last executing test programs: 26.426397428s ago: executing program 2 (id=143): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) 26.362824914s ago: executing program 2 (id=145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000d06010100000000000000000100000305000100070000000d00e8ff6b6973743a736474000000000500050007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xc8}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.361809214s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r2, &(0x7f0000000340)=""/127, 0x7f, 0x12022, &(0x7f00000003c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) unshare(0x6a040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e1406020000000004000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)}], 0x2}, 0xd0a0) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r5}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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") r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r6, 0x0, 0x0, 0x1000f4) sendfile(r6, r6, 0x0, 0x800000a1e) 26.240853005s ago: executing program 2 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x2000000000000100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x2, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0x1, 0x13}, {0x8, 0xfff0}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x5f, '\x00', 0xa, 0x0, 0x4, 0x3}}]}}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_emit_ethernet(0x411, &(0x7f0000000c00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb81004e0086dd6e51893803d704ff20010000000000000000000000000002fe80000000d11c5de7987aa8a9716dfa0e7300000000000000000000361d0c020500000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000000000000000ffff0000000000000000000000000000000000000000fe80000000000000000000000000003efc0100000000000000000000000000002f100305000000002001e5ffffff00000000000000000001ff02000000000000000000000000000100000000000000000000ffff64010101fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000000ffffe000000120010000000000000000000000000001fc0200000000000000000000000000013b000219680000002c1001ee000000002001000000000000000000000000000100000000000000000000000000000001ff020000000000000000000000000001ff020000000000000000000000000001fe80000000000000000000000000000a00000000000000000000ffff0a010101fe880000000000000000000000000101fe800000000000000000000000000041000c040684400200fc0100000000000000000000000000010000000000000000000000000000000100000000000000000000ffffe0000002fe8000000000000000000000000000aa00000000000000000000ffffac1414aafc02000000000000000000000000000067000431680000002b0a04050620bf0ffe8000000000000000000000000000bbfc0200000042189210c4862ce300000100000000000000000000000000000000fe880000000000000000000000000101000000000000000000000000000000012b16000000000000010a00000000000000000000e3265efbcbe965b7190ed5d220e25fc92765c2d2de7ec5d79d17fec314fd727ee05012133f814de9c910fe80000000000000000000000000001806579538d8c009e3688d11ad31edb368bb3cae7c80fdf85adebe62432951cfc340586f60c7970658cede6a14d62e2e407a86bb8b199f78c195ced344dd895a2486a7f92fe0fc44a7f3f4855a08c37d22bd89f3d4b15c0be2bcc91000000000000000000000ffff640101010401ff00000000ca9ff8d43b42a3cab3c90824f1f773b5708e3c4f51f76c6a857bc21028fd54e2642eefe31c1e74d5d285d00ccf7ea1033137af903f78d0e2dbad046ecf2a88d04d3866d3eafd8a80328faf825e000f1e7938b19117cf8844d7d6890661db6cb81f136f40470cf10b2c7e79761cf9654eb098e8672834d591ffd195f09379185bb8380ae39db4e76aa605e7838e9f1e7cf6300fa07c1ae0b9a7e9b5b2a12815f5a5d47a9c17b7dc7754fc3b200a5fd2ee62b6eef9b1a6dd8b2e25e9a42653b286b62894e403ba3e0e"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x20000000000001e1, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000002008000"/20, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x38470ca, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x40, 0x8, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x8, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010106, @broadcast}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) epoll_create1(0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, &(0x7f00000005c0)=ANY=[], 0xffffff6a) write$selinux_load(r8, 0x0, 0x0) 25.127077779s ago: executing program 2 (id=159): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 22.825489443s ago: executing program 3 (id=176): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r1, 0x0, 0x1fffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) 22.790721017s ago: executing program 3 (id=179): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x50) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x18}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYRES64=r1], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r3, 0x0, 0x1fffffffc}, 0x18) pipe2$9p(0x0, 0x0) clock_gettime(0x3, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {r4, r5/1000+60000}}) clock_gettime(0x0, &(0x7f00000000c0)) r6 = gettid() r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, 0x0, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x4044000}, 0x4800) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket(0x11, 0x3, 0xfff) close(r12) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r13}, 0x18) dup3(r10, r12, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 22.502122323s ago: executing program 3 (id=181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0xab7e, 0x0) mount(&(0x7f0000000740)=@md0, &(0x7f00000007c0)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) close(r2) r3 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\x89cqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4w\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000a00)={{0x80, 0x5}, 'port0\x00', 0x82, 0x250012, 0x0, 0x2c1d, 0x4, 0x2, 0x4, 0x0, 0x7cce8c743ee810de}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43}) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) fallocate(r3, 0x0, 0x9100, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000380)={0x5, 0x7, 0x0, 'queue1\x00', 0xfd9}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) 22.051558385s ago: executing program 3 (id=188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff000000004f9700000000000007010000f8ffffffb702000008000000b7030000fc7fffff850000009900000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") (rerun: 64) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) (async, rerun: 64) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (rerun: 64) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) (async, rerun: 32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async, rerun: 32) io_setup(0x8, &(0x7f0000000340)=0x0) (rerun: 32) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) (async, rerun: 64) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) (rerun: 64) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (rerun: 64) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8) (async) finit_module(r1, 0x0, 0x3) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast1, 0x8}, 0x1c) 21.67362079s ago: executing program 3 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x10000, 0x1, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000300000000000000110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x3, 0xe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x154}}, 0x0) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100feff95"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1, {0x0, 0x0, 0x0, r10, {0xe, 0x1}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x840) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x4e4, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x31c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-#\\{\',-+$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '~-!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[%\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "4030c20ddd0219606c6ed210a20aafe57807b525ba1e73d9f6da72fe7fdd2c4ca7ee3f4fb890b019dcd0d7b7ded6f9b39d9bf37b5cd4f2cb132577d6cccdd3b7759be628a41873cf74867d6d1e484f40ee141feaaf0b0d1c7764f5cfe619ad8aae55d14d7840aeb1465745"}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "643d106b6cfb2183c10022448a1e88389a626133ec46bb499795241a7d1857e9315248b3475dd7539dc92b71621c60db947be8dba2fe674a2ea5f19890d8f26944bcdfc7b5b149c73e98346b1d730cb388a73806ac8b783a643968331ebf097476d43d22573d59fdee1064867c2f24cce7531fac97263e9fc27ef7c8a9378355ba61b805d34d681977cec6ae"}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%:@$\'.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc26}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}(&^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b7b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/^]9(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']+^%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x85}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+*-[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(.-*$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x97}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe78}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f1d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xea3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ':.!&\xae-$}\\^&!5^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x557f284}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 20.567302293s ago: executing program 2 (id=203): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0xffffca97, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14"], 0x48}}], 0x2, 0x40000) (fail_nth: 2) 20.549098585s ago: executing program 32 (id=203): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0xffffca97, @loopback, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14"], 0x48}}], 0x2, 0x40000) (fail_nth: 2) 19.059265254s ago: executing program 3 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mlockall(0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d0000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r3 = accept4$tipc(r2, &(0x7f00000002c0)=@id, &(0x7f0000000300)=0x10, 0x800) recvmmsg(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000004080)=""/42, 0x2a}], 0x3, &(0x7f0000000640)=""/213, 0xd5}, 0xffffffff}, {{&(0x7f0000000580)=@xdp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)=""/47, 0x2f}, {&(0x7f0000000800)=""/201, 0xc9}, {&(0x7f0000000900)=""/42, 0x2a}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/52, 0x34}, {&(0x7f0000000f00)=""/4096, 0x1000}], 0x7, &(0x7f0000000a40)=""/202, 0xca}, 0x7}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000004000)=[{&(0x7f0000000bc0)=""/219, 0xdb}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/249, 0xf9}, {&(0x7f0000000dc0)=""/38, 0x26}, {&(0x7f0000002f00)=""/207, 0xcf}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/31, 0x1f}], 0x7, &(0x7f0000006f00)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000005080)=@sco={0x1f, @none}, 0x80, &(0x7f00000054c0)=[{0x0}, {0x0}, {&(0x7f0000005300)=""/236, 0xec}, {&(0x7f0000005400)=""/111, 0x6f}, {&(0x7f0000005480)}], 0x5, &(0x7f0000005540)=""/130, 0x82}, 0x2}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005600)=""/224, 0xe0}, {&(0x7f0000005700)=""/97, 0x61}, {&(0x7f0000005780)=""/141, 0x8d}], 0x3, &(0x7f0000005880)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000006880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000006b00)=[{&(0x7f0000006900)=""/189, 0xbd}, {&(0x7f00000069c0)=""/183, 0xb7}, {&(0x7f0000006a80)=""/103, 0x67}], 0x3, &(0x7f0000006b40)=""/84, 0x54}, 0x8001}], 0x6, 0x11140, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r6, @ANYBLOB="08001c00", @ANYRES32=r7], 0x24}}, 0x0) 19.006794709s ago: executing program 33 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mlockall(0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d0000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r3 = accept4$tipc(r2, &(0x7f00000002c0)=@id, &(0x7f0000000300)=0x10, 0x800) recvmmsg(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000004080)=""/42, 0x2a}], 0x3, &(0x7f0000000640)=""/213, 0xd5}, 0xffffffff}, {{&(0x7f0000000580)=@xdp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)=""/47, 0x2f}, {&(0x7f0000000800)=""/201, 0xc9}, {&(0x7f0000000900)=""/42, 0x2a}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/52, 0x34}, {&(0x7f0000000f00)=""/4096, 0x1000}], 0x7, &(0x7f0000000a40)=""/202, 0xca}, 0x7}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000004000)=[{&(0x7f0000000bc0)=""/219, 0xdb}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/249, 0xf9}, {&(0x7f0000000dc0)=""/38, 0x26}, {&(0x7f0000002f00)=""/207, 0xcf}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/31, 0x1f}], 0x7, &(0x7f0000006f00)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000005080)=@sco={0x1f, @none}, 0x80, &(0x7f00000054c0)=[{0x0}, {0x0}, {&(0x7f0000005300)=""/236, 0xec}, {&(0x7f0000005400)=""/111, 0x6f}, {&(0x7f0000005480)}], 0x5, &(0x7f0000005540)=""/130, 0x82}, 0x2}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005600)=""/224, 0xe0}, {&(0x7f0000005700)=""/97, 0x61}, {&(0x7f0000005780)=""/141, 0x8d}], 0x3, &(0x7f0000005880)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000006880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000006b00)=[{&(0x7f0000006900)=""/189, 0xbd}, {&(0x7f00000069c0)=""/183, 0xb7}, {&(0x7f0000006a80)=""/103, 0x67}], 0x3, &(0x7f0000006b40)=""/84, 0x54}, 0x8001}], 0x6, 0x11140, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r6, @ANYBLOB="08001c00", @ANYRES32=r7], 0x24}}, 0x0) 16.353089636s ago: executing program 5 (id=228): openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x400000}, 0x18) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r6) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r7, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x8010) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000004c0)) r10 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c6bcd2ec2dea81be8c57d2ffdb523bcf7cb96cd4bfe84bd0f703c1535a0565f7fa62d0e211d5bf3a0f4c36ebb107eaa5f9331a7a27810cb2d0bcc8bba0462f68990f1d987bce5dc9072d52115720073268c7b7b836be4be92b1ab4b11198617d354ff71ee6012490e6bd2e7d73417048fe72d6714326c3d4cc0"]) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r11, 0x0, 0xfffffffffffffffc}, 0x18) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000c80)={{0x9, 0x5}, 0x100, './file0/file0\x00'}) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xb8}}, 0x0) 16.164939584s ago: executing program 5 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) nanosleep(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c010000100013070000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d533000000fe80000000000000000000000000001a07000000000000000900000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000ffffffff0200000060000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) listen(r1, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r1, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00078008"], 0xd0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0) 15.037566879s ago: executing program 5 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc72, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa0000000000007110"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x11aa0, 0x30, 0x1, 0x0, 0x18bb, 0x0, 0x404, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x7}) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) io_setup(0x2, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r4, 0x0, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x1, 0x0) vmsplice(r7, &(0x7f0000001280)=[{&(0x7f0000000100)='E>\n', 0x3}], 0x1, 0x2) vmsplice(r8, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r5, 0x0, 0x0) 14.306115917s ago: executing program 5 (id=243): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="646f6e6f646f74732c7569643d29d1752d51f7ca17eea0a0fbf74486ccba8adb6dc19ef5e6429c35b9e26b8072f3987f9cd812f036fcd0da73b20577bcf7c3733b597bfb2da865fe498ff7e9a8f2e3e47f1fc0441d107e781dd742d8fea96cce016a1debb02d443e6089c6da8fbb817aa365a288092aba9be4466963f662515969015396151a443bb3a9367d47972f7069366e839e8417cedaaef5bb7dbebd2a3732d6029730fab922d29644aa7e0b225734f4ea4af582fc80f17cf284d4af349b689edafa44eb9f00", @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,nodots,dots,tz=UTC,nodots,nodots,dos1xfloppy,dots,umask=00000000000000000007777,dots,dots,usefree,showexec,dots,nodots,nodots,umask=01777777777777777777777,\x00'], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT], 0x3, 0x7dc, &(0x7f0000000d80)="$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") syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x200000000000010b, "00ffffffffff"}, {0x22, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ppoll(&(0x7f00000000c0)=[{r4, 0x2292}, {r4, 0x8}], 0x2, 0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) fcntl$setpipe(r3, 0x407, 0x8001a0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x548, 0x228, 0xf0, 0xffffffff, 0xf0, 