last executing test programs: 9m16.878460353s ago: executing program 4 (id=5): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000005000000020400000005e3cc6e5be0feae418420046f69a4a7cd1e3988"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlockall() socket$netlink(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000240)=[{0x3, 0x1, {0x2, 0xff, 0x2}, {0x1, 0x1, 0x2}, 0xfe, 0xfd}, {0x2, 0x2, {0x0, 0xff, 0x1}, {0x1, 0xf0, 0x4}, 0x2}, {0x0, 0x1, {0x2, 0x1, 0x4}, {0x1, 0x0, 0x1}, 0x2, 0xff}, {0x3, 0x0, {0x1, 0xf, 0x1}, {0x1}, 0x2, 0xfd}, {0x3, 0x3, {0x0, 0xf0, 0x1}, {0x3, 0x1}, 0xff, 0xfe}, {0x3, 0x0, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x2}, 0xfe, 0x1}, {0x2, 0x2, {0x1}, {0x0, 0xf0}, 0x2, 0xf8}], 0xe0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x9f, 0x3, 0xbb, 0x80}, {0x5, 0x7, 0x58, 0x10001}, {0x8, 0x8, 0x1c, 0x4}]}, 0x10) r6 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) fcntl$setown(r5, 0x8, r6) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 9m16.165458467s ago: executing program 4 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 9m15.915460022s ago: executing program 4 (id=11): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x7}, 0x12) socket$netlink(0x10, 0x3, 0x0) 9m15.849809713s ago: executing program 4 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000080)={[{@noquota}, {@errors_remount}]}, 0x3, 0xbc9, &(0x7f0000002380)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1a404ac, &(0x7f0000000d80)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYBLOB="5e0584d98ab9a07cae177cb398fee2c48255da63f1ae64afe765132ed12cbc9bfb022226e28fb35070dc87ba1b2a3a6c20825430fcacee5452969171f4cdf23c85b7bffa4df736ccac00310973de025b31f0382cd0add86117309479fb585673aceae9ba360bada48478ccccfe4a6f24eef38a77e18f1527fe8efaaf56820321cc1f0c607438ef99fde6fc57ec4c27b82affbb7bfd4dd5e00136eecafa7e90973740aa78aa201350d4a0460c40bf274cfc068799c6d7f82a5cc82652ea98ea29f7b1538a78f7a47390d04591b868c9d40b515a43a90b87ee8d0ca9a5eefbfb6f79ea17a81fc573", @ANYRESOCT, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC, @ANYRESHEX], 0xfe, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000004c0)='./bus/file0\x00', 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000000)={0x55, 0x3, 0x6, 0x7, 0x5}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@delqdisc={0x118, 0x25, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x10, 0xc}, {0x10, 0xe}, {0xb, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xe0, 0x2, {{0xe, [0x9, 0xd, 0x7, 0x10, 0x1, 0x9, 0x0, 0x0, 0x7, 0x7, 0x10, 0x2, 0x8, 0xa, 0x2, 0xe], 0x0, [0x1, 0x7, 0x3, 0x5c1, 0xffff, 0x7, 0x7f, 0xffff, 0x101, 0x2, 0x4, 0x5, 0x5, 0x1, 0x400, 0x3], [0x8, 0x7fff, 0x4, 0x800, 0xa9, 0x5, 0x0, 0x9, 0x3, 0xde16, 0x1, 0x5e, 0x6, 0x0, 0x1, 0x9998]}, [@TCA_MQPRIO_MAX_RATE64={0x88, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0xa55}, {0xc, 0x4, 0xff}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0xfffffffffffffff8}, {0xc, 0x4, 0x2985708d}]}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}]}, 0x118}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2) 9m15.556340488s ago: executing program 4 (id=15): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_xt={0x188, 0xa, 0x0, 0x0, {{0x7}, {0x160, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xe9, 0x6, {0x6, 'filter\x00', 0xff, 0x809f, "9cdf280c93948f446f8bc73b69e987fa6faf28acc2951dada558c77968d26668911dd50d438deed5c195a55e16b937a88464cfa2af78cb6ea39008ff21c8ea161b5c72c80c837c1a2f5f5fc7279f4e60dacd6133424e80457a746b25be6426d58b16a681c662b90e588352447c69e2558ba949840329ddea7887ecfa31f5935c43a6de161f4f979f0f0c82ab01c8c44887037129a24834097b895e27a435093547d60ef200fac7d800f3e5b96dd281a96cba83912bca7556ba799d5e06f7ff"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xac, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x3, 0x8, 0x9}, 0x43}}]}, {0x61, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xc0, 0xe, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x9, 0x4, 0xff, 0x417}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5e}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe4bc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x6, 0x2, 0x1ad}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x52ad}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x95}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x1, 0x6, 0x7, 0x1}}]}, {0x24, 0x6, "7cdbdb61b7db7cec1766d8df5ca39998faa6a061a0c07bac8bb01d6629b91ed2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9m13.007616797s ago: executing program 4 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ffe82a0000bfa200000000000007020000f8ffffffb703000008000000b704000000850000004300000095000000", @ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x20, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0x1263, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x100}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r10 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="f900491755e7c0f9d4d1fa2d8915360000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r10, 0x0, 0x0) fchdir(r12) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r13 = syz_clone(0x4000, &(0x7f0000000b00)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000380)="21203dfaba7f662cfcafc718c3bc1324136dd062a9a3e37962bb5ca2cda1f6b022f1a65c8a") setpgid(r9, r13) 9m13.007258707s ago: executing program 32 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ffe82a0000bfa200000000000007020000f8ffffffb703000008000000b704000000850000004300000095000000", @ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x20, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0x1263, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x100}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r10 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="f900491755e7c0f9d4d1fa2d8915360000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r10, 0x0, 0x0) fchdir(r12) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r13 = syz_clone(0x4000, &(0x7f0000000b00)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000380)="21203dfaba7f662cfcafc718c3bc1324136dd062a9a3e37962bb5ca2cda1f6b022f1a65c8a") setpgid(r9, r13) 2.683379679s ago: executing program 5 (id=9871): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r1, r2, 0x0, 0x80000000) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5, 0x0, 0x73b}, 0x18) io_uring_setup(0x3be7, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x80, 0x2, 0x0, r3}) ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0) r6 = dup2(r0, r1) r7 = syz_open_procfs(0x0, &(0x7f0000001200)='net/icmp\x00') read$char_usb(r7, &(0x7f0000000040)=""/4109, 0x100d) preadv(r7, &(0x7f0000002240)=[{&(0x7f00000032c0)=""/4116, 0x1014}], 0x1, 0x29cf, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) 1.859938485s ago: executing program 2 (id=9900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x3be7, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x80, 0x2}) 1.858963385s ago: executing program 2 (id=9901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/pm_debug_messages', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3, 0x9e, 0xf, 0x4, 0x0, 0x9, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000380)}, 0x5483, 0x8, 0xea, 0x2, 0x8001, 0x100, 0x5, 0x0, 0x3, 0x0, 0x1c47}, 0x0, 0x5, 0xffffffffffffffff, 0x1) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r11}}], 0x20, 0x2400e044}, 0x0) 1.834373556s ago: executing program 5 (id=9902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/pm_debug_messages', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3, 0x9e, 0xf, 0x4, 0x0, 0x9, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000380)}, 0x5483, 0x8, 0xea, 0x2, 0x8001, 0x100, 0x5, 0x0, 0x3, 0x0, 0x1c47}, 0x0, 0x5, 0xffffffffffffffff, 0x1) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r11}}], 0x20, 0x2400e044}, 0x0) 1.682613238s ago: executing program 1 (id=9906): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") 1.559820401s ago: executing program 1 (id=9909): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r7, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) write$cgroup_devices(r7, &(0x7f0000000480)={'b', ' *:* ', 'rwm\x00'}, 0xa) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000640)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="00000000010000009500000000000000", @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x63, '\x00', r4, 0x18, r6, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0x554e, 0x3}, 0x10, 0x8ce1, r0, 0x9, &(0x7f00000001c0)=[r2, r2, r2, r2, r2], &(0x7f0000000200)=[{0x1, 0x4, 0x9, 0x5}, {0x4, 0x3, 0x3, 0xb}, {0x0, 0x4, 0xf, 0xa}, {0x3, 0x4, 0x3, 0xa}, {0x5, 0x3, 0x5, 0xfdcf04264dca62e1}, {0x3, 0x1, 0x4, 0x3}, {0x3, 0x5, 0x8, 0xb}, {0x0, 0x2, 0x1, 0xb}, {0x2, 0x5, 0x0, 0x2}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001000010800000000000000000000001d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r10, 0x10e, 0xc, 0x0, &(0x7f0000000040)) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="02", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r11}, 0x10) getresgid(&(0x7f0000002fc0), &(0x7f0000003000), &(0x7f0000003040)) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x40}, 0x18) 1.279483076s ago: executing program 3 (id=9910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc, 0xffff}, {0x0, 0xf}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.219506817s ago: executing program 3 (id=9913): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f0000000240)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.197435388s ago: executing program 3 (id=9915): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1.195447578s ago: executing program 0 (id=9916): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 1.178262488s ago: executing program 3 (id=9917): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="01000000b8b0e7775c000000e1"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r7, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) write$cgroup_devices(r7, &(0x7f0000000480)={'b', ' *:* ', 'rwm\x00'}, 0xa) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121480, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000640)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="00000000010000009500000000000000", @ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x63, '\x00', r4, 0x18, r6, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0x554e, 0x3}, 0x10, 0x8ce1, r0, 0x9, &(0x7f00000001c0)=[r2, r2, r2, r2, r2], &(0x7f0000000200)=[{0x1, 0x4, 0x9, 0x5}, {0x4, 0x3, 0x3, 0xb}, {0x0, 0x4, 0xf, 0xa}, {0x3, 0x4, 0x3, 0xa}, {0x5, 0x3, 0x5, 0xfdcf04264dca62e1}, {0x3, 0x1, 0x4, 0x3}, {0x3, 0x5, 0x8, 0xb}, {0x0, 0x2, 0x1, 0xb}, {0x2, 0x5, 0x0, 0x2}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001000010800000000000000000000001d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r10, 0x10e, 0xc, 0x0, &(0x7f0000000040)) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="02", 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r11}, 0x10) getresgid(&(0x7f0000002fc0), &(0x7f0000003000), &(0x7f0000003040)) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x40}, 0x18) 1.130803779s ago: executing program 0 (id=9918): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='fscache_invalidate\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = inotify_init() r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = inotify_add_watch(r4, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r4, r7) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 1.06686937s ago: executing program 0 (id=9919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 880.918393ms ago: executing program 0 (id=9920): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x149940, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40404) pwrite64(r0, &(0x7f0000000680)="6d58aad80e612b", 0x7, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r3, 0x0, 0xeffd) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) 867.542744ms ago: executing program 2 (id=9921): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0xd6ab, @private2, 0xc3ca}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000400)='t', 0x1}], 0x1}}, {{&(0x7f00000009c0)={0xa, 0x4e24, 0x8000, @private0, 0x10001}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000a00)="a7", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x25) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000908000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES8, @ANYRES64=r1, @ANYRES8=r1, @ANYRES8=r1, @ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x4000810}, 0x8041) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007300000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@caif=@util, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/36, 0xfffffffffffffd0f}, {&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000840)=""/241, 0xf1}], 0x3, &(0x7f0000000380)=""/128, 0x80}, 0xfffffffc}], 0x1, 0x40010043, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_getsetattr(r1, &(0x7f0000000340)={0x5, 0x0, 0x8, 0x10000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r6) 862.805544ms ago: executing program 5 (id=9922): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfff, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x8771, 0x6}, {0xa07, 0x401}]}, 0x14, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x4000, 0x134, 0xffffffffffffffff}) listen(r3, 0x800) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2400}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) 771.961326ms ago: executing program 5 (id=9923): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstatfs(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180080000000000000000000000000001c11200090d3a889f639ea6c0e2ffa50fbaa922a5dea4cd353411414aa39c95d1e60b058475c3f3b95fb13703254cf159b1e6e3232a167623e5e37453657415b6a5be8af51fb8476f5439cf36b5142f50dd5bb75b1c2331dad6c9ff419a58ccc0f9ef72d43740d4dcc4aaf6b088079cfa21bca99e1cd0a2df2184f2e1413f5972bd716068b058f375b1c0a1591922c2006a185f501d9ec8fb40075c0d6fa3091f44c5fed961b0ed7829069ed164e1f949934000000", @ANYRES8=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x244) 771.264506ms ago: executing program 2 (id=9924): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001340)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001380)={0x728, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10e3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x410}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x70, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7, 0x9, 0x1000}, {0x0, 0x4, 0xf3, 0x4}, {0x4a8, 0xf4, 0x10, 0x599}, {0x400, 0x81, 0x5, 0x1}, {0xfb, 0x0, 0x5, 0x101}, {0x8, 0x5, 0xa0, 0xffff}, {0x9, 0x3, 0x1, 0x3}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x728}, 0x1, 0x0, 0x0, 0x4}, 0x804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 753.313276ms ago: executing program 2 (id=9925): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400004450ce3f00210000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, &(0x7f0000000080), 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000800000000000000050000006311d400000000009500000000000000fedc9c651202e9276fc3b91fef91b90f5012897249f4d86da709be275a1a378edd019b8cbfaf1f14353f98143d5343062cf20a38fa4db25c172d57bf2aafd60752df81cd229af88a72f5ac6c6d3b120652916b451da65099f46874adb98dcc56ff6961fdd4a5173fa9b943f898dac73305962ccd433cef3e457f4b47"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1fffffff, 0x5718}, 0x20, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x87) fchdir(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 717.986137ms ago: executing program 2 (id=9926): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f0000000180)={r2, r3+60000000}, &(0x7f0000000240)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 704.854447ms ago: executing program 1 (id=9927): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) 674.465908ms ago: executing program 1 (id=9928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000003c0)='\x01\x01\x00\x00cl8\xf8b\xed\x82\xae|\xc7\x00\xfe\x11M\\+\x10\x9eDU#UA\xd0~\vZ\x14*=mZ[O\xa5\xe1\xe3&,\x13\xb8^\xe2\x95:\xdfot\xa9\x7fU<\x1f[\xe5<\xf4\\\xb7k\xfe\xc4\xcd\xdc\xfe\x11\x1c\xc9j\xa6\x84m,\xe4e\x14\xf7b\xfc\xa8\xab\xb6\xcd\xf5\x8a.