last executing test programs: 3m50.697901061s ago: executing program 2 (id=3): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@dev}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) ioctl$TCSETS(r3, 0x8926, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) 3m50.387475016s ago: executing program 2 (id=6): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}, {&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x14}, {0x0}, {0x0}, {&(0x7f0000000f00)={0x1bc, 0x26, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xf7, 0xec, 0x0, 0x1, [@generic="eee4845d21555cf2d6f1eee61a2134b3db877cf85b78d91e4f61b6284523261d7cc08e544dff28d49ec5a273fc70b6bb1de467fc540f87e51ba2301d0016e363be62ff37dde8e99d2c0519ce43f28d9eb7dec47404632cf5f17ac1f839a953dc18cc42120f9597405eedca372934f5d040f29a13ff52902392441faceab36086c0dfe30c1b75d35b7b834be993ac9404ab82fc398780b8950cb75542a328e4446afc5bef1dda0dc497d772a3ff2f572bf1a1b2201ff6d4c7c15de78b4d505fe49cd7a4d9ba64787c60c9a8912d10ccbe07cd410525416cd6abfdf4e576a09b5691ce2e2b672f29494809e5", @typed={0x8, 0xfc, 0x0, 0x0, @pid}]}, @typed={0x8, 0xbf, 0x0, 0x0, @fd}, @nested={0xa9, 0x147, 0x0, 0x1, [@generic="b546b43c7eb1b834011433088ea29d179d229f15088d566de4535a890ebe6397894495a26d7c44d8e864f15ccd1c7d1910822e58ef98bc689c3e7645b668e01c56db9a6c1fea174675e86d61569ae7d5fdaebbf039739e3f4d0c7b135aacb86603e8bf77395ee8e6fea4e232dce5d9ffd3675bb4148f744352", @nested={0x4, 0x2d}, @typed={0x14, 0xfc, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xa9}, @typed={0x8, 0xc8, 0x0, 0x0, @pid}, @nested={0x4, 0x13b}, @nested={0x4, 0x67}]}]}, 0x1bc}], 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000500000000000300000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000006"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffb}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000180)='./file0/../file0\x00', r2}, 0x18) r4 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001240)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0200045e", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRESOCT, @ANYRES32, @ANYBLOB="02000600", @ANYRES64, @ANYBLOB="02000000", @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB="9aff1a274c1266592aeb4331361fa11335a65a079e1be6e2994fc3f81bd90da7f1a992028d5fb326b34dab3ffd06cd2083769942ba093384a8d0784e6bb9b40ad0d29d524920edb383bb5d0390a91b6afeb0eb", @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRESDEC=r1, @ANYRES16=r4], 0x94, 0x1) fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, r4, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000dc0)=0xc) getgroups(0x8, &(0x7f0000000e00)=[0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff0000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRES64, @ANYBLOB="02000000", @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r11, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="8f760bc0a5544195807444d28c612acbc7e68e", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32, @ANYRESOCT=0x0], 0x94, 0x1) r12 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000010005000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000000bfd4c9fb642d", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040004000000000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="10000500000000002000060000000000"], 0x94, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x80000, 0x0) ioctl$TCGETS2(r13, 0x802c542a, &(0x7f00000019c0)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x57b, &(0x7f0000000640)="$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") r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r14, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r15 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r15, r15, 0x0, 0x800000009) 3m49.236044792s ago: executing program 2 (id=12): getpid() gettid() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r4, 0x0, 0x1034}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000000000002"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xe0b, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4044890) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x8) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x93}, 0x7) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @remote, 0x2}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 3m49.152756914s ago: executing program 2 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000000) unshare(0x40020000) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r2, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003080)={0xffffffffffffffff, r2, 0x25, 0xe, @val=@netfilter={0xa, 0x0, 0x4}}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x34, 0x10, 0x8, 0x70bd2c, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x2}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000000)=0x4, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) dup(r4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3m48.830561248s ago: executing program 2 (id=18): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000300)={&(0x7f0000001b00)=@delchain={0x1a4, 0x65, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xfff3, 0xa}, {0xb, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x16c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x11}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x1d}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x85}, @TCA_ROUTE4_TO={0x8, 0x2, 0x46}, @TCA_ROUTE4_ACT={0x148, 0x6, [@m_csum={0xe8, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x0, 0x800}, 0x4d}}]}, {0x9f, 0x6, "75f8ee7b9701e7c9b4e025e95cabeeedc7130c06f684cd5ada3c5753720a18515c63f4136cd06c2391f85df32e5dc9bccee2f6c6a2e04fb8a6102fb2b2484462f87b38343e423a6178cb3342488eca4b1bcd26cd94bbb5a6c4ee051f48bcb67f60db4ba1fc3c49091f6f42a36c46cfad6c7238f07d260f5e0f26ec900b74cece04e5d6538771b2fd3a6afc7a0f6d694f850aad7750d1ee05ba3eaf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x5c, 0xa, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "d20d904bd4f7488051875bcdd29d455d"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x9, 0x6, "130a1fef96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x54) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000259, &(0x7f0000001bc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x10, 0xff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fff00000000000000800040001000000", 0x24) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00\a\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1008, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf250600000008000b000000000006001f004e24000005000400000000000500130061f176fc96357c71124f5d7092c00000000500050000000000050013004000000008001900ac1e0001"], 0x4c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x40054) pwritev(r5, 0x0, 0x0, 0x7, 0x0) 3m47.753640133s ago: executing program 2 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa000000000000711039000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="6277ba589fcb0100180000000000000008000002000600000000000004000000ffff000700000000000031c976335f3e4a36031859"], 0x0, 0x2a, 0x0, 0x800, 0x0, 0x0, @void, @value}, 0x28) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x4002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008d0000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffc, @void, @value}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x4}, 0xc) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r11}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000004200010a00000000000000000a54"], 0x14}}, 0x0) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$SG_SET_RESERVED_SIZE(r13, 0x2275, &(0x7f0000000180)=0xc927) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000400000018160000", @ANYRES32=r9, @ANYBLOB="00ffee00000000009500000001000000"], &(0x7f0000000180)='GPL\x00', 0x62a4, 0x5c, &(0x7f0000000340)=""/92, 0x1e00, 0x4, '\x00', 0x0, 0x1b, r13, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r14, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x5, 0x1000, &(0x7f0000001640)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock=0xd, r4, 0x8, &(0x7f00000005c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xf, 0x70ca, 0x1f4}, 0x10, r14, r2, 0x1, &(0x7f0000000640)=[r0, r0, r0], &(0x7f0000000840)=[{0x4, 0x4, 0x4, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xa) r15 = socket$rds(0x15, 0x5, 0x0) bind$rds(r15, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r15, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 3m47.753070413s ago: executing program 32 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa000000000000711039000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="6277ba589fcb0100180000000000000008000002000600000000000004000000ffff000700000000000031c976335f3e4a36031859"], 0x0, 0x2a, 0x0, 0x800, 0x0, 0x0, @void, @value}, 0x28) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x4002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008d0000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffc, @void, @value}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x4}, 0xc) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r11}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000004200010a00000000000000000a54"], 0x14}}, 0x0) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$SG_SET_RESERVED_SIZE(r13, 0x2275, &(0x7f0000000180)=0xc927) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000400000018160000", @ANYRES32=r9, @ANYBLOB="00ffee00000000009500000001000000"], &(0x7f0000000180)='GPL\x00', 0x62a4, 0x5c, &(0x7f0000000340)=""/92, 0x1e00, 0x4, '\x00', 0x0, 0x1b, r13, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r14, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_fd={0x18, 0xb, 0x1, 0x0, r6}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x5, 0x1000, &(0x7f0000001640)=""/4096, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock=0xd, r4, 0x8, &(0x7f00000005c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xf, 0x70ca, 0x1f4}, 0x10, r14, r2, 0x1, &(0x7f0000000640)=[r0, r0, r0], &(0x7f0000000840)=[{0x4, 0x4, 0x4, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xa) r15 = socket$rds(0x15, 0x5, 0x0) bind$rds(r15, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r15, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 3m43.15977723s ago: executing program 5 (id=31): unshare(0x20000600) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x761501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x489, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') r3 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xfd, 0x27, &(0x7f0000000000)="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", &(0x7f0000000140)=""/39, 0x4, 0x0, 0xb6, 0x21, &(0x7f0000000180)="95b104284f3d4668aebdd4e2c77b728d27baaa354386eb99b1722f9f762d434f56c4c25858efa6c427525533e41e73743440a95df86185d1badbdfd15ac937731c635cd82a9ae5fd95005f7a565b2d54e7337673214a12790f51e12a2825bf3888d95ad524edca4de2e3eb96529dc7734d84bb5b50eb332f4fa34b5d7631f6bd05af2eb876ffcae7ae3cc3cc0aab1fe82219551e25985a4124b56e5d6ff1176a08d28a1b611b03ea9f24bac400e14a1a1d2157407428", &(0x7f0000000240)="b366836e5bcd82dd6f1051512fcbf44eeb741569e20c4a472c822e55baa5ca223c", 0x6, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='hrtimer_start\x00', r0, 0x0, 0xffffffff}, 0x18) 3m42.933733143s ago: executing program 5 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000000) unshare(0x40020000) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r2, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3m42.806620245s ago: executing program 5 (id=87): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@dev}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x8926, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) 3m41.608314783s ago: executing program 0 (id=109): semget$private(0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0xa, r0}, 0x38) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x1}}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x48000, 0x81, 0x34}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x127081) 3m40.747631365s ago: executing program 0 (id=121): syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m40.645270077s ago: executing program 0 (id=124): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) 3m40.578139818s ago: executing program 5 (id=125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 3m40.577208827s ago: executing program 33 (id=125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 3m40.571026038s ago: executing program 0 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000000) unshare(0x40020000) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3m40.342005171s ago: executing program 0 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="160000000000109d0400005d53b83cf83f4c5fb53aca52d5000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10d, 0x0, 0x0, 0x0, 0xa8d6}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x2, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xcf, {0x9, 0x6, "bc7526", 0xffff, 0x3a, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) mremap(&(0x7f00006b7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/234) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3m40.047370905s ago: executing program 0 (id=136): syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m40.006922035s ago: executing program 34 (id=136): syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m26.911855475s ago: executing program 7 (id=313): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000840)={0x300, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000200030006003c000000020000fc340000000000000000000000010018000000"], 0xa8}}, 0x4000) 3m26.784765967s ago: executing program 7 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 3m26.374745773s ago: executing program 7 (id=322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='kfree\x00', r0, 0x0, 0x5}, 0x18) socket(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000003cc0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="9894604084ced10ec37e9974a3a9", 0xe}], 0x1}}, {{&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, 0x0}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, 0x0, &(0x7f00000001c0)=r6}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf2501"], 0xec}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) socket$netlink(0x10, 0x3, 0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) 3m26.277679624s ago: executing program 7 (id=325): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000002}, 0x18) creat(&(0x7f0000001bc0)='./file0\x00', 0x1c2) mount$9p_rdma(&(0x7f0000001d00), &(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80), 0x200000, &(0x7f0000001f80)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="8b3329bd70000000000005000000080003"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r12 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCOUTQ(r12, 0x5411, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r11, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 3m26.139099426s ago: executing program 7 (id=327): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}]}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x164, r4, 0x1b2cdb0b9871cc21, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @local, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaef}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x50, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1000, @mcast2, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x17}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x44100}, 0x20000000) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x3ffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ipv6_route\x00') close_range(r5, 0xffffffffffffffff, 0x0) 3m25.237323189s ago: executing program 7 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="160000000000109d0400005d53b83cf83f4c5fb53aca52d5000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10d, 0x0, 0x0, 0x0, 0xa8d6}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x2, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xcf, {0x9, 0x6, "bc7526", 0xffff, 0x3a, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f00006b7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/234) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3m25.21840354s ago: executing program 35 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="160000000000109d0400005d53b83cf83f4c5fb53aca52d5000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10d, 0x0, 0x0, 0x0, 0xa8d6}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x2, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xcf, {0x9, 0x6, "bc7526", 0xffff, 0x3a, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f00006b7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/234) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.499628759s ago: executing program 8 (id=3906): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0), 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='&\x00', r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r4, r4, 0x0, 0x40000f63c) socket(0x10, 0x803, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x63dc, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) fsetxattr$security_capability(r6, 0x0, &(0x7f0000000240)=@v3={0x3000000, [{0x1ff, 0x5}, {0x80, 0x6}], r7}, 0x18, 0x3) mount$9p_fd(0x0, &(0x7f0000001080)='./file0/file0\x00', &(0x7f00000010c0), 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',access=any,posixacl,smackfsro', @ANYRESDEC=r7, @ANYBLOB=',smackfshat=user=\x00,mask=^MAY_E']) keyctl$chown(0x4, r2, r7, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x0, 0xfffffffd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x5, 