0x228, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, &(0x7f0000000240), {[{{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'veth1\x00', 'veth1\x00', {}, {}, 0x5e, 0xf}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@rand_addr=0x64010102, @ipv4=@multicast1, @gre_key=0x4, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x562b, 0x4, 0x0, [0x10, 0x6, 0x4, 0x5d5, 0x1, 0xff, 0x5, 0xd, 0x7, 0x6, 0x0, 0x0, 0x7, 0x0, 0x69, 0x3], 0x10}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@private=0xa010100, @ipv4=@rand_addr=0x64010101, @gre_key=0x2, @gre_key=0x2}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hl={{0x28}, {0x1}}, @common=@hbh={{0x48}, {0x3, 0x2, 0x0, [0x4, 0x7fff, 0x6c00, 0x8, 0x7, 0x788, 0x3, 0x1, 0x1, 0x5, 0x5, 0xd, 0x9, 0x7, 0x7fff, 0x8], 0x10}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}, @ipv6=@mcast2, @gre_key=0x8, @gre_key=0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv4=@local, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4a108}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @remote}}]}]}, @IFLA_MTU={0x8}]}, 0x58}}, 0x0) r7 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) unlinkat(r7, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000100)) 13.451936306s ago: executing program 5 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) (fail_nth: 1) 13.188499951s ago: executing program 5 (id=250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 13.188384071s ago: executing program 34 (id=250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.099515164s ago: executing program 6 (id=398): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.973983176s ago: executing program 0 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (fail_nth: 2) 1.973803096s ago: executing program 7 (id=400): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8001}]}}]}, 0xa8}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) (fail_nth: 2) 1.474035433s ago: executing program 7 (id=402): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8001}]}}]}, 0xa8}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 1.459686664s ago: executing program 1 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) nanosleep(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c010000100013070000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00000000000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d533000000fe80000000000000000000000000001a07000000000000000900000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000ffffffff0200000060000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) listen(r1, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r1, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00078008"], 0xd0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207060f020000002cbd7000fddbdf89"], 0x10}}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) 1.411608888s ago: executing program 7 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x10000, 0x1, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000300000000000000110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x3, 0xe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x154}}, 0x0) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1, {0x0, 0x0, 0x0, r10, {0xe, 0x1}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x840) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x4e8, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x320, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-#\\{\',-+$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '~-!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[%\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "4030c20ddd0219606c6ed210a20aafe57807b525ba1e73d9f6da72fe7fdd2c4ca7ee3f4fb890b019dcd0d7b7ded6f9b39d9bf37b5cd4f2cb132577d6cccdd3b7759be628a41873cf74867d6d1e484f40ee141feaaf0b0d1c7764f5cfe619ad8aae55d14d7840aeb1465745"}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "643d106b6cfb2183c10022448a1e88389a626133ec46bb499795241a7d1857e9315248b3475dd7539dc92b71621c60db947be8dba2fe674a2ea5f19890d8f26944bcdfc7b5b149c73e98346b1d730cb388a73806ac8b783a643968331ebf097476d43d22573d59fdee1064867c2f24cce7531fac97263e9fc27ef7c8a9378355ba61b805d34d681977cec6ae"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%:@$\'.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':!-.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc26}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}(&^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b7b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/^]9(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']+^%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x85}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+*-[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(.-*$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x97}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe78}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f1d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xea3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ':.!&\xae-$}\\^&!5^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x557f284}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 1.363680283s ago: executing program 0 (id=406): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000003c0)={0x2, 0x1, 0x0, 0x3, 0xfffffff7}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) setitimer(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 1.363328763s ago: executing program 0 (id=407): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8, @ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0xfffd, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0xa) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r7, 0x0, 0x0) sendmsg$xdp(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a8da494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c841d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99ad4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a000000007dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d455bae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a950000000000000000000000003e64c8a48ae215673b928d238ac07b631e793d2bda33a80dfaaf53e6c2dea09fc29a42d2495c4192860e2866615008f74ea070c55f68", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000852) recvmmsg(r7, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) socketpair(0x11, 0x6, 0xdc7d, &(0x7f0000000280)) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r9, 0x2, 0x6, @local}, 0x6b) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.363067653s ago: executing program 1 (id=408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000d06010100000000000000000100000305000100070000000d00e8ff6b6973743a736474000000000500050007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xc8}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.305768088s ago: executing program 1 (id=410): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r0, &(0x7f0000000340)=""/127, 0x7f, 0x12022, &(0x7f00000003c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) unshare(0x6a040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e1406020000000004000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="94", 0x1}], 0x1}, 0xd0a0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r3}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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") r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x800000a1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.28517917s ago: executing program 4 (id=411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c000780080012400500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r1 = socket(0xa, 0x3, 0x3a) (async) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) (async) sendfile(r2, 0xffffffffffffffff, 0x0, 0x200) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") (rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000200000000000000ffffffff952d96e7d800000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) r6 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4) write$P9_RCREATE(r6, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x20, 0x4, 0x3}, 0x3}}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc4, 0x6}}]}, 0x6c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x62}) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) socket$unix(0x1, 0x1, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.270306141s ago: executing program 6 (id=412): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0xab7e, 0x0) mount(&(0x7f0000000740)=@md0, &(0x7f00000007c0)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r4 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\x89cqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4w\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000a00)={{0x80, 0x5}, 'port0\x00', 0x82, 0x250012, 0x0, 0x2c1d, 0x4, 0x2, 0x4, 0x0, 0x7cce8c743ee810de}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0x7, 0x43}) fcntl$addseals(r5, 0x409, 0xc) fallocate(r4, 0x0, 0x9100, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ftruncate(0xffffffffffffffff, 0x2007ffc) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8) 1.199150528s ago: executing program 7 (id=413): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x30, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x30}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x19, 0x4, 0x3, 0x1, 0x7c, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, {[@timestamp={0x44, 0x8, 0xf2, 0x0, 0x3, [0x0]}, @ssrr={0x89, 0x17, 0x3c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ssrr={0x89, 0x17, 0xd5, [@multicast2, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0x3, [{@broadcast, 0xffffff5a}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0xe, [{@multicast1, 0x100}]}, @noop]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x2, 0x6, 0x3, 0x0, 0x1, 0x5, 0x0, 0x4e20, 0x4e23}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.163457052s ago: executing program 6 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGETKEYCODE(r3, 0x4b4c, 0xffffffffffffffff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000300)={0x5, 0x80000000, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@ifindex, r6, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="2f000000100000000400000094a59613dd"], 0x20) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000000c0)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r11, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {}, {0x6, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000003c0)=ANY=[], 0x48) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x440c0) 1.050798292s ago: executing program 7 (id=415): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 739.484131ms ago: executing program 6 (id=416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES8=r3, @ANYBLOB="77efc5df4a331b7f393a46879e04edb058fed153bd15b3c20a9f165c3e536351ba20321880a8fdebc6cbe41bcae8ac9140ecf5de99f7490df5ad762dfc664b7ec19bba9c9864cd2e71d61b4c94c7c300572da3d5f46cf4b20ff21933842c84f88e08794ab8864e680867bbc74fc975ac0ec96cca6e7e1b5fa9c472866709f2bb450f5f18828a2e8898126c2e8d7992f46d9a2c14479dbb979dc2c5084cbcbcdf380676b5d5eec24c1e2f182f4f9c5fa8509600bfde5ae6e87ab9099b171f75ca68263d440fb6", @ANYRES32=r2, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYBLOB="4da54f61c8aec4c32fbbc16cb5d3bd477cd2a938aee2f0b39889b58a57259957", @ANYRES64=r3], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8400000010000304465f51bf525f2ce93eb2c653", @ANYRES32=0x0, @ANYBLOB="00030000000000005c0012800b00010062726964676500004c0002800c001f0001000000000000000500160001000000060027000e0000000500290000000000080004"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) r8 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r8) keyctl$search(0xa, r8, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r9 = syz_io_uring_setup(0x117b, &(0x7f0000000340)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="2dcd219c1a3fb600ea8e1b46cc1c7f6148e0a47f98acb139a868ef46e92a516929446562a698cc7c93ae4c3c0b19e8fb8dd129e25e14ba296cf04aefb954f1356eb035f455ccef19bb9f9d84257475aeefc52101e50a994d6917e998e0dff92cbe09f503e2339485812165dd6fa2909ad23dc10513bf03241b48babfc738e2741442cfba6820e2c3933a6a9590615f76251af7a3302debdcf158faed579c2ca9dcdd92fee3b255d10a8800a95245b77bb8b2e3895ca2b1417a475158571049c5041550db5442f33a115484239545d8792edf631298e5b6242ae727fbf34ea26e579ae69308563202fa7b5bc223351694eb214e721249b9", 0xf7}, {&(0x7f0000000500)="97ca1972727f76eb5a66e4977529638b3f0bb724014c2b9be0f1c7e5c18000b7cf88d7f8c9edf14432bb5af5fefbc6d44acac3d4f0627ff0962057873f630fa4ce14d8b1425562609166b687362cc7ade5131d269cc9e93a1edf70d2581c99b9aca651003a45e3f3e72e899c3a4784008558ac955745f146c76aaa09e7a320f92fb8e4a88487ee3c6db994ad60d2ed47e5ca7a9a5155169fbd55c304bb83d64bdab0f4af6d37a6538f6760752293dbdef2513cf045786df6f4cd063e2466fc75f3987c2b3850808999a5a73e3699271a64ca742b768f792ae7da0c25902f68f34d6ad8b7d63d0d1f38ebab534627f9", 0xef}, {&(0x7f0000000180)="55e81e85d8b86e8c02f19514e4fa8bf6f073448fbdfff493d3b64f6263049bba1adfdb035bdb53e1b177d8439fd80fb66c3ee6fdc69d062d9409856f4e6a6a6349cbad049ae3d1cd52e0526253685d8868bbc0df960ac6eb61f145c27d82a53807688cfc27f788f0eb597075a7a3ba6be2f11dca960ad7391e26d243abb4ff79c2d062822587737fdb3bd5e3af7347", 0x8f}, {&(0x7f0000000700)="fe808a57a86d0277857a516c353ad1cca41159181eccce4fd7ccc337379e1f6ccfbf054c941322b31e762274cfff246a5d5cfdc7557472fac38babc477d331361c038163f9d7019bc3a5876153633a0dc50b8e428eac65aa6351e1e1da2b02569f8ad149e54ffaefe92369d389decc382efb5805c36819962f377ff367c92b8292fb636bb7523e58c29f9ce5a3dd3ca7eefc41a188503584f8caaab45df2cb64a5e019abb7a723a4b1e99823fca5fc45b815dd2aaf9e134b2eb05676665eb1eb3a059f8177d92485e34dddae2a81be7e50ab01e57dd9351a7171b1154dbfaa7ae703e8815d6d876182d300e7af7290e33d486677fc9e1ee0a7d3fa7b3d", 0xfd}], 0x4, 0x8, 0x38a5, 0x3) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0xffffffffffffffed, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r10, r11, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20044081, 0x1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 715.673444ms ago: executing program 1 (id=417): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 406.510982ms ago: executing program 4 (id=418): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 405.080082ms ago: executing program 0 (id=419): pipe(&(0x7f0000000380)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYRESHEX], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 346.125658ms ago: executing program 0 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000d06010100000000000000000100000305000100070000000d00e8ff6b6973743a736474000000000500050007000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xc8}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 311.282701ms ago: executing program 4 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc72, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa0000000000007110"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x11aa0, 0x30, 0x1, 0x0, 0x18bb, 0x0, 0x404, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x7}) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) io_setup(0x2, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) 299.446282ms ago: executing program 0 (id=422): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000080)={0x71ca, 0xd, [{0x4}, {0xb}, {0x6, 0x1}, {0x5}, {0x4}, {0xa, 0x1}, {0x4}, {0x1}, {0x5}, {0x8}, {0x7}, {0xd, 0x1}, {0x7, 0x1}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r6, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$tipc(r3, &(0x7f0000000940)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) r8 = creat(&(0x7f0000000080)='./bus\x00', 0xad) r9 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x200000000000000, 0x0) fcntl$setstatus(r8, 0x4, 0x46100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) quotactl_fd$Q_SETINFO(r8, 0xffffffff80000601, r12, &(0x7f00000002c0)={0x3, 0x5, 0x1, 0x4}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x6c, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0xe, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x40, 0x785, 0xca4]}, {}, {0x8, 0x88be, 0x8000000}}}}}}, 0x0) 226.117389ms ago: executing program 6 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x4, 0x10000, 0x1, 0x12}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000300000000000000110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x3, 0xe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x154}}, 0x0) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1, {0x0, 0x0, 0x0, r10, {0xe, 0x1}, {0xc, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x840) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x4e8, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x320, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-#\\{\',-+$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '~-!