|\xd3\xdc \xfd\xbf\xb27\xa2\xde\xd8\xbd\xe4\x00f\x03c\xae\x8esu\vr\x8a\xb3\xb2lh\x06\xb8\xffo@\xfb\xceV\x97\xa1\x11\xf2\xe3M\x06\xec\xfem*\xe8:T\xda*\a\xc23v7dz\xb1\x1b}\x0e\xbd\b0\x19\xfd[),\x9c\xc8M', &(0x7f0000000b40)="b2", 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 638.062889ms ago: executing program 1 (id=9929): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174"], 0x25c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000183000000c5a34cbd925f3676bf09000000000000550901000000003a654db99a12009500000000000000bf91000000000085009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r7 = dup2(r6, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, 0x0, 0xee8a) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="090000000400000609f30000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000800, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x30}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r11}, 0x10) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000000580)=""/110, &(0x7f0000000200)=0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001b4eeb03bc79f6300d26efe963df508d350afada10005e1b08b393046b330c194fe7a0949738006fd167d2b37665fc3e86e6f6ddd0ea50aac9ec7ead67ad947d7e1a0ecb180978d8177f9e9186a5dafe3b1718515a8c1b3e1b84772b528effb2a19d3f0de3ef4d9a0dd313ab8275689bb2545272c76224ee5f22db45a90bca335b66"], 0x50) 560.00841ms ago: executing program 5 (id=9930): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT], 0xfd, 0x2bc, &(0x7f0000000c40)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 559.43881ms ago: executing program 1 (id=9931): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/power/pm_debug_messages', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x3, 0x9e, 0xf, 0x4, 0x0, 0x9, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000380)}, 0x5483, 0x8, 0xea, 0x2, 0x8001, 0x100, 0x5, 0x0, 0x3, 0x0, 0x1c47}, 0x0, 0x5, 0xffffffffffffffff, 0x1) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r11}}], 0x20, 0x2400e044}, 0x0) 558.53895ms ago: executing program 5 (id=9932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) dup2(r8, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000f000000000018120000", @ANYRES32=r9, @ANYRESDEC=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r10, 0x0, 0x3, &(0x7f00000002c0)=0x1, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000}, 0x18) 320.164445ms ago: executing program 3 (id=9933): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) 293.287745ms ago: executing program 3 (id=9934): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000abd92de000000000000ea04850000007b00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x0, 0x2401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x80, 0x8, 0xd, 0x8, 0x0, 0x9, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10470a, 0x0, 0xfffffffb, 0x6, 0x8}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="ca5099a7b6bdfefc5abc625d8f4148c54db2aad8e462a02c15bfb2cf3d32b47f1f90fef05d9268a70078e438a6ae844d79c913bb945b6d19b0e9d233af662c309e834dce07afebbb638d5b7023df150e683795ee4cc4d75cd97702d82873e22dd9efd7d0e14a52e43c19aec87a823532bcba530230f1771a639b43d29ad473428c", 0x81}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r11) pivot_root(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./bus\x00') 32.34623ms ago: executing program 0 (id=9935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 0s ago: executing program 0 (id=9936): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000280)={0x12, 0x7, 0x1, {{0x5, '-/)$#'}, 0x3}}, 0x12) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7840, 0x80, 0x3, 0x4, {{0x1d, 0x4, 0x3, 0x1e, 0x74, 0x68, 0x0, 0x7, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0xc, "3bdc743016ea8b5897fe"}, @timestamp_prespec={0x44, 0x54, 0x48, 0x3, 0x0, [{@remote, 0x9}, {@multicast1, 0x7fffffff}, {@rand_addr=0x64010102, 0xfd}, {@remote, 0x4}, {@private=0xa010100, 0xe56b}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xffff}, {@broadcast, 0x1}, {@private=0xa010101, 0x9}, {@loopback, 0x5}, {@loopback, 0x7f}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) getpeername$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0xd4, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x1c}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4044810}, 0x20004014) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000380)="264a73b8e5e9326757fd8728", 0xc}], 0x1}, 0x4004805) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r2]) kernel console output (not intermixed with test programs): up link [ 532.288292][T31100] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8867'. [ 532.299316][T31111] bond0: (slave dummy0): Releasing backup interface [ 532.309012][T31111] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 532.318159][T31111] team0: Failed to send options change via netlink (err -105) [ 532.325795][T31111] team0: Port device dummy0 added [ 532.358282][T31119] team0: Port device dummy0 removed [ 532.734600][T31139] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8884'. [ 533.135213][T31153] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8888'. [ 533.485592][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 533.485606][ T29] audit: type=1326 audit(1759623121.614:43672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31177 comm="syz.1.8898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f426327eec9 code=0x0 [ 533.539948][T31181] 9pnet_fd: Insufficient options for proto=fd [ 533.720872][T31173] __nla_validate_parse: 2 callbacks suppressed [ 533.720886][T31173] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8895'. [ 533.745226][T31189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8900'. [ 533.862060][T31187] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8901'. [ 534.128782][ T29] audit: type=1326 audit(1759623122.254:43673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.152823][ T29] audit: type=1326 audit(1759623122.254:43674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.176488][ T29] audit: type=1326 audit(1759623122.264:43675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.200207][ T29] audit: type=1326 audit(1759623122.264:43676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.223900][ T29] audit: type=1326 audit(1759623122.264:43677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.237178][T31193] validate_nla: 7 callbacks suppressed [ 534.237197][T31193] netlink: 'syz.5.8903': attribute type 10 has an invalid length. [ 534.247702][ T29] audit: type=1326 audit(1759623122.264:43678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.255197][T31193] netlink: 'syz.5.8903': attribute type 10 has an invalid length. [ 534.260953][ T29] audit: type=1326 audit(1759623122.264:43679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.316102][ T29] audit: type=1326 audit(1759623122.264:43680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.339799][ T29] audit: type=1326 audit(1759623122.264:43681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31192 comm="syz.5.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 534.363832][T31193] team0: Port device dummy0 removed [ 534.372989][T31193] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 534.578617][T31215] batadv0: entered promiscuous mode [ 534.580558][T31217] netlink: 'syz.5.8913': attribute type 10 has an invalid length. [ 534.603400][T31215] macvtap1: entered promiscuous mode [ 534.618173][T31215] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 534.662893][T31215] batadv0: left promiscuous mode [ 534.726102][T31222] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8914'. [ 534.831160][T31226] 9pnet_fd: Insufficient options for proto=fd [ 534.870382][T31227] lo speed is unknown, defaulting to 1000 [ 535.115865][T31248] batadv0: entered promiscuous mode [ 535.121378][T31248] macvtap1: entered promiscuous mode [ 535.128207][T31248] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 535.137192][T31248] batadv0: left promiscuous mode [ 535.250137][T31246] hub 2-0:1.0: USB hub found [ 535.255002][T31246] hub 2-0:1.0: 8 ports detected [ 535.331075][T31256] netlink: 'syz.0.8926': attribute type 10 has an invalid length. [ 535.362189][T31259] netlink: 'syz.0.8927': attribute type 10 has an invalid length. [ 535.371577][T31259] bond0: (slave dummy0): Releasing backup interface [ 535.383049][T31259] team0: Port device dummy0 added [ 535.563079][T31279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8931'. [ 535.576321][T31279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8931'. [ 535.901410][T31292] netlink: 'syz.1.8940': attribute type 10 has an invalid length. [ 535.913437][ T37] tipc: Resetting bearer [ 535.973054][T31302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8945'. [ 536.133443][T31309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8937'. [ 536.152977][T31287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8937'. [ 536.832190][T31326] netlink: 'syz.1.8952': attribute type 10 has an invalid length. [ 536.861078][T31330] netlink: 'syz.2.8954': attribute type 10 has an invalid length. [ 536.913846][T31337] netlink: 'syz.1.8958': attribute type 10 has an invalid length. [ 536.922052][T31337] netlink: 'syz.1.8958': attribute type 10 has an invalid length. [ 536.936434][T31337] team0: Port device dummy0 removed [ 536.945032][T31337] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 537.168061][T31364] bond0: (slave dummy0): Releasing backup interface [ 537.197373][T31364] team0: Port device dummy0 added [ 537.287257][T31372] team0: Port device dummy0 added [ 537.295412][T31372] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 537.306155][T31372] team0: Failed to send options change via netlink (err -105) [ 537.313839][T31372] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 537.323155][T31372] team0: Port device dummy0 removed [ 537.330171][ T54] tipc: Resetting bearer [ 537.372885][T31378] SELinux: failed to load policy [ 537.470427][T31366] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8969'. [ 537.844761][T31392] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 537.854274][T31392] team0: Port device dummy0 removed [ 537.862643][T31392] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 537.872382][ T296] tipc: Resetting bearer [ 537.966536][T31390] hub 2-0:1.0: USB hub found [ 537.971237][T31390] hub 2-0:1.0: 8 ports detected [ 538.058821][T31402] team0: Port device dummy0 removed [ 538.067510][T31402] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 539.300397][T31420] batadv0: entered promiscuous mode [ 539.306611][T31420] macvtap1: entered promiscuous mode [ 539.316730][T31420] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 539.332720][T31420] batadv0: left promiscuous mode [ 539.344728][ T29] kauditd_printk_skb: 659 callbacks suppressed [ 539.344753][ T29] audit: type=1326 audit(1759623127.474:44341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.366269][T31426] validate_nla: 10 callbacks suppressed [ 539.366294][T31426] netlink: 'syz.3.8993': attribute type 10 has an invalid length. [ 539.381477][T31428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8990'. [ 539.400457][ T29] audit: type=1326 audit(1759623127.494:44342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.424151][ T29] audit: type=1326 audit(1759623127.494:44343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.447788][ T29] audit: type=1326 audit(1759623127.494:44344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.462424][T31430] netlink: 'syz.3.8993': attribute type 10 has an invalid length. [ 539.472382][ T29] audit: type=1326 audit(1759623127.494:44345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.472421][ T29] audit: type=1326 audit(1759623127.494:44346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.472479][ T29] audit: type=1326 audit(1759623127.494:44347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.472513][ T29] audit: type=1326 audit(1759623127.494:44348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.472549][ T29] audit: type=1326 audit(1759623127.494:44349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.472631][ T29] audit: type=1326 audit(1759623127.494:44350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31425 comm="syz.3.