last executing test programs: 4m3.884869545s ago: executing program 1 (id=4410): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 4m3.859907707s ago: executing program 1 (id=4411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) mlockall(0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) (fail_nth: 1) close(r0) 4m3.162752623s ago: executing program 1 (id=4424): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 4m3.094342079s ago: executing program 1 (id=4430): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14806, &(0x7f00000000c0)=ANY=[], 0x1, 0x70c, &(0x7f0000001500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 4m2.603453938s ago: executing program 1 (id=4434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400001b11000000d908000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x200ed, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4c58, 0x5, 0x0, 0x4, 0x87, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r4, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) 4m2.229097038s ago: executing program 1 (id=4442): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 4m2.228869988s ago: executing program 32 (id=4442): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 3m59.527443357s ago: executing program 5 (id=4490): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000057641b37f0fd35a70a6f29f08500040000", @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020010", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) r4 = io_uring_setup(0x556d, &(0x7f0000000180)={0x0, 0x8d48, 0x400, 0x1, 0x2b2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_getres(0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000040), 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002deb) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8000400a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @mcast1, 0x9, 0x2, 0x0, 0x0, 0xb7, 0xc20022}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440020000000900010073797a30000000000800034000000004140000001100010000000000000000000000000a2c28265d0ef6e1381030b50b19943c1e12da4427ece5f8b9d482e1267b43ac79ea792a9e8a1be06334d51b966bcd0a37592441a7be50d779c80ad8f02ac0b9414f1eeb84750d3294e1109108935abe3b35440a74c4ef"], 0x64}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r9) socket$inet6_sctp(0xa, 0x5, 0x84) 3m59.287356006s ago: executing program 5 (id=4492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 3m59.249252729s ago: executing program 5 (id=4494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000001c0)={0x2, 0x0, 0x40, 0x200}) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_alloc\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32=r7, @ANYBLOB="383c285ea093b0170599a6c11548bea3e0e58b43b1160300af8495f0ddc3b6f16b0094bad234b999266b9dd5cab62ed359b821828f1a0752b869f2dd902ccaba45d922f30c94982c6891ef35806926d07a851ac9563e14668161c9645993829a3a05d70e3443acb311898d1a5f"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_io_uring_setup(0x4959, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x1ae}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000480)="1b62635a36d35110cc3253c068b0a34cdf022185396f0b9c70515f3414d9bc1c053f5a9eadea35964d77634cfb0d4ec31852c76749", 0x35}, {&(0x7f00000004c0)="d65bdda5390c165629347aec89ded07f2662eac72989ae9ccf3bd66af6e54a4d1e1e0c5f03b2063d77c5a75216e4437a71744895fd99", 0x36}], 0x2) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 3m59.220389761s ago: executing program 5 (id=4496): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14806, &(0x7f00000000c0)=ANY=[], 0x1, 0x70c, &(0x7f0000001500)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbglZ8dcWkJLtKDQhQ0PDmx0YKKFL0LGJRJ11FCDgfewjSY8SDRhow0FD3vw4EOFR1Q+zFTBhA8HLiQ2YOEmJCqoo44tSCiUsQcHO+iihQZMfBIEwQEOdbtvxfk8T9lqJEGVGRtRQC457vZRnbO1s/r/Hz6Llo77f4P9/5sqOg4K0cdH82KIPgOC+Pp/QWuvJhsiIiIiIiIiehWE/u270H+VfxtAgKbdVsaJmMK5ZUdEREREREREyyAQFHAVIrorH29DTF//ExEREREREdHnm9DP2AkAJX1Tvxg9LnWWXwJkX0OKRERERERERPSS9JP/1/JAoO/yX4NY6PqfiIiIiIiIiD4Hfj02xn4uG4+xGyR/1s8AWPtLQXz49wLcFXHc2/2qODLDOeZRHDN1B4DfvCIuxgP16o88AP3NUldFvDYJ/Cv57UPo44P0sf6fBxEhhDuRQD47XsGMBES45lou/ob3cT1a5Ho8zvz9QQZ6TjSicKlpt1XZctp3KzDNixlf7fo/f3j4C8AdbufBYX+//KOf9O/rXI7DouOjsNJnJ9LJpDfGKJcnerwF/cxF2ujGq2gmq/xNt1MSer1Gsv1ZmEeZ8RXN2wG1VSDayl9iPdpn60EUWxoMR9wXwJoe/KFS1rvsxNa7K2KURWVyy9N2xIwtL+osbkQxNzZuRB9Jm4T1ZETxa1mgWp7cB2GiY1lUx7M4vS3EPybaf34WEMWwLbbCLP4YVjTRFt//MFp4q7ebDI9xliymjgIiovNyMOqF9CDmU2PsJ91DclI7e7+DHBCf5Wb07qO1BHH/kfTuT34XRD1UFsjFf5tIX0vSryA8o28IXU8+GtA9dyXljG6UPw2CwLxYxPgZ/b9BkGyQsUDvdhwEweQZ/Q+jdyDFaU9l8e8gCO5WdE/y24le9YNwgQ9mrtdrV7MoooAnRz/FJ8ns/R/vP6xWt2rGu4Zxu4oV/b8K8UcW7HuIiGjK6e/Y0RGZORHiXVyP6rh+/2/vRFMnerwvxbcUaLeAPu5jM3mFwFp6rSUc4Jv/jG5D2IyuWoH1UvRZGsjLl+6GV7XD2EOR02942Zx5Vac7yyhW395QHcYm7x2avAIcxW694r1ARET0eq3P6IeBE/0/Tvb/xRP9/yY2ooiNK6nX3aWxWwo3k6vj4SX94MJxamzl9OS/teTGICIiekMo92NR8n8lXNfuvVep1yumv62k61jfla7daClpd33lWttmt6Vkz3V8x3LasueiYK8qT3o7vZ7j+rLpuLLnePaufvO7jF/97qmO2fVty+u1lekpaTld37R82bA9S/Z2vt22vW3l6oW9nrLspm2Zvu10pefsuJYqS+kpNRZoN1TXt5t2ONmVPdfumO6e/J7T3uko2VCe5do934kqTNZld5uO29HVlhEs/KJDIiKi/0ePnw4e3Ov39x9NTqyGl+ZRyTFmxExP5FMq5BhBREREnzGj7nqBhYqvMCEiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIppy+iN9C06spD0sCAxLfnYxLsFzjB4xnKpH4GXz+dT9kx7Y70UWzwxLBIAzLJU8EjF48NGc4NVhSdL84zHHi2SIS8ALt89fvwBc0CWISnJLPACmnx9d+jGWNvGNg6hFZ8XomamzCsN9kVv+fw7hxMPfT88SYcsHQRDMX7xwsg3zZz+ecwAe5efsgtVTjp/XfSYiotftfwEAAP//gcIvpg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 3m58.998781639s ago: executing program 5 (id=4503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 3m57.023453518s ago: executing program 5 (id=4534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x4040) sendmmsg$inet_sctp(r1, &(0x7f00000014c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="1800000000000000840000000500000020"], 0xc8, 0x20048085}], 0x1, 0x4040811) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x102d10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xa}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 3m57.023185298s ago: executing program 33 (id=4534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x4040) sendmmsg$inet_sctp(r1, &(0x7f00000014c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="1800000000000000840000000500000020"], 0xc8, 0x20048085}], 0x1, 0x4040811) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x102d10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xa}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 2.062045704s ago: executing program 4 (id=8903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x14, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x0, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.991604419s ago: executing program 2 (id=8904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$qrtrtun(r2, &(0x7f0000000600)="72cc5a90", 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r1, 0x0, 0x400}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 1.991177259s ago: executing program 4 (id=8905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000700), 0xfd, 0x585, &(0x7f0000002480)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x17, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) 1.98252296s ago: executing program 2 (id=8906): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 1.916278925s ago: executing program 4 (id=8908): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="be", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x20}, 0x41) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x21, 0x0, 0x4) 1.908311926s ago: executing program 2 (id=8909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.849927891s ago: executing program 2 (id=8911): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"a2e339084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3c4c078b089b34333b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d366d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea76db496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff94ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2375fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495103f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158ee3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc00100000000000000662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000d1b0000000000000000000000000000000000000000000000000000510b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x1000}}, 0x1006) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000003c0)={r4, 0x1, 0x8, 0x6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, &(0x7f0000000540)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r6}, 0x18) syz_clone3(&(0x7f00000007c0)={0x306102880, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x4}, 0x9a) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES16=r0], 0x48) setrlimit(0xb, &(0x7f0000000240)={0x9, 0x7ff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f0000000740)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xf8}}, {@minixdf}, {@usrjquota_path={'usrjquota', 0x3d, './file0/file0'}}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") close(r2) fcntl$setstatus(r2, 0x4, 0x2c00) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x3, 'bridge_slave_1\x00', {0x2}, 0x3}) r11 = gettid() fcntl$setown(r2, 0x8, r11) syz_clone3(&(0x7f00000003c0)={0x200000, &(0x7f0000000640), &(0x7f00000000c0), &(0x7f0000000100), {0x41}, &(0x7f0000000140)=""/2, 0x2, &(0x7f0000000300)=""/68, &(0x7f0000000200)=[r11, r1, r1], 0x3}, 0x58) 1.741055669s ago: executing program 4 (id=8912): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7af}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) rmdir(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0xfffffffffffffff7}) 1.61566326s ago: executing program 2 (id=8913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x2000) msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 1.61515314s ago: executing program 2 (id=8914): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.579782153s ago: executing program 4 (id=8916): syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x600, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 1.555365315s ago: executing program 4 (id=8918): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 589.978182ms ago: executing program 3 (id=8930): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010100}]}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10001]}, 0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x3, 0x23f, &(0x7f00000005c0)="$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") gettid() bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0xffff, 0x2, 0x5, 0x6}, {0xf141, 0x3, 0x9, 0x9}, {0xff47, 0x6, 0x5, 0x5}]}, 0x10) io_uring_enter(0xffffffffffffffff, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 234.402451ms ago: executing program 6 (id=8936): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 218.103452ms ago: executing program 6 (id=8937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff01000000000000000006", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 217.553242ms ago: executing program 0 (id=8938): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "bdc6f5", 0x0, 0x6c, 0xff, @private1, @mcast2}}}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x9eb10000) 203.992074ms ago: executing program 6 (id=8939): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="be", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x20}, 0x41) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, 0x0, &(0x7f0000000580)) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmmsg(r3, &(0x7f0000000f80)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)="6ba9c282ed3cb0f06a8c6d04f5c7a4b139ae3e39c7e8272b416b99fac29d10f1281d2176105c21597acdef457201bd864969864b5f0829dc8edd7ecac07833dfb4bbf79756395af6f5fe49cf71b7fcde6ed53ff0f27666ef46b4f3fe261a4f15cbe04f0478171ca3561538a137f742dac38ed3fcc8f932309356b3d1d3dda18bf73c274e3e661824337987221469dd6776f066e77eaabb3ef8c92ba4c49c27bce008baaf8fd1f89f974e8a35e13f21b9f10487e84fa1f36bb5bbaf7c22be429342ab7dd5", 0xc4}, {&(0x7f0000000240)="d3c9b1887c93572eb6872cf552bfe1cb7af4f86cbd4ddc03a570190fc068fac6937328347d9ead09c6d1dba86200a89bd2dc5fcfa5b68312ee4629615a5503", 0x3f}], 0x2, &(0x7f0000000700)=[{0x10, 0x6, 0x2e5}, {0x60, 0x117, 0x3, "2c9f969a4da46e30e549c91ed58e2b4d649f06a7d5ba550c7d26dc7a8fe3d6e556fe990ce8d9c2c1977bd6442f9f20515ecf0a525f4f0182580dcedd809d495c9a13dba5be566e025fdad8e0dae97f"}, {0xd0, 0x1, 0x3, "c832ca629ccdf706d4671db6fe0e8fb73679471918ba2b19ad196ab0fb2065de9fb5bbe227dc404ae0b22906603f1741f032bf3c30b07a3f055900d861de12c51acb5c9bc0b02d47eb93bdc7d0d414ce4973494692603b5b622d25ff593487c4b458438d11a90bd7633a6038e1f28e8e758932aa322e1110beb4dc7b466ab6fed0e5e4c29a7241b743ccfe0bc48f2ee61dc6337df77970f8ff43a9f20c0d4b79c91ed9539449732bc1e062f5f03c3468b7706ad87f563f8b8f2f3f0ba88ff9"}, {0xa8, 0x104, 0x3, "99dc24adffbc70fb390570ce821123b3d06cf730df698612b0bddad7648cfb2152f78e10406c0ec611c4a5254f830bd94ca38ee681af6ef9d49b7debdba8c1f271dc953dc55fa7ae0ea5cb202316608c20c625dfda9c6c36013abf4df86ee7104470a40af11664276e2773de064a1589d0a59f6c5086cc35ef58d98b457c5a8f09d117f4053527fdbb0354de9b74bb1be85cb6fa00"}, {0x50, 0x108, 0x9, "2c1c9fff2f44ea9699e9f1c08bbb1b75d49ee832e0d6fd0146b231824ad09f2113a044c06a312dd574be47db24c7599a50983ad23b032216ddf3735d909b8d"}], 0x238}}, {{&(0x7f0000000980)=@ll={0x11, 0x18, r9, 0x1, 0x7, 0x6, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000a00)="1e8e970b20df8d6cb6cb41e13de825c3bc757c22a2739947fc1766f83717aa29a9384048c79a4796ea49428583289e89a2057914f99808a0e7a17218437a30dae09e563ef163a4c0a58d4a233204efc5bd3ba15df02e8ffb0e6faf61a415c942592f177726c8243dfccec4fe5ac71e9f21d5a14922389e5bc489b89ee4c8355fe114370591ec6167ad7d5b07b607b9948aabc2ffae6751184b0b61db8a79567e7e4b2e1472cc46a48d85aa1cd1e6a187d5109b4fdafcf3ed73", 0xb9}, {&(0x7f0000000b40)="5ddfe07c52fbe71e499bd3f71cbaa48b5645d4c3da8d2234da814c81364ff8a6b7071ff076ed35850d77cbdfa5893ad308fb9f8de69f48df598d345e14ee66f9e2731ee801f4b5c87e2d00327d8df5567ce3b1f60291b959ec82d47ea8eb34f852a7c0a41afc000c52e27f42d7f6f8c64dfd6c74f35b1f06e1a4bff495a7b93dbe89996c0bb4282ce56690397f51", 0x8e}], 0x2, &(0x7f0000000c00)=[{0xa8, 0x1aa, 0x8, "bc757cbddea9363f93b41e01f109e9025d61025b75720c00933ec237362e69e95e7e3661f5ee9f1f88825750fc484a02906b59c3e18275dd7b979bd4c04bd05307be69d1d796cae353e2c4faa6bd1d43e43ba9c2aca8d7d43a80224accb63736b3edeedb7f80aaa406c99aa97369cfb628eb7584baf062c3f23f3cfa895f7f928c40a121a7b2c105d5f0df850701f451253ec4a6"}, {0x98, 0x10d, 0x8, "0b762d348e59d9fd93cc64de73bd0f2b9c1d153312538bf69c2f143441d331da6d8cc695e8d918096d10ef9cc8e1569b5ceb1c517eda180fa44071c9058ee8ae2e7c297f7571c2f9deae111c29d4efad3a0bd6d2b50caf31e32aba7296d578ba571f55a88041f3d9f95aba668a9162eaed44dcb88de2b615c0e0693cec5e49b8a4309848aa45e0"}, {0xd8, 0x109, 0x1, "72894620a9793968d0f96821ae8fedaceec236f9a4e7138765a338d33c31b17a5f4e152e18327bac9325ac12db71cc854281e0096dc10770f5735b55c493efefd5927877a6796349df04e7ddd1ae0556301dd568d08b71f81b587deafef937c6d1abd84b02fc322b1884533c0d9979cd3bf5b2c46fc35fa97a56f5947c99c084fe63a1488ce737dc7348b6da5adb59c6701431edb7dfe23b70f2efc263070b5cb90efde5e080d0118c01658afe67641327cac1dab8ad210a44ce57694d6d423c63da3d6edc6a"}, {0x68, 0x1, 0x639, "60ab622c159421bd04502e643c2c9dfe94b43a4581baffd4638b9db5cc6d86b3af86a903122c555d980b642b5c63252eef64839f81351795ea6d68319657ab0997482e423abcd837d4bb2520d69ea3c24895b4"}, {0x58, 0x0, 0x6, "36d5cad30cc168bb3f4844ae03e55acee3a4833c7ee0cd07033435938cf2fcd84d53c8d96d941883d1625b38d91af907e79c77994953014f73b3f351ab4ac98ace9014a9"}, {0x88, 0x101, 0xfffffe12, "71189a33e4fa79406132d0f737ec517cc70c92dce23ce2604ec4aa0fef5b89b6a8a841a52eaf2ee94bc3879de9faaf1f8c9342d5e67de0ea91ff5bb538668f68697c87f02ac7afa14fd579b86a97689647d9fd72d1db0ad1200b398af06f51a7eba2fe5b2ac96291352b9cf103c285d8adbea75570"}], 0x360}}], 0x2, 0x800) bind$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e21, 0x4, @empty, 0x1}, 0x1c) r10 = getpgid(0x0) r11 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r11, 0x21, 0x0, 0x4) 151.143278ms ago: executing program 0 (id=8940): openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xc, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000fbd31e2382a7e68f4924fe04c5df9d5ebb1d48d02e102a884fa7cdcd48f9b6f53a61cf561166f42ff1ccdba23e3fb3d901b2ab49fd182136deedc8e331d3b8354a632a4042b1b74d7b6abba0", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r7, &(0x7f0000000140)='./file1\x00', r7, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$key(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001d80)={0x2, 0x0, 0x1, 0x8, 0x2f, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_key={0x4, 0x9, 0x98, 0x0, "c1d9574ed6e798ab9a0ef886835e94e9771e4c"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x3c7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x26, 0x14, 