\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[%\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "4030c20ddd0219606c6ed210a20aafe57807b525ba1e73d9f6da72fe7fdd2c4ca7ee3f4fb890b019dcd0d7b7ded6f9b39d9bf37b5cd4f2cb132577d6cccdd3b7759be628a41873cf74867d6d1e484f40ee141feaaf0b0d1c7764f5cfe619ad8aae55d14d7840aeb1465745"}, @ETHTOOL_A_BITSET_VALUE={0x90, 0x4, "643d106b6cfb2183c10022448a1e88389a626133ec46bb499795241a7d1857e9315248b3475dd7539dc92b71621c60db947be8dba2fe674a2ea5f19890d8f26944bcdfc7b5b149c73e98346b1d730cb388a73806ac8b783a643968331ebf097476d43d22573d59fdee1064867c2f24cce7531fac97263e9fc27ef7c8a9378355ba61b805d34d681977cec6ae"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%:@$\'.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':!-.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc26}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}(&^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b7b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/^]9(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']+^%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x85}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+*-[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(.-*$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x97}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe78}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9f1d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xabc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xea3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ':.!&\xae-$}\\^&!5^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x557f284}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 225.544699ms ago: executing program 4 (id=424): write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffff00000000, 0x8) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x4}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000a004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) 180.626883ms ago: executing program 1 (id=425): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x30, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x30}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x19, 0x4, 0x3, 0x1, 0x7c, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, {[@timestamp={0x44, 0x8, 0xf2, 0x0, 0x3, [0x0]}, @ssrr={0x89, 0x17, 0x3c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ssrr={0x89, 0x17, 0xd5, [@multicast2, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp_addr={0x44, 0xc, 0x68, 0x1, 0x3, [{@broadcast, 0xffffff5a}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0xe, [{@multicast1, 0x100}]}, @noop]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x7, 0x0, 0x2, 0x6, 0x3, 0x0, 0x1, 0x5, 0x0, 0x4e20, 0x4e23}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 141.521137ms ago: executing program 7 (id=426): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xffffff41}}, 0x8040) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x6f, 0x4, 0x1, 0x0, 0x40, 0x0, 0x9, 0x6c0b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r12, @ANYRESHEX=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kfree\x00', r13, 0x0, 0xfffffffffffffffb}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 135.031217ms ago: executing program 4 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r2, &(0x7f0000000340)=""/127, 0x7f, 0x12022, &(0x7f00000003c0)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) unshare(0x6a040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e1406020000000004000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)}], 0x2}, 0xd0a0) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r5}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$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") r6 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r6, 0x0, 0x0, 0x1000f4) sendfile(r6, r6, 0x0, 0x800000a1e) 84.756152ms ago: executing program 6 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc72, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa0000000000007110"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x11aa0, 0x30, 0x1, 0x0, 0x18bb, 0x0, 0x404, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x7}) creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) io_setup(0x2, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) fcntl$dupfd(r4, 0x0, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000001280)=[{&(0x7f0000000100)='E>\n', 0x3}], 0x1, 0x2) vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) 66.012664ms ago: executing program 1 (id=429): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES8, @ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0xfffd, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0xa) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r7, 0x0, 0x0) sendmsg$xdp(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000852) recvmmsg(r7, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) socketpair(0x11, 0x6, 0xdc7d, &(0x7f0000000280)) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r6) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r9, 0x2, 0x6, @local}, 0x6b) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 4 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) open(&(0x7f0000000180)='./bus\x00', 0xab7e, 0x0) mount(&(0x7f0000000740)=@md0, &(0x7f00000007c0)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r4 = memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\x89cqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4w\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000a00)={{0x80, 0x5}, 'port0\x00', 0x82, 0x250012, 0x0, 0x2c1d, 0x4, 0x2, 0x4, 0x0, 0x7cce8c743ee810de}) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) fallocate(r4, 0x0, 0x9100, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000380)={0x5, 0x7, 0x0, 'queue1\x00', 0xfd9}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000000)=0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08fa4402003000e5cee9a13b000000006c907800000000ffffffff03009078000000004500ffff000000000323d312017f002fae010102a57abe3690d16e2f9645ff8bc8afba9df524bccb17de2f630301564c657ce4f7424e470cce47d4b582484b91ff166a40e0b001be9b435302c8dd979c3fca77096f4ecc9aea17f2cee527a5f08b1d247e5fd27e562b6a2dea7504d269cfc363f3e30b00000000000000000c74c4f2e81e8afafdcca4684a93"], 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) getpeername$inet(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.722683][ T3539] RSP: 002b:00007f27f90cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 31.722704][ T3539] RAX: ffffffffffffffda RBX: 00007f27fa8c5fa0 RCX: 00007f27fa66f749 [ 31.722718][ T3539] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000001c [ 31.722732][ T3539] RBP: 00007f27f90cf090 R08: 0000000000000000 R09: 0000000000000000 [ 31.722745][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.722767][ T3539] R13: 00007f27fa8c6038 R14: 00007f27fa8c5fa0 R15: 00007ffcfa254a18 [ 31.722788][ T3539] [ 31.756693][ T3543] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 31.772510][ T3533] syzkaller0: entered allmulticast mode [ 31.934374][ T3549] syzkaller0 (unregistering): left allmulticast mode [ 31.942858][ T3548] FAULT_INJECTION: forcing a failure. [ 31.942858][ T3548] name failslab, interval 1, probability 0, space 0, times 0 [ 31.955654][ T3548] CPU: 1 UID: 0 PID: 3548 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.955751][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.955766][ T3548] Call Trace: [ 31.955774][ T3548] [ 31.955782][ T3548] __dump_stack+0x1d/0x30 [ 31.955861][ T3548] dump_stack_lvl+0x95/0xd0 [ 31.955886][ T3548] dump_stack+0x15/0x1b [ 31.955910][ T3548] should_fail_ex+0x265/0x280 [ 31.956000][ T3548] should_failslab+0x8c/0xb0 [ 31.956025][ T3548] kmem_cache_alloc_noprof+0x69/0x4b0 [ 31.956050][ T3548] ? __inet_bhash2_update_saddr+0x128/0xf70 [ 31.956135][ T3548] __inet_bhash2_update_saddr+0x128/0xf70 [ 31.956159][ T3548] ? tcp_chrono_stop+0x1f3/0x210 [ 31.956181][ T3548] ? tcp_write_queue_purge+0x73e/0x760 [ 31.956285][ T3548] inet_bhash2_reset_saddr+0x48/0x60 [ 31.956308][ T3548] tcp_disconnect+0x51a/0xf50 [ 31.956368][ T3548] __inet_stream_connect+0x3f1/0x7d0 [ 31.956394][ T3548] ? should_failslab+0x8c/0xb0 [ 31.956490][ T3548] ? __kmalloc_cache_noprof+0x252/0x4c0 [ 31.956514][ T3548] ? tcp_sendmsg_fastopen+0x172/0x520 [ 31.956538][ T3548] tcp_sendmsg_fastopen+0x43a/0x520 [ 31.956621][ T3548] tcp_sendmsg_locked+0x26e1/0x2c00 [ 31.956652][ T3548] ? lockref_put_return+0xf7/0x130 [ 31.956684][ T3548] ? __rcu_read_unlock+0x4f/0x70 [ 31.956708][ T3548] ? __rcu_read_unlock+0x4f/0x70 [ 31.956743][ T3548] ? avc_has_perm_noaudit+0xab/0x130 [ 31.956762][ T3548] ? avc_has_perm+0xf7/0x180 [ 31.956780][ T3548] ? _raw_spin_lock_bh+0x56/0xb0 [ 31.956833][ T3548] ? _raw_spin_unlock_bh+0x36/0x40 [ 31.956860][ T3548] ? __pfx_tcp_sendmsg+0x10/0x10 [ 31.956989][ T3548] tcp_sendmsg+0x2f/0x50 [ 31.957023][ T3548] inet6_sendmsg+0x76/0xd0 [ 31.957058][ T3548] __sock_sendmsg+0x8b/0x180 [ 31.957081][ T3548] __sys_sendto+0x268/0x330 [ 31.957222][ T3548] __x64_sys_sendto+0x76/0x90 [ 31.957251][ T3548] x64_sys_call+0x29a7/0x3000 [ 31.957278][ T3548] do_syscall_64+0xca/0x2b0 [ 31.957378][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.957405][ T3548] RIP: 0033:0x7fe48a11f749 [ 31.957423][ T3548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.957468][ T3548] RSP: 002b:00007fe488b7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 31.957492][ T3548] RAX: ffffffffffffffda RBX: 00007fe48a375fa0 RCX: 00007fe48a11f749 [ 31.957506][ T3548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 31.957520][ T3548] RBP: 00007fe488b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 31.957552][ T3548] R10: 0000000024004090 R11: 0000000000000246 R12: 0000000000000001 [ 31.957567][ T3548] R13: 00007fe48a376038 R14: 00007fe48a375fa0 R15: 00007fffbdeaf438 [ 31.957610][ T3548] [ 32.266014][ T3535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.347238][ T3573] loop3: detected capacity change from 0 to 128 [ 32.566935][ T3535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.716344][ C1] hrtimer: interrupt took 28561 ns [ 32.870985][ T3588] loop0: detected capacity change from 0 to 128 [ 32.879826][ T3576] loop1: detected capacity change from 0 to 32768 [ 32.889687][ T3587] bond1: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 32.935527][ T3587] bond1 (unregistering): Released all slaves [ 32.956162][ T3291] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 32.964913][ T3291] loop1: p1 start 460800 is beyond EOD, truncated [ 32.971458][ T3291] loop1: p2 size 83886080 extends beyond EOD, truncated [ 33.001129][ T3291] loop1: p5 start 460800 is beyond EOD, truncated [ 33.007684][ T3291] loop1: p6 size 83886080 extends beyond EOD, truncated [ 33.015706][ T3535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.034731][ T3576] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 33.054450][ T3576] loop1: p1 start 460800 is beyond EOD, truncated [ 33.061033][ T3576] loop1: p2 size 83886080 extends beyond EOD, truncated [ 33.110177][ T3576] loop1: p5 start 460800 is beyond EOD, truncated [ 33.116814][ T3576] loop1: p6 size 83886080 extends beyond EOD, truncated [ 33.292388][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 33.307737][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 33.315811][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 33.333088][ T3599] udevd[3599]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 33.363501][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 33.376393][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 33.394110][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 33.404792][ T3602] FAULT_INJECTION: forcing a failure. [ 33.404792][ T3602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.406478][ T3599] udevd[3599]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 33.417939][ T3602] CPU: 1 UID: 0 PID: 3602 Comm: syz.4.28 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.418052][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.418094][ T3602] Call Trace: [ 33.418121][ T3602] [ 33.418148][ T3602] __dump_stack+0x1d/0x30 [ 33.418223][ T3602] dump_stack_lvl+0x95/0xd0 [ 33.418365][ T3602] dump_stack+0x15/0x1b [ 33.418436][ T3602] should_fail_ex+0x265/0x280 [ 33.418508][ T3602] should_fail+0xb/0x20 [ 33.418576][ T3602] should_fail_usercopy+0x1a/0x20 [ 33.418686][ T3602] _copy_to_user+0x20/0xa0 [ 33.418910][ T3602] simple_read_from_buffer+0xb5/0x130 [ 33.418970][ T3602] proc_fail_nth_read+0x10e/0x150 [ 33.419057][ T3602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 33.419113][ T3602] vfs_read+0x1a8/0x770 [ 33.419159][ T3602] ? __rcu_read_unlock+0x4f/0x70 [ 33.419206][ T3602] ? __fget_files+0x184/0x1c0 [ 33.419270][ T3602] ? mutex_lock+0x58/0x90 [ 33.419368][ T3602] ksys_read+0xda/0x1a0 [ 33.419452][ T3602] __x64_sys_read+0x40/0x50 [ 33.419604][ T3602] x64_sys_call+0x2889/0x3000 [ 33.419672][ T3602] do_syscall_64+0xca/0x2b0 [ 33.419761][ T3602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.419816][ T3602] RIP: 0033:0x7fa880d0e15c [ 33.419898][ T3602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 33.419952][ T3602] RSP: 002b:00007fa87f777030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.420000][ T3602] RAX: ffffffffffffffda RBX: 00007fa880f65fa0 RCX: 00007fa880d0e15c [ 33.420037][ T3602] RDX: 000000000000000f RSI: 00007fa87f7770a0 RDI: 0000000000000006 [ 33.420071][ T3602] RBP: 00007fa87f777090 R08: 0000000000000000 R09: 0000000000000000 [ 33.420159][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.420182][ T3602] R13: 00007fa880f66038 R14: 00007fa880f65fa0 R15: 00007ffcd2545ab8 [ 33.420233][ T3602] [ 33.683805][ T3607] bond1: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 33.711802][ T3607] bond1 (unregistering): Released all slaves [ 33.813767][ T2425] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.843307][ T3610] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 33.852615][ T3610] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 33.864022][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.883992][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.927932][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.081775][ T3645] loop2: detected capacity change from 0 to 128 [ 34.200839][ T3653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3653 comm=syz.2.40 [ 34.243377][ T3656] loop0: detected capacity change from 0 to 128 [ 34.331928][ T3661] loop0: detected capacity change from 0 to 1024 [ 34.367599][ T3661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.386911][ T3661] FAULT_INJECTION: forcing a failure. [ 34.386911][ T3661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.400116][ T3661] CPU: 0 UID: 0 PID: 3661 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.400198][ T3661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.400212][ T3661] Call Trace: [ 34.400218][ T3661] [ 34.400226][ T3661] __dump_stack+0x1d/0x30 [ 34.400251][ T3661] dump_stack_lvl+0x95/0xd0 [ 34.400269][ T3661] dump_stack+0x15/0x1b [ 34.400347][ T3661] should_fail_ex+0x265/0x280 [ 34.400370][ T3661] should_fail+0xb/0x20 [ 34.400427][ T3661] should_fail_usercopy+0x1a/0x20 [ 34.400453][ T3661] _copy_from_user+0x1c/0xb0 [ 34.400483][ T3661] ___sys_sendmsg+0xc1/0x1d0 [ 34.400565][ T3661] __x64_sys_sendmsg+0xd4/0x160 [ 34.400601][ T3661] x64_sys_call+0x17ba/0x3000 [ 34.400628][ T3661] do_syscall_64+0xca/0x2b0 [ 34.400767][ T3661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.400791][ T3661] RIP: 0033:0x7fe48a11f749 [ 34.400803][ T3661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.400818][ T3661] RSP: 002b:00007fe488b7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.400913][ T3661] RAX: ffffffffffffffda RBX: 00007fe48a375fa0 RCX: 00007fe48a11f749 [ 34.400965][ T3661] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 34.400975][ T3661] RBP: 00007fe488b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.400985][ T3661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.401008][ T3661] R13: 00007fe48a376038 R14: 00007fe48a375fa0 R15: 00007fffbdeaf438 [ 34.401026][ T3661] [ 34.566011][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.629734][ T3668] loop2: detected capacity change from 0 to 128 [ 34.726112][ T3676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3676 comm=syz.4.47 [ 34.869984][ T3684] loop1: detected capacity change from 0 to 128 [ 34.957679][ T3690] autofs4:pid:3690:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(252.1), cmd(0xc0189375) [ 34.971080][ T3690] autofs4:pid:3690:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 35.096030][ T3694] FAULT_INJECTION: forcing a failure. [ 35.096030][ T3694] name failslab, interval 1, probability 0, space 0, times 0 [ 35.108936][ T3694] CPU: 1 UID: 0 PID: 3694 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.108961][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.108972][ T3694] Call Trace: [ 35.108977][ T3694] [ 35.108983][ T3694] __dump_stack+0x1d/0x30 [ 