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efcda39eec9 code=0x7ffc0000 [ 539.475028][T31426] team0: Port device dummy0 added [ 539.609067][T31434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8990'. [ 539.640906][T31433] 9pnet_fd: Insufficient options for proto=fd [ 539.689528][T31430] team0: Port device dummy0 removed [ 539.696871][ T5215] tipc: Resetting bearer [ 539.729346][T31440] netlink: 'syz.3.8997': attribute type 10 has an invalid length. [ 539.758222][T31444] netlink: 'syz.2.8998': attribute type 10 has an invalid length. [ 540.047866][T31464] 9pnet_fd: Insufficient options for proto=fd [ 540.092898][T31470] netlink: 'syz.5.9010': attribute type 10 has an invalid length. [ 540.114383][T31470] team0: Port device dummy0 removed [ 540.125069][T31470] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 540.127456][T31476] netlink: 'syz.3.9013': attribute type 10 has an invalid length. [ 540.135583][ T5215] tipc: Resetting bearer [ 540.431833][T31493] 9pnet_fd: Insufficient options for proto=fd [ 540.457589][T31495] batadv0: entered promiscuous mode [ 540.463019][T31495] macvtap1: entered promiscuous mode [ 540.469570][T31495] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 540.478611][T31495] batadv0: left promiscuous mode [ 541.291603][T31513] netlink: 'syz.3.9027': attribute type 10 has an invalid length. [ 541.307222][T31513] team0: Port device dummy0 added [ 541.348775][T31507] hub 2-0:1.0: USB hub found [ 541.358439][T31507] hub 2-0:1.0: 8 ports detected [ 541.405826][T31524] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9028'. [ 541.704346][T31537] netlink: 'syz.1.9037': attribute type 10 has an invalid length. [ 541.713844][T31537] bond0: (slave dummy0): Releasing backup interface [ 541.725149][T31537] team0: Port device dummy0 added [ 541.735631][T31537] netlink: 'syz.1.9037': attribute type 10 has an invalid length. [ 541.747660][T31537] team0: Port device dummy0 removed [ 541.856707][T31542] netlink: 'syz.5.9038': attribute type 10 has an invalid length. [ 541.876954][T31537] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 541.974397][ T5006] tipc: Resetting bearer [ 541.983223][T31542] bond0: (slave dummy0): Releasing backup interface [ 542.019573][T31542] team0: Port device dummy0 added [ 542.066871][T31544] team0: Port device dummy0 removed [ 542.086111][T31544] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 542.097566][ T5006] tipc: Resetting bearer [ 542.236170][ T296] tipc: Resetting bearer [ 542.382450][T31566] team0: Port device dummy0 removed [ 542.572012][T31577] team0: Port device dummy0 added [ 542.590131][T31577] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 542.612597][T31577] team0: Failed to send options change via netlink (err -105) [ 542.662890][T31577] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 542.681111][T31577] team0: Port device dummy0 removed [ 542.697831][ T296] tipc: Resetting bearer [ 542.767573][T31581] bond0: (slave dummy0): Releasing backup interface [ 542.786476][T31581] team0: Failed to send options change via netlink (err -105) [ 542.794140][T31581] team0: Port device dummy0 added [ 543.113784][T31597] bond0: (slave dummy0): Releasing backup interface [ 543.123494][T31597] team0: Port device dummy0 added [ 543.161181][T31601] tmpfs: Bad value for 'mpol' [ 543.181320][T31603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9064'. [ 543.208184][ T296] tipc: Resetting bearer [ 543.214806][T31605] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 543.224046][T31605] team0: Port device dummy0 removed [ 543.232370][T31605] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 543.257884][T31607] bond0: (slave dummy0): Releasing backup interface [ 543.268701][T31607] team0: Failed to send options change via netlink (err -105) [ 543.276453][T31607] team0: Port device dummy0 added [ 543.357303][T31621] SELinux: failed to load policy [ 543.475502][T31628] bond0: (slave dummy0): Releasing backup interface [ 543.486644][T31628] team0: Failed to send options change via netlink (err -105) [ 543.494263][T31628] team0: Port device dummy0 added [ 544.044330][T31645] team0: Port device dummy0 removed [ 544.074403][T31645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.098162][ T296] tipc: Resetting bearer [ 544.104873][T31646] team0: Mode changed to "loadbalance" [ 544.138824][T31651] FAULT_INJECTION: forcing a failure. [ 544.138824][T31651] name failslab, interval 1, probability 0, space 0, times 0 [ 544.151513][T31651] CPU: 0 UID: 0 PID: 31651 Comm: syz.0.9081 Not tainted syzkaller #0 PREEMPT(voluntary) [ 544.151548][T31651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 544.151564][T31651] Call Trace: [ 544.151577][T31651] [ 544.151587][T31651] __dump_stack+0x1d/0x30 [ 544.151632][T31651] dump_stack_lvl+0xe8/0x140 [ 544.151715][T31651] dump_stack+0x15/0x1b [ 544.151751][T31651] should_fail_ex+0x265/0x280 [ 544.151786][T31651] should_failslab+0x8c/0xb0 [ 544.151849][T31651] __kmalloc_noprof+0xa5/0x570 [ 544.151881][T31651] ? alloc_pipe_info+0x1c9/0x350 [ 544.151914][T31651] alloc_pipe_info+0x1c9/0x350 [ 544.151946][T31651] splice_direct_to_actor+0x592/0x680 [ 544.152008][T31651] ? kstrtouint_from_user+0x9f/0xf0 [ 544.152051][T31651] ? __pfx_direct_splice_actor+0x10/0x10 [ 544.152079][T31651] ? __rcu_read_unlock+0x4f/0x70 [ 544.152164][T31651] ? get_pid_task+0x96/0xd0 [ 544.152184][T31651] ? avc_policy_seqno+0x15/0x30 [ 544.152212][T31651] ? selinux_file_permission+0x1e4/0x320 [ 544.152245][T31651] do_splice_direct+0xda/0x150 [ 544.152321][T31651] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 544.152356][T31651] do_sendfile+0x380/0x650 [ 544.152392][T31651] __x64_sys_sendfile64+0x105/0x150 [ 544.152436][T31651] x64_sys_call+0x2bb4/0x3000 [ 544.152463][T31651] do_syscall_64+0xd2/0x200 [ 544.152510][T31651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 544.152543][T31651] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 544.152568][T31651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.152591][T31651] RIP: 0033:0x7fa4a561eec9 [ 544.152607][T31651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.152630][T31651] RSP: 002b:00007fa4a407f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 544.152654][T31651] RAX: ffffffffffffffda RBX: 00007fa4a5875fa0 RCX: 00007fa4a561eec9 [ 544.152670][T31651] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 544.152686][T31651] RBP: 00007fa4a407f090 R08: 0000000000000000 R09: 0000000000000000 [ 544.152702][T31651] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 544.152719][T31651] R13: 00007fa4a5876038 R14: 00007fa4a5875fa0 R15: 00007ffd7521cd68 [ 544.152758][T31651] [ 544.434296][T31655] batadv0: entered promiscuous mode [ 544.445658][T31655] macvtap1: entered promiscuous mode [ 544.453844][T31655] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 544.465733][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 544.465752][ T29] audit: type=1326 audit(1759623132.584:45072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.495635][ T29] audit: type=1326 audit(1759623132.584:45073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.519265][ T29] audit: type=1326 audit(1759623132.584:45074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.543006][ T29] audit: type=1326 audit(1759623132.584:45075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.566816][ T29] audit: type=1326 audit(1759623132.584:45076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.590489][ T29] audit: type=1326 audit(1759623132.584:45077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.614270][ T29] audit: type=1326 audit(1759623132.584:45078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.621312][T31661] SELinux: failed to load policy [ 544.638008][ T29] audit: type=1326 audit(1759623132.584:45079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.666592][ T29] audit: type=1326 audit(1759623132.584:45080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.690325][ T29] audit: type=1326 audit(1759623132.584:45081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31658 comm="syz.1.9084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f426327eec9 code=0x7ffc0000 [ 544.731126][T31655] batadv0: left promiscuous mode [ 544.744821][T31665] validate_nla: 13 callbacks suppressed [ 544.744834][T31665] netlink: 'syz.3.9085': attribute type 10 has an invalid length. [ 544.755185][T31667] netlink: 'syz.0.9086': attribute type 10 has an invalid length. [ 544.769222][ T5215] tipc: Resetting bearer [ 544.900281][T31675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9087'. [ 544.911784][T31675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9087'. [ 545.336321][T31686] netlink: 'syz.1.9093': attribute type 10 has an invalid length. [ 545.350370][ T296] tipc: Resetting bearer [ 545.357907][T31686] netlink: 'syz.1.9093': attribute type 10 has an invalid length. [ 545.366601][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9091'. [ 545.376251][T31686] team0: Port device dummy0 removed [ 545.386569][T31686] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 545.401461][T31683] hub 2-0:1.0: USB hub found [ 545.407009][T31683] hub 2-0:1.0: 8 ports detected [ 546.235821][T31713] netlink: 'syz.5.9103': attribute type 10 has an invalid length. [ 546.245928][T31713] bond0: (slave dummy0): Releasing backup interface [ 546.568401][T31718] netlink: 'syz.5.9103': attribute type 10 has an invalid length. [ 546.647163][T31713] team0: Port device dummy0 added [ 546.676154][T31721] netlink: 'syz.0.9105': attribute type 10 has an invalid length. [ 546.709370][T31721] netlink: 'syz.0.9105': attribute type 10 has an invalid length. [ 546.724365][T31721] team0: Port device dummy0 removed [ 546.732370][T31721] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 546.744275][T31718] team0: Port device dummy0 removed [ 546.754250][T31718] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 546.768173][ T5215] tipc: Resetting bearer [ 546.924017][T31731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9109'. [ 546.947009][T31723] netlink: 'syz.3.9106': attribute type 21 has an invalid length. [ 546.957795][T31723] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9106'. [ 547.786990][T31752] netlink: 'syz.1.9118': attribute type 10 has an invalid length. [ 547.803518][T31752] bond0: (slave dummy0): Releasing backup interface [ 547.817349][T31752] team0: Port device dummy0 added [ 547.832605][T31752] team0: Port device dummy0 removed [ 547.869541][T31752] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 547.879278][ T296] tipc: Resetting bearer [ 548.055240][T31766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9122'. [ 548.130101][T31769] lo speed is unknown, defaulting to 1000 [ 548.624847][T31771] lo speed is unknown, defaulting to 1000 [ 548.669868][T31792] ip6gre14: entered allmulticast mode [ 549.089675][T31810] bond0: (slave dummy0): Releasing backup interface [ 549.100160][T31810] team0: Failed to send options change via netlink (err -105) [ 549.107894][T31810] team0: Port device dummy0 added [ 549.141416][ T54] tipc: Resetting bearer [ 549.149581][T31812] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 549.159448][T31812] team0: Port device dummy0 removed [ 549.169594][T31812] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 549.210058][T31819] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9143'. [ 549.251929][T31820] ip6gre13: entered allmulticast mode [ 549.376597][T31834] bond0: (slave dummy0): Releasing backup interface [ 549.388136][T31834] team0: Port device dummy0 added [ 549.401792][T31834] team0: Port device dummy0 removed [ 549.410463][T31834] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 549.421382][ T1723] tipc: Resetting bearer [ 549.442619][T31835] lo speed is unknown, defaulting to 1000 [ 549.587719][T31848] SELinux: failed to load policy [ 549.641884][T31852] bond0: (slave dummy0): Releasing backup interface [ 549.655394][T31852] team0: Failed to send options change via netlink (err -105) [ 549.663013][T31852] team0: Port device dummy0 added [ 549.695524][T31852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 549.712124][T31852] team0: Failed to send options change via netlink (err -105) [ 549.720896][T31852] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 549.731140][T31852] team0: Port device dummy0 removed [ 549.745866][T31852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 549.763531][ T1723] tipc: Resetting bearer [ 549.783509][T31860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9154'. [ 549.785302][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 549.785334][ T29] audit: type=1326 audit(1759623137.914:45453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 549.801319][T31843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9154'. [ 549.824818][T31858] validate_nla: 9 callbacks suppressed [ 549.824836][T31858] netlink: 'syz.5.9160': attribute type 10 has an invalid length. [ 549.843818][ T29] audit: type=1326 audit(1759623137.954:45454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 549.868335][ T29] audit: type=1326 audit(1759623137.954:45455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 549.892073][ T29] audit: type=1326 audit(1759623137.954:45456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 549.902724][T31862] netlink: 'syz.5.9161': attribute type 10 has an invalid length. [ 549.915936][ T29] audit: type=1326 audit(1759623137.954:45457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 549.925960][T31859] netlink: 'syz.0.9159': attribute type 10 has an invalid length. [ 549.947134][ T29] audit: type=1326 audit(1759623137.954:45458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 549.957954][T31863] netlink: 'syz.5.9161': attribute type 10 has an invalid length. [ 549.978530][ T29] audit: type=1326 audit(1759623137.954:45459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 549.978570][ T29] audit: type=1326 audit(1759623137.954:45460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 550.033601][ T29] audit: type=1326 audit(1759623137.954:45461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 550.057173][ T29] audit: type=1326 audit(1759623137.954:45462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31856 comm="syz.5.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 550.081436][T31862] bond0: (slave dummy0): Releasing backup interface [ 550.096715][T31862] team0: Port device dummy0 added [ 550.111379][T31859] bond0: (slave dummy0): Releasing backup interface [ 550.122143][T31859] team0: Failed to send options change via netlink (err -105) [ 550.129821][T31859] team0: Port device dummy0 added [ 550.144492][T31863] team0: Port device dummy0 removed [ 550.166307][T31863] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 550.190912][ T54] tipc: Resetting bearer [ 550.254393][T31879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9170'. [ 550.452916][T31895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9168'. [ 550.474914][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9166'. [ 550.488358][T31880] lo speed is unknown, defaulting to 1000 [ 550.500028][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9166'. [ 550.512504][ T296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.560149][ T296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.593962][T31889] netlink: 'syz.5.9171': attribute type 21 has an invalid length. [ 550.602405][T31889] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9171'. [ 550.616254][ T296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.667797][ T296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.698401][T31880] chnl_net:caif_netlink_parms(): no params data found [ 550.750475][T31880] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.758215][T31880] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.766094][T31880] bridge_slave_0: entered allmulticast mode [ 550.773682][T31880] bridge_slave_0: entered promiscuous mode [ 550.783996][T31880] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.791098][T31880] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.798614][T31880] bridge_slave_1: entered allmulticast mode [ 550.805508][T31880] bridge_slave_1: entered promiscuous mode [ 550.828565][T31880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.841782][T31880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.965169][ T296] bond0 (unregistering): Released all slaves [ 550.980442][T31880] team0: Port device team_slave_0 added [ 550.987614][T31880] team0: Port device team_slave_1 added [ 551.005754][T31880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.013991][T31880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.040446][T31880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.053912][ T296] tipc: Disabling bearer [ 551.059337][ T296] tipc: Left network mode [ 551.064934][T31905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9173'. [ 551.084798][ T296] hsr_slave_0: left promiscuous mode [ 551.086200][T31905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9173'. [ 551.099302][ T296] hsr_slave_1: left promiscuous mode [ 551.110100][ T296] veth1_macvtap: left promiscuous mode [ 551.115685][ T296] veth0_macvtap: left promiscuous mode [ 551.121513][ T296] veth1_vlan: left promiscuous mode [ 551.181979][ T296] team0 (unregistering): Port device vlan0 removed [ 551.227833][ T296] team0 (unregistering): Port device