_validate_parse: 4 callbacks suppressed [ 264.031845][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3656'. [ 264.301299][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3665'. [ 264.388471][T14652] xt_CONNSECMARK: invalid mode: 0 [ 264.423618][T14653] FAULT_INJECTION: forcing a failure. [ 264.423618][T14653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.436880][T14653] CPU: 0 UID: 0 PID: 14653 Comm: syz.4.3668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 264.436993][T14653] Tainted: [W]=WARN [ 264.437002][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.437017][T14653] Call Trace: [ 264.437024][T14653] [ 264.437033][T14653] __dump_stack+0x1d/0x30 [ 264.437057][T14653] dump_stack_lvl+0x95/0xd0 [ 264.437161][T14653] dump_stack+0x15/0x1b [ 264.437184][T14653] should_fail_ex+0x265/0x280 [ 264.437206][T14653] should_fail+0xb/0x20 [ 264.437225][T14653] should_fail_usercopy+0x1a/0x20 [ 264.437316][T14653] _copy_to_user+0x20/0xa0 [ 264.437389][T14653] simple_read_from_buffer+0xb5/0x130 [ 264.437410][T14653] proc_fail_nth_read+0x10e/0x150 [ 264.437449][T14653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.437476][T14653] vfs_read+0x1a8/0x770 [ 264.437493][T14653] ? __rcu_read_unlock+0x4f/0x70 [ 264.437513][T14653] ? __fget_files+0x184/0x1c0 [ 264.437587][T14653] ? mutex_lock+0x58/0x90 [ 264.437613][T14653] ksys_read+0xda/0x1a0 [ 264.437632][T14653] __x64_sys_read+0x40/0x50 [ 264.437721][T14653] x64_sys_call+0x2889/0x3000 [ 264.437863][T14653] do_syscall_64+0xca/0x2b0 [ 264.437952][T14653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.437986][T14653] RIP: 0033:0x7feb7fb0e15c [ 264.438066][T14653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.438088][T14653] RSP: 002b:00007feb7e56f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.438114][T14653] RAX: ffffffffffffffda RBX: 00007feb7fd65fa0 RCX: 00007feb7fb0e15c [ 264.438130][T14653] RDX: 000000000000000f RSI: 00007feb7e56f0a0 RDI: 0000000000000007 [ 264.438142][T14653] RBP: 00007feb7e56f090 R08: 0000000000000000 R09: 0000000000000000 [ 264.438181][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.438194][T14653] R13: 00007feb7fd66038 R14: 00007feb7fd65fa0 R15: 00007ffca0d14b98 [ 264.438220][T14653] [ 265.078454][T14681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3678'. [ 265.126645][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3680'. [ 265.198231][T14687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.207857][T14687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.239385][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'. [ 265.286107][T14689] cgroup: No subsys list or none specified [ 265.382349][T14695] SELinux: failed to load policy [ 265.467432][T14704] FAULT_INJECTION: forcing a failure. [ 265.467432][T14704] name failslab, interval 1, probability 0, space 0, times 0 [ 265.480119][T14704] CPU: 0 UID: 0 PID: 14704 Comm: syz.2.3688 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 265.480164][T14704] Tainted: [W]=WARN [ 265.480171][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.480183][T14704] Call Trace: [ 265.480190][T14704] [ 265.480198][T14704] __dump_stack+0x1d/0x30 [ 265.480227][T14704] dump_stack_lvl+0x95/0xd0 [ 265.480326][T14704] dump_stack+0x15/0x1b [ 265.480350][T14704] should_fail_ex+0x265/0x280 [ 265.480376][T14704] should_failslab+0x8c/0xb0 [ 265.480400][T14704] __kmalloc_cache_noprof+0x65/0x4c0 [ 265.480566][T14704] ? sg_read+0x3ce/0xcb0 [ 265.480585][T14704] sg_read+0x3ce/0xcb0 [ 265.480604][T14704] ? __pfx_sg_read+0x10/0x10 [ 265.480620][T14704] vfs_readv+0x3fb/0x690 [ 265.480735][T14704] do_readv+0xe7/0x210 [ 265.480758][T14704] __x64_sys_readv+0x45/0x50 [ 265.480795][T14704] x64_sys_call+0x2831/0x3000 [ 265.480880][T14704] do_syscall_64+0xca/0x2b0 [ 265.480904][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.480998][T14704] RIP: 0033:0x7f61b59bf749 [ 265.481021][T14704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.481035][T14704] RSP: 002b:00007f61b441f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 265.481050][T14704] RAX: ffffffffffffffda RBX: 00007f61b5c15fa0 RCX: 00007f61b59bf749 [ 265.481061][T14704] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 265.481073][T14704] RBP: 00007f61b441f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.481085][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.481142][T14704] R13: 00007f61b5c16038 R14: 00007f61b5c15fa0 R15: 00007fff2c078d18 [ 265.481177][T14704] [ 265.487200][T14701] netlink: 'syz.3.3687': attribute type 1 has an invalid length. [ 265.794796][T14714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 266.079658][T14729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3697'. [ 266.288209][T14748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.307778][T14748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.181344][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3714'. [ 267.195571][T14775] cgroup: No subsys list or none specified [ 267.255128][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 