35.109003][ T3694] dump_stack_lvl+0x95/0xd0 [ 35.109026][ T3694] dump_stack+0x15/0x1b [ 35.109045][ T3694] should_fail_ex+0x265/0x280 [ 35.109072][ T3694] should_failslab+0x8c/0xb0 [ 35.109097][ T3694] __kmalloc_noprof+0xb9/0x5a0 [ 35.109166][ T3694] ? security_sk_alloc+0x52/0x120 [ 35.109192][ T3694] security_sk_alloc+0x52/0x120 [ 35.109212][ T3694] sk_prot_alloc+0xc2/0x190 [ 35.109235][ T3694] sk_alloc+0x34/0x3d0 [ 35.109323][ T3694] inet_create+0x3c0/0x780 [ 35.109351][ T3694] __sock_create+0x2e5/0x580 [ 35.109376][ T3694] sock_create_kern+0x38/0x50 [ 35.109439][ T3694] mptcp_subflow_create_socket+0x84/0x500 [ 35.109483][ T3694] __mptcp_nmpc_sk+0xb5/0x3d0 [ 35.109512][ T3694] mptcp_connect+0x58/0x900 [ 35.109627][ T3694] __inet_stream_connect+0x169/0x7d0 [ 35.109670][ T3694] ? _raw_spin_lock_bh+0x56/0xb0 [ 35.109696][ T3694] ? _raw_spin_unlock_bh+0x36/0x40 [ 35.109722][ T3694] ? lock_sock_nested+0x112/0x140 [ 35.109744][ T3694] ? selinux_netlbl_socket_connect+0x114/0x130 [ 35.109807][ T3694] inet_stream_connect+0x44/0x70 [ 35.109833][ T3694] ? __pfx_inet_stream_connect+0x10/0x10 [ 35.109858][ T3694] __sys_connect+0x1f2/0x2b0 [ 35.109926][ T3694] __x64_sys_connect+0x3f/0x50 [ 35.109949][ T3694] x64_sys_call+0x2e09/0x3000 [ 35.109970][ T3694] do_syscall_64+0xca/0x2b0 [ 35.110014][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.110032][ T3694] RIP: 0033:0x7fe48a11f749 [ 35.110047][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.110065][ T3694] RSP: 002b:00007fe488b7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 35.110085][ T3694] RAX: ffffffffffffffda RBX: 00007fe48a375fa0 RCX: 00007fe48a11f749 [ 35.110132][ T3694] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 35.110142][ T3694] RBP: 00007fe488b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 35.110175][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.110187][ T3694] R13: 00007fe48a376038 R14: 00007fe48a375fa0 R15: 00007fffbdeaf438 [ 35.110208][ T3694] [ 35.387529][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 35.387543][ T29] audit: type=1326 audit(1767394579.879:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.424980][ T29] audit: type=1326 audit(1767394579.909:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.448649][ T29] audit: type=1326 audit(1767394579.909:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.472196][ T29] audit: type=1326 audit(1767394579.909:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.495322][ T29] audit: type=1326 audit(1767394579.909:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.499232][ T3703] netlink: 'syz.3.58': attribute type 30 has an invalid length. [ 35.518899][ T29] audit: type=1326 audit(1767394579.909:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.549487][ T29] audit: type=1326 audit(1767394579.909:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.572672][ T29] audit: type=1326 audit(1767394579.909:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.596125][ T29] audit: type=1326 audit(1767394579.909:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.619664][ T29] audit: type=1326 audit(1767394579.909:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3701 comm="syz.2.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efae0f749 code=0x7ffc0000 [ 35.679079][ T3713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3713 comm=syz.0.60 [ 35.694512][ T3711] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.725631][ T3703] Zero length message leads to an empty skb [ 35.740872][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.788922][ T3711] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.811516][ T3724] EXT4-fs: Ignoring removed nobh option [ 35.837828][ T3724] EXT4-fs: inline encryption not supported [ 35.885158][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.911092][ T3711] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.940340][ T3705] loop2: p1 p2[DM] p4 [ 35.954586][ T3705] loop2: p1 size 196608 extends beyond EOD, truncated [ 35.965198][ T3705] loop2: p2 start 4292936063 is beyond EOD, truncated [ 35.971984][ T3705] loop2: p4 size 50331648 extends beyond EOD, truncated [ 35.990627][ T3711] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.004007][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.022910][ T3005] loop2: p1 p2[DM] p4 [ 36.027398][ T3005] loop2: p1 size 196608 extends beyond EOD, truncated [ 36.036728][ T3005] loop2: p2 start 4292936063 is beyond EOD, truncated [ 36.043688][ T3005] loop2: p4 size 50331648 extends beyond EOD, truncated [ 36.084481][ T2788] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.097128][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.125653][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.147547][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.293862][ T3744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 36.302724][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.333229][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.348591][ T3751] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 36.365068][ T3751] team0: Port device dummy0 added [ 36.374528][ T3751] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 36.385803][ T3751] team0: Port device dummy0 removed [ 36.393154][ T3751] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 36.465123][ T3751] syz.0.74 (3751) used greatest stack depth: 10424 bytes left [ 36.599141][ T3758] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 36.608907][ T3758] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 37.438518][ T3770] set_capacity_and_notify: 4 callbacks suppressed [ 37.438536][ T3770] loop1: detected capacity change from 0 to 512 [ 37.481422][ T3770] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.80: inode has both inline data and extents flags [ 37.500797][ T3770] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.80: couldn't read orphan inode 15 (err -117) [ 37.513073][ T3770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.552653][ T3773] loop3: detected capacity change from 0 to 128 [ 37.683028][ T3782] loop3: detected capacity change from 0 to 128 [ 37.704978][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.773297][ T3786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3786 comm=syz.0.87 [ 37.788784][ T3790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.881289][ T3790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.949668][ T3797] loop3: detected capacity change from 0 to 764 [ 37.977617][ T3797] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 37.989863][ T3790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.010229][ T3797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3797 comm=syz.3.90 [ 38.060002][ T3795] loop0: detected capacity change from 0 to 32768 [ 38.078790][ T3790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.104926][ T3599] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 38.110398][ T3599] loop0: p1 start 460800 is beyond EOD, truncated [ 38.116874][ T3599] loop0: p2 size 83886080 extends beyond EOD, truncated [ 38.126028][ T3599] loop0: p5 start 460800 is beyond EOD, truncated [ 38.132504][ T3599] loop0: p6 size 83886080 extends beyond EOD, truncated [ 38.148925][ T3795] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 38.150780][ T3801] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 38.163670][ T3795] loop0: p1 start 460800 is beyond EOD, truncated [ 38.166165][ T3801] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 38.170429][ T3795] loop0: p2 size 83886080 extends beyond EOD, truncated [ 38.189157][ T3795] loop0: p5 start 460800 is beyond EOD, truncated [ 38.195655][ T3795] loop0: p6 size 83886080 extends beyond EOD, truncated [ 38.255753][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.273752][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.286365][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.304083][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.443447][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 38.457354][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 38.465908][ T3599] udevd[3599]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.468308][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 38.498368][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 38.513679][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 38.526215][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 38.546393][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 38.557097][ T3599] udevd[3599]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.565318][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.588982][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.972946][ T3822] FAULT_INJECTION: forcing a failure. [ 38.972946][ T3822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.986122][ T3822] CPU: 0 UID: 0 PID: 3822 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.986147][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.986157][ T3822] Call Trace: [ 38.986222][ T3822] [ 38.986230][ T3822] __dump_stack+0x1d/0x30 [ 38.986258][ T3822] dump_stack_lvl+0x95/0xd0 [ 38.986332][ T3822] dump_stack+0x15/0x1b [ 38.986354][ T3822] should_fail_ex+0x265/0x280 [ 38.986381][ T3822] should_fail+0xb/0x20 [ 38.986399][ T3822] should_fail_usercopy+0x1a/0x20 [ 38.986427][ T3822] _copy_from_user+0x1c/0xb0 [ 38.986465][ T3822] ___sys_sendmsg+0xc1/0x1d0 [ 38.986516][ T3822] __sys_sendmmsg+0x178/0x300 [ 38.986588][ T3822] __x64_sys_sendmmsg+0x57/0x70 [ 38.986637][ T3822] x64_sys_call+0x1e28/0x3000 [ 38.986671][ T3822] do_syscall_64+0xca/0x2b0 [ 38.986712][ T3822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.986738][ T3822] RIP: 0033:0x7f27fa66f749 [ 38.986829][ T3822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.986893][ T3822] RSP: 002b:00007f27f90cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 38.986937][ T3822] RAX: ffffffffffffffda RBX: 00007f27fa8c5fa0 RCX: 00007f27fa66f749 [ 38.986953][ T3822] RDX: 0000000000000001 RSI: 0000200000003580 RDI: 0000000000000004 [ 38.986967][ T3822] RBP: 00007f27f90cf090 R08: 0000000000000000 R09: 0000000000000000 [ 38.987041][ T3822] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 38.987052][ T3822] R13: 00007f27fa8c6038 R14: 00007f27fa8c5fa0 R15: 00007ffcfa254a18 [ 38.987070][ T3822] [ 39.224519][ T3835] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 39.226656][ T3831] loop2: detected capacity change from 0 to 128 [ 39.240785][ T3835] team0: Port device dummy0 added [ 39.249442][ T3835] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 39.257749][ T3831] vfat: Bad value for 'time_offset' [ 39.269053][ T3835] team0: Port device dummy0 removed [ 39.278049][ T3835] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.387977][ T3839] netlink: 'syz.0.103': attribute type 10 has an invalid length. [ 39.398063][ T3839] bond0: (slave dummy0): Releasing backup interface [ 39.407648][ T3839] team0: Port device dummy0 added [ 39.417926][ T3839] netlink: 'syz.0.103': attribute type 10 has an invalid length. [ 39.428532][ T3839] team0: Port device dummy0 removed [ 39.437632][ T3839] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.485819][ T3843] netlink: 68 bytes leftover after parsing attributes in process `syz.2.100'. [ 39.535219][ T3839] syz.0.103 (3839) used greatest stack depth: 10232 bytes left [ 39.688203][ T3848] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 39.697245][ T3848] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 40.095723][ T3857] autofs4:pid:3857:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(252.1), cmd(0xc0189375) [ 40.109021][ T3857] autofs4:pid:3857:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 40.496600][ T3866] loop0: detected capacity change from 0 to 128 [ 40.503372][ T3866] vfat: Bad value for 'time_offset' [ 40.512196][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 40.512221][ T29] audit: type=1326 audit(1767394584.999:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.553641][ T29] audit: type=1326 audit(1767394585.029:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.576913][ T29] audit: type=1326 audit(1767394585.029:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.600160][ T29] audit: type=1326 audit(1767394585.029:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.623573][ T29] audit: type=1326 audit(1767394585.029:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.646779][ T29] audit: type=1326 audit(1767394585.029:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.670071][ T29] audit: type=1326 audit(1767394585.029:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.693388][ T29] audit: type=1326 audit(1767394585.029:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.716936][ T29] audit: type=1326 audit(1767394585.029:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.740415][ T29] audit: type=1326 audit(1767394585.029:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe48a11f749 code=0x7ffc0000 [ 40.892370][ T3871] netlink: 68 bytes leftover after parsing attributes in process `syz.0.111'. [ 41.128298][ T3875] FAULT_INJECTION: forcing a failure. [ 41.128298][ T3875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.141662][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.141701][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.141712][ T3875] Call Trace: [ 41.141717][ T3875] [ 41.141723][ T3875] __dump_stack+0x1d/0x30 [ 41.141747][ T3875] dump_stack_lvl+0x95/0xd0 [ 41.141793][ T3875] dump_stack+0x15/0x1b [ 41.141814][ T3875] should_fail_ex+0x265/0x280 [ 41.141851][ T3875] should_fail+0xb/0x20 [ 41.141873][ T3875] should_fail_usercopy+0x1a/0x20 [ 41.141967][ T3875] _copy_from_user+0x1c/0xb0 [ 41.141991][ T3875] __copy_msghdr+0x244/0x300 [ 41.142037][ T3875] ___sys_sendmsg+0x109/0x1d0 [ 41.142080][ T3875] __sys_sendmmsg+0x178/0x300 [ 41.142146][ T3875] __x64_sys_sendmmsg+0x57/0x70 [ 41.142215][ T3875] x64_sys_call+0x1e28/0x3000 [ 41.142235][ T3875] do_syscall_64+0xca/0x2b0 [ 41.142291][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.142315][ T3875] RIP: 0033:0x7f7efae0f749 [ 41.142327][ T3875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.142360][ T3875] RSP: 002b:00007f7ef986f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 41.142376][ T3875] RAX: ffffffffffffffda RBX: 00007f7efb065fa0 RCX: 00007f7efae0f749 [ 41.142436][ T3875] RDX: 0000000000000002 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 41.142448][ T3875] RBP: 00007f7ef986f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.142509][ T3875] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 41.142522][ T3875] R13: 00007f7efb066038 R14: 00007f7efb065fa0 R15: 00007ffd96d95b58 [ 41.142539][ T3875] [ 41.447871][ T3881] loop0: detected capacity change from 0 to 128 [ 41.537483][ T3884] loop0: detected capacity change from 0 to 128 [ 41.592780][ T3886] loop0: detected capacity change from 0 to 128 [ 41.613267][ T3886] vfat: Bad value for 'time_offset' [ 41.772753][ T3894] random: crng reseeded on system resumption [ 41.910980][ T3898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.118'. [ 42.692679][ T3904] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 42.702834][ T3904] bond0: (slave dummy0): Releasing backup interface [ 42.731873][ T3904] team0: Port device dummy0 added [ 42.759026][ T3904] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 42.790963][ T3906] loop4: detected capacity change from 0 to 128 [ 42.822550][ T3904] team0: Port device dummy0 removed [ 42.837135][ T3904] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.041714][ T3912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.066054][ T3920] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 43.077866][ T3920] team0: Failed to send options change via netlink (err -105) [ 43.085390][ T3920] team0: Port device dummy0 added [ 43.091624][ T3920] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 43.101197][ T3917] syzkaller0: entered allmulticast mode [ 43.109118][ T3912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.125331][ T3920] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 43.136329][ T3920] team0: Failed to send options change via netlink (err -105) [ 43.143852][ T3920] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 43.153435][ T3920] team0: Port device dummy0 removed [ 43.161535][ T3920] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.170602][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 43.181563][ T3917] syzkaller0 (unregistering): left allmulticast mode [ 43.220235][ T3912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.261749][ T3926] netlink: 128 bytes leftover after parsing attributes in process `syz.3.130'. [ 43.270853][ T3926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.130'. [ 43.329591][ T3912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.397164][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.437385][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.454690][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.472881][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.587874][ T3941] netlink: 128 bytes leftover after parsing attributes in process `syz.0.135'. [ 43.597282][ T3941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.135'. [ 43.679936][ T3947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3947 comm=syz.4.136 [ 43.709266][ T3949] loop4: detected capacity change from 0 to 128 [ 43.716108][ T3949] vfat: Bad value for 'time_offset' [ 43.917148][ T3954] netlink: 68 bytes leftover after parsing attributes in process `syz.4.137'. [ 43.996125][ T3953] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.098478][ T3953] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.177458][ T3953] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.257652][ T3953] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.270976][ T3962] netlink: 128 bytes leftover after parsing attributes in process `syz.1.139'. [ 44.294214][ T3962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 44.342147][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.353473][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.364505][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.374491][ T3966] netlink: 128 bytes leftover after parsing attributes in process `syz.3.141'. [ 44.381174][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.563404][ T3981] loop2: detected capacity change from 0 to 128 [ 44.655497][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.663049][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.670493][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.677965][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.685393][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.692921][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.700471][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.707986][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.715438][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.722834][ T3415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.742402][ T3986] ======================================================= [ 44.742402][ T3986] WARNING: The mand mount option has been deprecated and [ 44.742402][ T3986] and is ignored by this kernel. Remove the mand [ 44.742402][ T3986] option from the mount to silence this warning. [ 44.742402][ T3986] ======================================================= [ 44.777890][ T3415] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.888368][ T3989] loop0: detected capacity change from 0 to 128 [ 45.003639][ T3992] loop1: detected capacity change from 0 to 8192 [ 45.014863][ T3992] FAULT_INJECTION: forcing a failure. [ 45.014863][ T3992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.028022][ T3992] CPU: 1 UID: 0 PID: 3992 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.028069][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.028083][ T3992] Call Trace: [ 45.028089][ T3992] [ 45.028097][ T3992] __dump_stack+0x1d/0x30 [ 45.028172][ T3992] dump_stack_lvl+0x95/0xd0 [ 45.028286][ T3992] dump_stack+0x15/0x1b [ 45.028308][ T3992] should_fail_ex+0x265/0x280 [ 45.028333][ T3992] should_fail+0xb/0x20 [ 45.028412][ T3992] should_fail_usercopy+0x1a/0x20 [ 45.028438][ T3992] strncpy_from_user+0x27/0x260 [ 45.028475][ T3992] getname_flags+0xae/0x3b0 [ 45.028575][ T3992] __x64_sys_renameat2+0x5f/0x90 [ 45.028655][ T3992] x64_sys_call+0x35f/0x3000 [ 45.028686][ T3992] do_syscall_64+0xca/0x2b0 [ 45.028734][ T3992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.028757][ T3992] RIP: 0033:0x7fb8f406f749 [ 45.028773][ T3992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.028814][ T3992] RSP: 002b:00007fb8f2ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 45.028851][ T3992] RAX: ffffffffffffffda RBX: 00007fb8f42c5fa0 RCX: 00007fb8f406f749 [ 45.028863][ T3992] RDX: ffffffffffffff9c RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 45.028875][ T3992] RBP: 00007fb8f2ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.028887][ T3992] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 45.028899][ T3992] R13: 00007fb8f42c6038 R14: 00007fb8f42c5fa0 R15: 00007ffe23bd2e58 [ 45.028917][ T3992] [ 45.205946][ T3994] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.257005][ T3996] syzkaller0: entered allmulticast mode [ 45.279858][ T3998] netlink: 'syz.1.152': attribute type 39 has an invalid length. [ 45.295018][ T3994] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.313053][ T3996] syzkaller0 (unregistering): left allmulticast mode [ 45.466312][ T4006] syzkaller0: entered allmulticast mode [ 45.476750][ T4003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.489888][ T4007] syzkaller0 (unregistering): left allmulticast mode [ 45.506736][ T4009] loop0: detected capacity change from 0 to 128 [ 45.538774][ T3994] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.553899][ T4011] loop1: detected capacity change from 0 to 128 [ 45.560912][ T4011] vfat: Bad value for 'time_offset' [ 45.569769][ T4003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.584228][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 45.584242][ T29] audit: type=1326 audit(1767394590.069:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.613804][ T29] audit: type=1326 audit(1767394590.069:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.648890][ T3994] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.663968][ T29] audit: type=1326 audit(1767394590.109:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.687327][ T29] audit: type=1326 audit(1767394590.109:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.710708][ T29] audit: type=1326 audit(1767394590.109:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.734075][ T29] audit: type=1326 audit(1767394590.109:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.758200][ T29] audit: type=1326 audit(1767394590.109:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.781651][ T29] audit: type=1326 audit(1767394590.109:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.804976][ T29] audit: type=1326 audit(1767394590.109:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.828378][ T29] audit: type=1326 audit(1767394590.109:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4010 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 45.962435][ T4003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.003460][ T63] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.135609][ T4021] capability: warning: `syz.4.160' uses 32-bit capabilities (legacy support in use) [ 46.154225][ T4003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.279232][ T4021] loop4: detected capacity change from 0 to 512 [ 46.486794][ T63] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.495401][ T63] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.503808][ T63] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.522595][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.551810][ T4021] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.566483][ T4021] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #12: comm syz.4.160: directory missing '.' [ 46.613620][ T4040] capability: warning: `syz.1.163' uses deprecated v2 capabilities in a way that may be insecure [ 46.633153][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.673327][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.697577][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.724626][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.739182][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.794983][ T4066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.984323][ T4083] loop0: detected capacity change from 0 to 128 [ 47.170939][ T4092] loop0: detected capacity change from 0 to 512 [ 47.186755][ T4092] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 47.198867][ T4092] EXT4-fs (loop0): invalid journal inode [ 47.205350][ T4092] EXT4-fs (loop0): can't get journal size [ 47.211963][ T4092] EXT4-fs (loop0): 1 truncate cleaned up [ 47.218658][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.231767][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.284399][ T4095] vfat: Bad value for 'time_offset' [ 47.489079][ T4097] __nla_validate_parse: 5 callbacks suppressed [ 47.489091][ T4097] netlink: 68 bytes leftover after parsing attributes in process `syz.0.173'. [ 47.793725][ T4101] FAULT_INJECTION: forcing a failure. [ 47.793725][ T4101] name failslab, interval 1, probability 0, space 0, times 0 [ 47.806590][ T4101] CPU: 0 UID: 0 PID: 4101 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.806612][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.806626][ T4101] Call Trace: [ 47.806632][ T4101] [ 47.806638][ T4101] __dump_stack+0x1d/0x30 [ 47.806734][ T4101] dump_stack_lvl+0x95/0xd0 [ 47.806758][ T4101] dump_stack+0x15/0x1b [ 47.806840][ T4101] should_fail_ex+0x265/0x280 [ 47.806865][ T4101] should_failslab+0x8c/0xb0 [ 47.806885][ T4101] kmem_cache_alloc_noprof+0x69/0x4b0 [ 47.806905][ T4101] ? audit_log_start+0x342/0x720 [ 47.806931][ T4101] audit_log_start+0x342/0x720 [ 47.806994][ T4101] ? kstrtouint+0x76/0xc0 [ 47.807011][ T4101] audit_seccomp+0x48/0x100 [ 47.807074][ T4101] ? __seccomp_filter+0x832/0x1260 [ 47.807182][ T4101] __seccomp_filter+0x843/0x1260 [ 47.807207][ T4101] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 47.807405][ T4101] ? vfs_write+0x7e8/0x960 [ 47.807431][ T4101] __secure_computing+0x82/0x150 [ 47.807462][ T4101] syscall_trace_enter+0xcf/0x1e0 [ 47.807488][ T4101] do_syscall_64+0xa4/0x2b0 [ 47.807556][ T4101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.807581][ T4101] RIP: 0033:0x7fb8f406f749 [ 47.807617][ T4101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.807636][ T4101] RSP: 002b:00007fb8f2ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 47.807727][ T4101] RAX: ffffffffffffffda RBX: 00007fb8f42c5fa0 RCX: 00007fb8f406f749 [ 47.807821][ T4101] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 47.807837][ T4101] RBP: 00007fb8f2ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.807852][ T4101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.807918][ T4101] R13: 00007fb8f42c6038 R14: 00007fb8f42c5fa0 R15: 00007ffe23bd2e58 [ 47.807998][ T4101] [ 48.095883][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 48.105364][ T4115] FAULT_INJECTION: forcing a failure. [ 48.105364][ T4115] name failslab, interval 1, probability 0, space 0, times 0 [ 48.118063][ T4115] CPU: 0 UID: 0 PID: 4115 Comm: syz.4.180 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.118092][ T4115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.118113][ T4115] Call Trace: [ 48.118119][ T4115] [ 48.118126][ T4115] __dump_stack+0x1d/0x30 [ 48.118153][ T4115] dump_stack_lvl+0x95/0xd0 [ 48.118199][ T4115] dump_stack+0x15/0x1b [ 48.118221][ T4115] should_fail_ex+0x265/0x280 [ 48.118245][ T4115] should_failslab+0x8c/0xb0 [ 48.118277][ T4115] __kmalloc_node_noprof+0xbe/0x5c0 [ 48.118354][ T4115] ? alloc_slab_obj_exts+0x3e/0xd0 [ 48.118378][ T4115] alloc_slab_obj_exts+0x3e/0xd0 [ 48.118400][ T4115] __memcg_slab_post_alloc_hook+0x240/0x530 [ 48.118439][ T4115] __kmalloc_noprof+0x330/0x5a0 [ 48.118526][ T4115] ? alloc_pipe_info+0x1c9/0x340 [ 48.118553][ T4115] alloc_pipe_info+0x1c9/0x340 [ 48.118624][ T4115] splice_direct_to_actor+0x592/0x680 [ 48.118661][ T4115] ? kstrtouint_from_user+0x9f/0xf0 [ 48.118726][ T4115] ? __pfx_direct_splice_actor+0x10/0x10 [ 48.118817][ T4115] ? __rcu_read_unlock+0x4f/0x70 [ 48.118877][ T4115] ? get_pid_task+0x96/0xd0 [ 48.118910][ T4115] ? avc_policy_seqno+0x15/0x30 [ 48.118931][ T4115] ? selinux_file_permission+0x1e2/0x320 [ 48.118969][ T4115] do_splice_direct+0xda/0x150 [ 48.118992][ T4115] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 48.119052][ T4115] do_sendfile+0x380/0x650 [ 48.119085][ T4115] __x64_sys_sendfile64+0x105/0x150 [ 48.119128][ T4115] x64_sys_call+0x2db1/0x3000 [ 48.119156][ T4115] do_syscall_64+0xca/0x2b0 [ 48.119254][ T4115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.119321][ T4115] RIP: 0033:0x7fa880d0f749 [ 48.119337][ T4115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.119357][ T4115] RSP: 002b:00007fa87f777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 48.119401][ T4115] RAX: ffffffffffffffda RBX: 00007fa880f65fa0 RCX: 00007fa880d0f749 [ 48.119416][ T4115] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 48.119499][ T4115] RBP: 00007fa87f777090 R08: 0000000000000000 R09: 0000000000000000 [ 48.119512][ T4115] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 48.119591][ T4115] R13: 00007fa880f66038 R14: 00007fa880f65fa0 R15: 00007ffcd2545ab8 [ 48.119645][ T4115] [ 48.375216][ T4116] set_capacity_and_notify: 1 callbacks suppressed [ 48.375233][ T4116] loop1: detected capacity change from 0 to 512 [ 48.417963][ T4119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4119 comm=syz.4.182 [ 48.464356][ T4116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.482357][ T4116] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.518595][ T4121] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 48.527383][ T4121] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 48.543100][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.567175][ T4127] loop4: detected capacity change from 0 to 2048 [ 48.586244][ T4127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.599087][ T4135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4135 comm=syz.1.185 [ 48.635261][ T4127] EXT4-fs (loop4): shut down requested (1) [ 48.649011][ T4127] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 48.684279][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.896761][ T4150] loop3: detected capacity change from 0 to 512 [ 48.904546][ T4150] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.911477][ T4150] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.188: bad orphan inode 13 [ 48.921806][ T4150] ext4_test_bit(bit=12, block=18) = 1 [ 48.927284][ T4150] is_bad_inode(inode)=0 [ 48.931452][ T4150] NEXT_ORPHAN(inode)=2130706432 [ 48.936349][ T4150] max_ino=32 [ 48.939670][ T4150] i_nlink=1 [ 48.943283][ T4150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.125954][ T4149] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 49.135773][ T4149] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 49.157196][ T3324] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 49.169216][ T3324] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 49.301760][ T4163] netlink: 'syz.1.191': attribute type 1 has an invalid length. [ 49.415000][ T4168] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.463792][ T4169] syzkaller0: entered allmulticast mode [ 49.471784][ T4168] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.484935][ T4169] syzkaller0 (unregistering): left allmulticast mode [ 49.534754][ T4168] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.576410][ T4173] netlink: 'syz.4.195': attribute type 1 has an invalid length. [ 49.587114][ T4173] loop4: detected capacity change from 0 to 512 [ 49.593726][ T4173] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 49.622145][ T4178] FAULT_INJECTION: forcing a failure. [ 49.622145][ T4178] name failslab, interval 1, probability 0, space 0, times 0 [ 49.634803][ T4178] CPU: 1 UID: 0 PID: 4178 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.634826][ T4178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.634857][ T4178] Call Trace: [ 49.634864][ T4178] [ 49.634873][ T4178] __dump_stack+0x1d/0x30 [ 49.634968][ T4178] dump_stack_lvl+0x95/0xd0 [ 49.634992][ T4178] dump_stack+0x15/0x1b [ 49.635014][ T4178] should_fail_ex+0x265/0x280 [ 49.635035][ T4178] should_failslab+0x8c/0xb0 [ 49.635140][ T4178] ? dev_load+0x61/0xc0 [ 49.635177][ T4178] __kmalloc_cache_noprof+0x65/0x4c0 [ 49.635209][ T4178] ? __request_module+0x1c4/0x3e0 [ 49.635240][ T4178] ? dev_load+0x61/0xc0 [ 49.635316][ T4178] __request_module+0x1c4/0x3e0 [ 49.635345][ T4178] ? capable+0x7c/0xb0 [ 49.635400][ T4178] dev_load+0x61/0xc0 [ 49.635430][ T4178] dev_ioctl+0x2d1/0x960 [ 49.635469][ T4178] sock_do_ioctl+0x197/0x220 [ 49.635570][ T4178] sock_ioctl+0x41b/0x610 [ 49.635613][ T4178] ? __pfx_sock_ioctl+0x10/0x10 [ 49.635655][ T4178] __se_sys_ioctl+0xce/0x140 [ 49.635696][ T4178] __x64_sys_ioctl+0x43/0x50 [ 49.635766][ T4178] x64_sys_call+0x14b0/0x3000 [ 49.635799][ T4178] do_syscall_64+0xca/0x2b0 [ 49.635852][ T4178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.635954][ T4178] RIP: 0033:0x7fe48a11f749 [ 49.635973][ T4178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.635995][ T4178] RSP: 002b:00007fe488b7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.636019][ T4178] RAX: ffffffffffffffda RBX: 00007fe48a375fa0 RCX: 00007fe48a11f749 [ 49.636035][ T4178] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 49.636048][ T4178] RBP: 00007fe488b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.636107][ T4178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.636162][ T4178] R13: 00007fe48a376038 R14: 00007fe48a375fa0 R15: 00007fffbdeaf438 [ 49.636187][ T4178] [ 49.643767][ T4168] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.738406][ T4181] loop4: detected capacity change from 0 to 128 [ 49.898339][ T4184] loop4: detected capacity change from 0 to 512 [ 49.916474][ T4184] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.199: invalid indirect mapped block 4294967295 (level 1) [ 49.932702][ T3876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.950979][ T4184] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.199: invalid indirect mapped block 4294967295 (level 1) [ 49.965240][ T3876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.973492][ T3876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.982302][ T4184] EXT4-fs (loop4): 2 truncates cleaned up [ 49.988196][ T3876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.997324][ T4184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.011099][ T4184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.034388][ T4184] netlink: 80 bytes leftover after parsing attributes in process `syz.4.199'. [ 50.089874][ T4189] netlink: 'syz.4.200': attribute type 10 has an invalid length. [ 50.103473][ T4191] FAULT_INJECTION: forcing a failure. [ 50.103473][ T4191] name failslab, interval 1, probability 0, space 0, times 0 [ 50.116169][ T4191] CPU: 1 UID: 0 PID: 4191 Comm: syz.1.201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.116210][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.116236][ T4191] Call Trace: [ 50.116307][ T4191] [ 50.116314][ T4191] __dump_stack+0x1d/0x30 [ 50.116339][ T4191] dump_stack_lvl+0x95/0xd0 [ 50.116361][ T4191] dump_stack+0x15/0x1b [ 50.116383][ T4191] should_fail_ex+0x265/0x280 [ 50.116407][ T4191] should_failslab+0x8c/0xb0 [ 50.116455][ T4191] __kmalloc_cache_noprof+0x65/0x4c0 [ 50.116482][ T4191] ? audit_log_d_path+0x8d/0x150 [ 50.116506][ T4191] audit_log_d_path+0x8d/0x150 [ 50.116529][ T4191] audit_log_d_path_exe+0x42/0x70 [ 50.116614][ T4191] audit_log_task+0x1e9/0x250 [ 50.116718][ T4191] ? kstrtouint+0x76/0xc0 [ 50.116740][ T4191] audit_seccomp+0x61/0x100 [ 50.116772][ T4191] ? __seccomp_filter+0x832/0x1260 [ 50.116875][ T4191] __seccomp_filter+0x843/0x1260 [ 50.116901][ T4191] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 50.117000][ T4191] ? vfs_write+0x7e8/0x960 [ 50.117025][ T4191] __secure_computing+0x82/0x150 [ 50.117061][ T4191] syscall_trace_enter+0xcf/0x1e0 [ 50.117142][ T4191] do_syscall_64+0xa4/0x2b0 [ 50.117171][ T4191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.117194][ T4191] RIP: 0033:0x7fb8f406f749 [ 50.117211][ T4191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.117229][ T4191] RSP: 002b:00007fb8f2ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 50.117251][ T4191] RAX: ffffffffffffffda RBX: 00007fb8f42c5fa0 RCX: 00007fb8f406f749 [ 50.117262][ T4191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 50.117271][ T4191] RBP: 00007fb8f2ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.117281][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.117291][ T4191] R13: 00007fb8f42c6038 R14: 00007fb8f42c5fa0 R15: 00007ffe23bd2e58 [ 50.117308][ T4191] [ 50.119436][ T4189] team0: Port device dummy0 added [ 50.195010][ T4192] netlink: 'syz.4.200': attribute type 10 has an invalid length. [ 50.337738][ T3876] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.439723][ T3876] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.453071][ T4192] team0: Port device dummy0 removed [ 50.460990][ T4192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.484818][ T3876] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.496272][ T4206] netlink: 128 bytes leftover after parsing attributes in process `syz.1.205'. [ 50.522518][ T4206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 50.534306][ T3876] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.619016][ T4219] netlink: 'syz.0.206': attribute type 10 has an invalid length. [ 50.636951][ T4219] bond0: (slave dummy0): Releasing backup interface [ 50.646374][ T4219] team0: Port device dummy0 added [ 50.671831][ T4219] netlink: 'syz.0.206': attribute type 10 has an invalid length. [ 50.679140][ T3876] bridge_slave_1: left allmulticast mode [ 50.685274][ T3876] bridge_slave_1: left promiscuous mode [ 50.691028][ T3876] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.698915][ T3876] bridge_slave_0: left allmulticast mode [ 50.704559][ T3876] bridge_slave_0: left promiscuous mode [ 50.710257][ T3876] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.719926][ T4222] loop4: detected capacity change from 0 to 128 [ 50.846609][ T3876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.856770][ T3876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.866610][ T3876] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 50.875935][ T3876] bond0 (unregistering): Released all slaves [ 50.886983][ T4219] team0: Port device dummy0 removed [ 50.894177][ T4219] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.938272][ T3876] hsr_slave_0: left promiscuous mode [ 50.944897][ T3876] hsr_slave_1: left promiscuous mode [ 50.950736][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.958190][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.966374][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.973932][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.984477][ T3876] veth1_macvtap: left promiscuous mode [ 50.990326][ T3876] veth0_macvtap: left promiscuous mode [ 50.996173][ T3876] veth1_vlan: left promiscuous mode [ 51.003635][ T3876] veth0_vlan: left promiscuous mode [ 51.019014][ T29] kauditd_printk_skb: 729 callbacks suppressed [ 51.019028][ T29] audit: type=1400 audit(1767394595.509:1870): avc: denied { read write } for pid=4225 comm="syz.4.210" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.050100][ T29] audit: type=1400 audit(1767394595.509:1871): avc: denied { open } for pid=4225 comm="syz.4.210" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.063803][ T4227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 51.125617][ T3876] team0 (unregistering): Port device team_slave_1 removed [ 51.136542][ T3876] team0 (unregistering): Port device team_slave_0 removed [ 51.140844][ T29] audit: type=1400 audit(1767394595.629:1872): avc: denied { ioctl } for pid=4225 comm="syz.4.210" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.207831][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 51.264119][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.271339][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.287977][ T4199] bridge_slave_0: entered allmulticast mode [ 51.302318][ T4199] bridge_slave_0: entered promiscuous mode [ 51.303135][ T4243] netlink: 128 bytes leftover after parsing attributes in process `syz.4.211'. [ 51.310749][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.324250][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.331413][ T4199] bridge_slave_1: entered allmulticast mode [ 51.338334][ T4199] bridge_slave_1: entered promiscuous mode [ 51.338620][ T4241] loop1: detected capacity change from 0 to 1024 [ 51.351071][ T4243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'. [ 51.360731][ T4241] EXT4-fs: inline encryption not supported [ 51.393704][ T4241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.398869][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.416883][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.437875][ T29] audit: type=1400 audit(1767394595.929:1873): avc: denied { write } for pid=4240 comm="syz.1.212" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.463699][ T4199] team0: Port device team_slave_0 added [ 51.471244][ T4199] team0: Port device team_slave_1 added [ 51.496243][ T29] audit: type=1400 audit(1767394595.979:1874): avc: denied { ioctl } for pid=4240 comm="syz.1.212" path="/39/file1/file1" dev="loop1" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.520737][ T29] audit: type=1400 audit(1767394595.989:1875): avc: denied { setopt } for pid=4240 comm="syz.1.212" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.549334][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.556597][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.582682][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.605338][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.612298][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.638415][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.662508][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.708967][ T4199] hsr_slave_0: entered promiscuous mode [ 51.714621][ T29] audit: type=1400 audit(1767394596.199:1876): avc: denied { create } for pid=4261 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.715760][ T4199] hsr_slave_1: entered promiscuous mode [ 51.734771][ T29] audit: type=1400 audit(1767394596.199:1877): avc: denied { write } for pid=4261 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.760871][ T4199] debugfs: 'hsr0' already exists in 'hsr' [ 51.766624][ T4199] Cannot create hsr debugfs directory [ 51.772100][ T4262] lo speed is unknown, defaulting to 1000 [ 51.785578][ T4262] lo speed is unknown, defaulting to 1000 [ 51.794933][ T4262] lo speed is unknown, defaulting to 1000 [ 51.801042][ T4262] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.841437][ T4262] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 51.874053][ T4274] FAULT_INJECTION: forcing a failure. [ 51.874053][ T4274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.887198][ T4274] CPU: 1 UID: 0 PID: 4274 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.887226][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.887237][ T4274] Call Trace: [ 51.887243][ T4274] [ 51.887250][ T4274] __dump_stack+0x1d/0x30 [ 51.887273][ T4274] dump_stack_lvl+0x95/0xd0 [ 51.887293][ T4274] dump_stack+0x15/0x1b [ 51.887355][ T4274] should_fail_ex+0x265/0x280 [ 51.887427][ T4274] should_fail+0xb/0x20 [ 51.887444][ T4274] should_fail_usercopy+0x1a/0x20 [ 51.887491][ T4274] _copy_from_user+0x1c/0xb0 [ 51.887518][ T4274] ___sys_sendmsg+0xc1/0x1d0 [ 51.887641][ T4274] __x64_sys_sendmsg+0xd4/0x160 [ 51.887675][ T4274] x64_sys_call+0x17ba/0x3000 [ 51.887748][ T4274] do_syscall_64+0xca/0x2b0 [ 51.887856][ T4274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.887966][ T4274] RIP: 0033:0x7fe48a11f749 [ 51.887985][ T4274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.888004][ T4274] RSP: 002b:00007fe488b7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.888023][ T4274] RAX: ffffffffffffffda RBX: 00007fe48a375fa0 RCX: 00007fe48a11f749 [ 51.888035][ T4274] RDX: 0000000000040080 RSI: 00002000000007c0 RDI: 0000000000000006 [ 51.888047][ T4274] RBP: 00007fe488b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.888058][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.888073][ T4274] R13: 00007fe48a376038 R14: 00007fe48a375fa0 R15: 00007fffbdeaf438 [ 51.888138][ T4274] [ 52.056671][ T63] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.112180][ T4285] macvtap0: refused to change device tx_queue_len [ 52.118849][ T4262] lo speed is unknown, defaulting to 1000 [ 52.138785][ T63] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.150062][ T4262] lo speed is unknown, defaulting to 1000 [ 52.164802][ T4199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.175490][ T4262] lo speed is unknown, defaulting to 1000 [ 52.184815][ T4199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.200837][ T4262] lo speed is unknown, defaulting to 1000 [ 52.207690][ T63] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.225786][ T4199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.233459][ T4296] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 52.236802][ T4262] lo speed is unknown, defaulting to 1000 [ 52.240081][ T4296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.250196][ T4199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.253515][ T4296] vhci_hcd vhci_hcd.0: Device attached [ 52.305141][ T63] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.324553][ T4262] syz.1.213 (4262) used greatest stack depth: 9896 bytes left [ 52.366265][ T4311] lo speed is unknown, defaulting to 1000 [ 52.393955][ T4319] loop4: detected capacity change from 0 to 128 [ 52.401037][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.428526][ T4277] lo speed is unknown, defaulting to 1000 [ 52.444815][ T3472] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 52.455222][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.478358][ T4313] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.504789][ T3472] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 52.522930][ T4320] syzkaller0: entered allmulticast mode [ 52.542582][ T4313] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.589605][ T4320] syzkaller0 (unregistering): left allmulticast mode [ 52.630202][ T4331] __nla_validate_parse: 1 callbacks suppressed [ 52.630217][ T4331] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 52.647605][ T4331] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 52.679677][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.686870][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.706425][ T4313] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.733680][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.740849][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.757889][ T4313] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.775584][ T63] bridge_slave_1: left allmulticast mode [ 52.781257][ T63] bridge_slave_1: left promiscuous mode [ 52.787085][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.796832][ T63] bridge_slave_0: left allmulticast mode [ 52.802503][ T63] bridge_slave_0: left promiscuous mode [ 52.808220][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.888701][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.919991][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.929931][ T63] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 52.940870][ T4298] vhci_hcd: connection reset by peer [ 52.946589][ T2788] vhci_hcd vhci_hcd.0: stop threads [ 52.951832][ T2788] vhci_hcd vhci_hcd.0: release socket [ 52.957321][ T2788] vhci_hcd vhci_hcd.0: disconnect device [ 52.963921][ T63] bond0 (unregistering): Released all slaves [ 52.981266][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.991813][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.049798][ T63] hsr_slave_0: left promiscuous mode [ 53.059114][ T63] hsr_slave_1: left promiscuous mode [ 53.070639][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.078252][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.089147][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.096602][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.114179][ T63] veth1_macvtap: left promiscuous mode [ 53.119854][ T63] veth0_macvtap: left promiscuous mode [ 53.127064][ T63] veth1_vlan: left promiscuous mode [ 53.132449][ T63] veth0_vlan: left promiscuous mode [ 53.218295][ T63] team0 (unregistering): Port device team_slave_1 removed [ 53.230159][ T63] team0 (unregistering): Port device team_slave_0 removed [ 53.271929][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 53.301416][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.337799][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.344945][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.352227][ T4277] bridge_slave_0: entered allmulticast mode [ 53.359177][ T4277] bridge_slave_0: entered promiscuous mode [ 53.366537][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.373783][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.381418][ T4277] bridge_slave_1: entered allmulticast mode [ 53.388009][ T4277] bridge_slave_1: entered promiscuous mode [ 53.409455][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.430192][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.496086][ T29] audit: type=1400 audit(1767394597.989:1878): avc: denied { module_load } for pid=4355 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 53.496092][ T4356] Invalid ELF header type: 0 != 1 [ 53.524629][ T4277] team0: Port device team_slave_0 added [ 53.532684][ T29] audit: type=1400 audit(1767394598.019:1879): avc: denied { getattr } for pid=4358 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=509 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.546723][ T4277] team0: Port device team_slave_1 added [ 53.642608][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.649653][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.675607][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.706531][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.713497][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.739490][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.785214][ T4199] veth0_vlan: entered promiscuous mode [ 53.793189][ T4199] veth1_vlan: entered promiscuous