0x14}, @sadb_x_sec_ctx={0x17, 0x18, 0x0, 0x4, 0xb0, "c1cc0d083af63ecbd76b75d4f5dccd6a7535e66db40028cd7c92c43a188a9c4222bdf560edf1b958c7282d536aee29a197dc98013c52bb7125a8c1c30bf6d0c319cf9173abf1754ed0a9bf53d30798dfeb4c630511180753352b5bb725f98e1ef72b624f223f4576d50eabc669659879387c6d18799301c1a6a1a69d8dde1dc70adbd50703bc7c384fce636f9e452398e63553d7892937ad5403ac42f8a37a91a365a363184c4b39b9dbf4fdc563ec2b"}, @sadb_lifetime={0x4, 0x2, 0x3, 0x5, 0x2, 0x247c453e}]}, 0x178}}, 0x24000801) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 145.150618ms ago: executing program 6 (id=8941): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) fremovexattr(r1, &(0x7f0000000200)=@random={'osx.', '#@]\x00'}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_secret(0x0) ftruncate(r2, 0x51a9497) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x104}, 0x10) finit_module(r2, 0x0, 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', r0, 0x4000, r0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000d040000000600000027f07eb4b710a5088d3ea1fd4588c15183178168862ce8b498694c54b32b2984ffc480601b361a80c0b5b3cd2b03c7f374099b1ffb99300ce74a9967c35652e6f5b7a833778d70541a82764d02c655ebbf21b9b1468f34c8f5a6297706c6724e9a8ed35239be305e40cd8424ae69e8bd3cd4726c6b7f2ecc24ce428a35ee380fd76fd618a523dc65189aa1cd67f108e19bd8024e216c818af1602675e60cb64a2723cf48b4bbd14efd8f17c53bcc1e90f970e0992a03340020b30acd5cc865f4fd107ce7f972"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 142.106779ms ago: executing program 3 (id=8942): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xc) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 124.44038ms ago: executing program 3 (id=8943): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ppoll(&(0x7f0000000540)=[{}], 0x5b, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x100, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2a060400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_freezer_state(r2, &(0x7f0000000340), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000100)=""/125, 0x7d}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/91, 0x5b}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000200)=""/59, 0x3b}], 0x7, 0x6dab, 0x2390) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2e}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r6 = memfd_secret(0x80000) fcntl$setlease(r6, 0x400, 0x0) 92.243243ms ago: executing program 3 (id=8944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x2000) msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) 83.685793ms ago: executing program 0 (id=8945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x57) 65.902325ms ago: executing program 3 (id=8946): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x6, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xc94, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc64, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xffffff54}, @TCA_FLOW_POLICE={0xc40, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2db0, 0x8, 0x5, 0x4000004, 0x4, 0x4b0, 0x2, 0x2, 0xf, 0x2, 0x4, 0x10, 0x5, 0x549, 0x4, 0x9, 0x9, 0x388, 0x2, 0x8, 0xfffffff0, 0xd7a2, 0x1, 0x1ff, 0x5, 0x0, 0x80000001, 0x2, 0x31e, 0xfffffffb, 0x8001, 0x5, 0xfffffffd, 0x4, 0xd2, 0x4, 0x40, 0x1, 0x10000, 0x9, 0x4, 0x4, 0x3, 0x1e21, 0x4d, 0x5, 0xe, 0xffffff29, 0x100000, 0x5, 0x7fffffff, 0x2, 0x9, 0x6, 0x4, 0x8, 0x0, 0xdc4, 0x2, 0x4, 0x9194, 0xffffc131, 0x6, 0x30a1, 0x4197, 0x593fc6d5, 0x8000, 0x3ff, 0x5, 0x9, 0x7, 0x199a, 0x5, 0xfffffff7, 0x10001, 0x9776, 0x7f, 0x4, 0x6, 0x59f, 0x4, 0x9, 0xa332, 0x8, 0x7, 0x34, 0x1ff, 0x7, 0x80, 0xfffffbff, 0x3, 0xffffffff, 0x8, 0x9, 0x6, 0xfffffffc, 0x1, 0x9, 0x7fffffff, 0x7, 0x400, 0x9, 0xa811, 0x9, 0x0, 0x5, 0x3ff, 0xffffffff, 0xfff, 0x3, 0x1, 0x10000, 0x5, 0x75, 0x7f, 0x3, 0x6, 0x1, 0x906, 0x0, 0x5, 0xffffffff, 0x5, 0x7f, 0x9, 0x6, 0x8, 0x4ff, 0x3, 0x1, 0x2, 0xe, 0xffe0, 0x8, 0x8, 0x6, 0x7, 0x8, 0xb23, 0x81, 0x7, 0x4, 0x6, 0x7, 0x81, 0x6, 0x807, 0x6, 0x8000, 0x81, 0x4, 0x0, 0x2, 0x0, 0x1, 0x7, 0xf40, 0x6, 0x4, 0x4, 0xa, 0x4, 0x7fffffff, 0x10000, 0xff, 0x1, 0x7, 0x2, 0xfffffffd, 0x4000000, 0x6, 0x35, 0x2, 0x0, 0x1000, 0x7f, 0xae3, 0x3ff3, 0x2, 0x800, 0xd, 0x1c, 0x4, 0x21e6, 0xf, 0x0, 0x8, 0xfc, 0x7ff0, 0x1800, 0x1, 0x7, 0x6, 0x0, 0x5, 0x9, 0x0, 0x7902, 0x2, 0x10, 0x755d, 0x1, 0x112c, 0x2, 0x3, 0x4, 0x2, 0x7, 0x80, 0x80000000, 0x1000, 0x6, 0x40, 0x7d, 0x0, 0x9, 0x80, 0x800, 0x7f, 0x30000000, 0xc, 0xffff, 0x5, 0x7, 0x3f, 0x0, 0x5, 0xc14f, 0x1, 0x2, 0x3, 0x1, 0x1, 0x4, 0x7fff, 0x253, 0x42, 0x72, 0x6, 0x7, 0x2, 0x3, 0x4, 0x81, 0x0, 0x4, 0xffff511a, 0x2, 0x1, 0x0, 0x10, 0x800, 0x9, 0x401, 0x7, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x14, 0x8, 0x3ff, 0xf61b, 0x4, 0x4, 0xfffffff9, 0x5, 0x7fff, 0xffffffff, 0x9, 0x8744, 0x80000001, 0xd2, 0x5, 0x676, 0x1000, 0xa, 0x1660, 0x6, 0x3, 0x8, 0x4cd0, 0x1, 0x9, 0x97b, 0xfffffff7, 0xfffffc10, 0x7, 0x9, 0x3, 0x0, 0x4, 0xfffffffd, 0x0, 0x101, 0xd, 0x800, 0x1, 0xf, 0x8439, 0xffffffff, 0x1f, 0xb9, 0x7, 0x40, 0x2, 0x1, 0x6, 0xffffffff, 0xfffffff8, 0x3, 0x7f, 0x5, 0x39cd389f, 0x91, 0xfffffffe, 0x2, 0x1, 0x3, 0x4, 0x1, 0xac6, 0x80000001, 0x8, 0x4, 0x80000001, 0xe8, 0x0, 0x2, 0x0, 0xfa98, 0x0, 0x6, 0xd8, 0x81, 0xd8e7, 0xfffffff7, 0x7, 0x4231, 0x5, 0x0, 0x2, 0x200, 0x8, 0x5, 0x4, 0x4, 0x1, 0x4, 0x1, 0x0, 0xa, 0x9, 0x3ff, 0x6, 0x18000, 0x0, 0x5, 0x1, 0x6, 0x237, 0x80, 0x3, 0x3, 0xfffffffc, 0xf0, 0x7f, 0x3, 0x9, 0x70e, 0x40, 0x6, 0x1fc, 0x2, 0x6, 0x382, 0x1, 0x81, 0x7, 0x1, 0x625, 0x7, 0x2, 0x3, 0x2e6, 0x10, 0x1, 0x3, 0x81, 0x4, 0x6, 0x9, 0x1, 0x6, 0x9, 0x0, 0x42, 0x0, 0x5, 0x101, 0x2, 0x7fffffff, 0x800, 0x50, 0x493, 0x7f, 0x20000000, 0x1320, 0xd, 0x6, 0x40, 0xfffff801, 0x6, 0x55, 0x1, 0xf, 0x80000001, 0x237c, 0x4, 0x789, 0xf99e, 0xffffffff, 0x7, 0xfeec60e, 0xe, 0x3, 0x5, 0x5, 0x7, 0xc, 0x3, 0x8, 0xfffffff9, 0x4, 0x542, 0x6c, 0x3, 0x0, 0x7, 0x0, 0x9, 0x4, 0x6, 0x4, 0x9, 0x5, 0x7, 0x9, 0x64, 0x1, 0x4, 0x1fd0, 0x9, 0x29be, 0x8, 0x7, 0x7944, 0x4, 0x9, 0x21a, 0x8, 0x1, 0x2, 0x80000001, 0xa, 0x6, 0x80000000, 0x5, 0x683, 0x1, 0x800, 0x2, 0x80000000, 0x6, 0x9, 0x0, 0x80, 0x9, 0xb53, 0x81, 0xff, 0x3, 0x9, 0x101, 0x7262, 0x5, 0x3, 0x90b1, 0x9, 0x0, 0xc3, 0x0, 0x8000, 0x4, 0xfffffff9, 0x3, 0x2d93, 0x100, 0x4, 0x7, 0xffffffff, 0xfff, 0x2, 0x1000, 0x8, 0x3, 0x2, 0x8001, 0x3, 0x97, 0x101, 0xeb47, 0xe4, 0xf13, 0x50]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x35e}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x9, 0x10001, 0xf431, 0xfffffffc, 0x2, 0x7, 0xbbaa, 0x4, 0x9, 0x2, 0x0, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x2, 0x7fffffff, 0x2, 0xf2b, 0xb6, 0x4, 0x43, 0xb, 0x61, 0x5, 0x0, 0x6, 0xfffffffa, 0x80000000, 0x4, 0x0, 0x1, 0x4, 0x6, 0x3, 0xffffffff, 0x6, 0xd24, 0x1, 0x35, 0x8, 0x744, 0x7, 0xff, 0x6, 0x0, 0x7, 0x9, 0x7f, 0x1bf800, 0x3, 0x1, 0x6, 0x7f, 0x7, 0x9, 0x9, 0x4, 0x7, 0x500, 0x800, 0x80000000, 0xfffffffe, 0x2, 0x4, 0x9bc9, 0x4, 0x7fff, 0xa, 0xfffffffa, 0x52, 0xfffffff5, 0x80000000, 0xa4f, 0x7, 0xf0fb, 0xfffffff8, 0xf575, 0x7, 0x401, 0x7, 0x80000000, 0xdd, 0x3, 0x78000000, 0xc, 0x7c, 0xa91, 0x80000001, 0x6, 0x2, 0x7ff, 0xffffffff, 0x80, 0xd1, 0x40, 0x2, 0x7ff, 0x8, 0x7, 0x80000000, 0xc, 0x6, 0xf2d, 0x3, 0xb74, 0x4, 0x7, 0x3, 0x81, 0x7, 0x462, 0x9, 0xff, 0x8, 0x4, 0x9, 0x1, 0x9, 0xb9, 0x2, 0x9, 0x6, 0x6, 0x0, 0xffffff00, 0x7, 0xe6, 0x7fffffff, 0x223, 0x6, 0xff, 0x6, 0x7, 0xa3d, 0x4d, 0x3, 0xc, 0x100, 0x7, 0x1000, 0x0, 0x80, 0x28, 0x1, 0x6, 0x0, 0x3, 0x2c4, 0x3, 0x4, 0x3ff, 0x9ae, 0x5, 0x5, 0x8, 0x1, 0xfffffffb, 0xecd1, 0x6, 0x7, 0x2, 0x7, 0x0, 0x4, 0xffffffff, 0xf, 0x6, 0x8, 0x0, 0x7f, 0x3, 0xedd1, 0x2, 0x2, 0x1000, 0xfffffffc, 0x6, 0x5, 0x5, 0x9, 0x9, 0x5, 0x9, 0xe, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x1000, 0x6c, 0x6, 0xb7cb, 0x9, 0x51f, 0xffffffff, 0x200, 0xd, 0x6, 0xc5, 0xfffffff7, 0x8, 0x5, 0xa, 0x2, 0x80000000, 0x5, 0x3, 0xe, 0x10, 0x1, 0x1, 0x1, 0x5, 0x5, 0x0, 0x1, 0x2, 0x9, 0xad, 0x9, 0x8, 0x6, 0x1, 0x2, 0x7, 0x800, 0x2, 0xe8b, 0x80, 0x8000, 0x1, 0xf, 0xa0b1, 0x8000, 0x80000000, 0xfff, 0x2, 0x4, 0x5, 0x5, 0xe, 0x6, 0xb, 0x9, 0x8, 0x1, 0x4, 0x6ce, 0xfbe, 0xfffffff9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x20}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xfff3}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}]}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'veth1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x76, 0x468, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @remote, {[@generic={0x94, 0x3, "e1"}, @rr={0x7, 0x1f, 0x6d, [@broadcast, @empty, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x39}, @empty, @empty]}, @generic={0x7, 0x12, "0ee8cc74493455ad140bff9d1a05a276"}, @lsrr={0x83, 0x13, 0x82, [@multicast2, @empty, @private=0xa010101, @multicast1]}, @generic={0x83, 0x2}]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'nr0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={0x0, @local, @empty}, &(0x7f0000000b80)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="c4060000", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006000000043555038cd30004", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400fbffffff080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="28020280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000104616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="f800028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r3, @ANYBLOB="7c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c0004000100080402000000ffff02080a00000001010f810500000080000581080000000200ba01b5760000e8cb0209a9000000f8ff080805000000010006000104000013be08040900000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=r6, @ANYBLOB="300202803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000d000000000005000300060000000400040029000600d9913d489d12bb570331cd7e7b31cf25d4c8873db96e29f46d1a83f3ddd76f9e9e3c656834c0b050a9a13ddc8a12f97219c03055ea0f983deb79b4d24b11bb42fec523ae71570132a16037b9fec7934e9ee024e0694622fe1102de70f41d29bbcd447066c9492580786a5cd6d5ba05ae0fce3d4cd31cdbd43bcdb646ec", @ANYRES32=r8, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400b70d000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB], 0x6c4}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 54.118816ms ago: executing program 0 (id=8947): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0xf00) 26.750308ms ago: executing program 0 (id=8948): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 26.069548ms ago: executing program 6 (id=8949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff01000000000000000006", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 10.079729ms ago: executing program 6 (id=8950): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="6102a69cd934ffe69cc6d1d79a8b51899a53b0de3e2acc0cf333a0fba2ff43cb4029486644bf58b2950fb4d287166de2bda1afa6f98c2a4c49090ce9cb53338da6c86a8077398f6b54236e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) unlinkat(0xffffffffffffffff, 0x0, 0x200) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0xffffffffffffff0f) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 9.298039ms ago: executing program 3 (id=8951): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7af}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) rmdir(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0xfffffffffffffff7}) 0s ago: executing program 0 (id=8952): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="be", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x20}, 0x41) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, 0x0, &(0x7f0000000580)) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmmsg(r3, &(0x7f0000000f80)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)="6ba9c282ed3cb0f06a8c6d04f5c7a4b139ae3e39c7e8272b416b99fac29d10f1281d2176105c21597acdef457201bd864969864b5f0829dc8edd7ecac07833dfb4bbf79756395af6f5fe49cf71b7fcde6ed53ff0f27666ef46b4f3fe261a4f15cbe04f0478171ca3561538a137f742dac38ed3fcc8f932309356b3d1d3dda18bf73c274e3e661824337987221469dd6776f066e77eaabb3ef8c92ba4c49c27bce008baaf8fd1f89f974e8a35e13f21b9f10487e84fa1f36bb5bbaf7c22be429342ab7dd5", 0xc4}, {&(0x7f0000000240)="d3c9b1887c93572eb6872cf552bfe1cb7af4f86cbd4ddc03a570190fc068fac6937328347d9ead09c6d1dba86200a89bd2dc5fcfa5b68312ee4629615a5503", 0x3f}], 0x2, &(0x7f0000000700)=[{0x10, 0x6, 0x2e5}, {0x60, 0x117, 0x3, "2c9f969a4da46e30e549c91ed58e2b4d649f06a7d5ba550c7d26dc7a8fe3d6e556fe990ce8d9c2c1977bd6442f9f20515ecf0a525f4f0182580dcedd809d495c9a13dba5be566e025fdad8e0dae97f"}, {0xd0, 0x1, 0x3, "c832ca629ccdf706d4671db6fe0e8fb73679471918ba2b19ad196ab0fb2065de9fb5bbe227dc404ae0b22906603f1741f032bf3c30b07a3f055900d861de12c51acb5c9bc0b02d47eb93bdc7d0d414ce4973494692603b5b622d25ff593487c4b458438d11a90bd7633a6038e1f28e8e758932aa322e1110beb4dc7b466ab6fed0e5e4c29a7241b743ccfe0bc48f2ee61dc6337df77970f8ff43a9f20c0d4b79c91ed9539449732bc1e062f5f03c3468b7706ad87f563f8b8f2f3f0ba88ff9"}, {0xa8, 0x104, 0x3, "99dc24adffbc70fb390570ce821123b3d06cf730df698612b0bddad7648cfb2152f78e10406c0ec611c4a5254f830bd94ca38ee681af6ef9d49b7debdba8c1f271dc953dc55fa7ae0ea5cb202316608c20c625dfda9c6c36013abf4df86ee7104470a40af11664276e2773de064a1589d0a59f6c5086cc35ef58d98b457c5a8f09d117f4053527fdbb0354de9b74bb1be85cb6fa00"}, {0x50, 0x108, 0x9, "2c1c9fff2f44ea9699e9f1c08bbb1b75d49ee832e0d6fd0146b231824ad09f2113a044c06a312dd574be47db24c7599a50983ad23b032216ddf3735d909b8d"}], 0x238}}, {{&(0x7f0000000980)=@ll={0x11, 0x18, r9, 0x1, 0x7, 0x6, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000a00)="1e8e970b20df8d6cb6cb41e13de825c3bc757c22a2739947fc1766f83717aa29a9384048c79a4796ea49428583289e89a2057914f99808a0e7a17218437a30dae09e563ef163a4c0a58d4a233204efc5bd3ba15df02e8ffb0e6faf61a415c942592f177726c8243dfccec4fe5ac71e9f21d5a14922389e5bc489b89ee4c8355fe114370591ec6167ad7d5b07b607b9948aabc2ffae6751184b0b61db8a79567e7e4b2e1472cc46a48d85aa1cd1e6a187d5109b4fdafcf3ed73", 0xb9}, {&(0x7f0000000b40)="5ddfe07c52fbe71e499bd3f71cbaa48b5645d4c3da8d2234da814c81364ff8a6b7071ff076ed35850d77cbdfa5893ad308fb9f8de69f48df598d345e14ee66f9e2731ee801f4b5c87e2d00327d8df5567ce3b1f60291b959ec82d47ea8eb34f852a7c0a41afc000c52e27f42d7f6f8c64dfd6c74f35b1f06e1a4bff495a7b93dbe89996c0bb4282ce56690397f51", 0x8e}], 0x2, &(0x7f0000000c00)=[{0xa8, 0x1aa, 0x8, "bc757cbddea9363f93b41e01f109e9025d61025b75720c00933ec237362e69e95e7e3661f5ee9f1f88825750fc484a02906b59c3e18275dd7b979bd4c04bd05307be69d1d796cae353e2c4faa6bd1d43e43ba9c2aca8d7d43a80224accb63736b3edeedb7f80aaa406c99aa97369cfb628eb7584baf062c3f23f3cfa895f7f928c40a121a7b2c105d5f0df850701f451253ec4a6"}, {0x98, 0x10d, 0x8, "0b762d348e59d9fd93cc64de73bd0f2b9c1d153312538bf69c2f143441d331da6d8cc695e8d918096d10ef9cc8e1569b5ceb1c517eda180fa44071c9058ee8ae2e7c297f7571c2f9deae111c29d4efad3a0bd6d2b50caf31e32aba7296d578ba571f55a88041f3d9f95aba668a9162eaed44dcb88de2b615c0e0693cec5e49b8a4309848aa45e0"}, {0xd8, 0x109, 0x1, "72894620a9793968d0f96821ae8fedaceec236f9a4e7138765a338d33c31b17a5f4e152e18327bac9325ac12db71cc854281e0096dc10770f5735b55c493efefd5927877a6796349df04e7ddd1ae0556301dd568d08b71f81b587deafef937c6d1abd84b02fc322b1884533c0d9979cd3bf5b2c46fc35fa97a56f5947c99c084fe63a1488ce737dc7348b6da5adb59c6701431edb7dfe23b70f2efc263070b5cb90efde5e080d0118c01658afe67641327cac1dab8ad210a44ce57694d6d423c63da3d6edc6a"}, {0x68, 0x1, 0x639, "60ab622c159421bd04502e643c2c9dfe94b43a4581baffd4638b9db5cc6d86b3af86a903122c555d980b642b5c63252eef64839f81351795ea6d68319657ab0997482e423abcd837d4bb2520d69ea3c24895b4"}, {0x58, 0x0, 0x6, "36d5cad30cc168bb3f4844ae03e55acee3a4833c7ee0cd07033435938cf2fcd84d53c8d96d941883d1625b38d91af907e79c77994953014f73b3f351ab4ac98ace9014a9"}, {0x88, 0x101, 0xfffffe12, "71189a33e4fa79406132d0f737ec517cc70c92dce23ce2604ec4aa0fef5b89b6a8a841a52eaf2ee94bc3879de9faaf1f8c9342d5e67de0ea91ff5bb538668f68697c87f02ac7afa14fd579b86a97689647d9fd72d1db0ad1200b398af06f51a7eba2fe5b2ac96291352b9cf103c285d8adbea75570"}], 0x360}}], 0x2, 0x800) bind$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e21, 0x4, @empty, 0x1}, 0x1c) r10 = getpgid(0x0) r11 = syz_pidfd_open(r10, 0x0) pidfd_send_signal(r11, 0x21, 0x0, 0x4) kernel console output (not intermixed with test programs): 2 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 461.429917][ T29] audit: type=1326 audit(1755090213.628:28253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.6.7438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 461.453492][ T29] audit: type=1326 audit(1755090213.628:28254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.6.7438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 461.476974][ T29] audit: type=1326 audit(1755090213.628:28255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.6.7438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 461.500447][ T29] audit: type=1326 audit(1755090213.628:28256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3496 comm="syz.6.7438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 461.719949][ T3520] lo speed