0x1, 0xffffff7f, 0x4, 0x2, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0x6, 0x4, 0x8, 0x9, 0x3, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x8, 0x2, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0xffffffff, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x6, 0x7fff, 0x0, 0x5, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x13d, 0xc, 0x9, 0x7ff, 0x7, 0x7, 0x8c7, 0x1, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x3, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0x3, 0x401, 0xb1a1, 0x8, 0x8, 0xfffffffa, 0x508f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x12, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x1000, 0x3, 0x0, 0x9, 0x5, 0x5, 0x800, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x2f4, 0x7, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x1000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.612088032s ago: executing program 8 (id=3924): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000300)={&(0x7f0000001b00)=@delchain={0x1a4, 0x65, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xfff3, 0xa}, {0xb, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x16c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x11}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x1d}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x85}, @TCA_ROUTE4_TO={0x8, 0x2, 0x46}, @TCA_ROUTE4_ACT={0x148, 0x6, [@m_csum={0xe8, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x0, 0x800}, 0x4d}}]}, {0x9f, 0x6, "75f8ee7b9701e7c9b4e025e95cabeeedc7130c06f684cd5ada3c5753720a18515c63f4136cd06c2391f85df32e5dc9bccee2f6c6a2e04fb8a6102fb2b2484462f87b38343e423a6178cb3342488eca4b1bcd26cd94bbb5a6c4ee051f48bcb67f60db4ba1fc3c49091f6f42a36c46cfad6c7238f07d260f5e0f26ec900b74cece04e5d6538771b2fd3a6afc7a0f6d694f850aad7750d1ee05ba3eaf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x5c, 0xa, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "d20d904bd4f7488051875bcdd29d455d"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x9, 0x6, "130a1fef96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x54) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000259, &(0x7f0000001bc0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x10, 0xff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fff00000000000000800040001000000", 0x24) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00\a\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1008, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf250600000008000b000000000006001f004e24000005000400000000000500130061f176fc96357c71124f5d7092c00000000500050000000000050013004000000008001900ac1e"], 0x4c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x40054) pwritev(r5, 0x0, 0x0, 0x7, 0x0) 2.275122537s ago: executing program 1 (id=3937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="160000000000000004000000016886000000000057bf95af35e88001fa5604c87fedb17363a81f568c6c97e5c01d78db87804084f266c72092e60db79e00b20876af4e28f1d9288bee89419cad7b8b6caceba9334d98e06de9e0b396dc5db81a6711e6e3d70daa5299dee686c59f8b2883b936a06c76d7b75333123b7538614877a1d86a642ce887d847806a4dc7ed72796c82598155ad71b5240e49e4eb9a", @ANYRES64=r2, @ANYBLOB='\x00'/13, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="00000000190000000000000010000000000000000000000000000000b31d0ebac27b7863fbb752fa8618da08000000a4fd4c8e78cdc19f907c8c1e517704727eeb532c233c6a96"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getitimer(0x1, &(0x7f00000005c0)={{0x0}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000e47b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000220000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=@gettaction={0xc4, 0x32, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x63}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x0, 0x1}}]}, 0xe9}, 0x1, 0x0, 0x0, 0x44054}, 0x4000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRES8=r4, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r8}, 0x10) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0xfffd, 0x0, {0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.934242692s ago: executing program 8 (id=3951): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xf4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/163, 0xa3}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f00000003c0)=[{0xf7, 0xe, 0x6, 0x3}, {0x3, 0x4, 0x4, 0x3}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) msgget$private(0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='\x04\x00\x00\x00\x00^\xf6jAc') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/2240], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 1.911065632s ago: executing program 1 (id=3953): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e22, @empty}, {0x0, @remote}, 0x48, {0x2, 0x0, @empty}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @broadcast}, {}, 0x8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 'lo\x00'}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r4, 0x407, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000400)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x533, &(0x7f00000008c0)="$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") 1.589063687s ago: executing program 1 (id=3959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000"], 0xfc}}, 0x0) 1.568413257s ago: executing program 1 (id=3960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.520891318s ago: executing program 1 (id=3963): semget$private(0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0xa, r1}, 0x38) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x1}}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x48000, 0x81, 0x34}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x127081) 1.095757834s ago: executing program 4 (id=3983): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0xfff3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xb61c}}}]}]}]}}]}, 0x50}}, 0x0) 1.067092835s ago: executing program 1 (id=3985): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff35f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) io_setup(0x408, &(0x7f0000004200)) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x44842, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000100)={0x4, 0x7, 0x4, 0x0, 0x4002}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$igmp6(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000130500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$msr(r8, &(0x7f0000000080)=""/28, 0x1c) 1.047870924s ago: executing program 8 (id=3986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0xfff3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xb61c}}}]}]}]}}]}, 0x50}}, 0x0) 998.762785ms ago: executing program 4 (id=3988): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) 954.721846ms ago: executing program 4 (id=3989): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x1000, 0x30aa, 0x5}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x3ff, 0x7, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xb, 0x4, 0x0, @remote, @broadcast, {[@generic={0x83, 0x12, "c06c76e7cdf0611e8842c236aa130db9"}, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0xa, [{@multicast2, 0x1}]}, @end, @end]}}}}}) syz_io_uring_complete(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000d00)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000700)=""/95, 0x5f}], 0x2, 0x4, 0x200) pipe2(&(0x7f0000000a00), 0x80000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 953.989826ms ago: executing program 8 (id=3990): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x900) dup3(r4, r3, 0x0) r5 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r5, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da", 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 948.435316ms ago: executing program 6 (id=3991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="160000000000000004000000016886000000000057bf95af35e88001fa5604c87fedb17363a81f568c6c97e5c01d78db87804084f266c72092e60db79e00b20876af4e28f1d9288bee89419cad7b8b6caceba9334d98e06de9e0b396dc5db81a6711e6e3d70daa5299dee686c59f8b2883b936a06c76d7b75333123b7538614877a1d86a642ce887d847806a4dc7ed72796c82598155ad71b5240e49e4eb9a", @ANYRES64=r2, @ANYBLOB='\x00'/13, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="00000000190000000000000010000000000000000000000000000000b31d0ebac27b7863fbb752fa8618da08000000a4fd4c8e78cdc19f907c8c1e517704727eeb532c233c6a96"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getitimer(0x1, &(0x7f00000005c0)={{0x0}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000e47b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000220000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=@gettaction={0xc4, 0x32, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x63}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x0, 0x1}}]}, 0xe9}, 0x1, 0x0, 0x0, 0x44054}, 0x4000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRES8=r4, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r8}, 0x10) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0xfffd, 0x0, {0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x8}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 837.520828ms ago: executing program 4 (id=3993): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xa}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x32}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x14) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x8000, 0x7, 0x8000, 0xe, {{0x4d, 0x4, 0x0, 0x1, 0x134, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@cipso={0x86, 0x9, 0x0, [{0x2, 0x3, ')'}]}, @cipso={0x86, 0x55, 0x0, [{0x7, 0x12, "dfc0363a405e855fb140ab9180b17800"}, {0x5, 0xc, "db526e4b529aadc2967b"}, {0x6, 0x11, "70247a3caadfe6a9bb38f5b9803516"}, {0x7, 0x12, "e08acc2dbacd130f38ce827061559141"}, {0x7, 0xe, "401ee0f2de8f8715401acd46"}]}, @rr={0x7, 0xb, 0xa7, [@broadcast, @loopback]}, @noop, @ssrr={0x89, 0x17, 0x71, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @remote, @local]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ee9c05e}, {@local, 0x7}, {@remote, 0x5a19}]}, @timestamp_prespec={0x44, 0x4c, 0x80, 0x3, 0x5, [{@loopback, 0xfff}, {@empty, 0xfffffffa}, {@rand_addr=0x64010100, 0x8c}, {@broadcast, 0x4}, {@loopback, 0xffffffff}, {@multicast1, 0x9}, {@rand_addr=0x64010100}, {@empty, 0x800}, {@rand_addr=0x64010101, 0xbb}]}, @timestamp={0x44, 0x24, 0xe8, 0x0, 0x4, [0xff, 0x14d, 0x9, 0x0, 0x6, 0x9, 0x0, 0x0]}, @timestamp={0x44, 0x10, 0xeb, 0x0, 0x3, [0x0, 0x1, 0x8]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bind$netlink(r6, &(0x7f0000000880)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) fcntl$lock(r10, 0x7, &(0x7f0000000940)={0x2, 0x1, 0x3, 0xfffffffffffffff7, r11}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x1ff) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r12, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2f}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x24008015) getsockopt$inet6_mreq(r6, 0x29, 0xe, &(0x7f0000000b80)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000bc0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipv4_getaddr={0x3c, 0x16, 0x100, 0x70bd2c, 0x25dfdbfc, {0x2, 0x48, 0x8, 0xfe, r14}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x81, 0xfffffff7, 0x6, 0x5}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r15, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xa000111}, 0x1) r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) write$nci(r16, &(0x7f0000000e00)=@DATA={0x3, 0x1, 0x0, 0x0, 0xbe}, 0x3) unlink(&(0x7f0000000e40)='./file0\x00') 777.055038ms ago: executing program 4 (id=3995): semget$private(0x0, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000800000020000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0xa, r1}, 0x38) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x1}}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x48000, 0x81, 0x34}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x127081) 726.040429ms ago: executing program 3 (id=3996): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000182000"/28, @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) 686.87349ms ago: executing program 3 (id=3997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 619.100401ms ago: executing program 3 (id=3998): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000000062897387649b89e5d44649598d6a5046000000000000"], 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @broadcast, 0x0}, &(0x7f0000000140)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="3300570000080000bc0e000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000210001002dbd7000fbdbdf250a10800802000006010000001400010000000000000000000000ffffac14143d14000200fc020000080000000000000000000001080017004e"], 0x4c}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0xc, 0x1, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x22, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000097e28a7d002000000000000000"], 0x24, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[], 0xfd, 0x6b2, &(0x7f0000002640)="$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") r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r11, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 546.232142ms ago: executing program 3 (id=3999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r1, 0x668b000) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) openat$tun(0xffffffffffffff9c, 0x0, 0x1d5041, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) tee(r3, r7, 0x8f5, 0x0) write(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040)={[{@bsdgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 408.308934ms ago: executing program 3 (id=4000): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0xd59, 0x5, 0x0, 0x1, 0x8, 0x20001, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 328.295095ms ago: executing program 6 (id=4001): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0), 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000140)=@keyring={'key_or_keyring:', r3}) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)='&\x00', r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x63dc, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) fsetxattr$security_capability(r5, 0x0, &(0x7f0000000240)=@v3={0x3000000, [{0x1ff, 0x5}, {0x80, 0x6}], r6}, 0x18, 0x3) mount$9p_fd(0x0, &(0x7f0000001080)='./file0/file0\x00', &(0x7f00000010c0), 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',access=any,posixacl,smackfsro', @ANYRESDEC=r6, @ANYBLOB=',smackfshat=user=\x00,mask=^MAY_E']) keyctl$chown(0x4, r2, r6, 0xee00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x0, 0xfffffffd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x5, 0x1, 0xffffff7f, 0x4, 0x2, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0x6, 0x4, 0x8, 0x9, 0x3, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x8, 0x2, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0xffffffff, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x6, 0x7fff, 0x0, 0x5, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x13d, 0xc, 0x9, 0x7ff, 0x7, 0x7, 0x8c7, 0x1, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x3, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0x3, 0x401, 0xb1a1, 0x8, 0x8, 0xfffffffa, 0x508f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x12, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x1000, 0x3, 0x0, 0x9, 0x5, 0x5, 0x800, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x2f4, 0x7, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x1000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 305.132596ms ago: executing program 6 (id=4002): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 303.711235ms ago: executing program 3 (id=4003): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 260.285416ms ago: executing program 6 (id=4004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) 114.011868ms ago: executing program 6 (id=4005): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xa}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x32}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x14) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x8000, 0x7, 0x8000, 0xe, {{0x4d, 0x4, 0x0, 0x1, 0x134, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@cipso={0x86, 0x9, 0x0, [{0x2, 0x3, ')'}]}, @cipso={0x86, 0x55, 0x0, [{0x7, 0x12, "dfc0363a405e855fb140ab9180b17800"}, {0x5, 0xc, "db526e4b529aadc2967b"}, {0x6, 0x11, "70247a3caadfe6a9bb38f5b9803516"}, {0x7, 0x12, "e08acc2dbacd130f38ce827061559141"}, {0x7, 0xe, "401ee0f2de8f8715401acd46"}]}, @rr={0x7, 0xb, 0xa7, [@broadcast, @loopback]}, @noop, @ssrr={0x89, 0x17, 0x71, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @remote, @local]}, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ee9c05e}, {@local, 0x7}, {@remote, 0x5a19}]}, @timestamp_prespec={0x44, 0x4c, 0x80, 0x3, 0x5, [{@loopback, 0xfff}, {@empty, 0xfffffffa}, {@rand_addr=0x64010100, 0x8c}, {@broadcast, 0x4}, {@loopback, 0xffffffff}, {@multicast1, 0x9}, {@rand_addr=0x64010100}, {@empty, 0x800}, {@rand_addr=0x64010101, 0xbb}]}, @timestamp={0x44, 0x24, 0xe8, 0x0, 0x4, [0xff, 0x14d, 0x9, 0x0, 0x6, 0x9, 0x0, 0x0]}, @timestamp={0x44, 0x10, 0xeb, 0x0, 0x3, [0x0, 0x1, 0x8]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bind$netlink(r6, &(0x7f0000000880)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000008c0)={0x0}, &(0x7f0000000900)=0xc) fcntl$lock(r10, 0x7, &(0x7f0000000940)={0x2, 0x1, 0x3, 0xfffffffffffffff7, r11}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz0\x00', 0x1ff) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000a40)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r12, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2f}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x24008015) getsockopt$inet6_mreq(r6, 0x29, 0xe, &(0x7f0000000b80)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000bc0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipv4_getaddr={0x3c, 0x16, 0x100, 0x70bd2c, 0x25dfdbfc, {0x2, 0x48, 0x8, 0xfe, r14}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x81, 0xfffffff7, 0x6, 0x5}}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r15, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xa000111}, 0x1) r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) write$nci(r16, &(0x7f0000000e00)=@DATA={0x3, 0x1, 0x0, 0x0, 0xbe}, 0x3) unlink(&(0x7f0000000e40)='./file0\x00') 40.588019ms ago: executing program 4 (id=4006): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "4a9f588727b6659dd588b9fc7ddfaa3d", "e9be1eae", "f9766d0c27d13353"}, 0x3b112a903053f909) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x2, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]]}, 0x4c}}, 0x20000014) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r4, 0x1, 0x1, 0x4, 0x0, {{0x26, 0x4, 0x1, 0x4, 0x98, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0x1b, 0xba, [@dev={0xac, 0x14, 0x14, 0x3b}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @private=0xa010101, @remote]}, @end, @generic={0x44, 0xf, "0394b892c1eb1d8005b76892fd"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x7b, [@rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x15}]}, @ssrr={0x89, 0x1f, 0xe1, [@multicast1, @loopback, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @local, @rand_addr=0x64010101]}, @rr={0x7, 0xb, 0xe, [@remote, @local]}, @ssrr={0x89, 0xb, 0x8a, [@multicast2, @rand_addr=0x64010100]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x31, '\x00', r5, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r6}, 0x18) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) times(&(0x7f0000000100)) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x453, 0x4, 0x70bd27, 0x25dfdbfd, "51f1"}, 0x14}}, 0x40040) 25.13898ms ago: executing program 6 (id=4007): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 0s ago: executing program 8 (id=4008): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000b7080000000000007b8af8ff1000f0ff00000000bfa100000000000007010700f8ffffffbfa4000000000000f0ffffffb7020ef606ff374f91d636000008000000182300000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) kernel console output (not intermixed with test programs): :sysadm_t pid=11471 comm="syz.1.