267.255144][ T29] audit: type=1326 audit(267.239:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.328276][ T29] audit: type=1326 audit(267.269:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.351396][ T29] audit: type=1326 audit(267.269:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.374547][ T29] audit: type=1326 audit(267.269:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.397726][ T29] audit: type=1326 audit(267.269:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.420917][ T29] audit: type=1326 audit(267.269:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.443846][ T29] audit: type=1326 audit(267.269:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.467020][ T29] audit: type=1326 audit(267.269:13386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.489941][ T29] audit: type=1326 audit(267.269:13387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.0.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 267.512992][ T29] audit: type=1326 audit(267.299:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14788 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 268.114770][ T3617] Bluetooth: hci0: sending frame failed (-49) [ 268.121088][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 268.465152][T14878] FAULT_INJECTION: forcing a failure. [ 268.465152][T14878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.478561][T14878] CPU: 0 UID: 0 PID: 14878 Comm: syz.2.3757 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 268.478646][T14878] Tainted: [W]=WARN [ 268.478655][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.478669][T14878] Call Trace: [ 268.478677][T14878] [ 268.478687][T14878] __dump_stack+0x1d/0x30 [ 268.478713][T14878] dump_stack_lvl+0x95/0xd0 [ 268.478750][T14878] dump_stack+0x15/0x1b [ 268.478773][T14878] should_fail_ex+0x265/0x280 [ 268.478799][T14878] should_fail+0xb/0x20 [ 268.478817][T14878] should_fail_usercopy+0x1a/0x20 [ 268.478845][T14878] _copy_to_user+0x20/0xa0 [ 268.478922][T14878] simple_read_from_buffer+0xb5/0x130 [ 268.478947][T14878] proc_fail_nth_read+0x10e/0x150 [ 268.478975][T14878] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 268.479072][T14878] vfs_read+0x1a8/0x770 [ 268.479092][T14878] ? __rcu_read_unlock+0x4f/0x70 [ 268.479112][T14878] ? __fget_files+0x184/0x1c0 [ 268.479132][T14878] ? mutex_lock+0x58/0x90 [ 268.479170][T14878] ksys_read+0xda/0x1a0 [ 268.479246][T14878] __x64_sys_read+0x40/0x50 [ 268.479264][T14878] x64_sys_call+0x2889/0x3000 [ 268.479287][T14878] do_syscall_64+0xca/0x2b0 [ 268.479320][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.479346][T14878] RIP: 0033:0x7f61b59be15c [ 268.479433][T14878] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 268.479455][T14878] RSP: 002b:00007f61b441f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 268.479475][T14878] RAX: ffffffffffffffda RBX: 00007f61b5c15fa0 RCX: 00007f61b59be15c [ 268.479490][T14878] RDX: 000000000000000f RSI: 00007f61b441f0a0 RDI: 0000000000000004 [ 268.479505][T14878] RBP: 00007f61b441f090 R08: 0000000000000000 R09: 0000000000000000 [ 268.479518][T14878] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 268.479530][T14878] R13: 00007f61b5c16038 R14: 00007f61b5c15fa0 R15: 00007fff2c078d18 [ 268.479568][T14878] [ 268.957567][T14908] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 269.009241][T14915] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3771'. [ 269.104700][T14925] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3776'. [ 269.141896][T14927] netlink: 400 bytes leftover after parsing attributes in process `syz.4.3777'. [ 269.142723][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3778'. [ 269.151764][T14927] netlink: 'syz.4.3777': attribute type 10 has an invalid length. [ 269.167475][T14930] cgroup: No subsys list or none specified [ 269.168083][T14927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3777'. [ 269.288223][T14934] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3780'. [ 269.298493][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3780'. [ 269.308458][T14934] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 269.308458][T14934] program syz.4.3780 not setting count and/or reply_len properly [ 269.392409][T14942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3784'. [ 269.410525][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3785'. [ 269.490883][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 269.503830][T14952] cgroup: No subsys list or none specified [ 269.529299][T14954] netlink: 400 bytes leftover after parsing attributes in process `syz.5.3790'. [ 269.541964][T14954] netlink: 'syz.5.3790': attribute type 10 has an invalid length. [ 269.552929][T14958] rdma_op ffff888104397980 conn xmit_rdma 0000000000000000 [ 270.094891][T14994] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 270.104561][T14994] SELinux: failed to load policy [ 270.865353][T15017] FAULT_INJECTION: forcing a failure. [ 270.865353][T15017] name failslab, interval 1, probability 0, space 0, times 0 [ 270.878137][T15017] CPU: 