is unknown, defaulting to 1000 [ 461.803215][ T3544] rdma_rxe: rxe_newlink: failed to add bond0 [ 461.883323][ T3547] Falling back ldisc for ttyS3. [ 461.892023][ T3557] lo speed is unknown, defaulting to 1000 [ 461.925511][ T3575] random: crng reseeded on system resumption [ 462.017321][ T3608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.218744][ T3671] Falling back ldisc for ttyS3. [ 462.315839][ T3680] lo speed is unknown, defaulting to 1000 [ 462.427836][ T3711] __nla_validate_parse: 19 callbacks suppressed [ 462.427854][ T3711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7459'. [ 462.835014][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7465'. [ 462.941406][ T3740] validate_nla: 9 callbacks suppressed [ 462.941430][ T3740] netlink: 'syz.0.7466': attribute type 1 has an invalid length. [ 462.987847][ T3740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7466'. [ 463.032580][ T3742] geneve2: entered promiscuous mode [ 463.037824][ T3742] geneve2: entered allmulticast mode [ 463.055720][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.073013][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.152369][ T3737] Falling back ldisc for ttyS3. [ 463.166266][ T3762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7471'. [ 463.288088][ T3775] netlink: 'syz.2.7475': attribute type 1 has an invalid length. [ 463.305918][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7475'. [ 463.374508][ T3775] Falling back ldisc for ttyS3. [ 463.595953][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7481'. [ 463.667192][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7479'. [ 463.683033][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7484'. [ 463.695760][ T3814] netlink: 'syz.4.7483': attribute type 1 has an invalid length. [ 463.704626][ T3814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7483'. [ 463.766234][ T3804] Falling back ldisc for ttyS3. [ 463.772535][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7484'. [ 463.838040][ T3837] geneve2: entered promiscuous mode [ 463.843416][ T3837] geneve2: entered allmulticast mode [ 463.963635][ T3870] bridge_slave_1: left allmulticast mode [ 463.969331][ T3870] bridge_slave_1: left promiscuous mode [ 463.975267][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.985169][ T3870] bridge_slave_0: left allmulticast mode [ 463.990960][ T3870] bridge_slave_0: left promiscuous mode [ 463.996650][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.005827][ T3888] netlink: 'syz.2.7504': attribute type 1 has an invalid length. [ 464.053489][ T3894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.063157][ T3894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.111610][ T3876] Falling back ldisc for ttyS3. [ 464.131296][ T3912] rdma_rxe: rxe_newlink: failed to add bond0 [ 464.151729][ T3917] geneve2: entered promiscuous mode [ 464.157006][ T3917] geneve2: entered allmulticast mode [ 464.237698][ T3943] geneve2: entered promiscuous mode [ 464.243183][ T3943] geneve2: entered allmulticast mode [ 464.361587][ T3967] netlink: 'syz.6.7523': attribute type 1 has an invalid length. [ 464.428299][ T3967] Falling back ldisc for ttyS3. [ 464.452369][ T3980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 464.459029][ T3980] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 464.466782][ T3980] vhci_hcd vhci_hcd.0: Device attached [ 464.480388][ T3983] vhci_hcd: cannot find a urb of seqnum 65535 max seqnum 0 [ 464.498707][ T3579] vhci_hcd: stop threads [ 464.503044][ T3579] vhci_hcd: release socket [ 464.507453][ T3579] vhci_hcd: disconnect device [ 464.533278][ T3989] lo speed is unknown, defaulting to 1000 [ 464.919718][ T4058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.928442][ T4058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.047430][ T4065] lo speed is unknown, defaulting to 1000 [ 465.077445][ T4093] netlink: 'syz.0.7544': attribute type 1 has an invalid length. [ 465.164151][ T4070] Falling back ldisc for ttyS3. [ 465.498247][ T4136] geneve2: entered promiscuous mode [ 465.503693][ T4136] geneve2: entered allmulticast mode [ 465.716968][ T4151] netlink: 'syz.3.7558': attribute type 1 has an invalid length. [ 465.789030][ T4151] Falling back ldisc for ttyS3. [ 465.841382][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.852813][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.499214][ T4198] netlink: 'syz.4.7569': attribute type 1 has an invalid length. [ 466.517073][ T4198] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.530850][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 466.530883][ T29] audit: type=1326 audit(1755090219.261:28593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.530963][ T4236] rdma_rxe: rxe_newlink: failed to add bond0 [ 466.569877][ T29] audit: type=1326 audit(1755090219.304:28594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.597744][ T29] audit: type=1326 audit(1755090219.336:28595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.621388][ T29] audit: type=1326 audit(1755090219.336:28596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.645489][ T29] audit: type=1326 audit(1755090219.358:28597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.669092][ T29] audit: type=1326 audit(1755090219.358:28598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.692723][ T29] audit: type=1326 audit(1755090219.358:28599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.697744][ T4244] netlink: 'syz.2.7572': attribute type 1 has an invalid length. [ 466.716512][ T29] audit: type=1326 audit(1755090219.358:28600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.747381][ T29] audit: type=1326 audit(1755090219.358:28601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.770959][ T29] audit: type=1326 audit(1755090219.358:28602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.4.7569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 466.851664][ T4244] Falling back ldisc for ttyS3. [ 467.007367][ T4271] geneve2: entered promiscuous mode [ 467.012712][ T4271] geneve2: entered allmulticast mode [ 467.157339][ T4295] geneve2: entered promiscuous mode [ 467.162892][ T4295] geneve2: entered allmulticast mode [ 467.279169][ T4310] rdma_rxe: rxe_newlink: failed to add bond0 [ 467.356907][ T4317] geneve2: entered promiscuous mode [ 467.358984][ T4314] __nla_validate_parse: 22 callbacks suppressed [ 467.358998][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7589'. [ 467.362172][ T4317] geneve2: entered allmulticast mode [ 467.449847][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.459162][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.504487][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7594'. [ 467.539232][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7594'. [ 467.593385][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7597'. [ 467.638299][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7602'. [ 467.691536][ T4364] lo speed is unknown, defaulting to 1000 [ 467.740073][ T4393] random: crng reseeded on system resumption [ 468.125692][ T4403] lo speed is unknown, defaulting to 1000 [ 468.480853][ T4428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7612'. [ 468.489871][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7612'. [ 468.508356][ T4428] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 468.514982][ T4428] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 468.522939][ T4428] vhci_hcd vhci_hcd.0: Device attached [ 468.537053][ T4431] vhci_hcd: connection closed [ 468.537228][ T3597] vhci_hcd: stop threads [ 468.546234][ T3597] vhci_hcd: release socket [ 468.550709][ T3597] vhci_hcd: disconnect device [ 468.589256][ T4436] netlink: 'syz.3.7615': attribute type 1 has an invalid length. [ 468.605650][ T4436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.768446][ T4477] rdma_rxe: rxe_newlink: failed to add bond0 [ 468.897723][ T4480] lo speed is unknown, defaulting to 1000 [ 468.916393][ T4483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.928164][ T4483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.053318][ T4507] lo speed is unknown, defaulting to 1000 [ 469.091483][ T4530] random: crng reseeded on system resumption [ 469.431703][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7625'. [ 469.457423][ T4544] geneve2: entered promiscuous mode [ 469.462789][ T4544] geneve2: entered allmulticast mode [ 469.534495][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7628'. [ 469.624476][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.633686][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7632'. [ 469.637018][ T4578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.642827][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.651739][ T4578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.804368][ T4598] netlink: 'syz.3.7637': attribute type 1 has an invalid length. [ 469.804944][ T4595] geneve3: entered promiscuous mode [ 469.817504][ T4595] geneve3: entered allmulticast mode [ 469.917961][ T4593] Falling back ldisc for ttyS3. [ 469.952278][ T4619] netlink: 'syz.0.7640': attribute type 1 has an invalid length. [ 470.039335][ T4619] Falling back ldisc for ttyS3. [ 470.083921][ T4626] lo speed is unknown, defaulting to 1000 [ 470.249302][ T4669] rdma_rxe: rxe_newlink: failed to add bond0 [ 470.310684][ T4683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.323011][ T4683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.339189][ T4687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.348045][ T4687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.834328][ T4698] netlink: 'syz.3.7658': attribute type 1 has an invalid length. [ 470.878932][ T4693] Falling back ldisc for ttyS3. [ 470.914187][ T4718] geneve2: entered promiscuous mode [ 470.919927][ T4718] geneve2: entered allmulticast mode [ 471.068539][ T4743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.077431][ T4743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.112811][ T4754] netlink: 'syz.4.7676': attribute type 1 has an invalid length. [ 471.132803][ T4754] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.150243][ T4742] lo speed is unknown, defaulting to 1000 [ 471.253516][ T4819] netlink: 'syz.4.7678': attribute type 1 has an invalid length. [ 471.324910][ T4819] Falling back ldisc for ttyS3. [ 471.417301][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 471.417316][ T29] audit: type=1326 audit(1755090224.497:28835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.448844][ T29] audit: type=1326 audit(1755090224.497:28836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.472470][ T29] audit: type=1326 audit(1755090224.518:28837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.496020][ T29] audit: type=1326 audit(1755090224.518:28838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.4.7681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.519753][ T29] audit: type=1326 audit(1755090224.572:28839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.543341][ T29] audit: type=1326 audit(1755090224.572:28840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.567032][ T29] audit: type=1326 audit(1755090224.572:28841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9b47bd550 code=0x7ffc0000 [ 471.590659][ T29] audit: type=1326 audit(1755090224.572:28842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9b47bd550 code=0x7ffc0000 [ 471.614265][ T29] audit: type=1326 audit(1755090224.572:28843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.637742][ T29] audit: type=1326 audit(1755090224.572:28844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.4.7682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 471.663923][ T4839] netlink: 'syz.4.7685': attribute type 1 has an invalid length. [ 471.717518][ T4839] Falling back ldisc for ttyS3. [ 471.754468][ T4857] netlink: 'syz.2.7688': attribute type 1 has an invalid length. [ 471.768927][ T4857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.834419][ T4901] geneve3: entered promiscuous mode [ 471.839793][ T4901] geneve3: entered allmulticast mode [ 471.862986][ T4905] lo speed is unknown, defaulting to 1000 [ 471.918382][ T4931] random: crng reseeded on system resumption [ 471.944291][ T4938] geneve2: entered promiscuous mode [ 471.949680][ T4938] geneve2: entered allmulticast mode [ 471.962218][ T4945] netlink: 'syz.6.7695': attribute type 1 has an invalid length. [ 471.976229][ T4940] geneve3: entered promiscuous mode [ 471.981521][ T4940] geneve3: entered allmulticast mode [ 472.061595][ T4927] Falling back ldisc for ttyS3. [ 472.095859][ T4966] netlink: 'syz.2.7701': attribute type 1 has an invalid length. [ 472.120615][ T4966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 472.213823][ T5015] __nla_validate_parse: 18 callbacks suppressed [ 472.213889][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7704'. [ 472.253467][ T5011] lo speed is unknown, defaulting to 1000 [ 472.290229][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7706'. [ 472.322435][ T4974] Falling back ldisc for ttyS3. [ 472.377089][ T5051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7707'. [ 472.424737][ T5051] Falling back ldisc for ttyS3. [ 472.511743][ T5061] geneve3: entered promiscuous mode [ 472.516973][ T5061] geneve3: entered allmulticast mode [ 472.629862][ T5077] lo speed is unknown, defaulting to 1000 [ 472.666663][ T5079] rdma_rxe: rxe_newlink: failed to add bond0 [ 472.675524][ T5105] random: crng reseeded on system resumption [ 472.792705][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7720'. [ 472.825603][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7717'. [ 472.835206][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7720'. [ 472.878553][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7723'. [ 472.890666][ T5121] Falling back ldisc for ttyS3. [ 472.949851][ T5148] rdma_rxe: rxe_newlink: failed to add bond0 [ 472.988419][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7731'. [ 473.016096][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7726'. [ 473.079987][ T5170] lo speed is unknown, defaulting to 1000 [ 473.086463][ T5146] Falling back ldisc for ttyS3. [ 473.113066][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7732'. [ 473.158575][ T5179] random: crng reseeded on system resumption [ 473.562614][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.584464][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.608883][ T5242] lo speed is unknown, defaulting to 1000 [ 473.637609][ T5255] random: crng reseeded on system resumption [ 473.912639][ T5271] validate_nla: 4 callbacks suppressed [ 473.912653][ T5271] netlink: 'syz.3.7751': attribute type 1 has an invalid length. [ 474.062832][ T5271] Falling back ldisc for ttyS3. [ 474.224580][ T5298] netlink: 'syz.0.7755': attribute type 1 has an invalid length. [ 474.356216][ T5292] lo speed is unknown, defaulting to 1000 [ 474.452977][ T5339] rdma_rxe: rxe_newlink: failed to add bond0 [ 474.513996][ T5291] Falling back ldisc for ttyS3. [ 474.627051][ T5363] netlink: 'syz.0.7766': attribute type 1 has an invalid length. [ 474.650738][ T5363] 8021q: adding VLAN 0 to HW filter on device bond10 [ 475.065784][ T5432] rdma_rxe: rxe_newlink: failed to add bond0 [ 475.094204][ T5436] lo speed is unknown, defaulting to 1000 [ 475.117028][ T5441] geneve2: entered promiscuous mode [ 475.122305][ T5441] geneve2: entered allmulticast mode [ 475.135218][ T5444] random: crng reseeded on system resumption [ 475.167728][ T5446] netlink: 'syz.3.7778': attribute type 1 has an invalid length. [ 475.247005][ T5446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.604949][ T5539] netlink: 'syz.0.7787': attribute type 1 has an invalid length. [ 475.706732][ T5539] Falling back ldisc for ttyS3. [ 475.763326][ T5550] lo speed is unknown, defaulting to 1000 [ 475.789236][ T5562] rdma_rxe: rxe_newlink: failed to add bond0 [ 475.850836][ T5576] geneve2: entered promiscuous mode [ 475.856215][ T5576] geneve2: entered allmulticast mode [ 476.029527][ T5601] lo speed is unknown, defaulting to 1000 [ 476.064995][ T5622] netlink: 'syz.0.7796': attribute type 1 has an invalid length. [ 476.088917][ T5621] random: crng reseeded on system resumption [ 476.135910][ T5622] Falling back ldisc for ttyS3. [ 476.136140][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 476.136152][ T29] audit: type=1326 audit(1755090229.572:29002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 476.182131][ T29] audit: type=1326 audit(1755090229.615:29003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 476.205734][ T29] audit: type=1326 audit(1755090229.615:29004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 476.229393][ T29] audit: type=1326 audit(1755090229.615:29005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 