dummy0 removed [ 551.241109][T31880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.248166][T31880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.274259][T31880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.289994][T31913] ip6gre15: entered allmulticast mode [ 551.352612][T31880] hsr_slave_0: entered promiscuous mode [ 551.362218][T31880] hsr_slave_1: entered promiscuous mode [ 551.368329][T31880] debugfs: 'hsr0' already exists in 'hsr' [ 551.374087][T31880] Cannot create hsr debugfs directory [ 551.601843][T31937] lo speed is unknown, defaulting to 1000 [ 551.751667][T31880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 551.761183][T31941] lo speed is unknown, defaulting to 1000 [ 551.770882][T31880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 551.785731][T31880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 551.813334][T31880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 551.909750][T31880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.928549][T31880] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.956522][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.963679][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.984148][T31952] netlink: 'syz.2.9186': attribute type 10 has an invalid length. [ 551.984215][T31953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9184'. [ 552.003895][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.010991][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.019655][T31944] netlink: 'syz.3.9185': attribute type 21 has an invalid length. [ 552.038580][T31940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9184'. [ 552.047571][T31954] netlink: 'syz.2.9186': attribute type 10 has an invalid length. [ 552.054246][T31952] team0: Failed to send options change via netlink (err -105) [ 552.062942][T31952] team0: Port device dummy0 added [ 552.077442][T31944] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9185'. [ 552.089763][T31954] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 552.109730][T31954] team0: Failed to send options change via netlink (err -105) [ 552.119471][T31954] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 552.144973][T31954] team0: Port device dummy0 removed [ 552.153274][T31954] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 552.163239][ T5006] tipc: Resetting bearer [ 552.227159][T31880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.317129][T31972] netlink: 'syz.2.9189': attribute type 9 has an invalid length. [ 552.402380][T31880] veth0_vlan: entered promiscuous mode [ 552.414886][T31880] veth1_vlan: entered promiscuous mode [ 552.441844][T31880] veth0_macvtap: entered promiscuous mode [ 552.452265][T31880] veth1_macvtap: entered promiscuous mode [ 552.468949][T31880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.483834][T31880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.499537][ T5006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.516845][ T5006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.527209][ T5006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.538180][ T5006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.596922][T31981] SELinux: failed to load policy [ 552.930421][T32005] netlink: 'syz.1.9199': attribute type 10 has an invalid length. [ 552.964193][T32005] bond0: (slave dummy0): Releasing backup interface [ 552.991297][T32005] team0: Failed to send options change via netlink (err -105) [ 552.998852][T32005] team0: Port device dummy0 added [ 553.044185][T32008] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 553.088642][T32008] team0: Failed to send options change via netlink (err -105) [ 553.126861][T32008] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 553.147237][T32008] team0: Port device dummy0 removed [ 553.160387][T32008] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 553.174508][ T296] tipc: Resetting bearer [ 553.191119][T32016] SELinux: failed to load policy [ 553.194311][T32002] hub 2-0:1.0: USB hub found [ 553.201429][T32002] hub 2-0:1.0: 8 ports detected [ 553.607845][T32043] lo speed is unknown, defaulting to 1000 [ 553.616547][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.675626][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.726185][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.775017][T32043] chnl_net:caif_netlink_parms(): no params data found [ 553.800870][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.853206][T32043] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.860293][T32043] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.867842][T32043] bridge_slave_0: entered allmulticast mode [ 553.874710][T32043] bridge_slave_0: entered promiscuous mode [ 553.881659][T32043] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.888841][T32043] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.896240][T32043] bridge_slave_1: entered allmulticast mode [ 553.902876][T32043] bridge_slave_1: entered promiscuous mode [ 553.923767][T32043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.943183][T32043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.967266][T32043] team0: Port device team_slave_0 added [ 553.979405][T32043] team0: Port device team_slave_1 added [ 554.086431][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 554.095762][ T31] bond0 (unregistering): Released all slaves [ 554.113331][T32061] bond0: (slave dummy0): Releasing backup interface [ 554.128331][T32061] team0: Failed to send options change via netlink (err -105) [ 554.135925][T32061] team0: Port device dummy0 added [ 554.149248][T32062] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 554.162267][T32062] team0: Failed to send options change via netlink (err -105) [ 554.170753][T32062] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 554.197840][T32062] team0: Port device dummy0 removed [ 554.221970][T32062] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 554.235349][T32043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.242483][T32043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.268537][T32043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.283171][ T5006] tipc: Resetting bearer [ 554.299488][T32043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.306525][T32043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.332811][T32043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.352950][ T31] tipc: Disabling bearer [ 554.359647][ T31] tipc: Left network mode [ 554.402589][T32043] hsr_slave_0: entered promiscuous mode [ 554.415332][T32043] hsr_slave_1: entered promiscuous mode [ 554.421383][T32043] debugfs: 'hsr0' already exists in 'hsr' [ 554.427212][T32043] Cannot create hsr debugfs directory [ 554.443520][ T31] hsr_slave_0: left promiscuous mode [ 554.449458][ T31] hsr_slave_1: left promiscuous mode [ 554.456883][ T31] veth1_macvtap: left promiscuous mode [ 554.462623][ T31] veth0_macvtap: left promiscuous mode [ 554.468662][ T31] veth1_vlan: left promiscuous mode [ 554.513296][ T31] team0 (unregistering): Port device vlan0 removed [ 554.610491][T32075] team0: Port device dummy0 added [ 554.761545][T32064] lo speed is unknown, defaulting to 1000 [ 554.924656][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 554.924672][ T29] audit: type=1326 audit(1759623143.054:45893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 554.937750][T32085] validate_nla: 6 callbacks suppressed [ 554.937770][T32085] netlink: 'syz.0.9224': attribute type 21 has an invalid length. [ 554.954537][ T29] audit: type=1326 audit(1759623143.054:45894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 554.991431][ T29] audit: type=1326 audit(1759623143.054:45895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.015112][ T29] audit: type=1326 audit(1759623143.054:45896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.038923][ T29] audit: type=1326 audit(1759623143.054:45897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.062662][ T29] audit: type=1326 audit(1759623143.054:45898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.086417][ T29] audit: type=1326 audit(1759623143.054:45899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.110104][ T29] audit: type=1326 audit(1759623143.054:45900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.135402][ T29] audit: type=1326 audit(1759623143.054:45901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.159130][ T29] audit: type=1326 audit(1759623143.054:45902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32088 comm="syz.5.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fed2ceec9 code=0x7ffc0000 [ 555.322355][T32043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.327100][T32101] hub 2-0:1.0: USB hub found [ 555.335129][T32101] hub 2-0:1.0: 8 ports detected [ 555.337928][T32043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.354897][T32043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.365907][T32043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.398727][T32116] __nla_validate_parse: 14 callbacks suppressed [ 555.398743][T32116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9233'. [ 555.451323][T32043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.467420][T32043] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.485505][T32042] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.492624][T32042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.505858][T32042] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.513012][T32042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.519574][T32122] netlink: 'syz.3.9238': attribute type 10 has an invalid length. [ 555.559233][T32122] team0: Port device dummy0 added [ 555.570039][T32122] netlink: 'syz.3.9238': attribute type 10 has an invalid length. [ 555.571617][T32129] netlink: 'syz.5.9240': attribute type 10 has an invalid length. [ 555.590106][T32130] netlink: 'syz.2.9239': attribute type 10 has an invalid length. [ 555.598916][T32122] team0: Port device dummy0 removed [ 555.607075][ T5215] tipc: Resetting bearer [ 555.614632][T32130] bond0: (slave dummy0): Releasing backup interface [ 555.625120][T32130] team0: Failed to send options change via netlink (err -105) [ 555.632643][T32130] team0: Port device dummy0 added [ 555.643340][T32129] bond0: (slave dummy0): Releasing backup interface [ 555.653595][T32129] team0: Port device dummy0 added [ 555.688742][T32138] netlink: 'syz.0.9243': attribute type 10 has an invalid length. [ 555.709772][T32138] netlink: 'syz.0.9243': attribute type 10 has an invalid length. [ 555.714936][T32043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.726877][T32138] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 555.736975][T32138] team0: Port device dummy0 removed [ 555.745573][T32138] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 555.846398][T32161] netlink: 'syz.0.9250': attribute type 10 has an invalid length. [ 555.864837][T32161] bond0: (slave dummy0): Releasing backup interface [ 555.874912][T32161] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 555.883872][T32161] team0: Failed to send options change via netlink (err -105) [ 555.891419][T32161] team0: Port device dummy0 added [ 555.906202][T32043] veth0_vlan: entered promiscuous mode [ 555.919212][T32043] veth1_vlan: entered promiscuous mode [ 555.934724][T32164] netlink: 'syz.0.9251': attribute type 10 has an invalid length. [ 555.950355][T32043] veth0_macvtap: entered promiscuous mode [ 555.965470][T32043] veth1_macvtap: entered promiscuous mode [ 555.979569][T32043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.990979][T32043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.001696][ T5006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.010856][ T5006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.016329][T32155] hub 2-0:1.0: USB hub found [ 556.020475][ T5006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.034910][ T5006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.035741][T32152] netlink: 'syz.3.9248': attribute type 21 has an invalid length. [ 556.048941][T32155] hub 2-0:1.0: 8 ports detected [ 556.056706][T32152] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9248'. [ 556.142286][T32173] team0: Port device dummy0 added [ 556.550545][T32195] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9262'. [ 556.634436][T32203] team0: Port device dummy0 added [ 556.664510][T32207] FAULT_INJECTION: forcing a failure. [ 556.664510][T32207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.677661][T32207] CPU: 1 UID: 0 PID: 32207 Comm: syz.3.9268 Not tainted syzkaller #0 PREEMPT(voluntary) [ 556.677708][T32207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.677742][T32207] Call Trace: [ 556.677830][T32207] [ 556.677842][T32207] __dump_stack+0x1d/0x30 [ 556.677900][T32207] dump_stack_lvl+0xe8/0x140 [ 556.677955][T32207] dump_stack+0x15/0x1b [ 556.677992][T32207] should_fail_ex+0x265/0x280 [ 556.678027][T32207] should_fail+0xb/0x20 [ 556.678097][T32207] should_fail_usercopy+0x1a/0x20 [ 556.678115][T32207] strncpy_from_user+0x25/0x230 [ 556.678170][T32207] ? kmem_cache_alloc_noprof+0x242/0x480 [ 556.678203][T32207] ? getname_flags+0x80/0x3b0 [ 556.678237][T32207] getname_flags+0xae/0x3b0 [ 556.678330][T32207] __x64_sys_renameat2+0x5f/0x90 [ 556.678368][T32207] x64_sys_call+0x3f9/0x3000 [ 556.678416][T32207] do_syscall_64+0xd2/0x200 [ 556.678451][T32207] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 556.678483][T32207] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 556.678520][T32207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.678646][T32207] RIP: 0033:0x7efcda39eec9 [ 556.678676][T32207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.678743][T32207] RSP: 002b:00007efcd8e07038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 556.678760][T32207] RAX: ffffffffffffffda RBX: 00007efcda5f5fa0 RCX: 00007efcda39eec9 [ 556.678771][T32207] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 556.678782][T32207] RBP: 00007efcd8e07090 R08: 0000000000000000 R09: 0000000000000000 [ 556.678793][T32207] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 556.678830][T32207] R13: 00007efcda5f6038 R14: 00007efcda5f5fa0 R15: 00007ffeba6ea7c8 [ 556.678849][T32207] [ 556.914514][T32211] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 556.923677][T32211] team0: Port device dummy0 removed [ 556.930655][ T1723] tipc: Resetting bearer [ 556.985998][T32218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9274'. [ 557.052395][T32230] ip6gre14: entered allmulticast mode [ 557.137759][T32215] lo speed is unknown, defaulting to 1000 [ 557.214028][ T5006] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.227491][T32215] chnl_net:caif_netlink_parms(): no params data found [ 557.378081][ T5006] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.498300][T32215] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.505502][T32215] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.514020][T32215] bridge_slave_0: entered allmulticast mode [ 557.521829][T32215] bridge_slave_0: entered promiscuous mode [ 557.529907][T32215] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.537040][T32215] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.545105][T32215] bridge_slave_1: entered allmulticast mode [ 557.552386][T32215] bridge_slave_1: entered promiscuous