1 UID: 0 PID: 15017 Comm: syz.3.3816 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.878174][T15017] Tainted: [W]=WARN [ 270.878249][T15017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.878263][T15017] Call Trace: [ 270.878270][T15017] [ 270.878344][T15017] __dump_stack+0x1d/0x30 [ 270.878372][T15017] dump_stack_lvl+0x95/0xd0 [ 270.878396][T15017] dump_stack+0x15/0x1b [ 270.878439][T15017] should_fail_ex+0x265/0x280 [ 270.878496][T15017] should_failslab+0x8c/0xb0 [ 270.878519][T15017] kmem_cache_alloc_noprof+0x69/0x4b0 [ 270.878544][T15017] ? alloc_empty_file+0x76/0x200 [ 270.878666][T15017] alloc_empty_file+0x76/0x200 [ 270.878702][T15017] alloc_file_pseudo+0xc6/0x160 [ 270.878788][T15017] __shmem_file_setup+0x1de/0x210 [ 270.878823][T15017] shmem_file_setup+0x3b/0x50 [ 270.878848][T15017] __se_sys_memfd_create+0x2f7/0x6b0 [ 270.878894][T15017] __x64_sys_memfd_create+0x31/0x40 [ 270.878948][T15017] x64_sys_call+0x28cb/0x3000 [ 270.878977][T15017] do_syscall_64+0xca/0x2b0 [ 270.879075][T15017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.879101][T15017] RIP: 0033:0x7fa3aa78f749 [ 270.879119][T15017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.879140][T15017] RSP: 002b:00007fa3a91f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 270.879163][T15017] RAX: ffffffffffffffda RBX: 00000000000007b9 RCX: 00007fa3aa78f749 [ 270.879257][T15017] RDX: 00007fa3a91f6ef0 RSI: 0000000000000000 RDI: 00007fa3aa814960 [ 270.879271][T15017] RBP: 00002000000007c0 R08: 00007fa3a91f6bb7 R09: 00007fa3a91f6e40 [ 270.879285][T15017] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 270.879299][T15017] R13: 00007fa3a91f6ef0 R14: 00007fa3a91f6eb0 R15: 0000200000000280 [ 270.879382][T15017] [ 270.999829][ T3617] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 271.128950][T15023] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 271.159670][T15023] SELinux: failed to load policy [ 271.184172][T15026] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 271.190721][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.198302][T15026] vhci_hcd vhci_hcd.0: Device attached [ 271.235302][T15034] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 271.242003][T15034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.249587][T15034] vhci_hcd vhci_hcd.0: Device attached [ 271.290640][T15026] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 271.297450][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 271.305176][T15026] vhci_hcd vhci_hcd.0: Device attached [ 271.357462][T15034] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(12) [ 271.364106][T15034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.371699][T15034] vhci_hcd vhci_hcd.0: Device attached [ 271.404587][T15026] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 271.411278][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.418924][T15026] vhci_hcd vhci_hcd.0: Device attached [ 271.434635][ T3402] usb 5-1: new low-speed USB device number 7 using vhci_hcd [ 271.445610][T15026] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 271.452236][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.467522][T15026] vhci_hcd vhci_hcd.0: Device attached [ 271.497033][T15034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 271.515101][T15026] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 271.532411][T15026] vhci_hcd vhci_hcd.0: port 0 already used [ 271.592916][T15052] vhci_hcd: connection closed [ 271.592943][T15040] vhci_hcd: connection closed [ 271.592957][T15045] vhci_hcd: connection closed [ 271.602878][ T2056] vhci_hcd vhci_hcd.2: stop threads [ 271.604496][T15057] vhci_hcd: connection closed [ 271.607718][ T2056] vhci_hcd vhci_hcd.2: release socket [ 271.623222][ T2056] vhci_hcd vhci_hcd.2: disconnect device [ 271.630576][T15035] vhci_hcd: connection closed [ 271.633467][T15027] vhci_hcd: connection reset by peer [ 271.646649][ T2056] vhci_hcd vhci_hcd.2: stop threads [ 271.651909][ T2056] vhci_hcd vhci_hcd.2: release socket [ 271.657391][ T2056] vhci_hcd vhci_hcd.2: disconnect device [ 271.669556][T15068] FAULT_INJECTION: forcing a failure. [ 271.669556][T15068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.682756][T15068] CPU: 1 UID: 0 PID: 15068 Comm: syz.0.3832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.682850][T15068] Tainted: [W]=WARN [ 271.682858][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.682925][T15068] Call Trace: [ 271.682933][T15068] [ 271.682944][T15068] __dump_stack+0x1d/0x30 [ 271.682976][T15068] dump_stack_lvl+0x95/0xd0 [ 271.683046][T15068] dump_stack+0x15/0x1b [ 271.683071][T15068] should_fail_ex+0x265/0x280 [ 271.683154][T15068] should_fail+0xb/0x20 [ 271.683242][T15068] should_fail_usercopy+0x1a/0x20 [ 271.683267][T15068] _copy_from_user+0x1c/0xb0 [ 271.683293][T15068] __sys_bind+0x106/0x2a0 [ 271.683421][T15068] __x64_sys_bind+0x3f/0x50 [ 271.683470][T15068] x64_sys_call+0x2ceb/0x3000 [ 271.683493][T15068] do_syscall_64+0xca/0x2b0 [ 271.683529][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.683551][T15068] RIP: 