476.253156][ T29] audit: type=1326 audit(1755090229.615:29006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.3.7799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 476.285541][ T5643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.299591][ T5648] netlink: 'syz.6.7802': attribute type 1 has an invalid length. [ 476.314916][ T5648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.327582][ T5643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.332824][ T5648] bond1: (slave gretap1): making interface the new active one [ 476.343860][ T5648] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 476.356600][ T29] audit: type=1326 audit(1755090229.797:29007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 476.380338][ T29] audit: type=1326 audit(1755090229.818:29008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 476.403850][ T29] audit: type=1326 audit(1755090229.818:29009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 476.427622][ T29] audit: type=1326 audit(1755090229.818:29010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 476.451254][ T29] audit: type=1326 audit(1755090229.818:29011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.6.7802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 476.801949][ T5722] netlink: 'syz.4.7815': attribute type 1 has an invalid length. [ 476.929171][ T5731] netlink: 'syz.3.7816': attribute type 1 has an invalid length. [ 476.948333][ T5731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.370794][ T5768] __nla_validate_parse: 16 callbacks suppressed [ 477.370895][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7817'. [ 477.521550][ T5778] netlink: 'syz.6.7821': attribute type 1 has an invalid length. [ 477.529988][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7821'. [ 477.552395][ T5722] Falling back ldisc for ttyS3. [ 477.607534][ T5778] Falling back ldisc for ttyS3. [ 477.738360][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7824'. [ 477.773008][ T5797] lo speed is unknown, defaulting to 1000 [ 477.793415][ T5793] Falling back ldisc for ttyS3. [ 477.829645][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7825'. [ 477.904072][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.915977][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.606518][ T5860] lo speed is unknown, defaulting to 1000 [ 478.682949][ T5885] rdma_rxe: rxe_newlink: failed to add bond0 [ 478.764744][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7837'. [ 478.792855][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7836'. [ 478.919535][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7836'. [ 478.953306][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.965660][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.478460][ T5941] rdma_rxe: rxe_newlink: failed to add bond0 [ 479.580974][ T5943] netlink: 'syz.4.7850': attribute type 1 has an invalid length. [ 479.598040][ T5943] 8021q: adding VLAN 0 to HW filter on device bond8 [ 479.635548][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7852'. [ 479.768159][ T5993] geneve2: entered promiscuous mode [ 479.773438][ T5993] geneve2: entered allmulticast mode [ 479.875738][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.884760][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.037742][ T6009] lo speed is unknown, defaulting to 1000 [ 480.076353][ T6032] random: crng reseeded on system resumption [ 480.391636][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7865'. [ 481.970519][ T6055] geneve2: entered promiscuous mode [ 481.975747][ T6055] geneve2: entered allmulticast mode [ 482.007360][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 482.007374][ T29] audit: type=1326 audit(1755090235.859:29091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.3.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.037324][ T29] audit: type=1326 audit(1755090235.859:29092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.3.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.060792][ T29] audit: type=1326 audit(1755090235.859:29093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.3.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.084385][ T29] audit: type=1326 audit(1755090235.859:29094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz.3.7870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.149002][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.159940][ T29] audit: type=1326 audit(1755090236.031:29095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.174157][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.194899][ T29] audit: type=1326 audit(1755090236.063:29096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.218729][ T29] audit: type=1326 audit(1755090236.063:29097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.242205][ T29] audit: type=1326 audit(1755090236.063:29098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.260094][ T6073] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 482.265705][ T29] audit: type=1326 audit(1755090236.063:29099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.272125][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 482.295750][ T29] audit: type=1326 audit(1755090236.063:29100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 482.303619][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 482.345925][ T6079] vhci_hcd: connection closed [ 482.349583][ T3579] vhci_hcd: stop threads [ 482.358666][ T3579] vhci_hcd: release socket [ 482.363253][ T3579] vhci_hcd: disconnect device [ 482.391821][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7878'. [ 482.633928][ T6118] geneve2: entered promiscuous mode [ 482.639243][ T6118] geneve2: entered allmulticast mode [ 482.801906][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7893'. [ 482.834027][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7895'. [ 482.858822][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7895'. [ 482.869027][ T6133] Falling back ldisc for ttyS3. [ 482.986070][ T6157] geneve2: entered promiscuous mode [ 482.991308][ T6157] geneve2: entered allmulticast mode [ 483.005196][ T6162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.014201][ T6162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.142474][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7907'. [ 483.143239][ T3648] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 483.159923][ T3648] ref_tracker: netdev@ffff8881192a2550 has 1/1 users at [ 483.159923][ T3648] dst_init+0x97/0x240 [ 483.159923][ T3648] dst_alloc+0xe0/0x100 [ 483.159923][ T3648] rt_dst_clone+0x3b/0x2e0 [ 483.159923][ T3648] NF_HOOK+0x65/0x200 [ 483.159923][ T3648] ip_mc_output+0x139/0x340 [ 483.159923][ T3648] ip_send_skb+0x151/0x160 [ 483.159923][ T3648] udp_send_skb+0x6e3/0xa40 [ 483.159923][ T3648] udp_sendmsg+0x1050/0x13c0 [ 483.159923][ T3648] udpv6_sendmsg+0x7e9/0x1590 [ 483.159923][ T3648] inet6_sendmsg+0xac/0xd0 [ 483.159923][ T3648] __sock_sendmsg+0x8b/0x180 [ 483.159923][ T3648] ____sys_sendmsg+0x345/0x4e0 [ 483.159923][ T3648] ___sys_sendmsg+0x17b/0x1d0 [ 483.159923][ T3648] __sys_sendmmsg+0x178/0x300 [ 483.159923][ T3648] __x64_sys_sendmmsg+0x57/0x70 [ 483.159923][ T3648] x64_sys_call+0x1c4a/0x2ff0 [ 483.159923][ T3648] [ 483.311651][ T6174] Falling back ldisc for ttyS3. [ 483.440457][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7908'. [ 483.497572][ T6184] Falling back ldisc for ttyS3. [ 483.563610][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7909'. [ 483.596985][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7909'. [ 483.618292][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7910'. [ 483.701875][ T6217] geneve2: entered promiscuous mode [ 483.707235][ T6217] geneve2: entered allmulticast mode [ 483.720291][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7911'. [ 483.776061][ T6230] geneve2: entered promiscuous mode [ 483.781569][ T6230] geneve2: entered allmulticast mode [ 483.787560][ T6220] Falling back ldisc for ttyS3. [ 483.879277][ T6240] netlink: 'syz.6.7919': attribute type 1 has an invalid length. [ 483.882080][ T6236] lo speed is unknown, defaulting to 1000 [ 483.925158][ T6240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.945805][ T6276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.007615][ T6276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.332787][ T6330] geneve2: entered promiscuous mode [ 484.338228][ T6330] geneve2: entered allmulticast mode [ 484.546310][ T6358] lo speed is unknown, defaulting to 1000 [ 484.586870][ T6389] random: crng reseeded on system resumption [ 485.017356][ T6420] lo speed is unknown, defaulting to 1000 [ 485.235760][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.245512][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.503062][ T6465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 485.509690][ T6465] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 485.517501][ T6465] vhci_hcd vhci_hcd.0: Device attached [ 485.523663][ T6466] vhci_hcd: connection closed [ 485.524018][ T3582] vhci_hcd: stop threads [ 485.533046][ T3582] vhci_hcd: release socket [ 485.537510][ T3582] vhci_hcd: disconnect device [ 485.700684][ T6480] lo speed is unknown, defaulting to 1000 [ 485.739929][ T6503] random: crng reseeded on system resumption [ 485.800155][ T6506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6506 comm=syz.2.7954 [ 485.858713][ T6506] Falling back ldisc for ttyS3. [ 486.223307][ T6553] geneve3: entered promiscuous mode [ 486.228663][ T6553] geneve3: entered allmulticast mode [ 486.251473][ T6551] netlink: 'syz.6.7965': attribute type 1 has an invalid length. [ 486.271555][ T6551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.409517][ T6592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6592 comm=syz.0.7968 [ 486.489431][ T6592] Falling back ldisc for ttyS3. [ 486.948661][ T6628] geneve2: entered promiscuous mode [ 486.950662][ T6630] netlink: 'syz.0.7980': attribute type 1 has an invalid length. [ 486.953882][ T6628] geneve2: entered allmulticast mode [ 486.984070][ T6630] 8021q: adding VLAN 0 to HW filter on device bond11 [ 486.996669][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 486.996683][ T29] audit: type=1326 audit(1755090241.223:29280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.026614][ T29] audit: type=1326 audit(1755090241.234:29281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.050806][ T29] audit: type=1326 audit(1755090241.234:29282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.074504][ T29] audit: type=1326 audit(1755090241.234:29283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.098230][ T29] audit: type=1326 audit(1755090241.234:29284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.121709][ T29] audit: type=1326 audit(1755090241.234:29285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.145399][ T29] audit: type=1326 audit(1755090241.234:29286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.168972][ T29] audit: type=1326 audit(1755090241.234:29287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.192643][ T29] audit: type=1326 audit(1755090241.234:29288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.216129][ T29] audit: type=1326 audit(1755090241.234:29289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6629 comm="syz.0.7980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 487.375409][ T6696] __nla_validate_parse: 15 callbacks suppressed [ 487.375423][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7988'. [ 487.429759][ T6708] geneve2: entered promiscuous mode [ 487.435021][ T6708] geneve2: entered allmulticast mode [ 487.449071][ T6713] netlink: 'syz.3.7993': attribute type 1 has an invalid length. [ 487.468805][ T6713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.623479][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8000'. [ 487.766404][ T6791] netlink: 'syz.0.8005': attribute type 1 has an invalid length. [ 487.784643][ T6791] 8021q: adding VLAN 0 to HW filter on device bond12 [ 487.819669][ T6828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 487.826205][ T6828] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 487.834121][ T6828] vhci_hcd vhci_hcd.0: Device attached [ 487.843071][ T6831] vhci_hcd: connection closed [ 487.843122][ T4015] vhci_hcd: stop threads [ 487.852103][ T4015] vhci_hcd: release socket [ 487.856503][ T4015] vhci_hcd: disconnect device [ 488.017366][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8013'. [ 488.053271][ T6847] netlink: 'syz.0.8015': attribute type 13 has an invalid length. [ 488.062018][ T6850] netlink: 'syz.2.8012': attribute type 1 has an invalid length. [ 488.070359][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8012'. [ 488.161107][ T6840] Falling back ldisc for ttyS3. [ 488.308680][ T6876] netlink: 'syz.2.8021': attribute type 1 has an invalid length. [ 488.320566][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8021'. [ 488.333076][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8025'. [ 488.372957][ T6876] Falling back ldisc for ttyS3. [ 488.402790][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8028'. [ 488.512899][ T6916] netlink: 'syz.3.8031': attribute type 1 has an invalid length. [ 488.521385][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8031'. [ 488.562641][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8035'. [ 488.577314][ T6910] Falling back ldisc for ttyS3. [ 488.602502][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8033'. [ 488.639720][ T6943] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 488.646260][ T6943] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 488.654144][ T6943] vhci_hcd vhci_hcd.0: Device attached [ 488.660311][ T6944] vhci_hcd: connection closed [ 488.660546][ T3582] vhci_hcd: stop threads [ 488.670034][ T3582] vhci_hcd: release socket [ 488.674621][ T3582] vhci_hcd: disconnect device [ 488.681148][ T6915] Falling back ldisc for ttyS3. [ 488.826839][ T6955] geneve2: entered promiscuous mode [ 488.832605][ T6955] geneve2: entered allmulticast mode [ 489.012339][ T6986] netlink: 'syz.2.8050': attribute type 1 has an invalid length. [ 489.029467][ T6986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.037108][ T7020] netlink: 'syz.3.8049': attribute type 1 has an invalid length. [ 489.090090][ T7020] Falling back ldisc for ttyS3. [ 489.169843][ T7038] geneve3: entered promiscuous mode [ 489.175151][ T7038] geneve3: entered allmulticast mode [ 489.210323][ T7048] lo speed is unknown, defaulting to 1000 [ 489.253420][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.258527][ T7072] random: crng reseeded on system resumption [ 489.267860][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.299864][ T7084] 8021q: adding VLAN 0 to HW filter on device bond6 [ 489.337278][ T7122] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 489.343804][ T7122] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 489.352447][ T7122] vhci_hcd vhci_hcd.0: Device attached [ 489.358627][ T7126] vhci_hcd: connection closed [ 489.358821][ T3595] vhci_hcd: stop threads [ 489.367984][ T3595] vhci_hcd: release socket [ 489.372483][ T3595] vhci_hcd: disconnect device [ 489.523584][ T7135] FAULT_INJECTION: forcing a failure. [ 489.523584][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.536736][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.6.8067 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 489.536765][ T7135] Tainted: [W]=WARN [ 489.536841][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.536854][ T7135] Call Trace: [ 489.536861][ T7135] [ 489.536870][ T7135] __dump_stack+0x1d/0x30 [ 489.536892][ T7135] dump_stack_lvl+0xe8/0x140 [ 489.536912][ T7135] dump_stack+0x15/0x1b [ 489.536979][ T7135] should_fail_ex+0x265/0x280 [ 489.537066][ T7135] should_fail+0xb/0x20 [ 489.537083][ T7135] should_fail_usercopy+0x1a/0x20 [ 489.537104][ T7135] _copy_to_user+0x20/0xa0 [ 489.537129][ T7135] simple_read_from_buffer+0xb5/0x130 [ 489.537199][ T7135] proc_fail_nth_read+0x10e/0x150 [ 489.537224][ T7135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.537250][ T7135] vfs_read+0x1a8/0x770 [ 489.537271][ T7135] ? __pfx_default_wake_function+0x10/0x10 [ 489.537341][ T7135] ? __rcu_read_unlock+0x4f/0x70 [ 489.537358][ T7135] ? __fget_files+0x184/0x1c0 [ 489.537377][ T7135] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 489.537485][ T7135] ksys_read+0xda/0x1a0 [ 489.537503][ T7135] __x64_sys_read+0x40/0x50 [ 489.537521][ T7135] x64_sys_call+0x27bc/0x2ff0 [ 489.537566][ T7135] do_syscall_64+0xd2/0x200 [ 489.537591][ T7135] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 489.537610][ T7135] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 489.537690][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.537712][ T7135] RIP: 0033:0x7ff59629d5fc [ 489.537735][ T7135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.537752][ T7135] RSP: 002b:00007ff594ce6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.537795][ T7135] RAX: ffffffffffffffda RBX: 00007ff5964c6090 RCX: 00007ff59629d5fc [ 489.537810][ T7135] RDX: 000000000000000f RSI: 00007ff594ce60a0 RDI: 0000000000000004 [ 489.537824][ T7135] RBP: 00007ff594ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 489.537837][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.537886][ T7135] R13: 00007ff5964c6128 R14: 00007ff5964c6090 R15: 00007fff652c7b78 [ 489.537901][ T7135] [ 489.869918][ T7150] geneve2: entered promiscuous mode [ 489.875192][ T7150] geneve2: entered allmulticast mode [ 489.919360][ T7142] Falling back ldisc for ttyS3. [ 490.019225][ T7164] 8021q: adding VLAN 0 to HW filter on device bond13 [ 490.035038][ T7162] lo speed is unknown, defaulting to 1000 [ 490.079633][ T7204] random: crng reseeded on system resumption [ 490.109739][ T7232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.119538][ T7232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.168200][ T7238] geneve2: entered promiscuous mode [ 490.174409][ T7238] geneve2: entered allmulticast mode [ 490.348295][ T7251] Falling back ldisc for ttyS3. [ 490.443902][ T7259] lo speed is unknown, defaulting to 1000 [ 490.828600][ T7303] lo speed is unknown, defaulting to 1000 [ 490.914246][ T7334] geneve2: entered promiscuous mode [ 490.919798][ T7334] geneve2: entered allmulticast mode [ 490.933289][ T7331] lo speed is unknown, defaulting to 1000 [ 490.959953][ T7355] random: crng reseeded on system resumption [ 491.257274][ T7386] validate_nla: 4 callbacks suppressed [ 491.257291][ T7386] netlink: 'syz.3.8103': attribute type 1 has an invalid length. [ 491.345369][ T7386] Falling back ldisc for ttyS3. [ 492.159602][ T7416] lo speed is unknown, defaulting to 1000 [ 492.221124][ T7438] __nla_validate_parse: 15 callbacks suppressed [ 492.221140][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8111'. [ 492.242694][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 492.291268][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 492.291284][ T29] audit: type=1326 audit(1755090246.899:29601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 492.334453][ T7438] Falling back ldisc for ttyS3. [ 492.451788][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8114'. [ 492.455487][ T29] audit: type=1326 audit(1755090246.942:29602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd16640d550 code=0x7ffc0000 [ 492.484233][ T29] audit: type=1326 audit(1755090246.942:29603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd16640d550 code=0x7ffc0000 [ 492.507892][ T29] audit: type=1326 audit(1755090246.942:29604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 492.531447][ T29] audit: type=1326 audit(1755090246.942:29605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 492.550522][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8114'. [ 492.554965][ T29] audit: type=1326 audit(1755090246.942:29606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 492.587399][ T29] audit: type=1326 audit(1755090246.942:29607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 492.610937][ T29] audit: type=1326 audit(1755090246.942:29608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.3.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 492.634719][ T29] audit: type=1326 audit(1755090247.028:29609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.4.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 492.658307][ T29] audit: type=1326 audit(1755090247.028:29610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7448 comm="syz.4.8115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 492.732511][ T7469] netlink: 'syz.6.8121': attribute type 1 has an invalid length. [ 492.749889][ T7469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.850351][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8125'. [ 493.003624][ T7527] random: crng reseeded on system resumption [ 493.664459][ T7524] geneve3: entered promiscuous mode [ 493.669779][ T7524] geneve3: entered allmulticast mode [ 493.706525][ T7526] lo speed is unknown, defaulting to 1000 [ 493.757197][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.769666][ T7564] netlink: 'syz.3.8129': attribute type 1 has an invalid length. [ 493.778205][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.791799][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8129'. [ 493.814039][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8130'. [ 493.856934][ T7536] Falling back ldisc for ttyS3. [ 493.909618][ T7585] netlink: 'syz.2.8135': attribute type 1 has an invalid length. [ 493.924986][ T7585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.026003][ T7623] lo speed is unknown, defaulting to 1000 [ 494.086891][ T7643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8136'. [ 494.103911][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8136'. [ 494.207278][ T7643] Falling back ldisc for ttyS3. [ 494.256867][ T7660] geneve2: entered promiscuous mode [ 494.262114][ T7660] geneve2: entered allmulticast mode [ 494.357779][ T7670] lo speed is unknown, defaulting to 1000 [ 494.398572][ T7695] random: crng reseeded on system resumption [ 494.454929][ T7704] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 494.461575][ T7704] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 494.469315][ T7704] vhci_hcd vhci_hcd.0: Device attached [ 494.477643][ T7705] vhci_hcd: connection closed [ 494.478044][ T3582] vhci_hcd: stop threads [ 494.487236][ T3582] vhci_hcd: release socket [ 494.491744][ T3582] vhci_hcd: disconnect device [ 494.637447][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8146'. [ 495.115768][ T7726] netlink: 'syz.2.8150': attribute type 1 has an invalid length. [ 495.130845][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.145975][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.204127][ T7726] Falling back ldisc for ttyS3. [ 495.413249][ T7748] netlink: 'syz.0.8153': attribute type 1 has an invalid length. [ 495.455877][ T7748] Falling back ldisc for ttyS3. [ 495.683857][ T7788] rdma_rxe: rxe_newlink: failed to add bond0 [ 495.891362][ T7798] lo speed is unknown, defaulting to 1000 [ 496.225517][ T7821] lo speed is unknown, defaulting to 1000 [ 496.261696][ T7833] random: crng reseeded on system resumption [ 496.393664][ T7861] geneve3: entered promiscuous mode [ 496.399115][ T7861] geneve3: entered allmulticast mode [ 496.419158][ T7866] netlink: 'syz.3.8169': attribute type 1 has an invalid length. [ 496.518693][ T7882] rdma_rxe: rxe_newlink: failed to add bond0 [ 496.537021][ T7866] Falling back ldisc for ttyS3. [ 496.560562][ T7886] lo speed is unknown, defaulting to 1000 [ 496.599785][ T7912] random: crng reseeded on system resumption [ 496.599890][ T7911] netlink: 'syz.4.8178': attribute type 1 has an invalid length. [ 496.627357][ T7911] 8021q: adding VLAN 0 to HW filter on device bond9 [ 496.712088][ T7960] lo speed is unknown, defaulting to 1000 [ 496.858622][ T8005] rdma_rxe: rxe_newlink: failed to add bond0 [ 496.986690][ T8007] lo speed is unknown, defaulting to 1000 [ 497.211360][ T8014] __nla_validate_parse: 13 callbacks suppressed [ 497.211444][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8190'. [ 497.230989][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8190'. [ 497.282607][ T8014] Falling back ldisc for ttyS3. [ 497.324292][ T8013] netlink: 'syz.6.8192': attribute type 1 has an invalid length. [ 497.332654][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8192'. [ 497.394722][ T8013] Falling back ldisc for ttyS3. [ 497.546832][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 497.546845][ T29] audit: type=1400 audit(1755090252.543:29707): avc: denied { connect } for pid=8061 comm="syz.2.8199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 497.689284][ T29] audit: type=1326 audit(1755090252.693:29708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 497.713793][ T29] audit: type=1326 audit(1755090252.693:29709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 497.713823][ T29] audit: type=1326 audit(1755090252.693:29710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 497.713848][ T29] audit: type=1326 audit(1755090252.693:29711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 497.713903][ T29] audit: type=1326 audit(1755090252.693:29712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 497.713926][ T29] audit: type=1326 audit(1755090252.693:29713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 497.714053][ T29] audit: type=1326 audit(1755090252.693:29714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd16640ec23 code=0x7ffc0000 [ 497.714073][ T29] audit: type=1326 audit(1755090252.693:29715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd16640d69f code=0x7ffc0000 [ 497.714128][ T29] audit: type=1326 audit(1755090252.693:29716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.8200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd16640ec77 code=0x7ffc0000 [ 497.741872][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8201'. [ 497.799998][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8201'. [ 497.801673][ T8071] lo speed is unknown, defaulting to 1000 [ 497.847888][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8203'. [ 498.038093][ T8067] Falling back ldisc for ttyS3. [ 498.091341][ T8116] netlink: 'syz.3.8206': attribute type 1 has an invalid length. [ 498.100116][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8206'. [ 498.138831][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8208'. [ 498.159349][ T8116] Falling back ldisc for ttyS3. [ 498.712176][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8221'. [ 498.764569][ T8163] Falling back ldisc for ttyS3. [ 499.135808][ T8178] geneve3: entered promiscuous mode [ 499.141512][ T8178] geneve3: entered allmulticast mode [ 499.152336][ T8182] netlink: 'syz.3.8224': attribute type 1 has an invalid length. [ 499.222889][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8224'. [ 499.287059][ T8182] Falling back ldisc for ttyS3. [ 499.338501][ T8202] netlink: 'syz.6.8227': attribute type 1 has an invalid length. [ 499.459691][ T8202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.619490][ T8246] lo speed is unknown, defaulting to 1000 [ 499.794639][ T8290] lo speed is unknown, defaulting to 1000 [ 499.794672][ T8298] random: crng reseeded on system resumption [ 499.842841][ T8301] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 499.849372][ T8301] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 499.857160][ T8301] vhci_hcd vhci_hcd.0: Device attached [ 499.883726][ T8312] vhci_hcd: connection closed [ 499.883999][ T3582] vhci_hcd: stop threads [ 499.893005][ T3582] vhci_hcd: release socket [ 499.897418][ T3582] vhci_hcd: disconnect device [ 499.919657][ T8329] netlink: 'syz.3.8241': attribute type 1 has an invalid length. [ 499.967543][ T8311] Falling back ldisc for ttyS3. [ 500.701697][ T8383] netlink: 'syz.0.8258': attribute type 1 has an invalid length. [ 500.750050][ T8383] Falling back ldisc for ttyS3. [ 501.064400][ T8415] netlink: 'syz.0.8264': attribute type 1 has an invalid length. [ 501.080057][ T8415] 8021q: adding VLAN 0 to HW filter on device bond14 [ 501.287592][ T8463] lo speed is unknown, defaulting to 1000 [ 501.541613][ T8499] lo speed is unknown, defaulting to 1000 [ 501.625986][ T8492] Falling back ldisc for ttyS3. [ 502.186933][ T8529] lo speed is unknown, defaulting to 1000 [ 502.260171][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 502.260187][ T29] audit: type=1326 audit(1755090257.607:29862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.356478][ T8556] netlink: 'syz.2.8275': attribute type 1 has an invalid length. [ 502.375914][ T29] audit: type=1326 audit(1755090257.639:29863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.399480][ T29] audit: type=1326 audit(1755090257.639:29864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8545 comm="syz.2.8274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.445865][ T8556] 8021q: adding VLAN 0 to HW filter on device bond8 [ 502.499674][ T8593] geneve3: entered promiscuous mode [ 502.505020][ T8593] geneve3: entered allmulticast mode [ 502.537183][ T29] audit: type=1326 audit(1755090257.832:29865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.560891][ T29] audit: type=1326 audit(1755090257.832:29866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.584534][ T29] audit: type=1326 audit(1755090257.832:29867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.608056][ T29] audit: type=1326 audit(1755090257.832:29868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.632278][ T29] audit: type=1326 audit(1755090257.832:29869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.655924][ T29] audit: type=1326 audit(1755090257.832:29870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.679552][ T29] audit: type=1326 audit(1755090257.832:29871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.2.8275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 502.988839][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.997772][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.036798][ T8630] __nla_validate_parse: 10 callbacks suppressed [ 503.036853][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8284'. [ 503.228872][ T8637] lo speed is unknown, defaulting to 1000 [ 503.524126][ T8662] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 503.530660][ T8662] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 503.538961][ T8662] vhci_hcd vhci_hcd.0: Device attached [ 503.552966][ T8663] vhci_hcd: connection closed [ 503.553197][ T3595] vhci_hcd: stop threads [ 503.562329][ T3595] vhci_hcd: release socket [ 503.566891][ T3595] vhci_hcd: disconnect device [ 503.625737][ T8667] netlink: 'syz.2.8290': attribute type 1 has an invalid length. [ 503.640623][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8290'. [ 503.723154][ T8667] Falling back ldisc for ttyS3. [ 503.743282][ T8675] lo speed is unknown, defaulting to 1000 [ 503.786519][ T8700] random: crng reseeded on system resumption [ 503.938755][ T8708] lo speed is unknown, defaulting to 1000 [ 504.256525][ T8741] netlink: 'syz.4.8298': attribute type 1 has an invalid length. [ 504.272679][ T8741] 8021q: adding VLAN 0 to HW filter on device bond10 [ 504.310889][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.319910][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.866054][ T8795] netlink: 'syz.6.8304': attribute type 1 has an invalid length. [ 504.874367][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8304'. [ 504.916429][ T8794] Falling back ldisc for ttyS3. [ 505.091150][ T8808] lo speed is unknown, defaulting to 1000 [ 505.147286][ T8828] random: crng reseeded on system resumption [ 505.162725][ T8831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.220882][ T8831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.284419][ T8831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.356948][ T8831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.431678][ T3581] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.458038][ T3581] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.475972][ T3581] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.493271][ T3581] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.631320][ T8870] netlink: 'syz.4.8314': attribute type 1 has an invalid length. [ 505.648774][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8314'. [ 505.727549][ T8870] Falling back ldisc for ttyS3. [ 505.871843][ T8880] netlink: 'syz.4.8317': attribute type 1 has an invalid length. [ 505.891000][ T8880] 8021q: adding VLAN 0 to HW filter on device bond11 [ 506.470769][ T8932] geneve2: entered promiscuous mode [ 506.476187][ T8932] geneve2: entered allmulticast mode [ 506.553450][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8328'. [ 506.598485][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8328'. [ 506.824383][ T8979] netlink: 'syz.2.8334': attribute type 1 has an invalid length. [ 506.834462][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8334'. [ 506.894276][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8336'. [ 506.904342][ T8979] Falling back ldisc for ttyS3. [ 507.569664][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 507.569679][ T29] audit: type=1326 audit(1755090263.293:30110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.0.8337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.599949][ T29] audit: type=1326 audit(1755090263.293:30111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.0.8337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.623730][ T29] audit: type=1326 audit(1755090263.293:30112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8995 comm="syz.0.8337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.649429][ T9002] netlink: 'syz.0.8340': attribute type 1 has an invalid length. [ 507.667661][ T9002] 8021q: adding VLAN 0 to HW filter on device bond15 [ 507.678717][ T29] audit: type=1326 audit(1755090263.411:30113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.702722][ T29] audit: type=1326 audit(1755090263.411:30114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.726365][ T29] audit: type=1326 audit(1755090263.411:30115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.750018][ T29] audit: type=1326 audit(1755090263.411:30116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.774026][ T29] audit: type=1326 audit(1755090263.411:30117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.797593][ T29] audit: type=1326 audit(1755090263.411:30118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.821194][ T29] audit: type=1326 audit(1755090263.411:30119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9001 comm="syz.0.