mode [ 53.808418][ T4199] veth0_macvtap: entered promiscuous mode [ 53.831378][ T4277] hsr_slave_0: entered promiscuous mode [ 53.837962][ T4277] hsr_slave_1: entered promiscuous mode [ 53.843961][ T4277] debugfs: 'hsr0' already exists in 'hsr' [ 53.849742][ T4277] Cannot create hsr debugfs directory [ 53.862062][ T4199] veth1_macvtap: entered promiscuous mode [ 53.898455][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.921164][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.941019][ T2788] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.951315][ T2788] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.969904][ T2788] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.989256][ T2788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.045993][ T4277] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.075878][ T4277] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.110578][ T4277] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.127991][ T4277] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.203179][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.220793][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.230993][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.238189][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.253854][ T2788] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.260969][ T2788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.295050][ T64] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.309994][ T910] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.355482][ T910] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.378330][ T910] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.472796][ T4416] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.488189][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.525735][ T4428] syzkaller0: entered allmulticast mode [ 54.535878][ T4416] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.549808][ T4433] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 54.569405][ T4428] syzkaller0 (unregistering): left allmulticast mode [ 54.576679][ T4433] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 54.585917][ T4436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4436 comm=syz.1.227 [ 54.669705][ T4416] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.766816][ T4416] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.790718][ T4452] netlink: 128 bytes leftover after parsing attributes in process `syz.5.229'. [ 54.820422][ T4452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.229'. [ 54.828116][ T3876] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.857770][ T3876] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.884343][ T3876] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.906216][ T4277] veth0_vlan: entered promiscuous mode [ 54.935237][ T3876] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.945811][ T4277] veth1_vlan: entered promiscuous mode [ 54.974906][ T4277] veth0_macvtap: entered promiscuous mode [ 54.991108][ T4277] veth1_macvtap: entered promiscuous mode [ 55.025530][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.040777][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.056676][ T3876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.066295][ T3876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.076530][ T3876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.087322][ T3876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.136876][ T4471] syzkaller0: entered allmulticast mode [ 55.146670][ T4471] syzkaller0 (unregistering): left allmulticast mode [ 55.161157][ T4474] loop6: detected capacity change from 0 to 512 [ 55.170286][ T4474] ext4: Bad value for 'resgid' [ 55.175113][ T4474] ext4: Bad value for 'resgid' [ 55.186753][ T4474] tipc: Can't bind to reserved service type 2 [ 55.208030][ T4474] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.366273][ T4476] syz.1.231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.402621][ T4476] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.414932][ T4476] netlink: 'syz.1.231': attribute type 3 has an invalid length. [ 55.468725][ T4482] loop6: detected capacity change from 0 to 128 [ 55.483012][ T4482] vfat: Bad value for 'time_offset' [ 55.732550][ T4492] netlink: 68 bytes leftover after parsing attributes in process `syz.6.234'. [ 56.063286][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 56.063298][ T29] audit: type=1326 audit(1767394600.549:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4130f749 code=0x7ffc0000 [ 56.112847][ T4501] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.164721][ T29] audit: type=1326 audit(1767394600.589:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b4130f783 code=0x7ffc0000 [ 56.187916][ T29] audit: type=1326 audit(1767394600.589:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b4130f783 code=0x7ffc0000 [ 56.211079][ T29] audit: type=1326 audit(1767394600.589:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4130f749 code=0x7ffc0000 [ 56.234422][ T29] audit: type=1326 audit(1767394600.589:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b4130f783 code=0x7ffc0000 [ 56.257615][ T29] audit: type=1326 audit(1767394600.589:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6b4130f807 code=0x7ffc0000 [ 56.280852][ T29] audit: type=1326 audit(1767394600.589:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b412c6bdd code=0x7ffc0000 [ 56.304064][ T29] audit: type=1326 audit(1767394600.589:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6b41343e89 code=0x7ffc0000 [ 56.327650][ T29] audit: type=1326 audit(1767394600.589:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b412c6c47 code=0x7ffc0000 [ 56.350944][ T29] audit: type=1326 audit(1767394600.589:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6b412c6357 code=0x7ffc0000 [ 56.429328][ T4499] syzkaller0: entered allmulticast mode [ 56.449939][ T4517] serio: Serial port ttyS3 [ 56.523351][ T4507] syzkaller0 (unregistering): left allmulticast mode [ 56.557040][ T4522] loop5: detected capacity change from 0 to 256 [ 56.591326][ T4527] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.602897][ T4522] msdos: Unknown parameter 'donodots' [ 56.609466][ T4501] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.628708][ T4527] netlink: 'syz.6.244': attribute type 3 has an invalid length. [ 56.644053][ T4522] loop5: detected capacity change from 0 to 764 [ 56.669003][ T4501] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.689948][ T4530] loop6: detected capacity change from 0 to 1024 [ 56.705644][ T4522] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.728948][ T4530] EXT4-fs: inline encryption not supported [ 56.736697][ T4501] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.767959][ T4530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.879670][ T4277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.948731][ T4541] loop6: detected capacity change from 0 to 128 [ 56.977939][ T4522] lo: entered promiscuous mode [ 57.003793][ T4522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.118988][ T4548] netlink: 128 bytes leftover after parsing attributes in process `syz.6.247'. [ 57.154871][ T4548] netlink: 16 bytes leftover after parsing attributes in process `syz.6.247'. [ 57.193658][ T4554] x_tables: duplicate underflow at hook 1 [ 57.397310][ T4522] syz.5.243 (4522) used greatest stack depth: 9096 bytes left [ 57.594865][ T3472] usb 1-1: enqueue for inactive port 0 [ 57.600466][ T3472] usb 1-1: enqueue for inactive port 0 [ 57.674903][ T3472] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 57.686860][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.747679][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.800230][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.811330][ T4558] lo speed is unknown, defaulting to 1000 [ 57.863519][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.909344][ T4558] chnl_net:caif_netlink_parms(): no params data found [ 58.036186][ T4585] loop6: detected capacity change from 0 to 512 [ 58.043445][ T4585] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.055535][ T4585] EXT4-fs (loop6): 1 truncate cleaned up [ 58.061578][ T4585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.109076][ T52] bridge_slave_1: left allmulticast mode [ 58.114838][ T52] bridge_slave_1: left promiscuous mode [ 58.117088][ T4277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.120667][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.151379][ T4589] random: crng reseeded on system resumption [ 58.184618][ T52] bridge_slave_0: left allmulticast mode [ 58.190340][ T52] bridge_slave_0: left promiscuous mode [ 58.196177][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.309176][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.321846][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.331766][ T52] bond0 (unregistering): Released all slaves [ 58.340629][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.347791][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.355622][ T4558] bridge_slave_0: entered allmulticast mode [ 58.362047][ T4558] bridge_slave_0: entered promiscuous mode [ 58.401227][ T52] hsr_slave_0: left promiscuous mode [ 58.419285][ T52] hsr_slave_1: left promiscuous mode [ 58.428717][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.436216][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.465111][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.472621][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.494914][ T52] veth1_macvtap: left promiscuous mode [ 58.507162][ T52] veth0_macvtap: left promiscuous mode [ 58.518341][ T52] veth1_vlan: left promiscuous mode [ 58.529276][ T52] veth0_vlan: left promiscuous mode [ 58.662172][ T4612] netlink: 36 bytes leftover after parsing attributes in process `syz.6.257'. [ 58.672390][ T52] team0 (unregistering): Port device team_slave_1 removed [ 58.694350][ T52] team0 (unregistering): Port device team_slave_0 removed [ 58.729737][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.736832][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.744063][ T4558] bridge_slave_1: entered allmulticast mode [ 58.751070][ T4558] bridge_slave_1: entered promiscuous mode [ 58.792105][ T4558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.805278][ T4558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.831830][ T4558] team0: Port device team_slave_0 added [ 58.845927][ T4558] team0: Port device team_slave_1 added [ 58.887622][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.894724][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.920674][ T4558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.932774][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.939771][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.965839][ T4558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.038454][ T4558] hsr_slave_0: entered promiscuous mode [ 59.055122][ T4558] hsr_slave_1: entered promiscuous mode [ 59.061048][ T4558] debugfs: 'hsr0' already exists in 'hsr' [ 59.066805][ T4558] Cannot create hsr debugfs directory [ 59.202999][ T4558] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 59.216952][ T4558] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 59.236779][ T4558] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 59.256735][ T4558] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 59.319194][ T4558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.344282][ T4558] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.355852][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.363033][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.396566][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.403619][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.483652][ T910] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.525585][ T910] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.550831][ T4558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.566085][ T910] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.574327][ T910] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.618465][ T4681] netlink: 'syz.4.260': attribute type 10 has an invalid length. [ 59.786911][ T4692] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 59.795522][ T4692] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 59.845195][ T4558] veth0_vlan: entered promiscuous mode [ 59.864076][ T4558] veth1_vlan: entered promiscuous mode [ 59.902467][ T4558] veth0_macvtap: entered promiscuous mode [ 59.917209][ T4558] veth1_macvtap: entered promiscuous mode [ 59.938977][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.955039][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.978315][ T2788] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.988607][ T2788] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.020946][ T2788] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.053517][ T2788] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.100740][ T4720] process 'syz.7.251' launched '/dev/fd/4' with NULL argv: empty string added [ 60.216306][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.263'. [ 60.225237][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.263'. [ 60.234085][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.263'. [ 60.243013][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.263'. [ 60.251905][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.263'. [ 60.260714][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.263'. [ 60.269537][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.263'. [ 60.333696][ T4729] lo speed is unknown, defaulting to 1000 [ 60.372457][ T4732] macvtap1: entered promiscuous mode [ 60.377857][ T4732] macvtap1: entered allmulticast mode [ 60.383492][ T4729] loop7: detected capacity change from 0 to 128 [ 60.721488][ T4753] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.789644][ T4747] syzkaller0: entered allmulticast mode [ 60.797292][ T4753] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.818246][ T4747] syzkaller0 (unregistering): left allmulticast mode [ 60.910765][ T4762] syz.6.273 uses obsolete (PF_INET,SOCK_PACKET) [ 60.920597][ T4753] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.952856][ T4762] loop6: detected capacity change from 0 to 128 [ 60.981909][ T4762] netlink: zone id is out of range [ 60.987149][ T4762] netlink: zone id is out of range [ 61.000611][ T4761] lo speed is unknown, defaulting to 1000 [ 61.021263][ T4762] netlink: zone id is out of range [ 61.023154][ T4753] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.026469][ T4762] netlink: zone id is out of range [ 61.026478][ T4762] netlink: zone id is out of range [ 61.026485][ T4762] netlink: zone id is out of range [ 61.026492][ T4762] netlink: zone id is out of range [ 61.059619][ T4762] netlink: zone id is out of range [ 61.064836][ T4762] netlink: zone id is out of range [ 61.139334][ T4762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=4762 comm=syz.6.273 [ 61.332894][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 61.332918][ T29] audit: type=1326 audit(1767394605.819:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17bbff749 code=0x7ffc0000 [ 61.339660][ T4768] loop6: detected capacity change from 0 to 128 [ 61.377081][ T29] audit: type=1326 audit(1767394605.819:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17bbff749 code=0x7ffc0000 [ 61.400471][ T29] audit: type=1326 audit(1767394605.819:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17bbff749 code=0x7ffc0000 [ 61.423962][ T29] audit: type=1326 audit(1767394605.819:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd17bbff749 code=0x7ffc0000 [ 61.447319][ T29] audit: type=1326 audit(1767394605.819:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd17bbff783 code=0x7ffc0000 [ 61.470551][ T29] audit: type=1326 audit(1767394605.819:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17bbff749 code=0x7ffc0000 [ 61.494002][ T29] audit: type=1326 audit(1767394605.819:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd17bbfe1ff code=0x7ffc0000 [ 61.517194][ T29] audit: type=1326 audit(1767394605.819:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd17bbff7d7 code=0x7ffc0000 [ 61.540462][ T29] audit: type=1326 audit(1767394605.839:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd17bbfdf90 code=0x7ffc0000 [ 61.563818][ T29] audit: type=1326 audit(1767394605.839:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4767 comm="syz.6.