0033:0x7f0a9607f749 [ 271.683622][T15068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.683641][T15068] RSP: 002b:00007f0a94adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 271.683665][T15068] RAX: ffffffffffffffda RBX: 00007f0a962d5fa0 RCX: 00007f0a9607f749 [ 271.683681][T15068] RDX: 0000000000000057 RSI: 0000200000000340 RDI: 0000000000000003 [ 271.683696][T15068] RBP: 00007f0a94adf090 R08: 0000000000000000 R09: 0000000000000000 [ 271.683711][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.683726][T15068] R13: 00007f0a962d6038 R14: 00007f0a962d5fa0 R15: 00007ffefbc279b8 [ 271.683820][T15068] [ 271.854667][ T2056] vhci_hcd vhci_hcd.2: stop threads [ 271.859939][ T2056] vhci_hcd vhci_hcd.2: release socket [ 271.865444][ T2056] vhci_hcd vhci_hcd.2: disconnect device [ 271.891523][ T2056] vhci_hcd vhci_hcd.2: stop threads [ 271.896792][ T2056] vhci_hcd vhci_hcd.2: release socket [ 271.902284][ T2056] vhci_hcd vhci_hcd.2: disconnect device [ 271.910157][ T2056] vhci_hcd vhci_hcd.2: stop threads [ 271.915437][ T2056] vhci_hcd vhci_hcd.2: release socket [ 271.920894][ T2056] vhci_hcd vhci_hcd.2: disconnect device [ 271.987003][ T2056] vhci_hcd vhci_hcd.2: stop threads [ 271.992274][ T2056] vhci_hcd vhci_hcd.2: release socket [ 271.997733][ T2056] vhci_hcd vhci_hcd.2: disconnect device [ 272.313778][T15090] netlink: 'syz.0.3841': attribute type 10 has an invalid length. [ 272.328648][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 272.328666][ T29] audit: type=1326 audit(272.309:13840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.358216][ T29] audit: type=1326 audit(272.309:13841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.381236][ T29] audit: type=1326 audit(272.309:13842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.404537][ T29] audit: type=1326 audit(272.309:13843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.427568][ T29] audit: type=1326 audit(272.309:13844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.450669][ T29] audit: type=1326 audit(272.309:13845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.473901][ T29] audit: type=1326 audit(272.309:13846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.501770][ T29] audit: type=1326 audit(272.479:13847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7fb0f749 code=0x7ffc0000 [ 272.575960][ T29] audit: type=1326 audit(272.559:13848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.0.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 272.611095][ T29] audit: type=1326 audit(272.559:13849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15105 comm="syz.0.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a9607f749 code=0x7ffc0000 [ 272.658233][T15103] FAULT_INJECTION: forcing a failure. [ 272.658233][T15103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.672105][T15103] CPU: 1 UID: 0 PID: 15103 Comm: syz.2.3843 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 272.672142][T15103] Tainted: [W]=WARN [ 272.672149][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.672161][T15103] Call Trace: [ 272.672168][T15103] [ 272.672192][T15103] __dump_stack+0x1d/0x30 [ 272.672219][T15103] dump_stack_lvl+0x95/0xd0 [ 272.672242][T15103] dump_stack+0x15/0x1b [ 272.672261][T15103] should_fail_ex+0x265/0x280 [ 272.672286][T15103] should_fail_alloc_page+0xf2/0x100 [ 272.672343][T15103] __alloc_frozen_pages_noprof+0x109/0x360 [ 272.672379][T15103] alloc_pages_mpol+0xb3/0x260 [ 272.672413][T15103] folio_alloc_mpol_noprof+0x39/0x80 [ 272.672447][T15103] shmem_get_folio_gfp+0x3cf/0xd50 [ 272.672527][T15103] shmem_fallocate+0x5cd/0x890 [ 272.672569][T15103] vfs_fallocate+0x3b6/0x400 [ 272.672594][T15103] __x64_sys_fallocate+0x7a/0xd0 [ 272.672646][T15103] x64_sys_call+0x1cd4/0x3000 [ 272.672714][T15103] do_syscall_64+0xca/0x2b0 [ 272.672752][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.672783][T15103] RIP: 0033:0x7f61b59bf749 [ 272.672800][T15103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.672820][T15103] RSP: 002b:00007f61b441f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 272.672842][T15103] RAX: ffffffffffffffda RBX: 00007f61b5c15fa0 RCX: 00007f61b59bf749 [ 272.672910][T15103] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 272.672923][T15103] RBP: 00007f61b441f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.672937][T15103] R10: 0000000002000403 R11: 0000000000000246 R12: 0000000000000001 [ 272.672951][T15103] R13: 00007f61b5c16038 R14: 00007f61b5c15fa0 R15: 00007fff2c078d18 [ 272.672972][T15103] [ 272.914720][T15117] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 272.921400][T15117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 272.928939][T15117] vhci_hcd vhci_hcd.0: Device attached [ 272.953736][T15123] netlink: 'syz.2.3850': attribute type 10 has an invalid length. [ 272.962649][T15126] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 272.969378][T15126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 272.976987][T15126] vhci_hcd vhci_hcd.0: Device