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 507.994937][ T9054] netlink: 'syz.4.8347': attribute type 1 has an invalid length. [ 508.015710][ T9054] 8021q: adding VLAN 0 to HW filter on device bond12 [ 508.096281][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8354'. [ 508.134620][ T9107] netlink: 'syz.6.8355': attribute type 1 has an invalid length. [ 508.224220][ T9107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 508.365324][ T9159] netlink: 'syz.3.8360': attribute type 1 has an invalid length. [ 508.379927][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8356'. [ 508.410726][ T9159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 508.596563][ T9207] netlink: 'syz.3.8366': attribute type 1 has an invalid length. [ 508.631955][ T9207] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.012261][ T9267] lo speed is unknown, defaulting to 1000 [ 509.290279][ T9307] netlink: 'syz.6.8378': attribute type 1 has an invalid length. [ 509.298706][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8377'. [ 509.322830][ T9307] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.421114][ T9348] lo speed is unknown, defaulting to 1000 [ 509.458595][ T9371] random: crng reseeded on system resumption [ 509.684079][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8388'. [ 509.749990][ T9391] netlink: 'syz.6.8390': attribute type 1 has an invalid length. [ 509.758469][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8390'. [ 509.821931][ T9390] Falling back ldisc for ttyS3. [ 509.917125][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.926164][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.188564][ T9409] lo speed is unknown, defaulting to 1000 [ 510.570247][ T9447] FAULT_INJECTION: forcing a failure. [ 510.570247][ T9447] name failslab, interval 1, probability 0, space 0, times 0 [ 510.583069][ T9447] CPU: 1 UID: 0 PID: 9447 Comm: syz.6.8402 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 510.583125][ T9447] Tainted: [W]=WARN [ 510.583131][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.583142][ T9447] Call Trace: [ 510.583147][ T9447] [ 510.583170][ T9447] __dump_stack+0x1d/0x30 [ 510.583260][ T9447] dump_stack_lvl+0xe8/0x140 [ 510.583281][ T9447] dump_stack+0x15/0x1b [ 510.583298][ T9447] should_fail_ex+0x265/0x280 [ 510.583321][ T9447] should_failslab+0x8c/0xb0 [ 510.583421][ T9447] kmem_cache_alloc_noprof+0x50/0x310 [ 510.583447][ T9447] ? audit_log_start+0x365/0x6c0 [ 510.583474][ T9447] audit_log_start+0x365/0x6c0 [ 510.583503][ T9447] audit_seccomp+0x48/0x100 [ 510.583590][ T9447] ? __seccomp_filter+0x68c/0x10d0 [ 510.583677][ T9447] __seccomp_filter+0x69d/0x10d0 [ 510.583699][ T9447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 510.583722][ T9447] ? vfs_write+0x7e8/0x960 [ 510.583805][ T9447] __secure_computing+0x82/0x150 [ 510.583823][ T9447] syscall_trace_enter+0xcf/0x1e0 [ 510.583879][ T9447] do_syscall_64+0xac/0x200 [ 510.583905][ T9447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.583929][ T9447] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.583952][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.583984][ T9447] RIP: 0033:0x7ff59629ebe9 [ 510.584000][ T9447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.584018][ T9447] RSP: 002b:00007ff594d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 510.584036][ T9447] RAX: ffffffffffffffda RBX: 00007ff5964c5fa0 RCX: 00007ff59629ebe9 [ 510.584047][ T9447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 510.584058][ T9447] RBP: 00007ff594d07090 R08: 0000000000000000 R09: 0000000000000000 [ 510.584086][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.584099][ T9447] R13: 00007ff5964c6038 R14: 00007ff5964c5fa0 R15: 00007fff652c7b78 [ 510.584119][ T9447] [ 510.814429][ T9447] lo speed is unknown, defaulting to 1000 [ 510.861875][ T9472] netlink: 'syz.0.8403': attribute type 1 has an invalid length. [ 510.874325][ T9469] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8404'. [ 510.890067][ T9472] 8021q: adding VLAN 0 to HW filter on device bond16 [ 510.938119][ T9469] lo speed is unknown, defaulting to 1000 [ 510.967675][ T9522] binfmt_misc: register: failed to install interpreter file ./file2 [ 510.994950][ T9536] netlink: 'syz.6.8409': attribute type 1 has an invalid length. [ 511.015695][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8409'. [ 511.102525][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8412'. [ 511.114870][ T9536] Falling back ldisc for ttyS3. [ 511.146321][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8412'. [ 511.162799][ T9580] netlink: 'syz.4.8415': attribute type 1 has an invalid length. [ 511.191165][ T9580] 8021q: adding VLAN 0 to HW filter on device bond13 [ 511.225170][ T9584] 8021q: adding VLAN 0 to HW filter on device bond8 [ 511.310332][ T9665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 511.405370][ T9715] lo speed is unknown, defaulting to 1000 [ 511.483154][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8427'. [ 511.534447][ T9733] Falling back ldisc for ttyS3. [ 511.567660][ T9758] 8021q: adding VLAN 0 to HW filter on device bond9 [ 511.620959][ T9807] lo speed is unknown, defaulting to 1000 [ 511.627252][ T9746] Falling back ldisc for ttyS3. [ 511.660253][ T9830] random: crng reseeded on system resumption [ 511.690903][ T9832] 8021q: adding VLAN 0 to HW filter on device bond9 [ 511.906861][ T9883] Falling back ldisc for ttyS3. [ 511.917200][ T9900] 8021q: adding VLAN 0 to HW filter on device bond10 [ 511.924519][ T9936] FAULT_INJECTION: forcing a failure. [ 511.924519][ T9936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.937657][ T9936] CPU: 1 UID: 0 PID: 9936 Comm: syz.6.8445 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 511.937689][ T9936] Tainted: [W]=WARN [ 511.937695][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.937705][ T9936] Call Trace: [ 511.937710][ T9936] [ 511.937739][ T9936] __dump_stack+0x1d/0x30 [ 511.937761][ T9936] dump_stack_lvl+0xe8/0x140 [ 511.937779][ T9936] dump_stack+0x15/0x1b [ 511.937830][ T9936] should_fail_ex+0x265/0x280 [ 511.937850][ T9936] should_fail+0xb/0x20 [ 511.937867][ T9936] should_fail_usercopy+0x1a/0x20 [ 511.937888][ T9936] strncpy_from_user+0x25/0x230 [ 511.937935][ T9936] strncpy_from_user_nofault+0x68/0xf0 [ 511.937957][ T9936] bpf_probe_read_user_str+0x2a/0x70 [ 511.937986][ T9936] bpf_prog_860dce4575eb4f0a+0x3e/0x44 [ 511.938003][ T9936] bpf_trace_run2+0x104/0x1c0 [ 511.938024][ T9936] ? __rcu_read_unlock+0x4f/0x70 [ 511.938077][ T9936] ? __pfx___bpf_trace_sys_enter+0x10/0x10 [ 511.938101][ T9936] __bpf_trace_sys_enter+0x10/0x30 [ 511.938122][ T9936] __traceiter_sys_enter+0x4d/0x80 [ 511.938212][ T9936] trace_sys_enter+0x86/0xf0 [ 511.938234][ T9936] syscall_trace_enter+0x13e/0x1e0 [ 511.938331][ T9936] do_syscall_64+0xac/0x200 [ 511.938353][ T9936] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 511.938371][ T9936] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 511.938414][ T9936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.938432][ T9936] RIP: 0033:0x7ff59629ebe9 [ 511.938445][ T9936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.938480][ T9936] RSP: 002b:00007ff594d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 511.938496][ T9936] RAX: ffffffffffffffda RBX: 00007ff5964c5fa0 RCX: 00007ff59629ebe9 [ 511.938507][ T9936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 511.938517][ T9936] RBP: 00007ff594d07090 R08: 0000000000000000 R09: 0000000000000003 [ 511.938563][ T9936] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000001 [ 511.938639][ T9936] R13: 00007ff5964c6038 R14: 00007ff5964c5fa0 R15: 00007fff652c7b78 [ 511.938655][ T9936] [ 512.279425][ T9945] Falling back ldisc for ttyS3. [ 512.321984][ T9958] validate_nla: 7 callbacks suppressed [ 512.322061][ T9958] netlink: 'syz.2.8450': attribute type 1 has an invalid length. [ 512.341674][ T9958] 8021q: adding VLAN 0 to HW filter on device bond11 [ 512.352463][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 512.352476][ T29] audit: type=1326 audit(1755090268.421:30552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.388407][ T29] audit: type=1326 audit(1755090268.421:30553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.412011][ T29] audit: type=1326 audit(1755090268.432:30554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.417186][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.435483][ T29] audit: type=1326 audit(1755090268.432:30555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.435511][ T29] audit: type=1326 audit(1755090268.432:30556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.444421][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.467374][ T29] audit: type=1326 audit(1755090268.432:30557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.522862][ T29] audit: type=1326 audit(1755090268.432:30558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.546314][ T29] audit: type=1326 audit(1755090268.432:30559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.569795][ T29] audit: type=1326 audit(1755090268.432:30560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.593260][ T29] audit: type=1326 audit(1755090268.432:30561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.2.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806d0ebe9 code=0x7ffc0000 [ 512.665438][ T9999] lo speed is unknown, defaulting to 1000 [ 512.696014][T10021] netlink: 'syz.0.8455': attribute type 2 has an invalid length. [ 512.703845][T10021] netlink: 'syz.0.8455': attribute type 1 has an invalid length. [ 512.707702][T10025] random: crng reseeded on system resumption [ 512.733323][T10021] vlan0: entered promiscuous mode [ 512.771487][T10029] __nla_validate_parse: 8 callbacks suppressed [ 512.771503][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8456'. [ 512.811924][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8456'. [ 512.838147][T10037] netlink: 'syz.0.8457': attribute type 1 has an invalid length. [ 512.852887][T10037] 8021q: adding VLAN 0 to HW filter on device bond17 [ 512.929025][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8461'. [ 512.965733][T10085] netlink: 'syz.0.8462': attribute type 1 has an invalid length. [ 512.982533][T10085] 8021q: adding VLAN 0 to HW filter on device bond18 [ 513.103266][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8467'. [ 513.133101][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8465'. [ 513.133200][T10137] lo speed is unknown, defaulting to 1000 [ 513.172119][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8467'. [ 513.179933][T10166] random: crng reseeded on system resumption [ 513.192860][T10140] Falling back ldisc for ttyS3. [ 513.208728][T10173] netlink: 'syz.0.8470': attribute type 1 has an invalid length. [ 513.226596][T10173] 8021q: adding VLAN 0 to HW filter on device bond19 [ 513.478004][T10222] netlink: 'syz.4.8478': attribute type 1 has an invalid length. [ 513.495340][T10222] 8021q: adding VLAN 0 to HW filter on device bond14 [ 513.522788][T10257] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 513.569441][T10261] netlink: 'syz.4.8481': attribute type 1 has an invalid length. [ 513.586215][T10261] 8021q: adding VLAN 0 to HW filter on device bond15 [ 513.612748][T10296] netlink: 'syz.4.8482': attribute type 1 has an invalid length. [ 513.626864][T10296] 8021q: adding VLAN 0 to HW filter on device bond16 [ 513.722792][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8484'. [ 513.772381][T10333] Falling back ldisc for ttyS3. [ 513.812725][T10342] lo speed is unknown, defaulting to 1000 [ 513.852513][T10367] random: crng reseeded on system resumption [ 514.005272][T10382] netlink: 'syz.2.8493': attribute type 1 has an invalid length. [ 514.020330][T10382] 8021q: adding VLAN 0 to HW filter on device bond12 [ 514.038561][T10380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8492'. [ 514.054053][T10380] team0: Port device geneve1 added [ 514.082489][T10417] 8021q: adding VLAN 0 to HW filter on device bond13 [ 514.089468][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.089663][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.220248][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8497'. [ 514.294689][T10464] Falling back ldisc for ttyS3. [ 514.331289][T10480] FAULT_INJECTION: forcing a failure. [ 514.331289][T10480] name failslab, interval 1, probability 0, space 0, times 0 [ 514.344804][T10480] CPU: 1 UID: 0 PID: 10480 Comm: syz.4.8502 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 514.344903][T10480] Tainted: [W]=WARN [ 514.344918][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.344981][T10480] Call Trace: [ 514.344987][T10480] [ 514.344992][T10480] __dump_stack+0x1d/0x30 [ 514.345011][T10480] dump_stack_lvl+0xe8/0x140 [ 514.345086][T10480] dump_stack+0x15/0x1b [ 514.345103][T10480] should_fail_ex+0x265/0x280 [ 514.345121][T10480] should_failslab+0x8c/0xb0 [ 514.345134][T10480] kmem_cache_alloc_noprof+0x50/0x310 [ 514.345150][T10480] ? getname_flags+0x80/0x3b0 [ 514.345212][T10480] getname_flags+0x80/0x3b0 [ 514.345227][T10480] __x64_sys_renameat+0x50/0x80 [ 514.345240][T10480] x64_sys_call+0x25e2/0x2ff0 [ 514.345254][T10480] do_syscall_64+0xd2/0x200 [ 514.345349][T10480] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 514.345364][T10480] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 514.345377][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.345416][T10480] RIP: 0033:0x7fe9b47bebe9 [ 514.345481][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.345529][T10480] RSP: 002b:00007fe9b3227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 514.345541][T10480] RAX: ffffffffffffffda RBX: 00007fe9b49e5fa0 RCX: 00007fe9b47bebe9 [ 514.345548][T10480] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 514.345556][T10480] RBP: 00007fe9b3227090 R08: 0000000000000000 R09: 0000000000000000 [ 514.345563][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.345569][T10480] R13: 00007fe9b49e6038 R14: 00007fe9b49e5fa0 R15: 00007fffacfb9788 [ 514.345585][T10480] [ 514.556864][T10483] lo speed is unknown, defaulting to 1000 [ 514.557570][T10484] 9pnet_fd: Insufficient options for proto=fd [ 514.598342][T10507] random: crng reseeded on system resumption [ 514.645731][T10511] 8021q: adding VLAN 0 to HW filter on device bond20 [ 514.767341][T10548] 8021q: adding VLAN 0 to HW filter on device bond10 [ 514.792821][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.802689][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.821791][T10587] 8021q: adding VLAN 0 to HW filter on device bond11 [ 514.869449][T10622] lo speed is unknown, defaulting to 1000 [ 515.225480][T10652] lo speed is unknown, defaulting to 1000 [ 515.386934][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8515'. [ 515.613429][T10685] 8021q: adding VLAN 0 to HW filter on device bond14 [ 515.803951][T10728] Falling back ldisc for ttyS3. [ 515.862388][T10737] 8021q: adding VLAN 0 to HW filter on device bond17 [ 516.012702][T10783] geneve2: entered promiscuous mode [ 516.018043][T10783] geneve2: entered allmulticast mode [ 516.588869][T10814] 8021q: adding VLAN 0 to HW filter on device bond21 [ 516.799551][T10860] lo speed is unknown, defaulting to 1000 [ 518.133295][T10897] lo speed is unknown, defaulting to 1000 [ 518.482630][T10887] Falling back ldisc for ttyS3. [ 518.773944][T10926] validate_nla: 9 callbacks suppressed [ 518.773960][T10926] netlink: 'syz.0.8544': attribute type 1 has an invalid length. [ 518.815459][T10926] 8021q: adding VLAN 0 to HW filter on device bond22 [ 518.885872][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 518.885887][ T29] audit: type=1326 audit(1755090275.427:30919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.011686][T10964] __nla_validate_parse: 3 callbacks suppressed [ 519.011703][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8543'. [ 519.033113][ T29] audit: type=1326 audit(1755090275.470:30920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.056813][ T29] audit: type=1326 audit(1755090275.470:30921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.081355][ T29] audit: type=1326 audit(1755090275.470:30922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.104958][ T29] audit: type=1326 audit(1755090275.470:30923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.128587][ T29] audit: type=1326 audit(1755090275.470:30924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.152673][ T29] audit: type=1326 audit(1755090275.470:30925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.176407][ T29] audit: type=1326 audit(1755090275.470:30926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.199962][ T29] audit: type=1326 audit(1755090275.470:30927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.223883][ T29] audit: type=1326 audit(1755090275.470:30928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.0.8544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f215ba6ebe9 code=0x7ffc0000 [ 519.330706][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.339861][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.619463][T10990] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 519.626004][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 519.633771][T10990] vhci_hcd vhci_hcd.0: Device attached [ 519.639975][T10991] vhci_hcd: connection closed [ 519.640074][ T3613] vhci_hcd: stop threads [ 519.649178][ T3613] vhci_hcd: release socket [ 519.653611][ T3613] vhci_hcd: disconnect device [ 519.861330][T10998] netlink: 'syz.4.8557': attribute type 1 has an invalid length. [ 519.878583][T10998] 8021q: adding VLAN 0 to HW filter on device bond18 [ 519.908007][T11033] netlink: 'syz.4.8558': attribute type 1 has an invalid length. [ 519.916539][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8558'. [ 519.968921][T11033] Falling back ldisc for ttyS3. [ 520.072807][T11045] netlink: 'syz.4.8561': attribute type 1 has an invalid length. [ 520.087390][T11045] 8021q: adding VLAN 0 to HW filter on device bond19 [ 520.141348][T11084] netlink: 'syz.4.8564': attribute type 1 has an invalid length. [ 520.148643][T11084] 8021q: adding VLAN 0 to HW filter on device bond20 [ 520.212529][T11127] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8569'. [ 520.256346][T11135] netlink: 'syz.3.8571': attribute type 1 has an invalid length. [ 520.257184][T11134] netlink: 'syz.4.8572': attribute type 1 has an invalid length. [ 520.265215][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8571'. [ 520.275892][T11133] netlink: 'syz.6.8573': attribute type 1 has an invalid length. [ 520.298942][T11133] 8021q: adding VLAN 0 to HW filter on device bond12 [ 520.313011][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8572'. [ 520.337704][T11176] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 520.344288][T11176] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 520.352022][T11176] vhci_hcd vhci_hcd.0: Device attached [ 520.358464][T11177] vhci_hcd: connection closed [ 520.358729][ T3581] vhci_hcd: stop threads [ 520.367794][ T3581] vhci_hcd: release socket [ 520.372248][ T3581] vhci_hcd: disconnect device [ 520.372407][T11135] Falling back ldisc for ttyS3. [ 520.532023][T11184] netlink: 'syz.3.8576': attribute type 1 has an invalid length. [ 520.546022][T11184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 520.637181][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'. [ 520.646218][T11227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8581'. [ 520.729026][T11242] netlink: 'syz.4.8584': attribute type 1 has an invalid length. [ 520.737681][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8584'. [ 520.771681][T11250] 8021q: adding VLAN 0 to HW filter on device bond23 [ 520.789072][T11242] Falling back ldisc for ttyS3. [ 520.810088][T11286] 8021q: adding VLAN 0 to HW filter on device bond24 [ 520.953282][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8595'. [ 520.962800][T11340] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8595'. [ 520.977017][T11342] 8021q: adding VLAN 0 to HW filter on device bond21 [ 520.989077][T11340] geneve3: entered promiscuous mode [ 520.994371][T11340] geneve3: entered allmulticast mode [ 521.078579][T11384] 8021q: adding VLAN 0 to HW filter on device bond13 [ 521.099410][T11328] lo speed is unknown, defaulting to 1000 [ 521.132567][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.175422][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.347241][T11328] chnl_net:caif_netlink_parms(): no params data found [ 521.402897][T11328] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.410145][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.418303][T11328] bridge_slave_0: entered allmulticast mode [ 521.425939][T11328] bridge_slave_0: entered promiscuous mode [ 521.433300][T11328] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.440385][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.447893][T11328] bridge_slave_1: entered allmulticast mode [ 521.456440][T11328] bridge_slave_1: entered promiscuous mode [ 521.496237][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.516868][T11599] lo speed is unknown, defaulting to 1000 [ 521.542209][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.586728][T11328] team0: Port device team_slave_0 added [ 521.619844][T11328] team0: Port device team_slave_1 added [ 521.676444][T11328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.683415][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.709422][T11328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.759354][T11328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.766336][T11328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.792287][T11328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.885992][T11328] hsr_slave_0: entered promiscuous mode [ 521.901918][T11328] hsr_slave_1: entered promiscuous mode [ 521.917115][T11328] debugfs: 'hsr0' already exists in 'hsr' [ 521.922855][T11328] Cannot create hsr debugfs directory [ 521.943394][T11733] 8021q: adding VLAN 0 to HW filter on device bond10 [ 522.078261][T11328] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.167936][T11328] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.226014][T11328] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.251486][T11850] lo speed is unknown, defaulting to 1000 [ 522.287977][T11875] random: crng reseeded on system resumption [ 522.301431][T11328] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.423954][T11328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 522.455690][T11328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 522.503337][T11894] geneve2: entered promiscuous mode [ 522.508754][T11894] geneve2: entered allmulticast mode [ 522.518147][T11328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.534909][T11328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 522.744896][T11911] 8021q: adding VLAN 0 to HW filter on device bond15 [ 522.868148][T11328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.910697][T11954] 8021q: adding VLAN 0 to HW filter on device bond14 [ 522.942230][T11328] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.965440][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.972651][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.018943][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.026137][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.071249][T11328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.081785][T11328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.216797][T11328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.375223][T11328] veth0_vlan: entered promiscuous mode [ 523.378869][T11328] veth1_vlan: entered promiscuous mode [ 523.405488][T11328] veth0_macvtap: entered promiscuous mode [ 523.414160][T11328] veth1_macvtap: entered promiscuous mode [ 523.429771][T11328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.445351][T11328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.462334][ T3582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.479655][ T3582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.496610][ T3595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.505783][ T3595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.531444][T12031] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 523.537975][T12031] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 523.545779][T12031] vhci_hcd vhci_hcd.0: Device attached [ 523.562821][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 523.562867][ T29] audit: type=1326 audit(1755090280.449:31222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.0.8590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76411ed84a code=0x7ffc0000 [ 523.592927][T12032] vhci_hcd: connection closed [ 523.593286][ T29] audit: type=1326 audit(1755090280.449:31223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.0.8590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 523.593711][ T3582] vhci_hcd: stop threads [ 523.598037][ T29] audit: type=1326 audit(1755090280.449:31224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.0.8590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 523.649839][ T3582] vhci_hcd: release socket [ 523.649850][ T3582] vhci_hcd: disconnect device [ 523.660200][T12024] Falling back ldisc for ttyS3. [ 523.758621][T12049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.771140][T12049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.777850][T12048] lo speed is unknown, defaulting to 1000 [ 523.793670][ T29] audit: type=1326 audit(1755090280.706:31225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 523.823020][T12076] random: crng reseeded on system resumption [ 523.834518][ T29] audit: type=1326 audit(1755090280.706:31226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 523.858228][ T29] audit: type=1326 audit(1755090280.706:31227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 523.882954][ T29] audit: type=1326 audit(1755090280.706:31228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.6.8643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59629ebe9 code=0x7ffc0000 [ 523.930856][T12084] validate_nla: 7 callbacks suppressed [ 523.930870][T12084] netlink: 'syz.6.8644': attribute type 1 has an invalid length. [ 523.944768][T12084] __nla_validate_parse: 8 callbacks suppressed [ 523.944784][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8644'. [ 524.007132][T12084] Falling back ldisc for ttyS3. [ 524.063368][ T29] audit: type=1326 audit(1755090280.996:31229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12095 comm="syz.0.8646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 524.105764][ T29] audit: type=1326 audit(1755090281.017:31230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12095 comm="syz.0.8646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 524.129650][ T29] audit: type=1326 audit(1755090281.017:31231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12095 comm="syz.0.8646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 524.267190][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8648'. [ 524.278051][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8648'. [ 524.289674][T12105] dummy0: entered promiscuous mode [ 524.368262][T12105] Falling back ldisc for ttyS3. [ 524.447320][T12119] lo speed is unknown, defaulting to 1000 [ 524.515814][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8653'. [ 524.541654][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8653'. [ 524.589247][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.598828][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.629807][T12117] Falling back ldisc for ttyS3. [ 524.803174][T12168] netlink: 'syz.6.8658': attribute type 1 has an invalid length. [ 524.832717][T12168] 8021q: adding VLAN 0 to HW filter on device bond15 [ 524.920694][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.931503][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.967671][T12218] netlink: 'syz.6.8661': attribute type 1 has an invalid length. [ 524.977371][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8661'. [ 525.036244][T12229] netlink: 'syz.4.8663': attribute type 1 has an invalid length. [ 525.044819][T12218] Falling back ldisc for ttyS3. [ 525.054296][T12229] 8021q: adding VLAN 0 to HW filter on device bond22 [ 525.086281][T12266] netlink: 'syz.4.8664': attribute type 1 has an invalid length. [ 525.105841][T12266] 8021q: adding VLAN 0 to HW filter on device bond23 [ 525.177825][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.180987][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8668'. [ 525.190171][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.239331][T12325] netlink: 'syz.6.8670': attribute type 1 has an invalid length. [ 525.257748][T12325] 8021q: adding VLAN 0 to HW filter on device bond16 [ 525.572368][T12376] lo speed is unknown, defaulting to 1000 [ 525.801048][T12404] netlink: 'syz.4.8677': attribute type 1 has an invalid length. [ 525.952865][T12404] Falling back ldisc for ttyS3. [ 526.152979][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8682'. [ 526.358591][T12427] netlink: 'syz.6.8684': attribute type 1 has an invalid length. [ 526.382005][T12427] 8021q: adding VLAN 0 to HW filter on device bond17 [ 526.470201][T12474] lo speed is unknown, defaulting to 1000 [ 526.514716][T12505] random: crng reseeded on system resumption [ 526.621500][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8694'. [ 526.678305][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8694'. [ 526.687372][T12522] bridge_slave_1: left allmulticast mode [ 526.693195][T12522] bridge_slave_1: left promiscuous mode [ 526.698835][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.717420][T12522] bridge_slave_0: left allmulticast mode [ 526.723095][T12522] bridge_slave_0: left promiscuous mode [ 526.728822][T12522] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.752142][T12533] netlink: 'syz.6.8696': attribute type 1 has an invalid length. [ 526.799941][T12533] 8021q: adding VLAN 0 to HW filter on device bond18 [ 526.880570][T12583] netlink: 'syz.2.8698': attribute type 1 has an invalid length. [ 526.996637][T12583] Falling back ldisc for ttyS3. [ 527.852055][T12685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.860730][T12685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.945725][T12688] lo speed is unknown, defaulting to 1000 [ 528.370160][T12717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.384034][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 528.384047][ T29] audit: type=1326 audit(1755090285.620:31398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.414334][ T29] audit: type=1326 audit(1755090285.620:31399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.437978][ T29] audit: type=1326 audit(1755090285.620:31400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.462026][ T29] audit: type=1326 audit(1755090285.620:31401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.485715][ T29] audit: type=1326 audit(1755090285.620:31402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.509431][ T29] audit: type=1326 audit(1755090285.620:31403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.533227][ T29] audit: type=1326 audit(1755090285.620:31404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.557133][ T29] audit: type=1326 audit(1755090285.620:31405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.580942][ T29] audit: type=1326 audit(1755090285.641:31406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12715 comm="syz.0.8719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76411eebe9 code=0x7ffc0000 [ 528.642014][ T29] audit: type=1326 audit(1755090285.899:31407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12761 comm="syz.4.