mode [ 557.563777][ T5006] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.604185][T32215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.617790][ T5006] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.632476][T32215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.656223][T32215] team0: Port device team_slave_0 added [ 557.663519][T32215] team0: Port device team_slave_1 added [ 557.681651][T32215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.688719][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.714697][T32215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.726348][T32215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.733461][T32215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.759652][T32215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.804879][T32215] hsr_slave_0: entered promiscuous mode [ 557.811275][T32215] hsr_slave_1: entered promiscuous mode [ 557.817551][T32215] debugfs: 'hsr0' already exists in 'hsr' [ 557.823368][T32215] Cannot create hsr debugfs directory [ 557.863220][T32259] team0: Port device dummy0 added [ 557.975500][ T5006] bond0 (unregistering): Released all slaves [ 557.984901][ T5006] bond1 (unregistering): Released all slaves [ 558.001827][ T5215] tipc: Resetting bearer [ 558.021438][T32259] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.046277][T32259] team0: Failed to send options change via netlink (err -105) [ 558.054271][T32259] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.063272][T32259] team0: Port device dummy0 removed [ 558.076800][ T5215] tipc: Resetting bearer [ 558.089964][ T5006] tipc: Disabling bearer [ 558.095684][ T5006] tipc: Left network mode [ 558.137503][ T5006] hsr_slave_0: left promiscuous mode [ 558.146483][ T5006] hsr_slave_1: left promiscuous mode [ 558.160816][ T5006] veth1_macvtap: left promiscuous mode [ 558.170988][ T5006] veth0_macvtap: left promiscuous mode [ 558.182991][ T5006] veth1_vlan: left promiscuous mode [ 558.307997][T32273] hub 2-0:1.0: USB hub found [ 558.316766][T32273] hub 2-0:1.0: 8 ports detected [ 558.337772][ T5006] team0 (unregistering): Port device dummy0 removed [ 558.530095][T32283] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9291'. [ 558.700011][T32215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 558.709226][T32215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 558.718090][T32215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 558.727744][T32215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 558.769462][T32215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.783895][T32215] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.793544][ T1723] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.800645][ T1723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.812466][ T1723] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.819605][ T1723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.899704][T32215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.365370][T32215] veth0_vlan: entered promiscuous mode [ 559.395358][T32215] veth1_vlan: entered promiscuous mode [ 559.447631][T32215] veth0_macvtap: entered promiscuous mode [ 559.469835][T32215] veth1_macvtap: entered promiscuous mode [ 559.486796][T32215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.500978][T32215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.512107][T32311] hub 2-0:1.0: USB hub found [ 559.517275][ T5215] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.533993][T32311] hub 2-0:1.0: 8 ports detected [ 559.539985][ T5215] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.565785][ T5215] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.575078][ T5215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.632815][T32333] team0: Port device dummy0 added [ 559.645742][T32335] team0: Port device dummy0 added [ 559.666439][T32333] team0: Port device dummy0 removed [ 559.677373][ T37] tipc: Resetting bearer [ 559.972609][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9300'. [ 559.982656][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9300'. [ 560.083585][T32350] validate_nla: 12 callbacks suppressed [ 560.083605][T32350] netlink: 'syz.2.9308': attribute type 21 has an invalid length. [ 560.097752][T32350] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9308'. [ 560.121387][T32364] netlink: 'syz.0.9312': attribute type 10 has an invalid length. [ 560.177541][T32365] usb usb8: usbfs: process 32365 (syz.1.9309) did not claim interface 0 before use [ 560.187684][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 560.187701][ T29] audit: type=1400 audit(1759623148.304:46310): avc: denied { bind } for pid=32356 comm="syz.1.9309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 560.417556][T32368] lo speed is unknown, defaulting to 1000 [ 560.467307][ T29] audit: type=1326 audit(1759623148.594:46311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.519407][T32371] netlink: 'syz.0.9314': attribute type 10 has an invalid length. [ 560.542572][ T29] audit: type=1326 audit(1759623148.624:46312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.566353][ T29] audit: type=1326 audit(1759623148.624:46313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.590121][ T29] audit: type=1326 audit(1759623148.624:46314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.613916][ T29] audit: type=1326 audit(1759623148.624:46315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.637557][ T29] audit: type=1326 audit(1759623148.624:46316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.661174][ T29] audit: type=1326 audit(1759623148.624:46317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.684912][ T29] audit: type=1326 audit(1759623148.624:46318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.708731][ T29] audit: type=1326 audit(1759623148.624:46319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32370 comm="syz.0.9314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 560.821881][T32383] 9pnet_fd: Insufficient options for proto=fd [ 560.911290][T32393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9316'. [ 560.923688][T32393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9316'. [ 560.941896][T32391] SELinux: failed to load policy [ 560.990205][T32397] ip6gre1: entered allmulticast mode [ 561.202473][T32402] lo speed is unknown, defaulting to 1000 [ 561.248371][T32404] batadv0: entered promiscuous mode [ 561.254196][T32404] macvtap1: entered promiscuous mode [ 561.260766][T32404] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 561.271780][T32404] batadv0: left promiscuous mode [ 561.491913][T32408] lo speed is unknown, defaulting to 1000 [ 561.552653][T32410] netlink: 'syz.3.9328': attribute type 10 has an invalid length. [ 561.562183][T32410] team0: Port device dummy0 added [ 561.588313][T32412] SELinux: failed to load policy [ 561.925051][T32422] netlink: 'syz.1.9334': attribute type 10 has an invalid length. [ 561.938193][T32422] netlink: 'syz.1.9334': attribute type 10 has an invalid length. [ 561.947540][T32422] team0: Port device dummy0 removed [ 561.955583][T32422] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 562.065873][T32432] netlink: 'syz.3.9339': attribute type 10 has an invalid length. [ 562.078840][ T5006] tipc: Resetting bearer [ 562.282973][T32445] lo speed is unknown, defaulting to 1000 [ 562.346172][T32449] netlink: 'syz.3.9347': attribute type 10 has an invalid length. [ 562.393840][T32457] netlink: 'syz.1.9351': attribute type 10 has an invalid length. [ 562.403449][T32457] bond0: (slave dummy0): Releasing backup interface [ 562.406180][T32444] netlink: 'syz.5.9345': attribute type 21 has an invalid length. [ 562.421729][T32457] team0: Port device dummy0 added [ 562.428205][T32444] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9345'. [ 562.488119][T32461] FAULT_INJECTION: forcing a failure. [ 562.488119][T32461] name failslab, interval 1, probability 0, space 0, times 0 [ 562.500914][T32461] CPU: 0 UID: 0 PID: 32461 Comm: syz.3.9352 Not tainted syzkaller #0 PREEMPT(voluntary) [ 562.500943][T32461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 562.500959][T32461] Call Trace: [ 562.500966][T32461] [ 562.500976][T32461] __dump_stack+0x1d/0x30 [ 562.501073][T32461] dump_stack_lvl+0xe8/0x140 [ 562.501103][T32461] dump_stack+0x15/0x1b [ 562.501131][T32461] should_fail_ex+0x265/0x280 [ 562.501235][T32461] should_failslab+0x8c/0xb0 [ 562.501258][T32461] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 562.501281][T32461] ? __alloc_skb+0x101/0x320 [ 562.501318][T32461] __alloc_skb+0x101/0x320 [ 562.501345][T32461] netlink_alloc_large_skb+0xbf/0xf0 [ 562.501379][T32461] netlink_sendmsg+0x3cf/0x6b0 [ 562.501469][T32461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.501506][T32461] __sock_sendmsg+0x145/0x180 [ 562.501627][T32461] ____sys_sendmsg+0x31e/0x4e0 [ 562.501709][T32461] ___sys_sendmsg+0x17b/0x1d0 [ 562.501739][T32461] __x64_sys_sendmsg+0xd4/0x160 [ 562.501760][T32461] x64_sys_call+0x191e/0x3000 [ 562.501779][T32461] do_syscall_64+0xd2/0x200 [ 562.501831][T32461] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 562.501854][T32461] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 562.501876][T32461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.501972][T32461] RIP: 0033:0x7efcda39eec9 [ 562.501987][T32461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.502075][T32461] RSP: 002b:00007efcd8e07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.502092][T32461] RAX: ffffffffffffffda RBX: 00007efcda5f5fa0 RCX: 00007efcda39eec9 [ 562.502103][T32461] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 562.502114][T32461] RBP: 00007efcd8e07090 R08: 0000000000000000 R09: 0000000000000000 [ 562.502126][T32461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.502137][T32461] R13: 00007efcda5f6038 R14: 00007efcda5f5fa0 R15: 00007ffeba6ea7c8 [ 562.502155][T32461] [ 563.639613][T32505] lo speed is unknown, defaulting to 1000 [ 564.157644][T32521] 9pnet_fd: Insufficient options for proto=fd [ 564.304898][T32517] hub 2-0:1.0: USB hub found [ 564.309738][T32517] hub 2-0:1.0: 8 ports detected [ 564.329331][T32533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9375'. [ 564.345904][T32510] hub 2-0:1.0: USB hub found [ 564.350994][T32510] hub 2-0:1.0: 8 ports detected [ 564.443207][T32540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9378'. [ 564.692123][T32548] usb usb8: usbfs: process 32548 (syz.5.9380) did not claim interface 0 before use [ 564.868815][T32556] team0: Port device dummy0 removed [ 564.902627][T32556] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 565.022443][T32564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9385'. [ 565.354076][T32568] validate_nla: 7 callbacks suppressed [ 565.354094][T32568] netlink: 'syz.5.9392': attribute type 10 has an invalid length. [ 565.393104][T32572] netlink: 'syz.5.9393': attribute type 10 has an invalid length. [ 565.401401][T32572] netlink: 'syz.5.9393': attribute type 10 has an invalid length. [ 565.410261][T32572] team0: Port device dummy0 removed [ 565.446862][T32572] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 565.581363][T32582] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9396'. [ 565.594218][T32581] ip6gre1: entered allmulticast mode [ 565.649476][T32582] netlink: 'syz.5.9396': attribute type 9 has an invalid length. [ 565.699584][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 565.699601][ T29] audit: type=1326 audit(1759623153.824:46556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.773274][ T29] audit: type=1326 audit(1759623153.854:46557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.797091][ T29] audit: type=1326 audit(1759623153.854:46558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.820861][ T29] audit: type=1326 audit(1759623153.854:46559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.844476][ T29] audit: type=1326 audit(1759623153.854:46560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.868330][ T29] audit: type=1326 audit(1759623153.854:46561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.891980][ T29] audit: type=1326 audit(1759623153.854:46562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.915585][ T29] audit: type=1326 audit(1759623153.854:46563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.939195][ T29] audit: type=1326 audit(1759623153.854:46564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 565.962798][ T29] audit: type=1326 audit(1759623153.854:46565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32584 comm="syz.0.9397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 566.016642][T32588] ip6gre15: entered allmulticast mode [ 566.051424][T32592] netlink: 'syz.5.9400': attribute type 10 has an invalid length. [ 566.063694][T32592] bond0: (slave dummy0): Releasing backup interface [ 566.073216][T32592] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 566.082040][T32592] team0: Failed to send options change via netlink (err -105) [ 566.089728][T32592] team0: Port device dummy0 added [ 566.224005][T32602] usb usb8: usbfs: process 32602 (syz.2.9403) did not claim interface 0 before use [ 566.252199][T32606] netlink: 'syz.0.9404': attribute type 10 has an invalid length. [ 566.263184][T32606] bond0: (slave dummy0): Releasing backup interface [ 566.273164][T32606] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 566.281883][T32606] team0: Failed to send options change via netlink (err -105) [ 566.289508][T32606] team0: Port device dummy0 added [ 566.328538][T32598] netlink: 'syz.5.9402': attribute type 21 has an invalid length. [ 566.337278][T32598] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9402'. [ 566.537620][T32614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9408'. [ 566.549453][T32614] netlink: 'syz.1.9408': attribute type 9 has an invalid length. [ 566.896118][T32620] netlink: 'syz.0.9411': attribute type 10 has an invalid length. [ 566.913562][T32620] netlink: 'syz.0.9411': attribute type 10 has an invalid length. [ 566.930346][T32620] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 566.945277][T32620] team0: Port device dummy0 removed [ 566.954947][T32620] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 567.005297][T32635] bond0: (slave dummy0): Releasing backup interface [ 567.018716][T32635] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 567.028250][T32635] team0: Failed to send options change via netlink (err -105) [ 567.036328][T32635] team0: Port device dummy0 added [ 567.048323][T32635] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 567.060382][T32635] team0: Failed to send options change via netlink (err -105) [ 567.068573][T32635] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 567.078299][T32635] team0: Port device dummy0 removed [ 567.089195][T32635] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 567.163620][T32648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9417'. [ 567.206336][T32647] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 567.230155][T32651] ip6gre16: entered allmulticast mode [ 567.374498][T32643] lo speed is unknown, defaulting to 1000 [ 567.928516][T32664] SELinux: failed to load policy [ 568.050121][T32670] 9pnet_fd: Insufficient options for proto=fd [ 568.129094][T32675] ip6gre17: entered allmulticast