attached [ 273.035191][T15117] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 273.041964][T15117] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 273.049685][T15117] vhci_hcd vhci_hcd.0: Device attached [ 273.080597][T15126] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 273.087214][T15126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.094848][T15126] vhci_hcd vhci_hcd.0: Device attached [ 273.108039][T15117] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 273.114738][T15117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.122367][T15117] vhci_hcd vhci_hcd.0: Device attached [ 273.156048][T15117] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 273.162673][T15117] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.170366][T15117] vhci_hcd vhci_hcd.0: Device attached [ 273.177167][T15117] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 273.184537][ T4351] usb 1-1: new low-speed USB device number 4 using vhci_hcd [ 273.186277][T15117] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 273.215569][T15117] vhci_hcd vhci_hcd.0: port 0 already used [ 273.227354][T15139] vhci_hcd: connection closed [ 273.227535][T12905] vhci_hcd vhci_hcd.0: stop threads [ 273.227645][T15136] vhci_hcd: connection closed [ 273.232408][T12905] vhci_hcd vhci_hcd.0: release socket [ 273.232434][T12905] vhci_hcd vhci_hcd.0: disconnect device [ 273.254691][T15132] vhci_hcd: connection closed [ 273.254716][T15129] vhci_hcd: connection closed [ 273.254729][T15127] vhci_hcd: connection closed [ 273.264848][T15118] vhci_hcd: connection reset by peer [ 273.275172][T12905] vhci_hcd vhci_hcd.0: stop threads [ 273.280429][T12905] vhci_hcd vhci_hcd.0: release socket [ 273.285960][T12905] vhci_hcd vhci_hcd.0: disconnect device [ 273.298348][T12905] vhci_hcd vhci_hcd.0: stop threads [ 273.303640][T12905] vhci_hcd vhci_hcd.0: release socket [ 273.309160][T12905] vhci_hcd vhci_hcd.0: disconnect device [ 273.320154][T12905] vhci_hcd vhci_hcd.0: stop threads [ 273.325471][T12905] vhci_hcd vhci_hcd.0: release socket [ 273.330900][T12905] vhci_hcd vhci_hcd.0: disconnect device [ 273.337827][T12905] vhci_hcd vhci_hcd.0: stop threads [ 273.343177][T12905] vhci_hcd vhci_hcd.0: release socket [ 273.348760][T12905] vhci_hcd vhci_hcd.0: disconnect device [ 273.359333][T12905] vhci_hcd vhci_hcd.0: stop threads [ 273.364669][T12905] vhci_hcd vhci_hcd.0: release socket [ 273.370100][T12905] vhci_hcd vhci_hcd.0: disconnect device [ 274.006381][T15221] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 274.012930][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.020495][T15221] vhci_hcd vhci_hcd.0: Device attached [ 274.036429][T15221] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 274.043079][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.050647][T15221] vhci_hcd vhci_hcd.0: Device attached [ 274.074799][T15221] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 274.081513][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.089614][T15221] vhci_hcd vhci_hcd.0: Device attached [ 274.100620][T15221] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 274.107263][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.114804][T15221] vhci_hcd vhci_hcd.0: Device attached [ 274.124528][T15221] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 274.131164][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.138697][T15221] vhci_hcd vhci_hcd.0: Device attached [ 274.154561][T15221] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(18) [ 274.161206][T15221] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 274.168921][T15221] vhci_hcd vhci_hcd.0: Device attached [ 274.176187][T15221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.184901][T15221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.203538][T15221] vhci_hcd vhci_hcd.0: port 0 already used [ 274.214810][T15241] vhci_hcd: connection closed [ 274.215001][T15238] vhci_hcd: connection closed [ 274.215095][T15235] vhci_hcd: connection closed [ 274.224901][ T63] vhci_hcd vhci_hcd.0: stop threads [ 274.224936][T15228] vhci_hcd: connection closed [ 274.229628][ T63] vhci_hcd vhci_hcd.0: release socket [ 274.235238][T15224] vhci_hcd: connection closed [ 274.239606][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 274.256923][T15222] vhci_hcd: connection closed [ 274.257207][ T63] vhci_hcd vhci_hcd.0: stop threads [ 274.267264][ T63] vhci_hcd vhci_hcd.0: release socket [ 274.272681][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 274.278913][ T63] vhci_hcd vhci_hcd.0: stop threads [ 274.284236][ T63] vhci_hcd vhci_hcd.0: release socket [ 274.289793][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 274.296360][ T63] vhci_hcd vhci_hcd.0: stop threads [ 274.301696][ T63] vhci_hcd vhci_hcd.0: release socket [ 274.307310][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 274.313692][ T63] vhci_hcd vhci_hcd.0: stop threads [ 274.319115][ T63] vhci_hcd vhci_hcd.0: release socket [ 274.324620][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 274.331051][ T63] vhci_hcd