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 528.676037][T12753] Falling back ldisc for ttyS3. [ 528.724229][T12767] __nla_validate_parse: 4 callbacks suppressed [ 528.724245][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8712'. [ 528.728281][T12778] lo speed is unknown, defaulting to 1000 [ 528.769260][T12791] random: crng reseeded on system resumption [ 528.847752][T12814] validate_nla: 1 callbacks suppressed [ 528.847765][T12814] netlink: 'syz.6.8721': attribute type 1 has an invalid length. [ 528.885506][T12814] 8021q: adding VLAN 0 to HW filter on device bond19 [ 528.915779][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.926206][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.021220][T12861] lo speed is unknown, defaulting to 1000 [ 529.324842][T12888] netlink: 'syz.3.8726': attribute type 1 has an invalid length. [ 529.376851][T12888] 8021q: adding VLAN 0 to HW filter on device bond11 [ 529.409173][T12925] lo speed is unknown, defaulting to 1000 [ 529.736775][T12961] netlink: 'syz.2.8733': attribute type 1 has an invalid length. [ 529.761216][T12961] 8021q: adding VLAN 0 to HW filter on device bond16 [ 529.778010][T13001] netlink: 'syz.4.8732': attribute type 1 has an invalid length. [ 529.798773][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8732'. [ 529.803589][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8731'. [ 529.857877][T13001] Falling back ldisc for ttyS3. [ 529.911916][T13016] netlink: 'syz.6.8735': attribute type 1 has an invalid length. [ 529.922895][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8735'. [ 529.979337][T13012] Falling back ldisc for ttyS3. [ 530.037907][T13018] netlink: 'syz.2.8736': attribute type 1 has an invalid length. [ 530.046214][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8736'. [ 530.091222][T13018] Falling back ldisc for ttyS3. [ 530.114870][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.124394][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.314191][T13057] netlink: 'syz.3.8744': attribute type 1 has an invalid length. [ 530.336200][T13057] 8021q: adding VLAN 0 to HW filter on device bond12 [ 530.371341][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8745'. [ 530.395396][T13096] lo speed is unknown, defaulting to 1000 [ 530.611214][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8745'. [ 530.747458][T13129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 530.753992][T13129] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 530.761709][T13129] vhci_hcd vhci_hcd.0: Device attached [ 530.794480][T13130] vhci_hcd: connection closed [ 530.794615][ T3581] vhci_hcd: stop threads [ 530.803628][ T3581] vhci_hcd: release socket [ 530.808029][ T3581] vhci_hcd: disconnect device [ 530.826526][T13135] netlink: 'syz.2.8750': attribute type 1 has an invalid length. [ 530.842490][T13135] 8021q: adding VLAN 0 to HW filter on device bond17 [ 530.971959][T13186] netlink: 'syz.4.8755': attribute type 1 has an invalid length. [ 530.982469][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8755'. [ 531.020060][T13188] geneve2: entered promiscuous mode [ 531.025439][T13188] geneve2: entered allmulticast mode [ 531.088246][T13186] Falling back ldisc for ttyS3. [ 531.105458][T13203] netlink: 'syz.3.8759': attribute type 1 has an invalid length. [ 531.113711][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8759'. [ 531.153476][T13200] Falling back ldisc for ttyS3. [ 531.262210][T13211] FAULT_INJECTION: forcing a failure. [ 531.262210][T13211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.275299][T13211] CPU: 1 UID: 0 PID: 13211 Comm: syz.0.8761 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 531.275397][T13211] Tainted: [W]=WARN [ 531.275403][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.275414][T13211] Call Trace: [ 531.275422][T13211] [ 531.275431][T13211] __dump_stack+0x1d/0x30 [ 531.275453][T13211] dump_stack_lvl+0xe8/0x140 [ 531.275469][T13211] dump_stack+0x15/0x1b [ 531.275633][T13211] should_fail_ex+0x265/0x280 [ 531.275655][T13211] should_fail+0xb/0x20 [ 531.275712][T13211] should_fail_usercopy+0x1a/0x20 [ 531.275801][T13211] _copy_from_user+0x1c/0xb0 [ 531.275824][T13211] ___sys_sendmsg+0xc1/0x1d0 [ 531.275862][T13211] __x64_sys_sendmsg+0xd4/0x160 [ 531.275887][T13211] x64_sys_call+0x191e/0x2ff0 [ 531.275905][T13211] do_syscall_64+0xd2/0x200 [ 531.275926][T13211] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 531.276014][T13211] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 531.276100][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.276119][T13211] RIP: 0033:0x7f76411eebe9 [ 531.276132][T13211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.276147][T13211] RSP: 002b:00007f763fc57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.276166][T13211] RAX: ffffffffffffffda RBX: 00007f7641415fa0 RCX: 00007f76411eebe9 [ 531.276176][T13211] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 531.276261][T13211] RBP: 00007f763fc57090 R08: 0000000000000000 R09: 0000000000000000 [ 531.276274][T13211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.276325][T13211] R13: 00007f7641416038 R14: 00007f7641415fa0 R15: 00007ffc4ab382b8 [ 531.276336][T13211] [ 531.476528][T13213] 8021q: adding VLAN 0 to HW filter on device bond24 [ 531.532555][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8766'. [ 531.636753][T13269] tipc: Started in network mode [ 531.641729][T13269] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 531.648901][T13269] tipc: Enabled bearer , priority 0 [ 531.856418][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.865929][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.350965][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.358592][T13290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.369430][T13290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.376923][T13290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.615074][T13304] lo speed is unknown, defaulting to 1000 [ 532.692503][ T10] tipc: Node number set to 11578026 [ 532.729958][T13327] lo speed is unknown, defaulting to 1000 [ 533.060236][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 533.060251][ T29] audit: type=1326 audit(1755090290.641:31677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13354 comm="syz.0.8785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76411eebe9 code=0x0 [ 533.455852][T13374] Falling back ldisc for ttyS3. [ 533.488654][T13389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.497349][T13389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.729354][T13445] lo speed is unknown, defaulting to 1000 [ 533.746364][T13452] validate_nla: 2 callbacks suppressed [ 533.746377][T13452] netlink: 'syz.3.8799': attribute type 1 has an invalid length. [ 533.780564][T13452] 8021q: adding VLAN 0 to HW filter on device bond13 [ 533.797447][ T29] audit: type=1326 audit(1755090291.435:31678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.821133][ T29] audit: type=1326 audit(1755090291.435:31679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.844755][ T29] audit: type=1326 audit(1755090291.435:31680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.859254][T13510] netlink: 'syz.3.8801': attribute type 1 has an invalid length. [ 533.868362][ T29] audit: type=1326 audit(1755090291.435:31681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.899552][ T29] audit: type=1326 audit(1755090291.435:31682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.923130][ T29] audit: type=1326 audit(1755090291.435:31683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.946787][ T29] audit: type=1326 audit(1755090291.435:31684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.970448][ T29] audit: type=1326 audit(1755090291.435:31685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 533.993959][ T29] audit: type=1326 audit(1755090291.435:31686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13451 comm="syz.3.8799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16640ebe9 code=0x7ffc0000 [ 534.038222][T13514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.047703][T13514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.149145][T13526] __nla_validate_parse: 3 callbacks suppressed [ 534.149160][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8809'. [ 534.609945][T13548] netlink: 'syz.4.8813': attribute type 1 has an invalid length. [ 534.618662][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8813'. [ 534.714593][T13547] Falling back ldisc for ttyS3. [ 534.834024][T13557] $Hÿ: renamed from bond0 (while UP) [ 534.841141][T13557] $Hÿ: entered promiscuous mode [ 534.846196][T13557] bond_slave_0: entered promiscuous mode [ 534.851866][T13557] bond_slave_1: entered promiscuous mode [ 534.880237][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.889070][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.925450][T13563] netlink: 'syz.0.8816': attribute type 1 has an invalid length. [ 534.941985][T13563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.124284][T13613] netlink: 'syz.0.8823': attribute type 1 has an invalid length. [ 535.132734][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8823'. [ 535.189851][T13613] Falling back ldisc for ttyS3. [ 535.307909][T13627] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 535.314450][T13627] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 535.323302][T13627] vhci_hcd vhci_hcd.0: Device attached [ 535.330134][T13628] vhci_hcd: connection closed [ 535.331695][ T3613] vhci_hcd: stop threads [ 535.340736][ T3613] vhci_hcd: release socket [ 535.345178][ T3613] vhci_hcd: disconnect device [ 535.877419][T13654] netlink: 'syz.6.8835': attribute type 1 has an invalid length. [ 535.895836][T13654] 8021q: adding VLAN 0 to HW filter on device bond20 [ 535.984852][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8840'. [ 535.999056][T13703] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 536.005586][T13703] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 536.013785][T13703] vhci_hcd vhci_hcd.0: Device attached [ 536.024284][T13704] vhci_hcd: connection closed [ 536.024446][ T51] vhci_hcd: stop threads [ 536.033431][ T51] vhci_hcd: release socket [ 536.038085][ T51] vhci_hcd: disconnect device [ 536.318763][T13725] lo speed is unknown, defaulting to 1000 [ 536.378716][T13725] netlink: 'syz.4.8849': attribute type 1 has an invalid length. [ 536.395063][T13725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.528848][T13797] netlink: 'syz.4.8853': attribute type 1 has an invalid length. [ 536.605906][T13797] Falling back ldisc for ttyS3. [ 536.779074][T13815] netlink: 'syz.4.8858': attribute type 1 has an invalid length. [ 536.795579][T13815] 8021q: adding VLAN 0 to HW filter on device bond25 [ 536.939935][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8867'. [ 537.001315][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8870'. [ 537.052537][T13893] bond0: (slave bond_slave_0): Releasing backup interface [ 537.062881][T13883] Falling back ldisc for ttyS3. [ 537.068323][T13893] bond0: (slave bond_slave_1): Releasing backup interface [ 537.089015][T13893] team0: Port device team_slave_0 removed [ 537.101498][T13893] team0: Port device team_slave_1 removed [ 537.112321][T13897] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8874'. [ 537.140405][T13893] team0: Port device geneve1 removed [ 537.147915][T13893] bond1: (slave gretap1): Releasing active interface [ 537.193307][ T3606] tipc: Resetting bearer [ 537.257976][T13907] netlink: 'syz.6.8880': attribute type 1 has an invalid length. [ 537.311587][T13907] 8021q: adding VLAN 0 to HW filter on device bond21 [ 539.087812][T13976] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8890'. [ 539.113353][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8887'. [ 539.150033][T13994] netlink: 'syz.4.8894': attribute type 1 has an invalid length. [ 539.160168][T13982] Falling back ldisc for ttyS3. [ 539.169832][T13994] 8021q: adding VLAN 0 to HW filter on device bond26 [ 539.180921][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 539.180965][ T29] audit: type=1326 audit(1755090297.207:31829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.211154][T14029] netlink: 'syz.3.8893': attribute type 1 has an invalid length. [ 539.221821][T14029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8893'. [ 539.230138][ T29] audit: type=1326 audit(1755090297.207:31830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.254323][ T29] audit: type=1326 audit(1755090297.207:31831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.278068][ T29] audit: type=1326 audit(1755090297.207:31832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.301711][ T29] audit: type=1326 audit(1755090297.207:31833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.327635][ T29] audit: type=1326 audit(1755090297.207:31834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.351445][ T29] audit: type=1326 audit(1755090297.207:31835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.375092][ T29] audit: type=1326 audit(1755090297.207:31836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.398686][ T29] audit: type=1326 audit(1755090297.207:31837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.4.8894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 539.438156][T14040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.446974][T14040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.476797][T14029] Falling back ldisc for ttyS3. [ 539.704045][T14047] lo speed is unknown, defaulting to 1000 [ 539.751176][T14065] random: crng reseeded on system resumption [ 540.019956][T14076] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8901'. [ 540.036594][T14077] netlink: 'syz.3.8899': attribute type 1 has an invalid length. [ 540.059496][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8899'. [ 540.072600][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8902'. [ 540.183642][ T29] audit: type=1326 audit(1755090298.087:31838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9b47bebe9 code=0x7ffc0000 [ 540.265935][T14097] netlink: 'syz.4.8908': attribute type 1 has an invalid length. [ 540.308039][T14097] 8021q: adding VLAN 0 to HW filter on device bond27 [ 540.352832][T14138] lo speed is unknown, defaulting to 1000 [ 540.359622][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8907'. [ 540.410999][T14144] random: crng reseeded on system resumption [ 540.446936][T14095] Falling back ldisc for ttyS3. [ 540.693666][T14193] netlink: 'syz.3.8923': attribute type 1 has an invalid length. [ 540.725261][T14193] 8021q: adding VLAN 0 to HW filter on device bond14 [ 540.734513][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8922'. [ 540.783142][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8922'. [ 540.830608][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8925'. [ 540.896185][T14242] lo speed is unknown, defaulting to 1000 [ 540.940157][T14237] Falling back ldisc for ttyS3. [ 541.663548][T14282] netlink: 'syz.3.8930': attribute type 1 has an invalid length. [ 541.723542][T14282] Falling back ldisc for ttyS3. [ 541.905505][T14300] netlink: 'syz.0.8935': attribute type 1 has an invalid length. [ 541.924507][T14300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.975373][T14342] netlink: 'syz.6.8939': attribute type 1 has an invalid length. [ 541.996347][T14342] 8021q: adding VLAN 0 to HW filter on device bond22 [ 542.177729][ T51] ================================================================== [ 542.177752][ T51] BUG: KCSAN: data-race in n_tty_receive_buf_common / n_tty_write [ 542.177777][ T51] [ 542.177782][ T51] write to 0xffffc900015b1020 of 8 bytes by task 14407 on cpu 0: [ 542.177797][ T51] n_tty_write+0x1aa/0xb50 [ 542.177813][ T51] file_tty_write+0x373/0x690 [ 542.177833][ T51] tty_write+0x25/0x30 [ 542.177852][ T51] vfs_write+0x52a/0x960 [ 542.190717][T14409] netlink: 'syz.0.8952': attribute type 1 has an invalid length. [ 542.193711][ T51] ksys_write+0xda/0x1a0 [ 542.193738][ T51] __x64_sys_write+0x40/0x50 [ 542.205706][T14409] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.208137][ T51] x64_sys_call+0x27fe/0x2ff0 [ 542.208163][ T51] do_syscall_64+0xd2/0x200 [ 542.253245][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.253267][ T51] [ 542.253273][ T51] read to 0xffffc900015b1020 of 8 bytes by task 51 on cpu 1: [ 542.253287][ T51] n_tty_receive_buf_common+0x87c/0xbe0 [ 542.253307][ T51] n_tty_receive_buf2+0x33/0x40 [ 542.253324][ T51] tty_ldisc_receive_buf+0x63/0xf0 [ 542.253349][ T51] tty_port_default_receive_buf+0x59/0x90 [ 542.253369][ T51] flush_to_ldisc+0x148/0x340 [ 542.253393][ T51] process_scheduled_works+0x4cb/0x9d0 [ 542.253416][ T51] worker_thread+0x582/0x770 [ 542.253439][ T51] kthread+0x489/0x510 [ 542.253454][ T51] ret_from_fork+0xda/0x150 [ 542.253471][ T51] ret_from_fork_asm+0x1a/0x30 [ 542.253488][ T51] [ 542.253492][ T51] value changed: 0x0000000000000000 -> 0x0000000000000007 [ 542.253501][ T51] [ 542.253504][ T51] Reported by Kernel Concurrency Sanitizer on: [ 542.253517][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Tainted: G W 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(voluntary) [ 542.253544][ T51] Tainted: [W]=WARN [ 542.253550][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.253562][ T51] Workqueue: events_unbound flush_to_ldisc [ 542.253588][ T51] ==================================================================