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fa72153e929 code=0x7ffc0000 [ 207.337842][ T29] audit: type=1326 audit(2000000001.530:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.1.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72153e929 code=0x7ffc0000 [ 207.362307][ T29] audit: type=1326 audit(2000000001.530:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.1.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72153e929 code=0x7ffc0000 [ 207.386794][ T29] audit: type=1326 audit(2000000001.530:13661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.1.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72153e929 code=0x7ffc0000 [ 207.411234][ T29] audit: type=1326 audit(2000000001.530:13662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.1.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa72153e929 code=0x7ffc0000 [ 207.558594][T11483] xt_TPROXY: Can be used only with -p tcp or -p udp [ 207.601202][T11483] loop6: detected capacity change from 0 to 512 [ 207.609107][T11483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.628976][T11483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.643937][T11483] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.690936][ T3889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.741213][T11489] loop6: detected capacity change from 0 to 256 [ 207.775092][T11489] FAT-fs (loop6): Directory bread(block 64) failed [ 207.794557][T11489] FAT-fs (loop6): Directory bread(block 65) failed [ 207.816015][T11489] FAT-fs (loop6): Directory bread(block 66) failed [ 207.840627][T11489] FAT-fs (loop6): Directory bread(block 67) failed [ 207.864079][T11489] FAT-fs (loop6): Directory bread(block 68) failed [ 207.882228][T11489] FAT-fs (loop6): Directory bread(block 69) failed [ 207.928983][T11489] FAT-fs (loop6): Directory bread(block 70) failed [ 207.936623][T11499] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 207.960792][T11489] FAT-fs (loop6): Directory bread(block 71) failed [ 207.969302][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3017'. [ 207.979267][T11489] FAT-fs (loop6): Directory bread(block 72) failed [ 207.985991][T11489] FAT-fs (loop6): Directory bread(block 73) failed [ 207.993474][T11499] smc: net device bond0 applied user defined pnetid SYZ2 [ 208.010392][T11491] lo speed is unknown, defaulting to 1000 [ 208.021315][T11499] smc: net device bond0 erased user defined pnetid SYZ2 [ 208.036506][T11489] FAULT_INJECTION: forcing a failure. [ 208.036506][T11489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.050373][T11489] CPU: 1 UID: 0 PID: 11489 Comm: syz.6.3014 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 208.050406][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.050420][T11489] Call Trace: [ 208.050427][T11489] [ 208.050438][T11489] __dump_stack+0x1d/0x30 [ 208.050478][T11489] dump_stack_lvl+0xe8/0x140 [ 208.050548][T11489] dump_stack+0x15/0x1b [ 208.050569][T11489] should_fail_ex+0x265/0x280 [ 208.050655][T11489] should_fail+0xb/0x20 [ 208.050694][T11489] should_fail_usercopy+0x1a/0x20 [ 208.050764][T11489] _copy_from_user+0x1c/0xb0 [ 208.050796][T11489] memdup_user+0x5e/0xd0 [ 208.050827][T11489] autofs_dev_ioctl+0x167/0x6a0 [ 208.050925][T11489] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 208.050960][T11489] __se_sys_ioctl+0xce/0x140 [ 208.051004][T11489] __x64_sys_ioctl+0x43/0x50 [ 208.051111][T11489] x64_sys_call+0x19a8/0x2fb0 [ 208.051174][T11489] do_syscall_64+0xd2/0x200 [ 208.051203][T11489] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.051331][T11489] ? clear_bhb_loop+0x40/0x90 [ 208.051429][T11489] ? clear_bhb_loop+0x40/0x90 [ 208.051460][T11489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.051488][T11489] RIP: 0033:0x7f79c5e9e929 [ 208.051562][T11489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.051582][T11489] RSP: 002b:00007f79c4507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.051606][T11489] RAX: ffffffffffffffda RBX: 00007f79c60c5fa0 RCX: 00007f79c5e9e929 [ 208.051704][T11489] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000006 [ 208.051776][T11489] RBP: 00007f79c4507090 R08: 0000000000000000 R09: 0000000000000000 [ 208.051793][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.051845][T11489] R13: 0000000000000000 R14: 00007f79c60c5fa0 R15: 00007fff55954098 [ 208.051871][T11489] [ 208.053343][T11499] 9pnet_fd: Insufficient options for proto=fd [ 208.371617][T11513] loop6: detected capacity change from 0 to 8192 [ 208.391132][T11513] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.415069][T11491] chnl_net:caif_netlink_parms(): no params data found [ 208.436038][T11513] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 208.442712][T11513] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 208.450295][T11513] vhci_hcd vhci_hcd.0: Device attached [ 208.475004][T11520] vhci_hcd: connection closed [ 208.475066][ T377] vhci_hcd: stop threads [ 208.484195][ T377] vhci_hcd: release socket [ 208.489349][ T377] vhci_hcd: disconnect device [ 208.508189][T11491] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.515340][T11491] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.522622][T11491] bridge_slave_0: entered allmulticast mode [ 208.529827][T11491] bridge_slave_0: entered promiscuous mode [ 208.538613][T11491] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.545677][T11491] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.553391][T11491] bridge_slave_1: entered allmulticast mode [ 208.563062][T11491] bridge_slave_1: entered promiscuous mode [ 208.601752][T11491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.616184][T11491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.653369][T11527] hub 6-0:1.0: USB hub found [ 208.658884][T11527] hub 6-0:1.0: 8 ports detected [ 208.703952][T11491] team0: Port device team_slave_0 added [ 208.713158][T11491] team0: Port device team_slave_1 added [ 208.754484][T11491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.761644][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.788335][T11491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.803215][T11491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.811038][T11491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.837722][T11491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.891681][T11491] hsr_slave_0: entered promiscuous mode [ 208.898910][T11491] hsr_slave_1: entered promiscuous mode [ 208.905586][T11491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.915714][T11491] Cannot create hsr debugfs directory [ 209.153587][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 209.162658][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 209.173232][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 209.241494][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 209.250726][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 209.261440][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 209.316320][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 209.653927][T11491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.671133][T11491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.690096][T11491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.945797][T11491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.959031][T11551] loop6: detected capacity change from 0 to 512 [ 209.981706][T11551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.032402][T11551] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.073300][T11491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.094395][T11551] bridge0: port 1(macvlan2) entered blocking state [ 210.101227][T11551] bridge0: port 1(macvlan2) entered disabled state [ 210.115007][T11551] macvlan2: entered allmulticast mode [ 210.121381][T11551] bridge0: entered allmulticast mode [ 210.146764][T11551] macvlan2: left allmulticast mode [ 210.152040][T11551] bridge0: left allmulticast mode [ 210.187020][T11491] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.199875][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.207031][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.233311][T11564] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 210.236951][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.247074][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.263105][ T3889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.275877][T11564] smc: net device bond0 applied user defined pnetid SYZ2 [ 210.307653][T11564] smc: net device bond0 erased user defined pnetid SYZ2 [ 210.341563][T11564] 9pnet_fd: Insufficient options for proto=fd [ 210.386453][T11567] loop6: detected capacity change from 0 to 8192 [ 210.401635][T11571] IPv6: sit1: Disabled Multicast RS [ 210.412081][T11491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.429879][T11567] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.444009][T11576] $Hÿ: renamed from bond0 [ 210.459729][T11576] $Hÿ: entered promiscuous mode [ 210.467546][T11567] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 210.474105][T11567] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.481633][T11567] vhci_hcd vhci_hcd.0: Device attached [ 210.573640][T11491] veth0_vlan: entered promiscuous mode [ 210.590001][T11579] vhci_hcd: connection closed [ 210.590366][ T12] vhci_hcd: stop threads [ 210.599998][T11491] veth1_vlan: entered promiscuous mode [ 210.605680][ T12] vhci_hcd: release socket [ 210.610288][ T12] vhci_hcd: disconnect device [ 210.620579][T11491] veth0_macvtap: entered promiscuous mode [ 210.632465][T11491] veth1_macvtap: entered promiscuous mode [ 210.647785][T11491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.662120][T11491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.673189][T11491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.676364][ T3414] vhci_hcd: vhci_device speed not set [ 210.682986][T11491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.696057][T11491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.705661][T11491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.732502][T11583] netlink: 'syz.1.3038': attribute type 13 has an invalid length. [ 210.917174][T11616] SELinux: syz.1.3050 (11616) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 211.018716][T11625] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.112618][T11625] wireguard0: entered promiscuous mode [ 211.184490][T11635] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 211.231667][T11637] netlink: 'syz.3.3058': attribute type 4 has an invalid length. [ 211.251477][T11635] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 211.258174][T11635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.265904][T11635] vhci_hcd vhci_hcd.0: Device attached [ 211.272752][T11638] vhci_hcd: connection closed [ 211.384025][T11641] futex_wake_op: syz.1.3059 tries to shift op by -1; fix this program [ 211.454287][ T377] vhci_hcd: stop threads [ 211.458701][ T377] vhci_hcd: release socket [ 211.463146][ T377] vhci_hcd: disconnect device [ 211.606773][ T3414] vhci_hcd: vhci_device speed not set [ 211.649658][T11647] SELinux: syz.1.3062 (11647) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 211.872002][T11656] loop6: detected capacity change from 0 to 1024 [ 211.893109][T11656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.915314][T11656] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.947633][T11656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 211.957731][T11656] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.3066: lblock 2 mapped to illegal pblock 2 (length 1) [ 211.989260][T11656] EXT4-fs (loop6): Remounting filesystem read-only [ 212.024494][T11658] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 212.031081][T11658] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 212.039397][T11658] vhci_hcd vhci_hcd.0: Device attached [ 212.055177][T11656] EXT4-fs (loop6): 1 orphan inode deleted [ 212.065556][T11656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.092614][T11660] vhci_hcd: connection closed [ 212.093145][ T31] vhci_hcd: stop threads [ 212.102825][ T31] vhci_hcd: release socket [ 212.107306][ T31] vhci_hcd: disconnect device [ 212.121058][T11656] sd 0:0:1:0: device reset [ 212.651446][ T3889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.921823][T11682] x_tables: duplicate underflow at hook 1 [ 213.266647][T11704] FAULT_INJECTION: forcing a failure. [ 213.266647][T11704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.279970][T11704] CPU: 0 UID: 0 PID: 11704 Comm: syz.3.3084 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 213.280008][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.280025][T11704] Call Trace: [ 213.280033][T11704] [ 213.280043][T11704] __dump_stack+0x1d/0x30 [ 213.280070][T11704] dump_stack_lvl+0xe8/0x140 [ 213.280096][T11704] dump_stack+0x15/0x1b [ 213.280152][T11704] should_fail_ex+0x265/0x280 [ 213.280207][T11704] should_fail+0xb/0x20 [ 213.280314][T11704] should_fail_usercopy+0x1a/0x20 [ 213.280420][T11704] _copy_to_user+0x20/0xa0 [ 213.280453][T11704] simple_read_from_buffer+0xb5/0x130 [ 213.280577][T11704] proc_fail_nth_read+0x100/0x140 [ 213.280667][T11704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.280694][T11704] vfs_read+0x19d/0x6f0 [ 213.280718][T11704] ? __rcu_read_unlock+0x4f/0x70 [ 213.280747][T11704] ? __fget_files+0x184/0x1c0 [ 213.280780][T11704] ksys_read+0xda/0x1a0 [ 213.280863][T11704] __x64_sys_read+0x40/0x50 [ 213.280895][T11704] x64_sys_call+0x2d77/0x2fb0 [ 213.280923][T11704] do_syscall_64+0xd2/0x200 [ 213.280951][T11704] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.281006][T11704] ? clear_bhb_loop+0x40/0x90 [ 213.281034][T11704] ? clear_bhb_loop+0x40/0x90 [ 213.281064][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.281092][T11704] RIP: 0033:0x7f705713d33c [ 213.281162][T11704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.281195][T11704] RSP: 002b:00007f70557a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.281236][T11704] RAX: ffffffffffffffda RBX: 00007f7057365fa0 RCX: 00007f705713d33c [ 213.281252][T11704] RDX: 000000000000000f RSI: 00007f70557a70a0 RDI: 0000000000000005 [ 213.281268][T11704] RBP: 00007f70557a7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.281298][T11704] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 213.281314][T11704] R13: 0000000000000000 R14: 00007f7057365fa0 R15: 00007ffc2dfc4c58 [ 213.281340][T11704] [ 213.509517][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 213.509537][ T29] audit: type=1326 audit(2000000007.870:13784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.540275][ T29] audit: type=1326 audit(2000000007.870:13785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.577321][ T29] audit: type=1326 audit(2000000007.910:13786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc42fbed290 code=0x7ffc0000 [ 213.601856][ T29] audit: type=1326 audit(2000000007.910:13787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.621911][T11718] FAULT_INJECTION: forcing a failure. [ 213.621911][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.626397][ T29] audit: type=1326 audit(2000000007.910:13788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.638650][T11718] CPU: 