vhci_hcd.0: stop threads [ 274.336448][ T63] vhci_hcd vhci_hcd.0: release socket [ 274.342038][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 274.470455][T15266] __nla_validate_parse: 14 callbacks suppressed [ 274.470505][T15266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3896'. [ 275.581297][T15303] FAULT_INJECTION: forcing a failure. [ 275.581297][T15303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.594721][T15303] CPU: 0 UID: 0 PID: 15303 Comm: syz.4.3910 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.594884][T15303] Tainted: [W]=WARN [ 275.594893][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.594906][T15303] Call Trace: [ 275.594913][T15303] [ 275.594922][T15303] __dump_stack+0x1d/0x30 [ 275.594949][T15303] dump_stack_lvl+0x95/0xd0 [ 275.594969][T15303] dump_stack+0x15/0x1b [ 275.595065][T15303] should_fail_ex+0x265/0x280 [ 275.595092][T15303] should_fail_alloc_page+0xf2/0x100 [ 275.595126][T15303] __alloc_frozen_pages_noprof+0x109/0x360 [ 275.595165][T15303] alloc_pages_mpol+0xb3/0x260 [ 275.595199][T15303] alloc_pages_noprof+0x90/0x130 [ 275.595267][T15303] get_free_pages_noprof+0xc/0x40 [ 275.595347][T15303] do_proc_control+0x186/0x8b0 [ 275.595379][T15303] ? should_fail_ex+0xdb/0x280 [ 275.595409][T15303] proc_control_compat+0xae/0xe0 [ 275.595523][T15303] usbdev_ioctl+0xed5/0x1700 [ 275.595554][T15303] ? __pfx_usbdev_ioctl+0x10/0x10 [ 275.595580][T15303] __se_sys_ioctl+0xce/0x140 [ 275.595609][T15303] __x64_sys_ioctl+0x43/0x50 [ 275.595708][T15303] x64_sys_call+0x14b0/0x3000 [ 275.595735][T15303] do_syscall_64+0xca/0x2b0 [ 275.595839][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.595861][T15303] RIP: 0033:0x7feb7fb0f749 [ 275.595879][T15303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.595977][T15303] RSP: 002b:00007feb7e56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.596001][T15303] RAX: ffffffffffffffda RBX: 00007feb7fd65fa0 RCX: 00007feb7fb0f749 [ 275.596017][T15303] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000003 [ 275.596098][T15303] RBP: 00007feb7e56f090 R08: 0000000000000000 R09: 0000000000000000 [ 275.596114][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.596130][T15303] R13: 00007feb7fd66038 R14: 00007feb7fd65fa0 R15: 00007ffca0d14b98 [ 275.596154][T15303] [ 275.871417][T15307] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3912'. [ 275.910473][T15310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3911'. [ 275.980422][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3916'. [ 276.022192][T15317] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3916'. [ 276.040558][T15317] netlink: 'syz.3.3916': attribute type 10 has an invalid length. [ 276.048455][T15317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3916'. [ 276.509988][ T3402] usb 5-1: enqueue for inactive port 0 [ 276.515780][ T3402] usb 5-1: enqueue for inactive port 0 [ 276.604527][ T3402] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 277.363297][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 277.363316][ T29] audit: type=1326 audit(277.339:14037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.399950][ T29] audit: type=1326 audit(277.339:14038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.423491][ T29] audit: type=1326 audit(277.339:14039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.446509][ T29] audit: type=1326 audit(277.339:14040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.469578][ T29] audit: type=1326 audit(277.339:14041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.492551][ T29] audit: type=1326 audit(277.339:14042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.515604][ T29] audit: type=1326 audit(277.339:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.538653][ T29] audit: type=1326 audit(277.349:14044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.561672][ T29] audit: type=1326 audit(277.349:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.584795][ T29] audit: type=1326 audit(277.349:14046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15361 comm="syz.3.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa3aa78f749 code=0x7ffc0000 [ 277.626292][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3933'. [ 277.676499][T15377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.714747][T15377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.796183][T15370] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3933'. [ 277.837376][T15370] netlink: 'syz.3.3933': attribute type 10 has an invalid length. [ 277.845236][T15370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3933'. [ 278.260994][ T4351] usb 1-1: enqueue for inactive port 0 [ 278.283630][ T4351] usb 1-1: enqueue for inactive port 0 [ 278.361144][ T4351] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 278.375254][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3941'. [ 278.421199][T15398] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 278.427758][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.435368][T15398] vhci_hcd