mode [ 568.301392][T32689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9435'. [ 568.305450][T32687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9436'. [ 568.433358][T32695] SELinux: failed to load policy [ 568.496867][T32699] team0: Port device dummy0 removed [ 568.505924][T32699] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 568.729519][T32707] batadv0: entered promiscuous mode [ 568.735007][T32707] macvtap1: entered promiscuous mode [ 568.741366][T32707] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 568.750043][T32707] batadv0: left promiscuous mode [ 568.798150][T32712] bond0: (slave dummy0): Releasing backup interface [ 568.807772][T32712] team0: Port device dummy0 added [ 568.986816][T32730] SELinux: failed to load policy [ 569.014607][T32732] team0: Port device dummy0 removed [ 569.022473][T32732] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 569.032348][T32714] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9447'. [ 569.147494][T32727] hub 2-0:1.0: USB hub found [ 569.152282][T32727] hub 2-0:1.0: 8 ports detected [ 569.271763][T32749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9460'. [ 569.283523][T32749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9460'. [ 569.284144][T32735] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9457'. [ 569.356065][T32751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9462'. [ 569.648799][T32761] 9pnet_fd: Insufficient options for proto=fd [ 569.661617][T32758] ip6gre2: entered allmulticast mode [ 569.927744][T32762] lo speed is unknown, defaulting to 1000 [ 570.143149][ T317] batadv0: entered promiscuous mode [ 570.148446][ T317] macvtap1: entered promiscuous mode [ 570.154824][ T317] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 570.163953][ T317] batadv0: left promiscuous mode [ 570.450120][ T327] validate_nla: 16 callbacks suppressed [ 570.450139][ T327] netlink: 'syz.1.9476': attribute type 10 has an invalid length. [ 570.465922][ T327] team0: Port device dummy0 removed [ 570.475568][ T327] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 570.736816][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 570.736835][ T29] audit: type=1326 audit(1759623158.864:46918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.768143][ T29] audit: type=1326 audit(1759623158.864:46919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.792273][ T29] audit: type=1326 audit(1759623158.874:46920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.816264][ T29] audit: type=1326 audit(1759623158.874:46921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.840220][ T29] audit: type=1326 audit(1759623158.874:46922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.864643][ T29] audit: type=1326 audit(1759623158.874:46923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.888742][ T29] audit: type=1326 audit(1759623158.874:46924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.912695][ T29] audit: type=1326 audit(1759623158.874:46925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.936755][ T29] audit: type=1326 audit(1759623158.874:46926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 570.960950][ T29] audit: type=1326 audit(1759623158.874:46927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=338 comm="syz.2.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70abdeeec9 code=0x7ffc0000 [ 571.279185][ T367] batadv0: entered promiscuous mode [ 571.283991][ T369] netlink: 'syz.1.9491': attribute type 10 has an invalid length. [ 571.284772][ T367] macvtap1: entered promiscuous mode [ 571.298543][ T367] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 571.307198][ T367] batadv0: left promiscuous mode [ 571.318295][ T369] bond0: (slave dummy0): Releasing backup interface [ 571.328135][ T369] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 571.335385][ T372] netlink: 'syz.1.9491': attribute type 10 has an invalid length. [ 571.337325][ T369] team0: Failed to send options change via netlink (err -105) [ 571.352486][ T369] team0: Port device dummy0 added [ 571.354631][ T372] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 571.369600][ T372] team0: Failed to send options change via netlink (err -105) [ 571.377728][ T372] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 571.395201][ T372] team0: Port device dummy0 removed [ 571.403988][ T372] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 571.564755][ T380] __nla_validate_parse: 8 callbacks suppressed [ 571.564773][ T380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9494'. [ 571.600399][ T380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9494'. [ 571.875342][ T388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9497'. [ 572.024479][ T391] batadv0: entered promiscuous mode [ 572.059534][ T391] macvtap1: entered promiscuous mode [ 572.073930][ T391] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 572.083148][ T391] batadv0: left promiscuous mode [ 572.647164][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9507'. [ 572.656782][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9507'. [ 572.794553][ T422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9509'. [ 573.072200][ T436] ip6gre2: entered allmulticast mode [ 573.160051][ T445] netlink: 'syz.3.9517': attribute type 10 has an invalid length. [ 573.253710][ T456] ip6gre18: entered allmulticast mode [ 573.349628][ T459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9522'. [ 573.362453][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9522'. [ 573.814051][ T478] netlink: 'syz.2.9530': attribute type 10 has an invalid length. [ 573.875274][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9529'. [ 574.075795][ T481] netlink: 'syz.2.9531': attribute type 21 has an invalid length. [ 574.084467][ T481] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9531'. [ 574.136043][ T489] batadv0: entered promiscuous mode [ 574.141455][ T489] macvtap1: entered promiscuous mode [ 574.147726][ T489] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 574.156704][ T489] batadv0: left promiscuous mode [ 574.168453][ T484] hub 2-0:1.0: USB hub found [ 574.173477][ T484] hub 2-0:1.0: 8 ports detected [ 574.320297][ T510] SELinux: failed to load policy [ 574.382153][ T516] netlink: 'syz.3.9542': attribute type 10 has an invalid length. [ 574.504351][ T506] netlink: 'syz.5.9537': attribute type 21 has an invalid length. [ 574.636353][ T525] netlink: 'syz.2.9546': attribute type 10 has an invalid length. [ 574.644996][ T525] netlink: 'syz.2.9546': attribute type 10 has an invalid length. [ 574.654325][ T525] team0: Failed to send options change via netlink (err -105) [ 574.662102][ T525] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 574.671507][ T525] team0: Port device dummy0 removed [ 574.679489][ T525] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 574.791346][ T538] SELinux: failed to load policy [ 574.848704][ T544] bond0: (slave dummy0): Releasing backup interface [ 574.859136][ T544] team0: Failed to send options change via netlink (err -105) [ 574.866735][ T544] team0: Port device dummy0 added [ 574.917431][ T1723] tipc: Resetting bearer [ 574.943121][ T549] FAULT_INJECTION: forcing a failure. [ 574.943121][ T549] name failslab, interval 1, probability 0, space 0, times 0 [ 574.955808][ T549] CPU: 1 UID: 0 PID: 549 Comm: syz.3.9556 Not tainted syzkaller #0 PREEMPT(voluntary) [ 574.955858][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 574.955872][ T549] Call Trace: [ 574.955879][ T549] [ 574.955888][ T549] __dump_stack+0x1d/0x30 [ 574.955934][ T549] dump_stack_lvl+0xe8/0x140 [ 574.955995][ T549] dump_stack+0x15/0x1b [ 574.956093][ T549] should_fail_ex+0x265/0x280 [ 574.956135][ T549] should_failslab+0x8c/0xb0 [ 574.956164][ T549] kmem_cache_alloc_noprof+0x50/0x480 [ 574.956194][ T549] ? getname_flags+0x80/0x3b0 [ 574.956265][ T549] getname_flags+0x80/0x3b0 [ 574.956299][ T549] __x64_sys_lgetxattr+0xfd/0x140 [ 574.956342][ T549] x64_sys_call+0x2fb3/0x3000 [ 574.956367][ T549] do_syscall_64+0xd2/0x200 [ 574.956414][ T549] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 574.956505][ T549] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 574.956530][ T549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.956551][ T549] RIP: 0033:0x7efcda39eec9 [ 574.956567][ T549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.956584][ T549] RSP: 002b:00007efcd8e07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 574.956666][ T549] RAX: ffffffffffffffda RBX: 00007efcda5f5fa0 RCX: 00007efcda39eec9 [ 574.956682][ T549] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 574.956696][ T549] RBP: 00007efcd8e07090 R08: 0000000000000000 R09: 0000000000000000 [ 574.956711][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.956727][ T549] R13: 00007efcda5f6038 R14: 00007efcda5f5fa0 R15: 00007ffeba6ea7c8 [ 574.956764][ T549] [ 575.184209][ T553] team0: Port device dummy0 removed [ 575.213002][ T553] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 575.275290][ T565] SELinux: failed to load policy [ 575.544490][ T581] validate_nla: 4 callbacks suppressed [ 575.544506][ T581] netlink: 'syz.0.9568': attribute type 10 has an invalid length. [ 575.560303][ T581] bond0: (slave dummy0): Releasing backup interface [ 575.570352][ T581] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 575.581771][ T581] team0: Failed to send options change via netlink (err -105) [ 575.589425][ T581] team0: Port device dummy0 added [ 575.695035][ T599] SELinux: failed to load policy [ 575.713997][ T600] netlink: 'syz.2.9573': attribute type 1 has an invalid length. [ 575.722030][ T600] netlink: 'syz.2.9573': attribute type 2 has an invalid length. [ 575.771774][ T607] netlink: 'syz.2.9579': attribute type 10 has an invalid length. [ 575.782400][ T607] bond0: (slave dummy0): Releasing backup interface [ 575.794091][ T607] team0: Failed to send options change via netlink (err -105) [ 575.801645][ T607] team0: Port device dummy0 added [ 575.812907][ T607] netlink: 'syz.2.9579': attribute type 10 has an invalid length. [ 575.821522][ T607] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 575.833237][ T607] team0: Failed to send options change via netlink (err -105) [ 575.840937][ T607] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 575.850479][ T588] netlink: 'syz.0.9570': attribute type 21 has an invalid length. [ 575.858839][ T607] team0: Port device dummy0 removed [ 575.867301][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 575.867317][ T29] audit: type=1326 audit(1759623164.004:47428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 575.897225][ T29] audit: type=1326 audit(1759623164.004:47429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 575.904567][ T607] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 575.922904][ T29] audit: type=1326 audit(1759623164.054:47430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 575.952616][ T29] audit: type=1326 audit(1759623164.054:47431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 575.976109][ T29] audit: type=1326 audit(1759623164.054:47432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 575.977767][ T1723] tipc: Resetting bearer [ 576.000651][ T29] audit: type=1326 audit(1759623164.134:47433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 576.028464][ T29] audit: type=1326 audit(1759623164.134:47434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 576.051968][ T29] audit: type=1326 audit(1759623164.134:47435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 576.094988][ T614] netlink: 'syz.2.9580': attribute type 10 has an invalid length. [ 576.096450][ T29] audit: type=1326 audit(1759623164.214:47436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 576.126671][ T29] audit: type=1326 audit(1759623164.214:47437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.1.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5884eec9 code=0x7ffc0000 [ 576.150977][ T614] bond0: (slave dummy0): Releasing backup interface [ 576.171598][ T614] team0: Failed to send options change via netlink (err -105) [ 576.180003][ T614] team0: Port device dummy0 added [ 576.252275][ T622] ip6gre1: entered allmulticast mode [ 576.479660][ T627] lo speed is unknown, defaulting to 1000 [ 576.554453][ T627] chnl_net:caif_netlink_parms(): no params data found [ 576.580333][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.617542][ T649] SELinux: failed to load policy [ 576.631463][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.665104][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.672618][ T627] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.686166][ T627] bridge_slave_0: entered allmulticast mode [ 576.693143][ T627] bridge_slave_0: entered promiscuous mode [ 576.702432][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.714178][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.721381][ T627] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.730081][ T627] bridge_slave_1: entered allmulticast mode [ 576.737405][ T627] bridge_slave_1: entered promiscuous mode [ 576.755049][ T627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.766315][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.779104][ T627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.781371][ T659] netlink: 'syz.0.9591': attribute type 10 has an invalid length. [ 576.799874][ T659] netlink: 'syz.0.9591': attribute type 10 has an invalid length. [ 576.809968][ T659] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 576.818929][ T659] team0: Port device dummy0 removed [ 576.826070][ T659] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 576.835618][ T627] team0: Port device team_slave_0 added [ 576.842479][ T627] team0: Port device team_slave_1 added [ 576.870451][ T663] netlink: 'syz.0.9594': attribute type 10 has an invalid length. [ 576.882313][ T627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.889353][ T627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.915334][ T627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.962096][ T627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.969154][ T627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.995188][ T627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.021421][ T670] SELinux: failed to load policy [ 577.052298][ T672] FAULT_INJECTION: forcing a failure. [ 577.052298][ T672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.065499][ T672] CPU: 0 UID: 0 PID: 672 Comm: syz.5.9598 Not tainted syzkaller #0 PREEMPT(voluntary) [ 577.065543][ T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.065556][ T672] Call Trace: [ 577.065563][ T672] [ 577.065571][ T672] __dump_stack+0x1d/0x30 [ 577.065607][ T672] dump_stack_lvl+0xe8/0x140 [ 577.065667][ T672] dump_stack+0x15/0x1b [ 577.065696][ T672] should_fail_ex+0x265/0x280 [ 577.065844][ T672] should_fail+0xb/0x20 [ 577.065879][ T672] should_fail_usercopy+0x1a/0x20 [ 577.065902][ T672] _copy_from_user+0x1c/0xb0 [ 577.065967][ T672] ___sys_recvmsg+0xaa/0x370 [ 577.065986][ T672] ? _parse_integer+0x27/0x40 [ 577.066090][ T672] do_recvmmsg+0x1ef/0x540 [ 577.066125][ T672] ? get_timespec64+0xc9/0x100 [ 577.066153][ T672] __x64_sys_recvmmsg+0xfb/0x170 [ 577.066181][ T672] x64_sys_call+0x27aa/0x3000 [ 577.066241][ T672] do_syscall_64+0xd2/0x200 [ 577.066272][ T672] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 577.066305][ T672] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 577.066414][ T672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.066441][ T672] RIP: 0033:0x7fe3070beec9 [ 577.066457][ T672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.066478][ T672] RSP: 002b:00007fe305b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 577.066502][ T672] RAX: ffffffffffffffda RBX: 00007fe307315fa0 RCX: 00007fe3070beec9 [ 577.066518][ T672] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 577.066593][ T672] RBP: 00007fe305b1f090 R08: 0000200000003700 R09: 0000000000000000 [ 577.066610][ T672] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 577.066626][ T672] R13: 00007fe307316038 R14: 00007fe307315fa0 R15: 00007ffe93098d28 [ 577.066652][ T672] [ 577.315535][ T668] __nla_validate_parse: 19 callbacks suppressed [ 577.315551][ T668] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9596'. [ 577.420178][ T627] hsr_slave_0: entered promiscuous mode [ 577.443670][ T627] hsr_slave_1: entered promiscuous mode [ 577.612183][ T12] bond0 (unregistering): Released all slaves [ 577.645260][ T678] bond0: (slave dummy0): Releasing backup interface [ 577.670880][ T678] team0: Port device dummy0 added [ 577.853462][ T12] tipc: Disabling bearer [ 577.859063][ T12] tipc: Left network mode [ 577.869850][ T12] hsr_slave_0: left promiscuous mode [ 577.890559][ T12] hsr_slave_1: left promiscuous mode [ 577.900749][ T12] veth1_macvtap: left promiscuous mode [ 577.915560][ T12] veth0_macvtap: left promiscuous mode [ 577.921772][ T12] veth1_vlan: left promiscuous mode [ 577.927143][ T12] veth0_vlan: left promiscuous mode [ 578.084192][ T12] team0 (unregistering): Port device dummy0 removed [ 578.105746][ T702] bond0: (slave dummy0): Releasing backup interface [ 578.115118][ T702] team0: Port device dummy0 added [ 578.152282][ T704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9609'. [ 578.227633][ T707] lo speed is unknown, defaulting to 1000 [ 578.599587][ T627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.634737][ T627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.645435][ T627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.658618][ T627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.720978][ T627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.734104][ T627] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.745431][ T5006] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.752543][ T5006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.783668][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.790767][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.956199][ T737] lo speed is unknown, defaulting to 1000 [ 578.963415][ T627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.061633][ T745] lo speed is unknown, defaulting to 1000 [ 579.123201][ T627] veth0_vlan: entered promiscuous mode [ 579.135304][ T627] veth1_vlan: entered promiscuous mode [ 579.164047][ T627] veth0_macvtap: entered promiscuous mode [ 579.171421][ T627] veth1_macvtap: entered promiscuous mode [ 579.190052][ T627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.203490][ T627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.215641][ T1723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.238684][ T742] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9619'. [ 579.247893][ T1723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.280603][ T1723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.294079][ T1723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.313281][ T758] Set syz1 is full, maxelem 6117 reached [ 579.404953][ T776] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9631'. [ 579.563374][ T785] team0: Port device dummy0 removed [ 579.571465][ T785] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 579.611201][ T787] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 579.707122][ T793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.734374][ T793] veth0_to_team: entered promiscuous mode [ 579.740179][ T793] veth0_to_team: entered allmulticast mode [ 579.782263][ T801] 9pnet: Could not find request transport: fd0x0000000000000003 [ 580.055973][ T814] lo speed is unknown, defaulting to 1000 [ 580.097303][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.138648][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.181334][ T814] chnl_net:caif_netlink_parms(): no params data found [ 580.197033][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.251718][ T842] SELinux: failed to load policy [ 580.299451][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.340808][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.347997][ T814] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.373615][ T814] bridge_slave_0: entered allmulticast mode [ 580.382345][ T814] bridge_slave_0: entered promiscuous mode [ 580.391387][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.398596][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.405829][ T814] bridge_slave_1: entered allmulticast mode [ 580.412581][ T814] bridge_slave_1: entered promiscuous mode [ 580.447141][ T814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.462127][ T814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.512226][ T857] 9pnet_fd: Insufficient options for proto=fd [ 580.647695][ T814] team0: Port device team_slave_0 added [ 580.655391][ T814] team0: Port device team_slave_1 added [ 580.675174][ T814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.682226][ T814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.708416][ T814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.767197][ T814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.774281][ T814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.800258][ T814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.831585][ T12] tipc: Disabling bearer [ 580.837659][ T12] tipc: Left network mode [ 580.852146][ T814] hsr_slave_0: entered promiscuous mode [ 580.858996][ T814] hsr_slave_1: entered promiscuous mode [ 580.865386][ T814] debugfs: 'hsr0' already exists in 'hsr' [ 580.871171][ T814] Cannot create hsr debugfs directory [ 580.898287][ T12] hsr_slave_0: left promiscuous mode [ 580.924516][ T12] hsr_slave_1: left promiscuous mode [ 580.937187][ T12] veth1_macvtap: left promiscuous mode [ 580.943176][ T12] veth0_macvtap: left promiscuous mode [ 580.948926][ T12] veth1_vlan: left promiscuous mode [ 581.040599][ T12] veth0_vlan: left promiscuous mode [ 581.309357][ T12] team0 (unregistering): Port device dummy0 removed [ 581.628143][ T887] 9pnet_fd: Insufficient options for proto=fd [ 581.829068][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 581.829083][ T29] audit: type=1400 audit(1759623169.954:47817): avc: denied { mount } for pid=899 comm="syz.5.9677" name="/" dev="ramfs" ino=109653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 581.842314][ T901] lo speed is unknown, defaulting to 1000 [ 581.860403][ T29] audit: type=1400 audit(1759623169.954:47818): avc: denied { mounton } for pid=899 comm="syz.5.9677" path="/file0" dev="ramfs" ino=109654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 581.903890][ T896] validate_nla: 7 callbacks suppressed [ 581.903911][ T896] netlink: 'syz.2.9676': attribute type 21 has an invalid length. [ 581.925547][ T896] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9676'. [ 581.986477][ T814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 581.998035][ T814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 582.007409][ T814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 582.016359][ T814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 582.061630][ T814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.076590][ T814] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.079337][ T29] audit: type=1326 audit(1759623170.204:47819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.101079][ T814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.106829][ T29] audit: type=1326 audit(1759623170.204:47820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.117275][ T814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.134576][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.158159][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.159421][ T29] audit: type=1326 audit(1759623170.264:47821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.167689][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.188853][ T29] audit: type=1326 audit(1759623170.264:47822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.195975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.219466][ T29] audit: type=1326 audit(1759623170.264:47823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.250124][ T29] audit: type=1326 audit(1759623170.264:47824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.273753][ T29] audit: type=1326 audit(1759623170.264:47825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.289899][ T814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.297334][ T29] audit: type=1326 audit(1759623170.264:47826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=916 comm="syz.5.9682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 582.368692][ T929] 9pnet_fd: Insufficient options for proto=fd [ 582.401006][ T814] veth0_vlan: entered promiscuous mode [ 582.410718][ T814] veth1_vlan: entered promiscuous mode [ 582.430056][ T814] veth0_macvtap: entered promiscuous mode [ 582.438810][ T814] veth1_macvtap: entered promiscuous mode [ 582.460370][ T814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.473844][ T814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.487050][ T1723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.497434][ T1723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.518768][ T1723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.555174][ T1723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.596109][ T947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.619958][ T947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.633547][ T950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9687'. [ 582.667583][ T952] hugetlbfs: syz.1.9693 (952): Using mlock ulimits for SHM_HUGETLB is obsolete [ 582.743776][ T958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9692'. [ 582.759990][ T961] netlink: 'syz.1.9694': attribute type 10 has an invalid length. [ 583.039339][ T965] netlink: 'syz.3.9696': attribute type 21 has an invalid length. [ 583.047651][ T965] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9696'. [ 583.381993][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9703'. [ 583.393124][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9703'. [ 583.438541][ T991] hub 2-0:1.0: USB hub found [ 583.443363][ T991] hub 2-0:1.0: 8 ports detected [ 583.535825][ T1001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9709'. [ 583.607439][ T996] hub 2-0:1.0: USB hub found [ 583.612565][ T996] hub 2-0:1.0: 8 ports detected [ 583.613446][ T1005] netlink: 'syz.3.9711': attribute type 10 has an invalid length. [ 583.637664][ T1005] team0: Port device dummy0 added [ 583.727090][ T1013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9716'. [ 583.941888][ T1033] netlink: 'syz.2.9724': attribute type 10 has an invalid length. [ 583.956550][ T1033] team0: Port device dummy0 added [ 583.989051][ T1041] netlink: 'syz.2.9728': attribute type 10 has an invalid length. [ 584.028431][ T1044] netlink: 'syz.1.9731': attribute type 10 has an invalid length. [ 584.074906][ T1052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9733'. [ 584.098523][ T1027] netlink: 'syz.0.9721': attribute type 21 has an invalid length. [ 584.112872][ T1027] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9721'. [ 584.167704][ T1057] ip6gre3: entered allmulticast mode [ 584.303548][ T1049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9729'. [ 584.677328][ T1072] netlink: 'syz.0.9739': attribute type 10 has an invalid length. [ 584.699113][ T1074] batadv0: entered promiscuous mode [ 584.704496][ T1074] macvtap1: entered promiscuous mode [ 584.710624][ T1074] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 584.720083][ T1074] batadv0: left promiscuous mode [ 584.729015][ T1072] bond0: (slave dummy0): Releasing backup interface [ 584.737969][ T1072] team0: Port device dummy0 added [ 585.006541][ T1083] batadv0: entered promiscuous mode [ 585.028026][ T1083] macvtap1: entered promiscuous mode [ 585.050716][ T1083] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 585.104499][ T1083] batadv0: left promiscuous mode [ 585.673746][ T1108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.681037][ T1108] IPv6: NLM_F_CREATE should be set when creating new route [ 585.688303][ T1108] IPv6: NLM_F_CREATE should be set when creating new route [ 586.028879][ T1141] SELinux: policydb version 0 does not match my version range 15-35 [ 586.039607][ T1141] SELinux: failed to load policy [ 586.800698][ T1181] FAULT_INJECTION: forcing a failure. [ 586.800698][ T1181] name failslab, interval 1, probability 0, space 0, times 0 [ 586.813402][ T1181] CPU: 0 UID: 0 PID: 1181 Comm: syz.3.9781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 586.813495][ T1181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.813507][ T1181] Call Trace: [ 586.813513][ T1181] [ 586.813521][ T1181] __dump_stack+0x1d/0x30 [ 586.813553][ T1181] dump_stack_lvl+0xe8/0x140 [ 586.813618][ T1181] dump_stack+0x15/0x1b [ 586.813645][ T1181] should_fail_ex+0x265/0x280 [ 586.813675][ T1181] should_failslab+0x8c/0xb0 [ 586.813763][ T1181] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 586.813828][ T1181] ? __get_vm_area_node+0x106/0x1d0 [ 586.813898][ T1181] __get_vm_area_node+0x106/0x1d0 [ 586.813923][ T1181] __vmalloc_node_range_noprof+0x28c/0xed0 [ 586.813991][ T1181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 586.814021][ T1181] ? __rcu_read_unlock+0x4f/0x70 [ 586.814102][ T1181] ? cred_has_capability+0x210/0x280 [ 586.814171][ T1181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 586.814269][ T1181] __vmalloc_noprof+0x83/0xc0 [ 586.814293][ T1181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 586.814320][ T1181] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 586.814396][ T1181] ? bpf_prog_alloc+0x2a/0x150 [ 586.814431][ T1181] bpf_prog_alloc+0x3c/0x150 [ 586.814466][ T1181] bpf_prog_load+0x506/0x1100 [ 586.814568][ T1181] ? security_bpf+0x2b/0x90 [ 586.814592][ T1181] __sys_bpf+0x469/0x7c0 [ 586.814640][ T1181] __x64_sys_bpf+0x41/0x50 [ 586.814664][ T1181] x64_sys_call+0x2aee/0x3000 [ 586.814694][ T1181] do_syscall_64+0xd2/0x200 [ 586.814716][ T1181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 586.814806][ T1181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 586.814865][ T1181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.814906][ T1181] RIP: 0033:0x7f7241cdeec9 [ 586.814920][ T1181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.814935][ T1181] RSP: 002b:00007f7240747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.814951][ T1181] RAX: ffffffffffffffda RBX: 00007f7241f35fa0 RCX: 00007f7241cdeec9 [ 586.814962][ T1181] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 586.814977][ T1181] RBP: 00007f7240747090 R08: 0000000000000000 