0 UID: 0 PID: 11718 Comm: syz.3.3087 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 213.638738][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.638759][T11718] Call Trace: [ 213.638769][T11718] [ 213.638781][T11718] __dump_stack+0x1d/0x30 [ 213.638810][T11718] dump_stack_lvl+0xe8/0x140 [ 213.638839][T11718] dump_stack+0x15/0x1b [ 213.638864][T11718] should_fail_ex+0x265/0x280 [ 213.638993][T11718] should_fail+0xb/0x20 [ 213.639051][T11718] should_fail_usercopy+0x1a/0x20 [ 213.639121][T11718] _copy_from_user+0x1c/0xb0 [ 213.639157][T11718] ___sys_sendmsg+0xc1/0x1d0 [ 213.639213][T11718] __sys_sendmmsg+0x178/0x300 [ 213.639273][T11718] __x64_sys_sendmmsg+0x57/0x70 [ 213.639343][T11718] x64_sys_call+0x2f2f/0x2fb0 [ 213.639374][T11718] do_syscall_64+0xd2/0x200 [ 213.639407][T11718] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.639445][T11718] ? clear_bhb_loop+0x40/0x90 [ 213.639477][T11718] ? clear_bhb_loop+0x40/0x90 [ 213.639515][T11718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.639545][T11718] RIP: 0033:0x7f705713e929 [ 213.639571][T11718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.639599][T11718] RSP: 002b:00007f7055786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.639626][T11718] RAX: ffffffffffffffda RBX: 00007f7057366080 RCX: 00007f705713e929 [ 213.639645][T11718] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000004 [ 213.639663][T11718] RBP: 00007f7055786090 R08: 0000000000000000 R09: 0000000000000000 [ 213.639681][T11718] R10: 0000000000004084 R11: 0000000000000246 R12: 0000000000000001 [ 213.639699][T11718] R13: 0000000000000000 R14: 00007f7057366080 R15: 00007ffc2dfc4c58 [ 213.639762][T11718] [ 213.806477][T11724] __nla_validate_parse: 7 callbacks suppressed [ 213.806567][T11724] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3089'. [ 213.812964][ T29] audit: type=1326 audit(2000000007.930:13789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.834386][T11724] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.836923][ T29] audit: type=1326 audit(2000000007.930:13790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.844956][T11724] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.848786][ T29] audit: type=1326 audit(2000000007.930:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.854148][T11724] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.863113][ T29] audit: type=1326 audit(2000000007.930:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 213.886661][T11724] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.993836][ T29] audit: type=1326 audit(2000000007.930:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.8.3085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 214.080883][T11724] geneve2: entered promiscuous mode [ 214.101649][T11730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.152244][T11734] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.160520][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.169425][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.181799][T11732] FAULT_INJECTION: forcing a failure. [ 214.181799][T11732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.195025][T11732] CPU: 1 UID: 0 PID: 11732 Comm: syz.8.3093 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 214.195061][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.195114][T11732] Call Trace: [ 214.195122][T11732] [ 214.195168][T11732] __dump_stack+0x1d/0x30 [ 214.195198][T11732] dump_stack_lvl+0xe8/0x140 [ 214.195224][T11732] dump_stack+0x15/0x1b [ 214.195246][T11732] should_fail_ex+0x265/0x280 [ 214.195291][T11732] should_fail+0xb/0x20 [ 214.195344][T11732] should_fail_usercopy+0x1a/0x20 [ 214.195364][T11732] _copy_from_iter+0xcf/0xe40 [ 214.195390][T11732] ? __build_skb_around+0x1a0/0x200 [ 214.195434][T11732] ? __alloc_skb+0x223/0x320 [ 214.195531][T11732] netlink_sendmsg+0x471/0x6b0 [ 214.195560][T11732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.195583][T11732] __sock_sendmsg+0x142/0x180 [ 214.195690][T11732] ____sys_sendmsg+0x31e/0x4e0 [ 214.195785][T11732] ___sys_sendmsg+0x17b/0x1d0 [ 214.195858][T11732] __x64_sys_sendmsg+0xd4/0x160 [ 214.195886][T11732] x64_sys_call+0x2999/0x2fb0 [ 214.195907][T11732] do_syscall_64+0xd2/0x200 [ 214.195930][T11732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.195975][T11732] ? clear_bhb_loop+0x40/0x90 [ 214.196004][T11732] ? clear_bhb_loop+0x40/0x90 [ 214.196064][T11732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.196165][T11732] RIP: 0033:0x7fc42fbee929 [ 214.196186][T11732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.196211][T11732] RSP: 002b:00007fc42e257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.196275][T11732] RAX: ffffffffffffffda RBX: 00007fc42fe15fa0 RCX: 00007fc42fbee929 [ 214.196292][T11732] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000013 [ 214.196308][T11732] RBP: 00007fc42e257090 R08: 0000000000000000 R09: 0000000000000000 [ 214.196322][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.196338][T11732] R13: 0000000000000000 R14: 00007fc42fe15fa0 R15: 00007ffe00375768 [ 214.196359][T11732] [ 214.424738][T11735] wireguard0: entered promiscuous mode [ 214.435595][T11734] wireguard0: entered promiscuous mode [ 214.713081][T11754] IPv6: sit1: Disabled Multicast RS [ 214.898095][T11763] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3100'. [ 214.929602][T11759] hub 6-0:1.0: USB hub found [ 214.934309][T11759] hub 6-0:1.0: 8 ports detected [ 215.035593][T11771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.079230][T11772] sd 0:0:1:0: device reset [ 215.100419][T11771] wireguard0: entered promiscuous mode [ 215.143650][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.152775][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.206532][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3108'. [ 215.284582][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3109'. [ 215.295870][T11784] hsr_slave_1 (unregistering): left promiscuous mode [ 215.462922][T11793] netlink: 'syz.8.3112': attribute type 1 has an invalid length. [ 215.551074][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.559603][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.625684][T11797] FAULT_INJECTION: forcing a failure. [ 215.625684][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 215.639449][T11797] CPU: 1 UID: 0 PID: 11797 Comm: syz.4.3114 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 215.639485][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.639498][T11797] Call Trace: [ 215.639505][T11797] [ 215.639513][T11797] __dump_stack+0x1d/0x30 [ 215.639539][T11797] dump_stack_lvl+0xe8/0x140 [ 215.639616][T11797] dump_stack+0x15/0x1b [ 215.639633][T11797] should_fail_ex+0x265/0x280 [ 215.639679][T11797] should_failslab+0x8c/0xb0 [ 215.639783][T11797] __kmalloc_node_noprof+0xa9/0x410 [ 215.639815][T11797] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 215.639862][T11797] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 215.639930][T11797] ? perf_trace_kmem_cache_alloc+0x106/0x140 [ 215.639968][T11797] __vmalloc_node_noprof+0x89/0xc0 [ 215.640123][T11797] ? copy_process+0x399/0x1fe0 [ 215.640155][T11797] ? copy_process+0x399/0x1fe0 [ 215.640184][T11797] dup_task_struct+0x449/0x6a0 [ 215.640213][T11797] ? _parse_integer+0x27/0x40 [ 215.640252][T11797] copy_process+0x399/0x1fe0 [ 215.640278][T11797] ? kstrtouint+0x76/0xc0 [ 215.640319][T11797] ? kstrtouint_from_user+0x9f/0xf0 [ 215.640452][T11797] ? __rcu_read_unlock+0x4f/0x70 [ 215.640480][T11797] kernel_clone+0x16c/0x5b0 [ 215.640612][T11797] ? vfs_write+0x75e/0x8e0 [ 215.640641][T11797] __x64_sys_clone+0xe6/0x120 [ 215.640686][T11797] x64_sys_call+0x2c59/0x2fb0 [ 215.640710][T11797] do_syscall_64+0xd2/0x200 [ 215.640800][T11797] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.640835][T11797] ? clear_bhb_loop+0x40/0x90 [ 215.640937][T11797] ? clear_bhb_loop+0x40/0x90 [ 215.640965][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.640987][T11797] RIP: 0033:0x7fb32492e929 [ 215.641054][T11797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.641076][T11797] RSP: 002b:00007fb322f96fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 215.641182][T11797] RAX: ffffffffffffffda RBX: 00007fb324b55fa0 RCX: 00007fb32492e929 [ 215.641199][T11797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 215.641268][T11797] RBP: 00007fb322f97090 R08: 0000000000000000 R09: 0000000000000000 [ 215.641281][T11797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 215.641359][T11797] R13: 0000000000000000 R14: 00007fb324b55fa0 R15: 00007ffd4a896bb8 [ 215.641385][T11797] [ 215.641395][T11797] syz.4.3114: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 215.895916][T11807] FAULT_INJECTION: forcing a failure. [ 215.895916][T11807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.903870][T11797] CPU: 1 UID: 0 PID: 11797 Comm: syz.4.3114 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 215.903905][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.903926][T11797] Call Trace: [ 215.903936][T11797] [ 215.904004][T11797] __dump_stack+0x1d/0x30 [ 215.904038][T11797] dump_stack_lvl+0xe8/0x140 [ 215.904067][T11797] dump_stack+0x15/0x1b [ 215.904093][T11797] warn_alloc+0x12b/0x1a0 [ 215.904190][T11797] __vmalloc_node_range_noprof+0x497/0xe00 [ 215.904318][T11797] ? perf_trace_kmem_cache_alloc+0x106/0x140 [ 215.904361][T11797] __vmalloc_node_noprof+0x89/0xc0 [ 215.904479][T11797] ? copy_process+0x399/0x1fe0 [ 215.904514][T11797] ? copy_process+0x399/0x1fe0 [ 215.904620][T11797] dup_task_struct+0x449/0x6a0 [ 215.904648][T11797] ? _parse_integer+0x27/0x40 [ 215.904698][T11797] copy_process+0x399/0x1fe0 [ 215.904769][T11797] ? kstrtouint+0x76/0xc0 [ 215.904814][T11797] ? kstrtouint_from_user+0x9f/0xf0 [ 215.904865][T11797] ? __rcu_read_unlock+0x4f/0x70 [ 215.904903][T11797] kernel_clone+0x16c/0x5b0 [ 215.904960][T11797] ? vfs_write+0x75e/0x8e0 [ 215.905056][T11797] __x64_sys_clone+0xe6/0x120 [ 215.905108][T11797] x64_sys_call+0x2c59/0x2fb0 [ 215.905138][T11797] do_syscall_64+0xd2/0x200 [ 215.905167][T11797] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.905227][T11797] ? clear_bhb_loop+0x40/0x90 [ 215.905258][T11797] ? clear_bhb_loop+0x40/0x90 [ 215.905289][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.905322][T11797] RIP: 0033:0x7fb32492e929 [ 215.905407][T11797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.905436][T11797] RSP: 002b:00007fb322f96fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 215.905465][T11797] RAX: ffffffffffffffda RBX: 00007fb324b55fa0 RCX: 00007fb32492e929 [ 215.905486][T11797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 215.905538][T11797] RBP: 00007fb322f97090 R08: 0000000000000000 R09: 0000000000000000 [ 215.905556][T11797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 215.905574][T11797] R13: 0000000000000000 R14: 00007fb324b55fa0 R15: 00007ffd4a896bb8 [ 215.905605][T11797] [ 215.905615][T11797] Mem-Info: [ 215.916962][T11807] CPU: 0 UID: 0 PID: 11807 Comm: syz.3.3117 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 215.917062][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.917079][T11807] Call Trace: [ 215.917087][T11807] [ 215.917096][T11807] __dump_stack+0x1d/0x30 [ 215.917144][T11807] dump_stack_lvl+0xe8/0x140 [ 215.917170][T11807] dump_stack+0x15/0x1b [ 215.917192][T11807] should_fail_ex+0x265/0x280 [ 215.917303][T11807] should_fail+0xb/0x20 [ 215.917345][T11807] should_fail_usercopy+0x1a/0x20 [ 215.917371][T11807] _copy_from_iter+0xcf/0xe40 [ 215.917422][T11807] ? __build_skb_around+0x1a0/0x200 [ 215.917577][T11807] ? __alloc_skb+0x223/0x320 [ 215.917615][T11807] netlink_sendmsg+0x471/0x6b0 [ 215.917671][T11807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.917758][T11807] __sock_sendmsg+0x142/0x180 [ 215.917802][T11807] ____sys_sendmsg+0x31e/0x4e0 [ 215.917842][T11807] ___sys_sendmsg+0x17b/0x1d0 [ 215.917930][T11807] __x64_sys_sendmsg+0xd4/0x160 [ 215.917971][T11807] x64_sys_call+0x2999/0x2fb0 [ 215.918002][T11807] do_syscall_64+0xd2/0x200 [ 215.918031][T11807] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.918070][T11807] ? clear_bhb_loop+0x40/0x90 [ 215.918133][T11807] ? clear_bhb_loop+0x40/0x90 [ 215.918173][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.918204][T11807] RIP: 0033:0x7f705713e929 [ 215.918219][T11807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.918237][T11807] RSP: 002b:00007f70557a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.918317][T11807] RAX: ffffffffffffffda RBX: 00007f7057365fa0 RCX: 00007f705713e929 [ 215.918336][T11807] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 215.918354][T11807] RBP: 00007f70557a7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.918371][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.918389][T11807] R13: 0000000000000000 R14: 00007f7057365fa0 R15: 00007ffc2dfc4c58 [ 215.918420][T11807] [ 216.360596][T11797] active_anon:56376 inactive_anon:0 isolated_anon:0 [ 216.360596][T11797] active_file:14888 inactive_file:16268 isolated_file:0 [ 216.360596][T11797] unevictable:0 dirty:935 writeback:0 [ 216.360596][T11797] slab_reclaimable:3446 slab_unreclaimable:50761 [ 216.360596][T11797] mapped:33001 shmem:52358 pagetables:1773 [ 216.360596][T11797] sec_pagetables:0 bounce:0 [ 216.360596][T11797] kernel_misc_reclaimable:0 [ 216.360596][T11797] free:1772791 free_pcp:20420 free_cma:0 [ 216.406679][T11797] Node 0 active_anon:225504kB inactive_anon:0kB active_file:59552kB inactive_file:65072kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132004kB dirty:3740kB writeback:0kB shmem:209432kB writeback_tmp:0kB kernel_stack:3632kB pagetables:7092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.436464][T11797] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.465725][T11797] lowmem_reserve[]: 0 2882 7861 7861 [ 216.471115][T11797] Node 0 DMA32 free:2947840kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951468kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 216.502110][T11797] lowmem_reserve[]: 0 0 4978 4978 [ 216.507327][T11797] Node 0 Normal free:4127964kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:225504kB inactive_anon:0kB active_file:59552kB inactive_file:65072kB unevictable:0kB writepending:3740kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:78052kB local_pcp:22872kB free_cma:0kB [ 216.540069][T11797] lowmem_reserve[]: 0 0 0 0 [ 216.544722][T11797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.558075][T11797] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947840kB [ 216.574313][T11797] Node 0 Normal: 2507*4kB (UM) 931*8kB (UME) 953*16kB (UME) 715*32kB (UME) 720*64kB (UME) 430*128kB (UM) 161*256kB (UME) 92*512kB (UM) 60*1024kB (UME) 18*2048kB (UM) 924*4096kB (UM) = 4128052kB [ 216.594327][T11797] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 216.603757][T11797] 83504 total pagecache pages [ 216.609332][T11797] 3 pages in swap cache [ 216.613488][T11797] Free swap = 124644kB [ 216.617738][T11797] Total swap = 124996kB [ 216.621907][T11797] 2097051 pages RAM [ 216.625717][T11797] 0 pages HighMem/MovableOnly [ 216.631025][T11797] 80786 pages reserved [ 216.683147][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3124'. [ 216.784264][T11824] bridge0: port 1(macvlan2) entered blocking state [ 216.791067][T11824] bridge0: port 1(macvlan2) entered disabled state [ 216.800303][T11824] macvlan2: entered allmulticast mode [ 216.805736][T11824] bridge0: entered allmulticast mode [ 216.812801][T11824] macvlan2: left allmulticast mode [ 216.818024][T11824] bridge0: left allmulticast mode [ 217.329879][T11841] syz!: rxe_newlink: already configured on team_slave_0 [ 217.389059][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 217.430619][T11841] smc: net device bond0 applied user defined pnetid SYZ2 [ 217.452675][T11841] smc: net device bond0 erased user defined pnetid SYZ2 [ 217.472311][T11841] 9pnet_fd: Insufficient options for proto=fd [ 217.611109][T11866] sd 0:0:1:0: device reset [ 217.611484][T11843] lo speed is unknown, defaulting to 1000 [ 217.635790][T11867] netlink: 'syz.3.3136': attribute type 13 has an invalid length. [ 217.801149][T11867] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.808466][T11867] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.954458][T11867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.981167][T11867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.068313][T11867] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.078083][T11867] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.087005][T11867] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.095898][T11867] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.318684][T11843] chnl_net:caif_netlink_parms(): no params data found [ 218.388022][T11843] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.395140][T11843] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.420077][T11843] bridge_slave_0: entered allmulticast mode [ 218.426743][T11843] bridge_slave_0: entered promiscuous mode [ 218.435541][T11843] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.442751][T11843] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.450026][T11843] bridge_slave_1: entered allmulticast mode [ 218.456609][T11843] bridge_slave_1: entered promiscuous mode [ 218.489903][T11843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.501196][T11843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.532976][T11843] team0: Port device team_slave_0 added [ 218.543504][T11843] team0: Port device team_slave_1 added [ 