vhci_hcd.0: Device attached [ 278.444816][T15398] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 278.451445][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.459004][T15398] vhci_hcd vhci_hcd.0: Device attached [ 278.485515][T15398] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 278.492161][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 278.499842][T15398] vhci_hcd vhci_hcd.0: Device attached [ 278.507000][T15398] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(14) [ 278.513616][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.521314][T15398] vhci_hcd vhci_hcd.0: Device attached [ 278.529183][T15398] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 278.535868][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.543456][T15398] vhci_hcd vhci_hcd.0: Device attached [ 278.559500][T15398] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 278.566134][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.573859][T15398] vhci_hcd vhci_hcd.0: Device attached [ 278.584922][T15398] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.593341][T15398] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 278.607633][T15398] vhci_hcd vhci_hcd.0: port 0 already used [ 278.621824][T15412] vhci_hcd: connection closed [ 278.622012][ T63] vhci_hcd vhci_hcd.4: stop threads [ 278.631956][ T63] vhci_hcd vhci_hcd.4: release socket [ 278.637368][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 278.643300][T15410] vhci_hcd: connection closed [ 278.643413][T15406] vhci_hcd: connection closed [ 278.648224][T15403] vhci_hcd: connection closed [ 278.653229][T15401] vhci_hcd: connection closed [ 278.660132][T15399] vhci_hcd: connection closed [ 278.665782][ T63] vhci_hcd vhci_hcd.4: stop threads [ 278.675776][ T63] vhci_hcd vhci_hcd.4: release socket [ 278.681239][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 278.687304][ T63] vhci_hcd vhci_hcd.4: stop threads [ 278.692593][ T63] vhci_hcd vhci_hcd.4: release socket [ 278.698046][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 278.706798][ T63] vhci_hcd vhci_hcd.4: stop threads [ 278.712034][ T63] vhci_hcd vhci_hcd.4: release socket [ 278.717554][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 278.726008][ T63] vhci_hcd vhci_hcd.4: stop threads [ 278.731240][ T63] vhci_hcd vhci_hcd.4: release socket [ 278.736722][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 278.745263][ T63] vhci_hcd vhci_hcd.4: stop threads [ 278.750550][ T63] vhci_hcd vhci_hcd.4: release socket [ 278.756136][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 279.388917][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.420852][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.824601][T15465] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 279.831173][T15465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.838815][T15465] vhci_hcd vhci_hcd.0: Device attached [ 279.872402][T15465] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 279.879050][T15465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.886597][T15465] vhci_hcd vhci_hcd.0: Device attached [ 279.894415][T15465] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 279.901033][T15465] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 279.908785][T15465] vhci_hcd vhci_hcd.0: Device attached [ 279.926390][T15465] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 279.933034][T15465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.940824][T15465] vhci_hcd vhci_hcd.0: Device attached [ 279.956863][T15465] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 279.963505][T15465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 279.971075][T15465] vhci_hcd vhci_hcd.0: Device attached [ 279.990118][ T3402] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 279.994500][T15465] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(18) [ 280.004178][T15465] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 280.011862][T15465] vhci_hcd vhci_hcd.0: Device attached [ 280.018880][ T3402] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 280.029896][T15485] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 280.040336][T15486] __nla_validate_parse: 2 callbacks suppressed [ 280.040355][T15486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3967'. [ 280.064869][T15465] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 280.094510][ T36] usb 7-1: new low-speed USB device number 5 using vhci_hcd [ 280.105241][T15491] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 280.138999][T15465] vhci_hcd vhci_hcd.0: port 0 already used [ 280.151178][T15466] vhci_hcd: connection reset by peer [ 280.151251][T15470] vhci_hcd: connection closed [ 280.156832][T15478] vhci_hcd: connection closed [ 280.157878][T15474] vhci_hcd: connection closed [ 280.161740][T15476] vhci_hcd: connection closed [ 280.171339][T15482] vhci_hcd: connection closed [ 280.181051][ T949] vhci_hcd vhci_hcd.3: stop threads [ 280.191069][ T949] vhci_hcd vhci_hcd.3: release socket [ 280.196511][ T949] vhci_hcd vhci_hcd.3: disconnect