R09: 0000000000000000 [ 586.814987][ T1181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.815064][ T1181] R13: 00007f7241f36038 R14: 00007f7241f35fa0 R15: 00007ffdd64e15a8 [ 586.815082][ T1181] [ 586.815090][ T1181] syz.3.9781: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 586.828474][ T1171] hub 2-0:1.0: USB hub found [ 586.835110][ T1181] ,cpuset=/,mems_allowed=0 [ 586.835147][ T1181] CPU: 0 UID: 0 PID: 1181 Comm: syz.3.9781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 586.835172][ T1181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.835239][ T1181] Call Trace: [ 586.835249][ T1181] [ 586.835262][ T1181] __dump_stack+0x1d/0x30 [ 586.835312][ T1181] dump_stack_lvl+0xe8/0x140 [ 586.835360][ T1181] dump_stack+0x15/0x1b [ 586.835448][ T1181] warn_alloc+0x12b/0x1a0 [ 586.835570][ T1181] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 586.835613][ T1181] ? __rcu_read_unlock+0x4f/0x70 [ 586.835652][ T1181] ? cred_has_capability+0x210/0x280 [ 586.835692][ T1181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 586.835793][ T1181] __vmalloc_noprof+0x83/0xc0 [ 586.835839][ T1181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 586.835920][ T1181] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 586.835967][ T1181] ? bpf_prog_alloc+0x2a/0x150 [ 586.836006][ T1181] bpf_prog_alloc+0x3c/0x150 [ 586.836084][ T1181] bpf_prog_load+0x506/0x1100 [ 586.836140][ T1181] ? security_bpf+0x2b/0x90 [ 586.836175][ T1181] __sys_bpf+0x469/0x7c0 [ 586.836229][ T1181] __x64_sys_bpf+0x41/0x50 [ 586.836346][ T1181] x64_sys_call+0x2aee/0x3000 [ 586.836374][ T1181] do_syscall_64+0xd2/0x200 [ 586.836410][ T1181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 586.836447][ T1181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 586.836480][ T1181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.836538][ T1181] RIP: 0033:0x7f7241cdeec9 [ 586.836560][ T1181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.836584][ T1181] RSP: 002b:00007f7240747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.836607][ T1181] RAX: ffffffffffffffda RBX: 00007f7241f35fa0 RCX: 00007f7241cdeec9 [ 586.836625][ T1181] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 586.836642][ T1181] RBP: 00007f7240747090 R08: 0000000000000000 R09: 0000000000000000 [ 586.836660][ T1181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.836740][ T1181] R13: 00007f7241f36038 R14: 00007f7241f35fa0 R15: 00007ffdd64e15a8 [ 586.836767][ T1181] [ 586.836776][ T1181] Mem-Info: [ 586.838739][ T1171] hub 2-0:1.0: 8 ports detected [ 586.841398][ T1181] active_anon:12263 inactive_anon:17 isolated_anon:0 [ 586.841398][ T1181] active_file:26984 inactive_file:2620 isolated_file:0 [ 586.841398][ T1181] unevictable:0 dirty:391 writeback:0 [ 586.841398][ T1181] slab_reclaimable:3435 slab_unreclaimable:16553 [ 586.841398][ T1181] mapped:39920 shmem:7431 pagetables:1413 [ 586.841398][ T1181] sec_pagetables:0 bounce:0 [ 586.841398][ T1181] kernel_misc_reclaimable:0 [ 586.841398][ T1181] free:1858208 free_pcp:10513 free_cma:0 [ 587.340321][ T1181] Node 0 active_anon:49024kB inactive_anon:56kB active_file:107936kB inactive_file:10480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159760kB dirty:1576kB writeback:0kB shmem:29780kB kernel_stack:3712kB pagetables:6024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 587.368001][ T1181] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.397675][ T1181] lowmem_reserve[]: 0 2883 7862 7862 [ 587.403009][ T1181] Node 0 DMA32 free:2949344kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952876kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 587.434433][ T1181] lowmem_reserve[]: 0 0 4978 4978 [ 587.439484][ T1181] Node 0 Normal free:4468032kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49024kB inactive_anon:56kB active_file:107936kB inactive_file:10480kB unevictable:0kB writepending:1576kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:38152kB local_pcp:31364kB free_cma:0kB [ 587.472906][ T1181] lowmem_reserve[]: 0 0 0 0 [ 587.477430][ T1181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 587.490410][ T1181] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949344kB [ 587.506774][ T1181] Node 0 Normal: 3454*4kB (UE) 1502*8kB (UME) 753*16kB (UE) 977*32kB (UME) 604*64kB (UME) 283*128kB (UME) 119*256kB (UME) 48*512kB (UME) 31*1024kB (UM) 17*2048kB (UME) 1026*4096kB (UME) = 4468120kB [ 587.526732][ T1181] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 587.536064][ T1181] 36999 total pagecache pages [ 587.540743][ T1181] 64 pages in swap cache [ 587.545001][ T1181] Free swap = 124740kB [ 587.549155][ T1181] Total swap = 124996kB [ 587.553361][ T1181] 2097051 pages RAM [ 587.557154][ T1181] 0 pages HighMem/MovableOnly [ 587.561821][ T1181] 80432 pages reserved [ 587.768881][ T1205] Set syz1 is full, maxelem 6117 reached [ 587.857806][ T29] kauditd_printk_skb: 659 callbacks suppressed [ 587.857825][ T29] audit: type=1326 audit(1759623175.984:48486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.173746][ T29] audit: type=1326 audit(1759623176.084:48487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.197499][ T29] audit: type=1326 audit(1759623176.084:48488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.221135][ T29] audit: type=1326 audit(1759623176.094:48489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.244710][ T29] audit: type=1326 audit(1759623176.094:48490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.268394][ T29] audit: type=1326 audit(1759623176.094:48491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.292006][ T29] audit: type=1326 audit(1759623176.094:48492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.315788][ T29] audit: type=1326 audit(1759623176.094:48493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.339417][ T29] audit: type=1326 audit(1759623176.094:48494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.362919][ T29] audit: type=1326 audit(1759623176.094:48495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1213 comm="syz.5.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3070beec9 code=0x7ffc0000 [ 588.411315][ T1227] lo speed is unknown, defaulting to 1000 [ 588.513910][ T1231] netlink: 'syz.0.9802': attribute type 10 has an invalid length. [ 588.568828][ T1233] netlink: 'syz.1.9803': attribute type 10 has an invalid length. [ 588.682790][ T1229] hub 2-0:1.0: USB hub found [ 588.693417][ T1245] ip6gre3: entered allmulticast mode [ 588.707092][ T1229] hub 2-0:1.0: 8 ports detected [ 588.969365][ T1262] 9pnet_fd: Insufficient options for proto=fd [ 588.976633][ T1263] netlink: 'syz.2.9815': attribute type 10 has an invalid length. [ 589.031261][ T1272] __nla_validate_parse: 6 callbacks suppressed [ 589.031312][ T1272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9818'. [ 589.234748][ T1294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9821'. [ 589.255634][ T1294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9821'. [ 589.313786][ T1291] lo speed is unknown, defaulting to 1000 [ 589.573264][ T1299] FAULT_INJECTION: forcing a failure. [ 589.573264][ T1299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.586426][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: syz.2.9824 Not tainted syzkaller #0 PREEMPT(voluntary) [ 589.586460][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 589.586477][ T1299] Call Trace: [ 589.586486][ T1299] [ 589.586497][ T1299] __dump_stack+0x1d/0x30 [ 589.586546][ T1299] dump_stack_lvl+0xe8/0x140 [ 589.586647][ T1299] dump_stack+0x15/0x1b [ 589.586708][ T1299] should_fail_ex+0x265/0x280 [ 589.586740][ T1299] should_fail+0xb/0x20 [ 589.586775][ T1299] should_fail_usercopy+0x1a/0x20 [ 589.586821][ T1299] strncpy_from_user+0x25/0x230 [ 589.586892][ T1299] ? kmem_cache_alloc_noprof+0x242/0x480 [ 589.586923][ T1299] ? getname_flags+0x80/0x3b0 [ 589.586957][ T1299] getname_flags+0xae/0x3b0 [ 589.587061][ T1299] __x64_sys_symlink+0x33/0x60 [ 589.587090][ T1299] x64_sys_call+0x23d0/0x3000 [ 589.587131][ T1299] do_syscall_64+0xd2/0x200 [ 589.587157][ T1299] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 589.587284][ T1299] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 589.587312][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.587333][ T1299] RIP: 0033:0x7fad185feec9 [ 589.587351][ T1299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.587386][ T1299] RSP: 002b:00007fad17025038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 589.587410][ T1299] RAX: ffffffffffffffda RBX: 00007fad18856180 RCX: 00007fad185feec9 [ 589.587468][ T1299] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 00002000000008c0 [ 589.587482][ T1299] RBP: 00007fad17025090 R08: 0000000000000000 R09: 0000000000000000 [ 589.587493][ T1299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.587510][ T1299] R13: 00007fad18856218 R14: 00007fad18856180 R15: 00007ffebf3a7148 [ 589.587530][ T1299] [ 589.991732][ T1284] netlink: 'syz.1.9822': attribute type 4 has an invalid length. [ 590.013828][ T1299] netlink: 'syz.2.9824': attribute type 4 has an invalid length. [ 590.266486][ T1308] 9pnet_fd: Insufficient options for proto=fd [ 590.339990][ T1320] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9834'. [ 590.371080][ T1320] SELinux: policydb version 0 does not match my version range 15-35 [ 590.380294][ T1320] SELinux: failed to load policy [ 590.433297][ T1326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9837'. [ 590.450854][ T1330] netlink: 'syz.5.9839': attribute type 10 has an invalid length. [ 590.463860][ T1330] bond0: (slave dummy0): Releasing backup interface [ 590.474817][ T1330] team0: Port device dummy0 added [ 590.729474][ T1353] lo speed is unknown, defaulting to 1000 [ 590.746288][ T1335] hub 2-0:1.0: USB hub found [ 590.751115][ T1335] hub 2-0:1.0: 8 ports detected [ 590.990195][ T1365] netlink: 'syz.2.9854': attribute type 10 has an invalid length. [ 591.017896][ T1368] netlink: 'syz.2.9855': attribute type 10 has an invalid length. [ 591.047473][ T1370] netlink: 'syz.2.9856': attribute type 10 has an invalid length. [ 591.170626][ T1390] netlink: 'syz.2.9865': attribute type 10 has an invalid length. [ 591.325228][ T1401] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9869'. [ 591.336726][ T1401] SELinux: policydb version 0 does not match my version range 15-35 [ 591.345503][ T1401] SELinux: failed to load policy [ 591.554150][ T1421] tipc: Enabling of bearer rejected, failed to enable media [ 591.603092][ T1429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9881'. [ 591.614709][ T1429] SELinux: policydb version 0 does not match my version range 15-35 [ 591.624348][ T1429] SELinux: failed to load policy [ 591.841882][ T1451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9889'. [ 591.852544][ T1451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9889'. [ 591.897395][ T1456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9892'. [ 592.123569][ T1466] hub 2-0:1.0: USB hub found [ 592.128355][ T1466] hub 2-0:1.0: 8 ports detected [ 592.251227][ T1482] lo speed is unknown, defaulting to 1000 [ 592.513728][ T1499] batadv0: entered promiscuous mode [ 592.519652][ T1499] macvtap1: entered promiscuous mode [ 592.526108][ T1499] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 592.574107][ T1499] batadv0: left promiscuous mode [ 592.752775][ T1505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.765463][ T1505] bond1 (unregistering): Released all slaves [ 592.889462][ T1520] batadv0: entered promiscuous mode [ 592.894861][ T1520] macvtap1: entered promiscuous mode [ 592.901190][ T1520] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 592.910101][ T1520] batadv0: left promiscuous mode [ 592.934569][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 592.934586][ T29] audit: type=1326 audit(1759623181.064:49316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 592.965303][ T29] audit: type=1326 audit(1759623181.064:49317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 592.989100][ T29] audit: type=1326 audit(1759623181.064:49318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.013048][ T29] audit: type=1326 audit(1759623181.064:49319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.036704][ T29] audit: type=1326 audit(1759623181.064:49320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.060292][ T29] audit: type=1326 audit(1759623181.064:49321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.083821][ T29] audit: type=1326 audit(1759623181.064:49322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.107449][ T29] audit: type=1326 audit(1759623181.064:49323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.130975][ T29] audit: type=1326 audit(1759623181.064:49324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.154493][ T29] audit: type=1326 audit(1759623181.064:49325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.0.9918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa6c7eec9 code=0x7ffc0000 [ 593.207885][ T1535] rtc_cmos 00:00: Alarms can be up to one day in the future [ 593.216182][ T3809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 593.223874][ T3809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 593.231507][ T3809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 593.239182][ T3809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 593.246512][ T3809] rtc rtc0: __rtc_set_alarm: err=-22 [ 594.102847][ T1569] ================================================================== [ 594.110978][ T1569] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 594.118323][ T1569] [ 594.120661][ T1569] read to 0xffff88811df57b10 of 4 bytes by task 1567 on cpu 0: [ 594.128218][ T1569] atime_needs_update+0x25f/0x3e0 [ 594.133273][ T1569] touch_atime+0x4a/0x340 [ 594.137635][ T1569] shmem_file_read_iter+0x477/0x540 [ 594.142859][ T1569] copy_splice_read+0x442/0x660 [ 594.147740][ T1569] splice_direct_to_actor+0x290/0x680 [ 594.153135][ T1569] do_splice_direct+0xda/0x150 [ 594.157916][ T1569] do_sendfile+0x380/0x650 [ 594.162363][ T1569] __x64_sys_sendfile64+0x105/0x150 [ 594.167598][ T1569] x64_sys_call+0x2bb4/0x3000 [ 594.172297][ T1569] do_syscall_64+0xd2/0x200 [ 594.176928][ T1569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.182837][ T1569] [ 594.185177][ T1569] write to 0xffff88811df57b10 of 4 bytes by task 1569 on cpu 1: [ 594.192822][ T1569] touch_atime+0x1e8/0x340 [ 594.197284][ T1569] shmem_file_read_iter+0x477/0x540 [ 594.202593][ T1569] copy_splice_read+0x442/0x660 [ 594.207467][ T1569] splice_direct_to_actor+0x290/0x680 [ 594.212860][ T1569] do_splice_direct+0xda/0x150 [ 594.217637][ T1569] do_sendfile+0x380/0x650 [ 594.222078][ T1569] __x64_sys_sendfile64+0x105/0x150 [ 594.227303][ T1569] x64_sys_call+0x2bb4/0x3000 [ 594.231997][ T1569] do_syscall_64+0xd2/0x200 [ 594.236604][ T1569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.242506][ T1569] [ 594.244830][ T1569] value changed: 0x0d637cf3 -> 0x0dfc1373 [ 594.250551][ T1569] [ 594.252876][ T1569] Reported by Kernel Concurrency Sanitizer on: [ 594.259029][ T1569] CPU: 1 UID: 0 PID: 1569 Comm: syz.5.9932 Not tainted syzkaller #0 PREEMPT(voluntary) [ 594.268752][ T1569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.278810][ T1569] ==================================================================