218.626894][T11843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.633908][T11843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.660159][T11843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.705833][T11843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.712886][T11843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.739639][T11843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.777434][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 218.777492][ T29] audit: type=1326 audit(2000000013.140:13991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 218.809849][T11843] hsr_slave_0: entered promiscuous mode [ 218.816315][T11843] hsr_slave_1: entered promiscuous mode [ 218.822352][T11843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.831625][T11843] Cannot create hsr debugfs directory [ 218.837261][ T29] audit: type=1326 audit(2000000013.140:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 218.861622][ T29] audit: type=1326 audit(2000000013.140:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f705713d290 code=0x7ffc0000 [ 218.885994][ T29] audit: type=1326 audit(2000000013.140:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 218.910605][ T29] audit: type=1326 audit(2000000013.140:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 218.934910][ T29] audit: type=1326 audit(2000000013.140:13996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 218.959185][ T29] audit: type=1326 audit(2000000013.140:13997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 218.983566][ T29] audit: type=1326 audit(2000000013.140:13998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 219.008001][ T29] audit: type=1326 audit(2000000013.140:13999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.3.3145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 219.322738][T11843] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.359320][T11843] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.380021][T11843] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.435477][T11904] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 219.442059][T11904] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.449586][T11904] vhci_hcd vhci_hcd.0: Device attached [ 219.636327][ T3370] vhci_hcd: vhci_device speed not set [ 219.697692][ T3370] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 219.729233][T11908] vhci_hcd: connection reset by peer [ 219.735029][T11843] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.742319][ T3436] vhci_hcd: stop threads [ 219.746659][ T3436] vhci_hcd: release socket [ 219.751203][ T3436] vhci_hcd: disconnect device [ 220.051399][T11843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.088217][T11843] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.118921][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.126053][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.179679][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.186844][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.205535][ T29] audit: type=1326 audit(2000000014.560:14000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.8.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42fbee929 code=0x7ffc0000 [ 220.334865][T11927] FAULT_INJECTION: forcing a failure. [ 220.334865][T11927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.348138][T11927] CPU: 0 UID: 0 PID: 11927 Comm: syz.8.3152 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 220.348167][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.348184][T11927] Call Trace: [ 220.348236][T11927] [ 220.348246][T11927] __dump_stack+0x1d/0x30 [ 220.348273][T11927] dump_stack_lvl+0xe8/0x140 [ 220.348293][T11927] dump_stack+0x15/0x1b [ 220.348309][T11927] should_fail_ex+0x265/0x280 [ 220.348357][T11927] should_fail+0xb/0x20 [ 220.348398][T11927] should_fail_usercopy+0x1a/0x20 [ 220.348419][T11927] _copy_from_user+0x1c/0xb0 [ 220.348445][T11927] ___sys_sendmsg+0xc1/0x1d0 [ 220.348495][T11927] __x64_sys_sendmsg+0xd4/0x160 [ 220.348536][T11927] x64_sys_call+0x2999/0x2fb0 [ 220.348561][T11927] do_syscall_64+0xd2/0x200 [ 220.348585][T11927] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.348634][T11927] ? clear_bhb_loop+0x40/0x90 [ 220.348682][T11927] ? clear_bhb_loop+0x40/0x90 [ 220.348706][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.348727][T11927] RIP: 0033:0x7fc42fbee929 [ 220.348743][T11927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.348787][T11927] RSP: 002b:00007fc42e257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.348812][T11927] RAX: ffffffffffffffda RBX: 00007fc42fe15fa0 RCX: 00007fc42fbee929 [ 220.348829][T11927] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 220.348845][T11927] RBP: 00007fc42e257090 R08: 0000000000000000 R09: 0000000000000000 [ 220.348860][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.348876][T11927] R13: 0000000000000000 R14: 00007fc42fe15fa0 R15: 00007ffe00375768 [ 220.348896][T11927] [ 220.572147][T11928] syz!: rxe_newlink: already configured on team_slave_0 [ 220.584217][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3153'. [ 220.592304][T11843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.614074][T11928] smc: net device bond0 applied user defined pnetid SYZ2 [ 220.628885][T11928] smc: net device bond0 erased user defined pnetid SYZ2 [ 220.656808][T11928] 9pnet_fd: Insufficient options for proto=fd [ 220.873174][T11843] veth0_vlan: entered promiscuous mode [ 220.885432][T11843] veth1_vlan: entered promiscuous mode [ 220.907408][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3159'. [ 220.918091][T11843] veth0_macvtap: entered promiscuous mode [ 220.925626][T11843] veth1_macvtap: entered promiscuous mode [ 220.937839][T11958] bridge0: port 1(macvlan2) entered blocking state [ 220.944499][T11958] bridge0: port 1(macvlan2) entered disabled state [ 220.952563][T11958] macvlan2: entered allmulticast mode [ 220.958105][T11958] bridge0: entered allmulticast mode [ 220.968269][T11958] macvlan2: left allmulticast mode [ 220.973445][T11958] bridge0: left allmulticast mode [ 220.991781][T11843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.010855][T11843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.021101][T11843] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.030111][T11843] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.039151][T11843] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.048054][T11843] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.167164][T11973] bridge_slave_0: left allmulticast mode [ 221.173082][T11973] bridge_slave_0: left promiscuous mode [ 221.179085][T11973] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.193201][T11973] bridge_slave_1: left allmulticast mode [ 221.199042][T11973] bridge_slave_1: left promiscuous mode [ 221.204735][T11973] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.214994][T11968] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 221.221626][T11968] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 221.229178][T11968] vhci_hcd vhci_hcd.0: Device attached [ 221.238559][T11973] bond0: (slave bond_slave_0): Releasing backup interface [ 221.251214][T11973] bond0: (slave bond_slave_1): Releasing backup interface [ 221.264548][T11973] team0: Port device team_slave_0 removed [ 221.274586][T11973] team0: Port device team_slave_1 removed [ 221.283141][T11973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.291352][T11973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.304821][T11973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.312499][T11973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.332674][T11974] vhci_hcd: connection closed [ 221.338711][ T3436] vhci_hcd: stop threads [ 221.348484][ T3436] vhci_hcd: release socket [ 221.352935][ T3436] vhci_hcd: disconnect device [ 221.389594][T11979] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 221.398506][T11979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3166'. [ 221.407638][T11979] smc: net device bond0 applied user defined pnetid SYZ2 [ 221.414998][T11979] smc: net device bond0 erased user defined pnetid SYZ2 [ 221.422656][T11979] 9pnet_fd: Insufficient options for proto=fd [ 221.811553][T11996] FAULT_INJECTION: forcing a failure. [ 221.811553][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 221.824346][T11996] CPU: 1 UID: 0 PID: 11996 Comm: syz.1.3172 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 221.824380][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.824397][T11996] Call Trace: [ 221.824404][T11996] [ 221.824412][T11996] __dump_stack+0x1d/0x30 [ 221.824504][T11996] dump_stack_lvl+0xe8/0x140 [ 221.824530][T11996] dump_stack+0x15/0x1b [ 221.824552][T11996] should_fail_ex+0x265/0x280 [ 221.824596][T11996] should_failslab+0x8c/0xb0 [ 221.824689][T11996] kmem_cache_alloc_noprof+0x50/0x310 [ 221.824787][T11996] ? __anon_vma_prepare+0x70/0x2f0 [ 221.824821][T11996] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 221.824859][T11996] __anon_vma_prepare+0x70/0x2f0 [ 221.824947][T11996] do_wp_page+0x1838/0x2400 [ 221.824977][T11996] ? __rcu_read_lock+0x37/0x50 [ 221.825107][T11996] handle_mm_fault+0x77d/0x2be0 [ 221.825132][T11996] ? mas_walk+0xf2/0x120 [ 221.825163][T11996] do_user_addr_fault+0x636/0x1090 [ 221.825279][T11996] ? arch_exit_work+0x30/0x40 [ 221.825375][T11996] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 221.825419][T11996] exc_page_fault+0x62/0xa0 [ 221.825460][T11996] asm_exc_page_fault+0x26/0x30 [ 221.825507][T11996] RIP: 0033:0x7fa721400ca3 [ 221.825533][T11996] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 221.825555][T11996] RSP: 002b:00007fa71fba64a0 EFLAGS: 00010202 [ 221.825574][T11996] RAX: 0000000000000400 RBX: 00007fa71fba6540 RCX: 00007fa717787000 [ 221.825590][T11996] RDX: 00007fa71fba66e0 RSI: 0000000000000011 RDI: 00007fa71fba65e0 [ 221.825607][T11996] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003be [ 221.825623][T11996] R10: 00000000000003cc R11: 00007fa71fba6540 R12: 0000000000000001 [ 221.825639][T11996] R13: 00007fa7215dc020 R14: 0000000000000020 R15: 00007fa71fba65e0 [ 221.825700][T11996] [ 221.825713][T11996] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 221.961386][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 222.004406][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3174'. [ 222.142396][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 222.319942][T12018] hub 6-0:1.0: USB hub found [ 222.324702][T12018] hub 6-0:1.0: 8 ports detected [ 222.392882][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3182'. [ 222.402417][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3182'. [ 222.440121][T12031] syz!: rxe_newlink: already configured on team_slave_0 [ 222.449244][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'. [ 222.459344][T12031] smc: net device bond0 applied user defined pnetid SYZ2 [ 222.467751][T12031] smc: net device bond0 erased user defined pnetid SYZ2 [ 222.475605][T12031] 9pnet_fd: Insufficient options for proto=fd [ 222.541912][T12041] team0 (unregistering): Port device team_slave_0 removed [ 222.551117][T12041] team0 (unregistering): Port device team_slave_1 removed [ 222.564207][T12043] FAULT_INJECTION: forcing a failure. [ 222.564207][T12043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.577738][T12043] CPU: 0 UID: 0 PID: 12043 Comm: syz.1.3190 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 222.577774][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.577791][T12043] Call Trace: [ 222.577799][T12043] [ 222.577810][T12043] __dump_stack+0x1d/0x30 [ 222.577912][T12043] dump_stack_lvl+0xe8/0x140 [ 222.577938][T12043] dump_stack+0x15/0x1b [ 222.577956][T12043] should_fail_ex+0x265/0x280 [ 222.578034][T12043] should_fail+0xb/0x20 [ 222.578076][T12043] should_fail_usercopy+0x1a/0x20 [ 222.578107][T12043] _copy_to_user+0x20/0xa0 [ 222.578148][T12043] simple_read_from_buffer+0xb5/0x130 [ 222.578217][T12043] proc_fail_nth_read+0x100/0x140 [ 222.578247][T12043] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.578274][T12043] vfs_read+0x19d/0x6f0 [ 222.578298][T12043] ? __rcu_read_unlock+0x4f/0x70 [ 222.578402][T12043] ? __fget_files+0x184/0x1c0 [ 222.578435][T12043] ksys_read+0xda/0x1a0 [ 222.578462][T12043] __x64_sys_read+0x40/0x50 [ 222.578487][T12043] x64_sys_call+0x2d77/0x2fb0 [ 222.578556][T12043] do_syscall_64+0xd2/0x200 [ 222.578578][T12043] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 222.578608][T12043] ? clear_bhb_loop+0x40/0x90 [ 222.578645][T12043] ? clear_bhb_loop+0x40/0x90 [ 222.578744][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.578772][T12043] RIP: 0033:0x7fa72153d33c [ 222.578870][T12043] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.578892][T12043] RSP: 002b:00007fa71fba7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.578911][T12043] RAX: ffffffffffffffda RBX: 00007fa721765fa0 RCX: 00007fa72153d33c [ 222.578924][T12043] RDX: 000000000000000f RSI: 00007fa71fba70a0 RDI: 0000000000000009 [ 222.578936][T12043] RBP: 00007fa71fba7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.578950][T12043] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 222.578966][T12043] R13: 0000000000000000 R14: 00007fa721765fa0 R15: 00007ffe80d1e9b8 [ 222.578995][T12043] [ 222.821604][T12048] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 222.848903][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.858423][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.006127][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 223.091568][T12051] hub 6-0:1.0: USB hub found [ 223.096389][T12051] hub 6-0:1.0: 8 ports detected [ 223.312039][T12070] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 223.352051][T12070] smc: net device bond0 applied user defined pnetid SYZ2 [ 223.361667][T12070] smc: net device bond0 erased user defined pnetid SYZ2 [ 223.369441][T12070] 9pnet_fd: Insufficient options for proto=fd [ 223.649305][T12089] netlink: 'syz.3.3207': attribute type 27 has an invalid length. [ 223.689600][T12094] tipc: Enabling of bearer rejected, failed to enable media [ 223.850242][T12107] netlink: 'syz.1.3211': attribute type 10 has an invalid length. [ 223.861455][T12107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.869905][T12107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.879942][T12107] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 223.898933][T12107] team0: Failed to send options change via netlink (err -105) [ 223.906568][T12107] team0: Port device geneve1 added [ 223.915651][T12100] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.978877][T12100] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.040813][T12100] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.073278][T12100] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.100611][T12100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.121677][T12100] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.484902][T12133] SELinux: syz.6.3224 (12133) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 224.544057][T12135] netlink: 'syz.6.3225': attribute type 27 has an invalid length. [ 224.749491][ T3370] usb 3-1: enqueue for inactive port 0 [ 224.763742][ T3370] usb 3-1: enqueue for inactive port 0 [ 224.764503][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 224.764522][ T29] audit: type=1326 audit(2000000019.120:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 224.820034][T12135] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.825469][ T29] audit: type=1326 audit(2000000019.160:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 224.829124][T12135] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.829166][T12135] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.853645][ T29] audit: type=1326 audit(2000000019.160:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 224.861717][T12135] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.871364][ T29] audit: type=1326 audit(2000000019.160:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 224.897767][ T3370] vhci_hcd: vhci_device speed not set [ 224.903836][ T29] audit: type=1326 audit(2000000019.160:14281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 224.958153][ T29] audit: type=1326 audit(2000000019.160:14282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 224.982382][ T29] audit: type=1326 audit(2000000019.160:14283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 225.006711][ T29] audit: type=1326 audit(2000000019.160:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 225.031050][ T29] audit: type=1326 audit(2000000019.160:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 225.055392][ T29] audit: type=1326 audit(2000000019.160:14286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12134 comm="syz.6.3225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 225.120308][T12150] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 225.152622][T12150] smc: net device bond0 applied user defined pnetid SYZ2 [ 225.182431][T12150] smc: net device bond0 erased user defined pnetid SYZ2 [ 225.193305][T12150] 9pnet_fd: Insufficient options for proto=fd [ 225.392485][T12181] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.422249][T12185] netlink: 'syz.3.3242': attribute type 27 has an invalid length. [ 225.450368][T12181] wireguard0: entered promiscuous mode [ 225.463248][T12188] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 225.486728][T12188] smc: net device bond0 applied user defined pnetid SYZ2 [ 225.494414][T12188] smc: net device bond0 erased user defined pnetid SYZ2 [ 225.504598][T12188] 9pnet_fd: Insufficient options for proto=fd [ 226.062178][T12223] __nla_validate_parse: 5 callbacks suppressed [ 226.062197][T12223] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3254'. [ 