device [ 280.214636][ T949] vhci_hcd vhci_hcd.3: stop threads [ 280.219881][ T949] vhci_hcd vhci_hcd.3: release socket [ 280.225414][ T949] vhci_hcd vhci_hcd.3: disconnect device [ 280.241871][ T949] vhci_hcd vhci_hcd.3: stop threads [ 280.247320][ T949] vhci_hcd vhci_hcd.3: release socket [ 280.252738][ T949] vhci_hcd vhci_hcd.3: disconnect device [ 280.283800][ T949] vhci_hcd vhci_hcd.3: stop threads [ 280.289106][ T949] vhci_hcd vhci_hcd.3: release socket [ 280.294547][ T949] vhci_hcd vhci_hcd.3: disconnect device [ 280.316695][ T949] vhci_hcd vhci_hcd.3: stop threads [ 280.321992][ T949] vhci_hcd vhci_hcd.3: release socket [ 280.327638][ T949] vhci_hcd vhci_hcd.3: disconnect device [ 280.343540][ T949] vhci_hcd vhci_hcd.3: stop threads [ 280.348827][ T949] vhci_hcd vhci_hcd.3: release socket [ 280.354248][ T949] vhci_hcd vhci_hcd.3: disconnect device [ 280.406876][T15507] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3973'. [ 280.445139][T15505] FAULT_INJECTION: forcing a failure. [ 280.445139][T15505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.458364][T15505] CPU: 0 UID: 0 PID: 15505 Comm: syz.2.3973 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.458404][T15505] Tainted: [W]=WARN [ 280.458412][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.458496][T15505] Call Trace: [ 280.458504][T15505] [ 280.458513][T15505] __dump_stack+0x1d/0x30 [ 280.458541][T15505] dump_stack_lvl+0x95/0xd0 [ 280.458562][T15505] dump_stack+0x15/0x1b [ 280.458580][T15505] should_fail_ex+0x265/0x280 [ 280.458649][T15505] should_fail+0xb/0x20 [ 280.458668][T15505] should_fail_usercopy+0x1a/0x20 [ 280.458697][T15505] _copy_to_user+0x20/0xa0 [ 280.458728][T15505] simple_read_from_buffer+0xb5/0x130 [ 280.458749][T15505] proc_fail_nth_read+0x10e/0x150 [ 280.458791][T15505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 280.458853][T15505] vfs_read+0x1a8/0x770 [ 280.458871][T15505] ? __rcu_read_unlock+0x4f/0x70 [ 280.458890][T15505] ? __fget_files+0x184/0x1c0 [ 280.458911][T15505] ? mutex_lock+0x58/0x90 [ 280.458937][T15505] ksys_read+0xda/0x1a0 [ 280.458977][T15505] __x64_sys_read+0x40/0x50 [ 280.458996][T15505] x64_sys_call+0x2889/0x3000 [ 280.459025][T15505] do_syscall_64+0xca/0x2b0 [ 280.459101][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.459122][T15505] RIP: 0033:0x7f61b59be15c [ 280.459140][T15505] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 280.459163][T15505] RSP: 002b:00007f61b43fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.459182][T15505] RAX: ffffffffffffffda RBX: 00007f61b5c16090 RCX: 00007f61b59be15c [ 280.459262][T15505] RDX: 000000000000000f RSI: 00007f61b43fe0a0 RDI: 000000000000000a [ 280.459274][T15505] RBP: 00007f61b43fe090 R08: 0000000000000000 R09: 000000000000000e [ 280.459286][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.459339][T15505] R13: 00007f61b5c16128 R14: 00007f61b5c16090 R15: 00007fff2c078d18 [ 280.459362][T15505] [ 280.746075][ T63] ================================================================== [ 280.754197][ T63] BUG: KCSAN: data-race in __stop_tty / pty_write [ 280.760651][ T63] [ 280.762987][ T63] write to 0xffff88810b76e9bc of 1 bytes by task 15513 on cpu 1: [ 280.770892][ T63] __stop_tty+0x36/0x90 [ 280.775085][ T63] n_tty_ioctl_helper+0x1e9/0x210 [ 280.780224][ T63] n_tty_ioctl+0x101/0x230 [ 280.784659][ T63] tty_ioctl+0x83f/0xb80 [ 280.788912][ T63] __se_sys_ioctl+0xce/0x140 [ 280.793548][ T63] __x64_sys_ioctl+0x43/0x50 [ 280.798182][ T63] x64_sys_call+0x14b0/0x3000 [ 280.802883][ T63] do_syscall_64+0xca/0x2b0 [ 280.807407][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.813320][ T63] [ 280.815646][ T63] read to 0xffff88810b76e9bc of 1 bytes by task 63 on cpu 0: [ 280.823022][ T63] pty_write+0x24/0x90 [ 280.827120][ T63] tty_put_char+0x8f/0xc0 [ 280.831475][ T63] do_output_char+0x4de/0x500 [ 280.836186][ T63] __process_echoes+0x20d/0x6b0 [ 280.841066][ T63] n_tty_receive_buf_common+0x918/0xc10 [ 280.846640][ T63] n_tty_receive_buf2+0x33/0x40 [ 280.851510][ T63] tty_ldisc_receive_buf+0x66/0xf0 [ 280.856644][ T63] tty_port_default_receive_buf+0x59/0x90 [ 280.862649][ T63] flush_to_ldisc+0x148/0x340 [ 280.867353][ T63] process_scheduled_works+0x4ce/0x9d0 [ 280.872842][ T63] worker_thread+0x582/0x770 [ 280.877461][ T63] kthread+0x489/0x510 [ 280.881556][ T63] ret_from_fork+0x149/0x290 [ 280.886171][ T63] ret_from_fork_asm+0x1a/0x30 [ 280.890952][ T63] [ 280.893282][ T63] value changed: 0x00 -> 0x01 [ 280.898046][ T63] [ 280.900468][ T63] Reported by Kernel Concurrency Sanitizer on: [ 280.906781][ T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.918078][ T63] Tainted: [W]=WARN [ 280.921887][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.931960][ T63] Workqueue: events_unbound flush_to_ldisc [ 280.937798][ T63] ================================================================== [ 285.134614][ T36] usb 7-1: enqueue for inactive port 0 [ 285.140097][ T36] usb 7-1: enqueue for inactive port 0 [ 285.214516][ T36] vhci_hcd vhci_hcd.3: vhci_device speed not set