226.432062][T12230] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 226.440695][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3256'. [ 226.449943][T12230] smc: net device bond0 applied user defined pnetid SYZ2 [ 226.458052][T12230] smc: net device bond0 erased user defined pnetid SYZ2 [ 226.465612][T12230] 9pnet_fd: Insufficient options for proto=fd [ 226.722771][T12235] lo speed is unknown, defaulting to 1000 [ 226.874488][T12235] chnl_net:caif_netlink_parms(): no params data found [ 226.935282][T12235] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.942565][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.953161][T12235] bridge_slave_0: entered allmulticast mode [ 226.966278][T12235] bridge_slave_0: entered promiscuous mode [ 227.003551][ T37] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.018125][T12235] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.025250][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.042877][T12235] bridge_slave_1: entered allmulticast mode [ 227.049474][T12235] bridge_slave_1: entered promiscuous mode [ 227.092469][ T37] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.121739][T12235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.138695][T12235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.149150][ T37] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.211219][T12235] team0: Port device team_slave_0 added [ 227.218544][T12235] team0: Port device team_slave_1 added [ 227.234491][ T37] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.287768][T12235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.294886][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.321665][T12235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.333403][T12235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.341127][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.368023][T12235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.452572][T12268] xt_TPROXY: Can be used only with -p tcp or -p udp [ 227.502827][ T37] team0: Port device geneve1 removed [ 227.668104][ T37] bond0 (unregistering): Released all slaves [ 227.688114][T12268] wireguard0: entered promiscuous mode [ 227.714710][ T37] tipc: Disabling bearer [ 227.720248][ T37] tipc: Left network mode [ 227.729877][T12235] hsr_slave_0: entered promiscuous mode [ 227.750431][T12235] hsr_slave_1: entered promiscuous mode [ 227.773656][T12235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.794121][T12235] Cannot create hsr debugfs directory [ 228.001447][ T377] smc: removing ib device syz! [ 228.095607][T12294] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.292376][T12301] wireguard0: entered promiscuous mode [ 228.442708][T12308] hub 6-0:1.0: USB hub found [ 228.448054][T12308] hub 6-0:1.0: 8 ports detected [ 228.873828][T12235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.885817][T12235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.900563][T12235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.927225][T12235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.093413][T12235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.127515][T12331] IPv6: sit1: Disabled Multicast RS [ 229.142178][T12235] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.180729][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.187929][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.227214][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.234357][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.254978][T12343] tipc: Started in network mode [ 229.260684][T12343] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 229.269710][T12343] tipc: Enabling of bearer rejected, failed to enable media [ 229.300231][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3288'. [ 229.335386][T12235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.369147][T12337] infiniband syz!: set down [ 229.373741][T12337] infiniband syz!: added team_slave_0 [ 229.397265][T12349] smc: net device bond0 applied user defined pnetid SYZ2 [ 229.411266][T12350] smc: net device bond0 erased user defined pnetid SYZ2 [ 229.419112][T12357] 9pnet_fd: Insufficient options for proto=fd [ 229.441169][T12337] RDS/IB: syz!: added [ 229.459285][T12337] smc: adding ib device syz! with port count 1 [ 229.495919][T12337] smc: ib device syz! port 1 has pnetid [ 229.516417][T12235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.843845][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 229.843865][ T29] audit: type=1326 audit(2000000002.630:14400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 229.873789][ T29] audit: type=1326 audit(2000000002.630:14401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 229.897507][ T29] audit: type=1326 audit(2000000002.630:14402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 229.921099][ T29] audit: type=1326 audit(2000000002.630:14403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 229.944838][ T29] audit: type=1326 audit(2000000002.630:14404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 229.968592][ T29] audit: type=1326 audit(2000000002.630:14405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 229.992188][ T29] audit: type=1326 audit(2000000002.630:14406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 230.015808][ T29] audit: type=1326 audit(2000000002.630:14407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 230.039427][ T29] audit: type=1326 audit(2000000002.630:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 230.063025][ T29] audit: type=1326 audit(2000000002.630:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12376 comm="syz.4.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 230.485329][T12235] veth0_vlan: entered promiscuous mode [ 230.509346][T12235] veth1_vlan: entered promiscuous mode [ 230.560425][T12235] veth0_macvtap: entered promiscuous mode [ 230.580139][T12235] veth1_macvtap: entered promiscuous mode [ 230.609665][T12235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.638145][T12235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.667760][T12235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.676688][T12235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.685494][T12235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.694249][T12235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.748409][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 230.830415][T12391] bridge0: port 1(macvlan2) entered blocking state [ 230.837170][T12391] bridge0: port 1(macvlan2) entered disabled state [ 230.854064][T12391] macvlan2: entered allmulticast mode [ 230.859563][T12391] bridge0: entered allmulticast mode [ 230.882300][T12391] macvlan2: left allmulticast mode [ 230.887631][T12391] bridge0: left allmulticast mode [ 231.032674][T12403] netlink: 'syz.1.3258': attribute type 27 has an invalid length. [ 231.102124][T12403] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.109641][T12403] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.172009][T12409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.208941][T12397] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 231.215588][T12397] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.223307][T12397] vhci_hcd vhci_hcd.0: Device attached [ 231.272608][T12403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.306147][T12403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.406319][ T3370] vhci_hcd: vhci_device speed not set [ 231.423899][T12403] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.433043][T12403] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.442088][T12403] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.451115][T12403] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.476340][ T3370] usb 13-1: new low-speed USB device number 3 using vhci_hcd [ 231.533695][T12405] vhci_hcd: connection reset by peer [ 231.548385][T12409] wireguard0: entered promiscuous mode [ 231.554853][ T12] vhci_hcd: stop threads [ 231.559188][ T12] vhci_hcd: release socket [ 231.563659][ T12] vhci_hcd: disconnect device [ 232.021375][T12431] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 232.079708][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3314'. [ 232.118665][T12431] smc: net device bond0 applied user defined pnetid SYZ2 [ 232.193075][T12435] smc: net device bond0 erased user defined pnetid SYZ2 [ 232.263427][T12431] 9pnet_fd: Insufficient options for proto=fd [ 232.411265][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 232.485680][T12439] bridge0: port 3(macvlan2) entered blocking state [ 232.493013][T12439] bridge0: port 3(macvlan2) entered disabled state [ 232.534097][T12439] macvlan2: entered allmulticast mode [ 232.539629][T12439] bridge0: entered allmulticast mode [ 232.555866][T12439] macvlan2: left allmulticast mode [ 232.561153][T12439] bridge0: left allmulticast mode [ 232.669745][T12458] xt_TPROXY: Can be used only with -p tcp or -p udp [ 232.710594][T12468] IPv6: sit1: Disabled Multicast RS [ 232.810056][T12458] wireguard0: entered promiscuous mode [ 232.940858][T12466] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 232.947472][T12466] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 232.955640][T12466] vhci_hcd vhci_hcd.0: Device attached [ 233.087347][T12475] vhci_hcd: connection closed [ 233.116467][ T12] vhci_hcd: stop threads [ 233.125535][ T12] vhci_hcd: release socket [ 233.130000][ T12] vhci_hcd: disconnect device [ 233.705133][T12488] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 233.711836][T12488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 233.719459][T12488] vhci_hcd vhci_hcd.0: Device attached [ 233.726904][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3337'. [ 233.757633][T12492] bridge0: port 1(macvlan2) entered blocking state [ 233.764276][T12492] bridge0: port 1(macvlan2) entered disabled state [ 233.894008][T12492] macvlan2: entered allmulticast mode [ 233.899502][T12492] bridge0: entered allmulticast mode [ 233.905572][T12492] macvlan2: left allmulticast mode [ 233.910806][T12492] bridge0: left allmulticast mode [ 233.921140][T12497] vhci_hcd: connection closed [ 233.921349][ T37] vhci_hcd: stop threads [ 233.931256][ T37] vhci_hcd: release socket [ 233.935714][ T37] vhci_hcd: disconnect device [ 233.956808][ T3414] vhci_hcd: vhci_device speed not set [ 233.990574][T12516] hub 6-0:1.0: USB hub found [ 233.995709][T12516] hub 6-0:1.0: 8 ports detected [ 234.495769][T12519] chnl_net:caif_netlink_parms(): no params data found [ 234.597529][T12536] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 234.604160][T12536] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 234.612365][T12536] vhci_hcd vhci_hcd.0: Device attached [ 234.625129][T12542] vhci_hcd: connection closed [ 234.625308][ T12] vhci_hcd: stop threads [ 234.635026][ T12] vhci_hcd: release socket [ 234.639607][ T12] vhci_hcd: disconnect device [ 234.645286][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.652489][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.687234][T12519] bridge_slave_0: entered allmulticast mode [ 234.688723][T12533] serio: Serial port ptm0 [ 234.704123][T12519] bridge_slave_0: entered promiscuous mode [ 234.717430][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.724710][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.753889][T12519] bridge_slave_1: entered allmulticast mode [ 234.765902][T12519] bridge_slave_1: entered promiscuous mode [ 234.793852][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.887798][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.941361][T12519] team0: Port device team_slave_0 added [ 234.948171][T12519] team0: Port device team_slave_1 added [ 235.000751][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.008571][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.037146][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.187328][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.194337][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.220408][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.314410][T12519] hsr_slave_0: entered promiscuous mode [ 235.330952][T12519] hsr_slave_1: entered promiscuous mode [ 235.347444][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.355140][T12519] Cannot create hsr debugfs directory [ 235.391855][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 235.391879][ T29] audit: type=1326 audit(2000000000.250:14487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 235.451185][ T29] audit: type=1326 audit(2000000000.250:14488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa7dd8d290 code=0x7ffc0000 [ 235.474933][ T29] audit: type=1326 audit(2000000000.250:14489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 235.498787][ T29] audit: type=1326 audit(2000000000.250:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 235.522477][ T29] audit: type=1326 audit(2000000000.250:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 235.546226][ T29] audit: type=1326 audit(2000000000.250:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 235.570004][ T29] audit: type=1326 audit(2000000000.250:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 235.593911][ T29] audit: type=1326 audit(2000000000.250:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12574 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 235.709783][T12519] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.720382][T12582] serio: Serial port ptm0 [ 235.768718][T12519] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.847554][T12519] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.957689][T12519] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.999689][T12596] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 236.006331][T12596] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.013848][T12596] vhci_hcd vhci_hcd.0: Device attached [ 236.032197][T12603] vhci_hcd: connection closed [ 236.032511][ T31] vhci_hcd: stop threads [ 236.041641][ T31] vhci_hcd: release socket [ 236.046093][ T31] vhci_hcd: disconnect device [ 236.057877][ T29] audit: type=1326 audit(2000000000.920:14495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12606 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 236.079563][T12519] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 236.099418][ T29] audit: type=1326 audit(2000000000.920:14496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12606 comm="syz.3.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f705713d290 code=0x7ffc0000 [ 236.134254][T12519] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 236.145524][T12519] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 236.164739][T12519] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 236.184027][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3378'. [ 236.199715][T12614] bridge0: port 3(macvlan2) entered blocking state [ 236.206487][T12614] bridge0: port 3(macvlan2) entered disabled state [ 236.213647][T12614] macvlan2: entered allmulticast mode [ 236.219115][T12614] bridge0: entered allmulticast mode [ 236.227126][T12614] macvlan2: left allmulticast mode [ 236.232308][T12614] bridge0: left allmulticast mode [ 236.272512][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.307812][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.329825][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.336973][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.357150][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.364276][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.458606][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.506332][ T3370] usb 13-1: enqueue for inactive port 0 [ 236.511965][ T3370] usb 13-1: enqueue for inactive port 0 [ 236.626506][ T3370] vhci_hcd: vhci_device speed not set [ 236.711249][T12519] veth0_vlan: entered promiscuous mode [ 236.738632][T12519] veth1_vlan: entered promiscuous mode [ 236.779888][T12519] veth0_macvtap: entered promiscuous mode [ 236.806499][T12519] veth1_macvtap: entered promiscuous mode [ 236.826830][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.842973][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.862144][T12519] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.871062][T12519] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.880701][T12519] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.889596][T12519] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.955442][T12655] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 236.962085][T12655] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.970263][T12655] vhci_hcd vhci_hcd.0: Device attached [ 236.994435][T12662] vhci_hcd: connection closed [ 236.994815][ T37] vhci_hcd: stop threads [ 237.004081][ T37] vhci_hcd: release socket [ 237.008192][T12641] serio: Serial port ptm0 [ 237.009446][ T37] vhci_hcd: disconnect device [ 237.166061][T12671] hub 6-0:1.0: USB hub found [ 237.170988][T12671] hub 6-0:1.0: 8 ports detected [ 237.422863][T12675] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 237.429450][T12675] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.436988][T12675] vhci_hcd vhci_hcd.0: Device attached [ 237.458997][T12677] vhci_hcd: connection closed [ 237.459410][ T12] vhci_hcd: stop threads [ 237.468450][ T12] vhci_hcd: release socket [ 237.472905][ T12] vhci_hcd: disconnect device [ 237.896975][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3398'. [ 237.919274][T12692] bridge0: port 1(macvlan2) entered blocking state [ 237.925846][T12692] bridge0: port 1(macvlan2) entered disabled state [ 237.933342][T12692] macvlan2: entered allmulticast mode [ 237.938801][T12692] bridge0: entered allmulticast mode [ 237.945478][T12692] macvlan2: left allmulticast mode [ 237.950854][T12692] bridge0: left allmulticast mode [ 239.134219][T12705] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 239.140821][T12705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 239.149170][T12705] vhci_hcd vhci_hcd.0: Device attached [ 239.166009][T12718] vhci_hcd: connection closed [ 239.167100][ T3436] vhci_hcd: stop threads [ 239.176291][ T3436] vhci_hcd: release socket [ 239.180827][ T3436] vhci_hcd: disconnect device [ 239.228838][T12725] bridge_slave_0: left allmulticast mode [ 239.234547][T12725] bridge_slave_0: left promiscuous mode [ 239.240396][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.249305][T12725] bridge_slave_1: left allmulticast mode [ 239.254993][T12725] bridge_slave_1: left promiscuous mode [ 239.260952][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.270140][T12725] bond0: (slave bond_slave_0): Releasing backup interface [ 239.279064][T12725] bond0: (slave bond_slave_1): Releasing backup interface [ 239.288097][T12725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.296043][T12725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.580350][T12764] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 239.590207][T12764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3428'. [ 239.599723][T12764] smc: net device bond0 applied user defined pnetid SYZ2 [ 239.609290][T12764] smc: net device bond0 erased user defined pnetid SYZ2 [ 239.616785][T12764] 9pnet_fd: Insufficient options for proto=fd [ 239.695629][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'. [ 239.720314][T12778] bridge0: port 1(macvlan2) entered blocking state [ 239.727700][T12778] bridge0: port 1(macvlan2) entered disabled state [ 239.730207][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3437'. [ 239.739267][T12778] macvlan2: entered allmulticast mode [ 239.749517][T12778] bridge0: entered allmulticast mode [ 239.755636][T12778] macvlan2: left allmulticast mode [ 239.760848][T12778] bridge0: left allmulticast mode [ 239.774702][T12782] bridge0: port 1(macvlan2) entered blocking state [ 239.781339][T12782] bridge0: port 1(macvlan2) entered disabled state [ 239.788611][T12782] macvlan2: entered allmulticast mode [ 239.794067][T12782] bridge0: entered allmulticast mode [ 239.800440][T12782] macvlan2: left allmulticast mode [ 239.805611][T12782] bridge0: left allmulticast mode [ 239.859969][T12794] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 239.879891][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3443'. [ 239.891911][T12794] smc: net device bond0 applied user defined pnetid SYZ2 [ 239.900902][T12794] smc: net device bond0 erased user defined pnetid SYZ2 [ 239.912277][T12794] 9pnet_fd: Insufficient options for proto=fd [ 240.048245][T12804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 240.054870][T12804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.062414][T12804] vhci_hcd vhci_hcd.0: Device attached [ 240.072449][T12817] vhci_hcd: connection closed [ 240.075423][ T126] vhci_hcd: stop threads [ 240.084586][ T126] vhci_hcd: release socket [ 240.089115][ T126] vhci_hcd: disconnect device [ 240.137807][T12826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 240.175744][T12826] wireguard0: entered promiscuous mode [ 240.209734][T12827] hub 6-0:1.0: USB hub found [ 240.214486][T12827] hub 6-0:1.0: 8 ports detected [ 240.361460][T12841] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 240.370599][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3459'. [ 240.379761][T12841] smc: net device bond0 applied user defined pnetid SYZ2 [ 240.392211][T12841] smc: net device bond0 erased user defined pnetid SYZ2 [ 240.400513][T12841] 9pnet_fd: Insufficient options for proto=fd [ 240.615898][T12851] IPv6: sit1: Disabled Multicast RS [ 240.980201][T12871] netlink: 'syz.4.3471': attribute type 27 has an invalid length. [ 240.991236][T12871] $Hÿ: left promiscuous mode [ 241.016441][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 241.016461][ T29] audit: type=1326 audit(2000000003.010:14550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.047407][ T29] audit: type=1326 audit(2000000003.010:14551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.071849][ T29] audit: type=1326 audit(2000000003.010:14552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f705713e963 code=0x7ffc0000 [ 241.096047][ T29] audit: type=1326 audit(2000000003.010:14553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f705713e963 code=0x7ffc0000 [ 241.120383][ T29] audit: type=1326 audit(2000000003.010:14554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.144722][ T29] audit: type=1326 audit(2000000003.010:14555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.148794][T12872] sd 0:0:1:0: device reset [ 241.169058][ T29] audit: type=1326 audit(2000000003.010:14556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.197348][ T29] audit: type=1326 audit(2000000003.010:14557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.221755][ T29] audit: type=1326 audit(2000000003.010:14558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.246135][ T29] audit: type=1326 audit(2000000003.020:14559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12866 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 241.329153][T12878] tipc: Started in network mode [ 241.334142][T12878] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 241.343235][T12878] tipc: Enabling of bearer rejected, failed to enable media [ 241.595222][T12881] serio: Serial port ptm0 [ 241.816791][T12910] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 241.832975][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3485'. [ 241.853207][T12910] smc: net device bond0 applied user defined pnetid SYZ2 [ 241.869396][T12910] smc: net device bond0 erased user defined pnetid SYZ2 [ 241.894478][T12910] 9pnet_fd: Insufficient options for proto=fd [ 242.393522][T12939] sd 0:0:1:0: device reset [ 242.546450][T12943] tipc: Started in network mode [ 242.551419][T12943] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 242.569002][T12943] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 242.578043][T12943] tipc: Enabled bearer , priority 10 [ 242.585277][T12945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.653653][T12945] wireguard0: entered promiscuous mode [ 242.668448][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3500'. [ 242.975271][T12976] tipc: Enabling of bearer rejected, already enabled [ 243.041123][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3513'. [ 243.065894][T12973] hub 6-0:1.0: USB hub found [ 243.077829][T12973] hub 6-0:1.0: 8 ports detected [ 243.232695][T13000] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 243.240480][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3521'. [ 243.250260][T13000] smc: net device bond0 applied user defined pnetid SYZ2 [ 243.258160][T13000] smc: net device bond0 erased user defined pnetid SYZ2 [ 243.267926][T13000] 9pnet_fd: Insufficient options for proto=fd [ 243.321540][T13006] tipc: Enabling of bearer rejected, already enabled [ 243.410244][T13016] xt_TPROXY: Can be used only with -p tcp or -p udp [ 243.478843][T13016] wireguard0: entered promiscuous mode [ 243.593889][T13025] netlink: 'syz.1.3530': attribute type 27 has an invalid length. [ 243.696970][ T3415] tipc: Node number set to 1 [ 243.903992][T13054] hub 6-0:1.0: USB hub found [ 243.911470][T13054] hub 6-0:1.0: 8 ports detected [ 244.219229][T13060] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 244.264373][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'. [ 244.285000][T13060] smc: net device bond0 applied user defined pnetid SYZ2 [ 244.300076][T13060] smc: net device bond0 erased user defined pnetid SYZ2 [ 244.310412][T13060] 9pnet_fd: Insufficient options for proto=fd [ 244.359004][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3549'. [ 244.396269][T13070] bridge_slave_0: left allmulticast mode [ 244.401998][T13070] bridge_slave_0: left promiscuous mode [ 244.407848][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.418387][T13070] bridge_slave_1: left allmulticast mode [ 244.424096][T13070] bridge_slave_1: left promiscuous mode [ 244.429981][T13076] netlink: 'syz.4.3553': attribute type 27 has an invalid length. [ 244.439007][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.451392][T13070] bond0: (slave bond_slave_0): Releasing backup interface [ 244.460288][T13070] bond0: (slave bond_slave_1): Releasing backup interface [ 244.471328][T13070] team0: Port device team_slave_0 removed [ 244.479045][T13070] team0: Port device team_slave_1 removed [ 244.485477][T13070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.494924][T13070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.713240][T13099] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 244.723446][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3561'. [ 244.732980][T13099] smc: net device bond0 applied user defined pnetid SYZ2 [ 244.740557][T13099] smc: net device bond0 erased user defined pnetid SYZ2 [ 244.748446][T13099] 9pnet_fd: Insufficient options for proto=fd [ 244.796053][T13101] tipc: Started in network mode [ 244.801046][T13101] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 244.810072][T13101] tipc: Enabling of bearer rejected, failed to enable media [ 245.335544][T13135] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 245.429833][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3575'. [ 245.514117][T13135] smc: net device bond0 applied user defined pnetid SYZ2 [ 245.572955][T13141] smc: net device bond0 erased user defined pnetid SYZ2 [ 245.726690][T13135] 9pnet_fd: Insufficient options for proto=fd [ 246.214702][T13165] hub 6-0:1.0: USB hub found [ 246.219830][T13165] hub 6-0:1.0: 8 ports detected [ 246.570804][T13179] tipc: Enabling of bearer rejected, failed to enable media [ 246.584963][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 246.584981][ T29] audit: type=1326 audit(2000000000.130:14846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.617372][ T29] audit: type=1326 audit(2000000000.160:14847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe67e83ab19 code=0x7ffc0000 [ 246.640963][ T29] audit: type=1326 audit(2000000000.160:14848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.664710][ T29] audit: type=1326 audit(2000000000.160:14849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.688404][ T29] audit: type=1326 audit(2000000000.170:14850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.712086][ T29] audit: type=1326 audit(2000000000.170:14851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.735888][ T29] audit: type=1326 audit(2000000000.170:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.759620][ T29] audit: type=1326 audit(2000000000.170:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.783502][ T29] audit: type=1326 audit(2000000000.170:14854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.807558][ T29] audit: type=1326 audit(2000000000.170:14855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 246.845996][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3593'. [ 246.891516][T13184] wireguard0: entered promiscuous mode [ 246.971277][T13189] bridge_slave_0: left allmulticast mode [ 246.977098][T13189] bridge_slave_0: left promiscuous mode [ 246.982868][T13189] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.025718][T13189] bridge_slave_1: left allmulticast mode [ 247.032324][T13189] bridge_slave_1: left promiscuous mode [ 247.038059][T13189] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.087326][T13189] bond0: (slave bond_slave_0): Releasing backup interface [ 247.101010][T13189] bond0: (slave bond_slave_1): Releasing backup interface [ 247.117000][T13189] team0: Port device team_slave_0 removed [ 247.129562][T13189] team0: Port device team_slave_1 removed [ 247.137381][T13189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.144842][T13189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.172342][T13189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.179853][T13189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.316344][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3604'. [ 247.336529][T13215] bridge0: port 1(macvlan2) entered blocking state [ 247.339908][T13217] netlink: 'syz.6.3605': attribute type 27 has an invalid length. [ 247.343175][T13215] bridge0: port 1(macvlan2) entered disabled state [ 247.377425][T13215] macvlan2: entered allmulticast mode [ 247.382868][T13215] bridge0: entered allmulticast mode [ 247.427059][T13215] macvlan2: left allmulticast mode [ 247.432286][T13215] bridge0: left allmulticast mode [ 247.495448][T13219] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 247.503114][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3606'. [ 247.521784][T13219] smc: net device bond0 applied user defined pnetid SYZ2 [ 247.538876][T13219] smc: net device bond0 erased user defined pnetid SYZ2 [ 247.557639][T13219] 9pnet_fd: Insufficient options for proto=fd [ 247.639743][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3607'. [ 247.689828][T13221] bridge0: port 1(macvlan2) entered blocking state [ 247.696573][T13221] bridge0: port 1(macvlan2) entered disabled state [ 247.728911][T13221] macvlan2: entered allmulticast mode [ 247.734410][T13221] bridge0: entered allmulticast mode [ 247.770186][T13221] macvlan2: left allmulticast mode [ 247.775385][T13221] bridge0: left allmulticast mode [ 248.088170][T13235] wireguard0: entered promiscuous mode [ 248.617554][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3621'. [ 248.678280][T13225] serio: Serial port ptm0 [ 248.929879][T13260] hub 6-0:1.0: USB hub found [ 248.934945][T13260] hub 6-0:1.0: 8 ports detected [ 249.049893][T13266] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.175234][T13266] wireguard0: entered promiscuous mode [ 249.729087][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 249.779549][T13291] netlink: 'syz.3.3636': attribute type 27 has an invalid length. [ 249.945987][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3643'. [ 249.960745][T13307] bridge0: port 1(macvlan2) entered blocking state [ 249.968237][T13307] bridge0: port 1(macvlan2) entered disabled state [ 249.975406][T13307] macvlan2: entered allmulticast mode [ 249.980898][T13307] bridge0: entered allmulticast mode [ 249.989476][T13307] macvlan2: left allmulticast mode [ 249.994645][T13307] bridge0: left allmulticast mode [ 250.465096][T13320] hub 6-0:1.0: USB hub found [ 250.469883][T13320] hub 6-0:1.0: 8 ports detected [ 250.815587][T13328] netlink: 'syz.8.3652': attribute type 27 has an invalid length. [ 250.959996][T13328] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.969165][T13328] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.978341][T13328] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.987772][T13328] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.024273][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 251.045557][T13344] bridge0: port 1(macvlan2) entered blocking state [ 251.052499][T13344] bridge0: port 1(macvlan2) entered disabled state [ 251.061057][T13344] macvlan2: entered allmulticast mode [ 251.066569][T13344] bridge0: entered allmulticast mode [ 251.073053][T13344] macvlan2: left allmulticast mode [ 251.078966][T13344] bridge0: left allmulticast mode [ 251.086572][T13348] tipc: Enabling of bearer rejected, failed to enable media [ 251.122171][T13351] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.166638][T13355] tipc: Enabling of bearer rejected, failed to enable media [ 251.196546][T13351] wireguard0: entered promiscuous mode [ 251.408433][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3675'. [ 251.439693][T13382] bridge0: port 1(macvlan2) entered blocking state [ 251.446522][T13382] bridge0: port 1(macvlan2) entered disabled state [ 251.466587][T13382] macvlan2: entered allmulticast mode [ 251.472052][T13382] bridge0: entered allmulticast mode [ 251.488889][T13382] macvlan2: left allmulticast mode [ 251.494142][T13382] bridge0: left allmulticast mode [ 251.707835][T13391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 251.749844][T13391] bridge0: port 1(macvlan2) entered blocking state [ 251.756541][T13391] bridge0: port 1(macvlan2) entered disabled state [ 251.778414][T13391] macvlan2: entered allmulticast mode [ 251.783931][T13391] bridge0: entered allmulticast mode [ 251.803973][T13391] macvlan2: left allmulticast mode [ 251.809300][T13391] bridge0: left allmulticast mode [ 252.234126][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 252.234142][ T29] audit: type=1326 audit(2000000000.070:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 252.264219][ T29] audit: type=1326 audit(2000000000.070:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe67e89d290 code=0x7ffc0000 [ 252.287870][ T29] audit: type=1326 audit(2000000000.070:15032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 252.311535][ T29] audit: type=1326 audit(2000000000.070:15033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 252.335194][ T29] audit: type=1326 audit(2000000000.070:15034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 252.358832][ T29] audit: type=1326 audit(2000000000.070:15035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 252.382511][ T29] audit: type=1326 audit(2000000000.070:15036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 252.406242][ T29] audit: type=1326 audit(2000000000.070:15037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.6.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 252.429976][ T29] audit: type=1326 audit(2000000000.100:15038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.1.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 252.453602][ T29] audit: type=1326 audit(2000000000.100:15039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13417 comm="syz.1.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffa7dd8e929 code=0x7ffc0000 [ 252.643319][T13430] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 252.649895][T13430] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 252.657498][T13430] vhci_hcd vhci_hcd.0: Device attached [ 252.669597][T13438] vhci_hcd: connection closed [ 252.669857][ T3436] vhci_hcd: stop threads [ 252.679000][ T3436] vhci_hcd: release socket [ 252.683417][ T3436] vhci_hcd: disconnect device [ 252.751481][T13447] netlink: 'syz.8.3701': attribute type 27 has an invalid length. [ 252.832543][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3702'. [ 253.214297][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3710'. [ 253.223385][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3710'. [ 255.397431][T13529] serio: Serial port ptm1 [ 255.479475][T13533] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 255.486114][T13533] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 255.493599][T13533] vhci_hcd vhci_hcd.0: Device attached [ 255.506527][T13534] vhci_hcd: connection closed [ 255.507002][ T31] vhci_hcd: stop threads [ 255.516123][ T31] vhci_hcd: release socket [ 255.520575][ T31] vhci_hcd: disconnect device [ 255.898237][T13553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3741'. [ 255.907457][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3741'. [ 255.916519][T13553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3741'. [ 255.925855][T13553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3741'. [ 255.951373][T13547] hub 6-0:1.0: USB hub found [ 255.956859][T13547] hub 6-0:1.0: 8 ports detected [ 255.985376][T13557] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 255.993225][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 256.003476][T13557] smc: net device bond0 applied user defined pnetid SYZ2 [ 256.011063][T13557] smc: net device bond0 erased user defined pnetid SYZ2 [ 256.019395][T13557] 9pnet_fd: Insufficient options for proto=fd [ 256.092662][T13565] wireguard0: entered promiscuous mode [ 256.226079][T13574] netlink: 'syz.4.3752': attribute type 27 has an invalid length. [ 256.506983][T13584] random: crng reseeded on system resumption [ 256.811980][T13591] serio: Serial port ptm1 [ 256.968396][T13595] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 256.975013][T13595] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.983261][T13595] vhci_hcd vhci_hcd.0: Device attached [ 257.011934][T13596] vhci_hcd: connection closed [ 257.012495][ T126] vhci_hcd: stop threads [ 257.021545][ T126] vhci_hcd: release socket [ 257.026038][ T126] vhci_hcd: disconnect device [ 257.122435][T13603] wireguard0: entered promiscuous mode [ 257.282939][T13611] tipc: Enabling of bearer rejected, failed to enable media [ 257.292289][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 257.292307][ T29] audit: type=1326 audit(2000000000.990:15206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.323653][ T29] audit: type=1326 audit(2000000000.990:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.361812][ T29] audit: type=1326 audit(2000000001.050:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.385589][ T29] audit: type=1326 audit(2000000001.050:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.409571][ T29] audit: type=1326 audit(2000000001.050:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.433453][ T29] audit: type=1326 audit(2000000001.050:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.457232][ T29] audit: type=1326 audit(2000000001.050:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.480951][ T29] audit: type=1326 audit(2000000001.050:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.504964][ T29] audit: type=1326 audit(2000000001.050:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.528745][ T29] audit: type=1326 audit(2000000001.050:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f705713e929 code=0x7ffc0000 [ 257.571300][T13617] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 257.580194][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3768'. [ 257.605662][T13617] smc: net device bond0 applied user defined pnetid SYZ2 [ 257.614210][T13617] smc: net device bond0 erased user defined pnetid SYZ2 [ 257.624128][T13617] 9pnet_fd: Insufficient options for proto=fd [ 257.692047][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 257.715448][T13631] bridge0: port 1(macvlan2) entered blocking state [ 257.722290][T13631] bridge0: port 1(macvlan2) entered disabled state [ 257.731319][T13631] macvlan2: entered allmulticast mode [ 257.736877][T13631] bridge0: entered allmulticast mode [ 257.747580][T13631] macvlan2: left allmulticast mode [ 257.752838][T13631] bridge0: left allmulticast mode [ 257.921198][T13638] hub 6-0:1.0: USB hub found [ 257.925951][T13638] hub 6-0:1.0: 8 ports detected [ 257.938389][T13648] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 257.948943][T13648] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3784'. [ 257.959421][T13648] smc: net device bond0 applied user defined pnetid SYZ2 [ 257.966954][T13648] smc: net device bond0 erased user defined pnetid SYZ2 [ 257.974686][T13648] 9pnet_fd: Insufficient options for proto=fd [ 258.127974][T13644] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 258.134653][T13644] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 258.142241][T13644] vhci_hcd vhci_hcd.0: Device attached [ 258.149753][T13655] vhci_hcd: connection closed [ 258.149900][ T3436] vhci_hcd: stop threads [ 258.159634][ T3436] vhci_hcd: release socket [ 258.164229][ T3436] vhci_hcd: disconnect device [ 258.175249][T13658] hub 6-0:1.0: USB hub found [ 258.180367][T13658] hub 6-0:1.0: 8 ports detected [ 258.694382][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 258.709598][T13667] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 258.718389][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3789'. [ 258.727502][T13667] smc: net device bond0 applied user defined pnetid SYZ2 [ 258.735148][T13667] smc: net device bond0 erased user defined pnetid SYZ2 [ 258.744250][T13667] 9pnet_fd: Insufficient options for proto=fd [ 258.772309][T13668] bridge0: port 1(macvlan2) entered blocking state [ 258.779774][T13668] bridge0: port 1(macvlan2) entered disabled state [ 258.789006][T13668] macvlan2: entered allmulticast mode [ 258.794439][T13668] bridge0: entered allmulticast mode [ 258.835946][T13668] macvlan2: left allmulticast mode [ 258.841328][T13668] bridge0: left allmulticast mode [ 258.939942][T13681] netlink: 'syz.3.3795': attribute type 27 has an invalid length. [ 258.998127][T13689] netlink: 'syz.1.3799': attribute type 27 has an invalid length. [ 259.075730][T13691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 259.082314][T13691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 259.089845][T13691] vhci_hcd vhci_hcd.0: Device attached [ 259.098484][T13695] vhci_hcd: connection closed [ 259.098679][ T31] vhci_hcd: stop threads [ 259.107850][ T31] vhci_hcd: release socket [ 259.112347][ T31] vhci_hcd: disconnect device [ 259.232664][T13712] bridge0: port 1(macvlan2) entered blocking state [ 259.239362][T13712] bridge0: port 1(macvlan2) entered disabled state [ 259.246232][T13712] macvlan2: entered allmulticast mode [ 259.251657][T13712] bridge0: entered allmulticast mode [ 259.257615][T13712] macvlan2: left allmulticast mode [ 259.262788][T13712] bridge0: left allmulticast mode [ 259.384225][T13720] netlink: 'syz.4.3811': attribute type 27 has an invalid length. [ 259.491051][T13733] xt_hashlimit: size too large, truncated to 1048576 [ 259.746337][T13744] sch_tbf: burst 2 is lower than device ip6tnl0 mtu (1452) ! [ 259.811415][T13745] netlink: 'syz.4.3818': attribute type 21 has an invalid length. [ 260.004547][T13760] tipc: Enabling of bearer rejected, failed to enable media [ 260.102034][T13762] hub 6-0:1.0: USB hub found [ 260.106845][T13762] hub 6-0:1.0: 8 ports detected [ 260.552728][T13781] serio: Serial port ptm0 [ 260.600515][T13785] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 260.607978][T13785] smc: net device bond0 applied user defined pnetid SYZ2 [ 260.615311][T13785] smc: net device bond0 erased user defined pnetid SYZ2 [ 260.622687][T13785] 9pnet_fd: Insufficient options for proto=fd [ 260.713656][T13793] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 260.754235][T13793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.796308][T13799] ipvlan2: entered promiscuous mode [ 260.830128][T13799] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 260.831095][T13799] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.989061][T13812] __nla_validate_parse: 5 callbacks suppressed [ 260.989081][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3847'. [ 261.032291][T13812] bridge0: port 1(macvlan2) entered blocking state [ 261.039058][T13812] bridge0: port 1(macvlan2) entered disabled state [ 261.048179][T13812] macvlan2: entered allmulticast mode [ 261.053613][T13812] bridge0: entered allmulticast mode [ 261.062237][T13812] macvlan2: left allmulticast mode [ 261.067509][T13812] bridge0: left allmulticast mode [ 261.478617][T13858] tipc: Enabling of bearer rejected, failed to enable media [ 261.577769][T13860] serio: Serial port ptm0 [ 261.693251][T13834] serio: Serial port ptm1 [ 262.087112][T13876] wireguard0: entered promiscuous mode [ 262.235911][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 262.289877][T13886] bridge0: port 1(macvlan2) entered blocking state [ 262.296506][T13886] bridge0: port 1(macvlan2) entered disabled state [ 262.303525][T13886] macvlan2: entered allmulticast mode [ 262.309661][T13886] bridge0: entered allmulticast mode [ 262.316628][T13886] macvlan2: left allmulticast mode [ 262.321807][T13886] bridge0: left allmulticast mode [ 262.328533][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 262.328549][ T29] audit: type=1326 audit(2000000006.030:15468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.358536][ T29] audit: type=1326 audit(2000000006.030:15469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.394682][ T29] audit: type=1326 audit(2000000006.030:15470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.418520][ T29] audit: type=1326 audit(2000000006.030:15471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.442696][ T29] audit: type=1326 audit(2000000006.030:15472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.466355][ T29] audit: type=1326 audit(2000000006.080:15473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.489973][ T29] audit: type=1326 audit(2000000006.080:15474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.513699][ T29] audit: type=1326 audit(2000000006.080:15475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.537390][ T29] audit: type=1326 audit(2000000006.080:15476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 262.561184][ T29] audit: type=1326 audit(2000000006.080:15477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13887 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb32492e929 code=0x7ffc0000 [ 263.111309][T13920] hub 6-0:1.0: USB hub found [ 263.116075][T13920] hub 6-0:1.0: 8 ports detected [ 263.157946][T13922] tipc: Enabling of bearer rejected, failed to enable media [ 263.302118][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3894'. [ 263.355973][T13933] bridge0: port 1(macvlan2) entered blocking state [ 263.362705][T13933] bridge0: port 1(macvlan2) entered disabled state [ 263.375588][T13933] macvlan2: entered allmulticast mode [ 263.381071][T13933] bridge0: entered allmulticast mode [ 263.390097][T13933] macvlan2: left allmulticast mode [ 263.395275][T13933] bridge0: left allmulticast mode [ 263.727900][T13947] sd 0:0:1:0: device reset [ 265.200689][T14001] hub 6-0:1.0: USB hub found [ 265.205531][T14001] hub 6-0:1.0: 8 ports detected [ 265.456152][T14009] wireguard0: entered promiscuous mode [ 265.502848][T14007] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 265.509427][T14007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 265.517733][T14007] vhci_hcd vhci_hcd.0: Device attached [ 265.528629][T14014] vhci_hcd: connection closed [ 265.529071][ T12] vhci_hcd: stop threads [ 265.539033][ T12] vhci_hcd: release socket [ 265.543470][ T12] vhci_hcd: disconnect device [ 265.596996][T14024] netlink: 'syz.1.3930': attribute type 27 has an invalid length. [ 265.732378][T14036] random: crng reseeded on system resumption [ 265.869686][T14044] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 265.899129][T14040] serio: Serial port ptm0 [ 265.932937][T14050] netlink: 'syz.6.3941': attribute type 4 has an invalid length. [ 266.041964][T14069] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 266.051129][T14069] tipc: Enabled bearer , priority 10 [ 266.129979][T14075] netlink: 'syz.6.3952': attribute type 27 has an invalid length. [ 266.130969][T14077] netlink: 'syz.1.3953': attribute type 4 has an invalid length. [ 266.177528][T14078] sd 0:0:1:0: device reset [ 266.582055][T14107] netlink: 'syz.4.3967': attribute type 27 has an invalid length. [ 266.618870][T14111] tipc: Enabling of bearer rejected, failed to enable media [ 266.871729][T14141] tipc: Enabling of bearer rejected, failed to enable media [ 266.920013][T14144] wireguard0: entered promiscuous mode [ 267.066157][ T3415] tipc: Node number set to 1 [ 267.112831][T14166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 267.259572][T14182] netlink: 'syz.3.3994': attribute type 4 has an invalid length. [ 267.455902][T14191] netlink: 'syz.3.3998': attribute type 4 has an invalid length. [ 267.468264][T14169] serio: Serial port ptm1 [ 267.629821][T14199] futex_wake_op: syz.3.4000 tries to shift op by -1; fix this program [ 267.741536][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 267.741554][ T29] audit: type=1326 audit(2000000002.440:15827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 267.798217][ T29] audit: type=1326 audit(2000000002.440:15828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 267.822663][ T29] audit: type=1326 audit(2000000002.440:15829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 267.847081][ T29] audit: type=1326 audit(2000000002.440:15830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 267.871497][ T29] audit: type=1326 audit(2000000002.440:15831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 267.895983][ T29] audit: type=1326 audit(2000000002.440:15832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 267.920352][ T29] audit: type=1326 audit(2000000002.440:15833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 267.944651][ T29] audit: type=1326 audit(2000000002.450:15834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14202 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67e89e929 code=0x7ffc0000 [ 268.021505][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4007'. [ 268.042105][T14222] ================================================================== [ 268.043165][T14218] bridge0: port 1(macvlan2) entered blocking state [ 268.050236][T14222] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 268.050272][T14222] [ 268.050280][T14222] write to 0xffff8881047a6500 of 8 bytes by task 14215 on cpu 1: [ 268.050300][T14222] mas_wmb_replace+0x20d/0x14a0 [ 268.050332][T14222] mas_wr_store_entry+0x1773/0x2b50 [ 268.050355][T14222] mas_store_prealloc+0x74d/0x9e0 [ 268.050379][T14222] vma_iter_store_new+0x1c5/0x200 [ 268.050409][T14222] vma_complete+0x125/0x580 [ 268.050429][T14222] __split_vma+0x591/0x650 [ 268.050459][T14222] vma_modify+0x21e/0xca0 [ 268.050484][T14222] vma_modify_flags+0x101/0x130 [ 268.057704][T14218] bridge0: port 1(macvlan2) entered disabled state [ 268.064285][T14222] mprotect_fixup+0x2cc/0x570 [ 268.067296][T14218] macvlan2: entered allmulticast mode [ 268.074343][T14222] do_mprotect_pkey+0x6d6/0x980 [ 268.079242][T14218] bridge0: entered allmulticast mode [ 268.084393][T14222] __x64_sys_mprotect+0x48/0x60 [ 268.144224][T14222] x64_sys_call+0x2794/0x2fb0 [ 268.148960][T14222] do_syscall_64+0xd2/0x200 [ 268.153519][T14222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.159432][T14222] [ 268.161780][T14222] read to 0xffff8881047a6500 of 8 bytes by task 14222 on cpu 0: [ 268.169427][T14222] mas_state_walk+0x119/0x650 [ 268.174141][T14222] mas_walk+0x30/0x120 [ 268.178235][T14222] lock_vma_under_rcu+0xa2/0x2f0 [ 268.183212][T14222] do_user_addr_fault+0x233/0x1090 [ 268.188369][T14222] exc_page_fault+0x62/0xa0 [ 268.192932][T14222] asm_exc_page_fault+0x26/0x30 [ 268.197819][T14222] [ 268.200168][T14222] value changed: 0xffff88810461e201 -> 0xffff8881047a6500 [ 268.207297][T14222] [ 268.209629][T14222] Reported by Kernel Concurrency Sanitizer on: [ 268.215817][T14222] CPU: 0 UID: 0 PID: 14222 Comm: syz.4.4006 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 268.226615][T14222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.236703][T14222] ================================================================== [ 268.264573][T14218] macvlan2: left allmulticast mode [ 268.269970][T14218] bridge0: left allmulticast mode [ 268.316406][ T29] audit: type=1400 audit(2000000003.020:15835): avc: denied { map } for pid=14203 comm="syz.3.4003" path="socket:[52640]" dev="sockfs" ino=52640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.340839][ T29] audit: type=1400 audit(2000000003.020:15836): avc: denied { read } for pid=14203 comm="syz.3.4003" path="socket:[52640]" dev="sockfs" ino=52640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1