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd17bbff34b code=0x7ffc0000 [ 61.664941][ T4773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4773 comm=syz.1.275 [ 61.709098][ T4774] syz.6.274: attempt to access beyond end of device [ 61.709098][ T4774] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 61.735230][ T4774] syz.6.274: attempt to access beyond end of device [ 61.735230][ T4774] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 61.750348][ T4776] lo speed is unknown, defaulting to 1000 [ 61.774127][ T4774] syz.6.274: attempt to access beyond end of device [ 61.774127][ T4774] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 61.789293][ T4779] netlink: 'syz.1.277': attribute type 39 has an invalid length. [ 61.798482][ T4778] loop7: detected capacity change from 0 to 128 [ 61.854817][ T4774] syz.6.274: attempt to access beyond end of device [ 61.854817][ T4774] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 61.940701][ T4787] netlink: 'syz.7.280': attribute type 39 has an invalid length. [ 62.007165][ T4797] lo speed is unknown, defaulting to 1000 [ 62.039737][ T4797] loop0: detected capacity change from 0 to 128 [ 62.336306][ T4810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4810 comm=syz.0.287 [ 62.749843][ T4818] netlink: 'syz.0.289': attribute type 39 has an invalid length. [ 62.807324][ T4822] SELinux: failed to load policy [ 62.925541][ T4831] netlink: 'syz.6.294': attribute type 1 has an invalid length. [ 62.969232][ T4831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.982208][ T4833] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 62.991029][ T4833] bond1: (slave batadv1): making interface the new active one [ 62.999956][ T4833] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 63.037281][ T4835] lo speed is unknown, defaulting to 1000 [ 63.064530][ T4831] netlink: 'syz.6.294': attribute type 13 has an invalid length. [ 63.068207][ T4835] loop0: detected capacity change from 0 to 128 [ 63.123738][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.131084][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.204605][ T4831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.215851][ T4831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.281655][ T3478] syb2: Port: 1 Link DOWN [ 63.288105][ T52] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.304701][ T52] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.334103][ T52] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.346625][ T52] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.364507][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.373045][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.381543][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.389962][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.440768][ T4843] lo speed is unknown, defaulting to 1000 [ 63.453485][ T4845] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 63.468086][ T4845] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.489085][ T4846] loop4: detected capacity change from 0 to 128 [ 63.685391][ T4866] __nla_validate_parse: 54 callbacks suppressed [ 63.685466][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 63.709729][ T4865] loop0: detected capacity change from 0 to 1024 [ 63.724308][ T4865] EXT4-fs: inline encryption not supported [ 63.767588][ T4865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.782036][ T4868] loop6: detected capacity change from 0 to 512 [ 63.831006][ T4876] netlink: 256 bytes leftover after parsing attributes in process `syz.7.310'. [ 63.842253][ T4868] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 63.855217][ T4874] loop4: detected capacity change from 0 to 764 [ 63.881669][ T4874] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 63.921965][ T4868] EXT4-fs (loop6): 1 truncate cleaned up [ 63.937992][ T4868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.955463][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.308'. [ 63.964266][ T4868] netlink: 28 bytes leftover after parsing attributes in process `syz.6.308'. [ 63.976575][ T4868] bridge1: entered promiscuous mode [ 63.981895][ T4868] bridge1: entered allmulticast mode [ 63.989289][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.077281][ T4277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.215559][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.7.319'. [ 64.224408][ T4896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.258017][ T4896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.282368][ T4902] EXT4-fs: inline encryption not supported [ 64.319387][ T4902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.456263][ T4924] FAULT_INJECTION: forcing a failure. [ 64.456263][ T4924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.469394][ T4924] CPU: 0 UID: 0 PID: 4924 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.469452][ T4924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.469467][ T4924] Call Trace: [ 64.469474][ T4924] [ 64.469482][ T4924] __dump_stack+0x1d/0x30 [ 64.469511][ T4924] dump_stack_lvl+0x95/0xd0 [ 64.469536][ T4924] dump_stack+0x15/0x1b [ 64.469559][ T4924] should_fail_ex+0x265/0x280 [ 64.469638][ T4924] should_fail+0xb/0x20 [ 64.469660][ T4924] should_fail_usercopy+0x1a/0x20 [ 64.469688][ T4924] _copy_from_user+0x1c/0xb0 [ 64.469779][ T4924] __sys_bind+0x106/0x2a0 [ 64.469811][ T4924] __x64_sys_bind+0x3f/0x50 [ 64.469836][ T4924] x64_sys_call+0x2ceb/0x3000 [ 64.469925][ T4924] do_syscall_64+0xca/0x2b0 [ 64.469960][ T4924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.469981][ T4924] RIP: 0033:0x7fa880d0f749 [ 64.469999][ T4924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.470015][ T4924] RSP: 002b:00007fa87f777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 64.470032][ T4924] RAX: ffffffffffffffda RBX: 00007fa880f65fa0 RCX: 00007fa880d0f749 [ 64.470042][ T4924] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000004 [ 64.470115][ T4924] RBP: 00007fa87f777090 R08: 0000000000000000 R09: 0000000000000000 [ 64.470127][ T4924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.470138][ T4924] R13: 00007fa880f66038 R14: 00007fa880f65fa0 R15: 00007ffcd2545ab8 [ 64.470172][ T4924] [ 64.640742][ T4926] netlink: 128 bytes leftover after parsing attributes in process `syz.7.323'. [ 64.665765][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.684334][ T4926] netlink: 16 bytes leftover after parsing attributes in process `syz.7.323'. [ 64.807440][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 64.816684][ T4942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.825099][ T4950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.836655][ T4951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 64.846676][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.858391][ T4950] EXT4-fs (loop4): 1 truncate cleaned up [ 64.864472][ T4950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.882372][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 64.894895][ T4950] bridge1: entered promiscuous mode [ 64.900213][ T4950] bridge1: entered allmulticast mode [ 64.935226][ T4959] vfat: Bad value for 'time_offset' [ 64.935574][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.950876][ T4955] syzkaller0: entered allmulticast mode [ 64.961515][ T4955] syzkaller0 (unregistering): left allmulticast mode [ 65.092835][ T4967] FAULT_INJECTION: forcing a failure. [ 65.092835][ T4967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.106029][ T4967] CPU: 0 UID: 0 PID: 4967 Comm: syz.1.340 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.106057][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.106069][ T4967] Call Trace: [ 65.106076][ T4967] [ 65.106124][ T4967] __dump_stack+0x1d/0x30 [ 65.106151][ T4967] dump_stack_lvl+0x95/0xd0 [ 65.106171][ T4967] dump_stack+0x15/0x1b [ 65.106195][ T4967] should_fail_ex+0x265/0x280 [ 65.106264][ T4967] should_fail+0xb/0x20 [ 65.106281][ T4967] should_fail_usercopy+0x1a/0x20 [ 65.106305][ T4967] strncpy_from_user+0x27/0x260 [ 65.106346][ T4967] getname_flags+0xae/0x3b0 [ 65.106439][ T4967] user_path_at+0x28/0x130 [ 65.106473][ T4967] __se_sys_name_to_handle_at+0xfd/0x640 [ 65.106672][ T4967] ? __bpf_trace_sys_enter+0x10/0x30 [ 65.106690][ T4967] ? trace_sys_enter+0xd0/0xf0 [ 65.106761][ T4967] __x64_sys_name_to_handle_at+0x67/0x80 [ 65.106807][ T4967] x64_sys_call+0x164a/0x3000 [ 65.106834][ T4967] do_syscall_64+0xca/0x2b0 [ 65.106874][ T4967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.106933][ T4967] RIP: 0033:0x7fb8f406f749 [ 65.106945][ T4967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.107011][ T4967] RSP: 002b:00007fb8f2ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 65.107031][ T4967] RAX: ffffffffffffffda RBX: 00007fb8f42c5fa0 RCX: 00007fb8f406f749 [ 65.107045][ T4967] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 65.107062][ T4967] RBP: 00007fb8f2ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.107071][ T4967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.107093][ T4967] R13: 00007fb8f42c6038 R14: 00007fb8f42c5fa0 R15: 00007ffe23bd2e58 [ 65.107127][ T4967] [ 65.470321][ T4977] Failed to initialize the IGMP autojoin socket (err -2) [ 65.490303][ T4979] set_capacity_and_notify: 4 callbacks suppressed [ 65.490314][ T4979] loop7: detected capacity change from 0 to 128 [ 65.893282][ T5000] net_ratelimit: 44 callbacks suppressed [ 65.893298][ T5000] dummy0: mtu less than device minimum [ 65.935029][ T4997] loop1: detected capacity change from 0 to 512 [ 65.964368][ T5002] Failed to initialize the IGMP autojoin socket (err -2) [ 65.972287][ T4997] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.985284][ T4997] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.352: bg 0: block 127: padding at end of block bitmap is not set [ 66.003995][ T4997] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.352: corrupted inode contents [ 66.022937][ T4997] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 66.031886][ T4997] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.352: corrupted inode contents [ 66.044234][ T4997] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.352: mark_inode_dirty error [ 66.057232][ T4997] EXT4-fs (loop1): 1 orphan inode deleted [ 66.064767][ T5007] loop0: detected capacity change from 0 to 128 [ 66.072347][ T4997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.157279][ T5008] syzkaller0: entered allmulticast mode [ 66.193702][ T5008] syzkaller0 (unregistering): left allmulticast mode [ 66.218516][ T5011] siw: device registration error -23 [ 66.261757][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.466565][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 66.466612][ T29] audit: type=1400 audit(1767394610.959:2912): avc: denied { create } for pid=5037 comm="syz.0.367" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.520004][ T5036] SELinux: failed to load policy [ 66.531567][ T29] audit: type=1400 audit(1767394610.979:2913): avc: denied { write } for pid=5037 comm="syz.0.367" name="file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.553946][ T29] audit: type=1400 audit(1767394610.979:2914): avc: denied { open } for pid=5037 comm="syz.0.367" path="/89/file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.576523][ T29] audit: type=1400 audit(1767394610.979:2915): avc: denied { ioctl } for pid=5037 comm="syz.0.367" path="/89/file0" dev="tmpfs" ino=495 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.600575][ T29] audit: type=1400 audit(1767394611.009:2916): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.693652][ T5054] Failed to initialize the IGMP autojoin socket (err -2) [ 66.708375][ T29] audit: type=1400 audit(1767394611.199:2917): avc: denied { kexec_image_load } for pid=5052 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 67.378036][ T5090] Failed to initialize the IGMP autojoin socket (err -2) [ 67.430013][ T5095] loop1: detected capacity change from 0 to 128 [ 67.521950][ T29] audit: type=1400 audit(1767394612.009:2918): avc: denied { write } for pid=5098 comm="syz.6.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.561525][ T29] audit: type=1326 audit(1767394612.019:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 67.584874][ T29] audit: type=1326 audit(1767394612.019:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 67.608242][ T29] audit: type=1326 audit(1767394612.019:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f406f749 code=0x7ffc0000 [ 67.965042][ T5134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5134 comm=syz.7.382 [ 68.080790][ T5121] loop6: detected capacity change from 0 to 32768 [ 68.115652][ T5121] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 68.120778][ T5158] FAULT_INJECTION: forcing a failure. [ 68.120778][ T5158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.121272][ T5121] loop6: p1 start 460800 is beyond EOD, [ 68.133962][ T5158] CPU: 1 UID: 0 PID: 5158 Comm: syz.7.386 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.133988][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.134213][ T5158] Call Trace: [ 68.134235][ T5158] [ 68.134263][ T5158] __dump_stack+0x1d/0x30 [ 68.134353][ T5158] dump_stack_lvl+0x95/0xd0 [ 68.134478][ T5158] dump_stack+0x15/0x1b [ 68.134535][ T5158] should_fail_ex+0x265/0x280 [ 68.134602][ T5158] should_fail+0xb/0x20 [ 68.134661][ T5158] should_fail_usercopy+0x1a/0x20 [ 68.134757][ T5158] _copy_from_user+0x1c/0xb0 [ 68.134839][ T5158] ___sys_sendmsg+0xc1/0x1d0 [ 68.134995][ T5158] __x64_sys_sendmsg+0xd4/0x160 [ 68.135065][ T5158] x64_sys_call+0x17ba/0x3000 [ 68.135238][ T5158] do_syscall_64+0xca/0x2b0 [ 68.135329][ T5158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.135483][ T5158] RIP: 0033:0x7f5786dff749 [ 68.135557][ T5158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.135604][ T5158] RSP: 002b:00007f578583e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.135654][ T5158] RAX: ffffffffffffffda RBX: 00007f5787056090 RCX: 00007f5786dff749 [ 68.135691][ T5158] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 68.135722][ T5158] RBP: 00007f578583e090 R08: 0000000000000000 R09: 0000000000000000 [ 68.135768][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.135865][ T5158] R13: 00007f5787056128 R14: 00007f5787056090 R15: 00007ffc4414d858 [ 68.135920][ T5158] [ 68.297904][ T5121] truncated [ 68.301028][ T5121] loop6: p2 size 83886080 extends beyond EOD, truncated [ 68.312473][ T5121] loop6: p5 start 460800 is beyond EOD, truncated [ 68.318961][ T5121] loop6: p6 size 83886080 extends beyond EOD, truncated [ 68.381663][ T5165] Failed to initialize the IGMP autojoin socket (err -2) [ 68.438553][ T5165] loop6: detected capacity change from 0 to 128 [ 68.484075][ T5171] netlink: 'syz.4.389': attribute type 39 has an invalid length. [ 68.501368][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 68.516067][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 68.522688][ T3599] udevd[3599]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 68.530155][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 68.890575][ T5215] FAULT_INJECTION: forcing a failure. [ 68.890575][ T5215] name failslab, interval 1, probability 0, space 0, times 0 [ 68.903326][ T5215] CPU: 1 UID: 0 PID: 5215 Comm: syz.7.400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.903407][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.903421][ T5215] Call Trace: [ 68.903429][ T5215] [ 68.903437][ T5215] __dump_stack+0x1d/0x30 [ 68.903465][ T5215] dump_stack_lvl+0x95/0xd0 [ 68.903490][ T5215] dump_stack+0x15/0x1b [ 68.903571][ T5215] should_fail_ex+0x265/0x280 [ 68.903599][ T5215] should_failslab+0x8c/0xb0 [ 68.903621][ T5215] __kmalloc_cache_noprof+0x65/0x4c0 [ 68.903650][ T5215] ? vt_do_kdsk_ioctl+0x409/0x7b0 [ 68.903728][ T5215] vt_do_kdsk_ioctl+0x409/0x7b0 [ 68.903756][ T5215] ? security_capable+0x83/0x90 [ 68.903851][ T5215] vt_ioctl+0x8e8/0x18a0 [ 68.903965][ T5215] ? tty_jobctrl_ioctl+0x29e/0x810 [ 68.904056][ T5215] tty_ioctl+0x7d8/0xb80 [ 68.904080][ T5215] ? __pfx_tty_ioctl+0x10/0x10 [ 68.904105][ T5215] __se_sys_ioctl+0xce/0x140 [ 68.904143][ T5215] __x64_sys_ioctl+0x43/0x50 [ 68.904278][ T5215] x64_sys_call+0x14b0/0x3000 [ 68.904307][ T5215] do_syscall_64+0xca/0x2b0 [ 68.904401][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.904501][ T5215] RIP: 0033:0x7f5786dff749 [ 68.904518][ T5215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.904544][ T5215] RSP: 002b:00007f578585f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.904566][ T5215] RAX: ffffffffffffffda RBX: 00007f5787055fa0 RCX: 00007f5786dff749 [ 68.904581][ T5215] RDX: 0000200000000380 RSI: 0000000000004b47 RDI: 0000000000000007 [ 68.904643][ T5215] RBP: 00007f578585f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.904658][ T5215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.904673][ T5215] R13: 00007f5787056038 R14: 00007f5787055fa0 R15: 00007ffc4414d858 [ 68.904750][ T5215] [ 69.095176][ T5214] FAULT_INJECTION: forcing a failure. [ 69.095176][ T5214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.108250][ T5214] CPU: 1 UID: 0 PID: 5214 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.108283][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.108299][ T5214] Call Trace: [ 69.108306][ T5214] [ 69.108316][ T5214] __dump_stack+0x1d/0x30 [ 69.108368][ T5214] dump_stack_lvl+0x95/0xd0 [ 69.108397][ T5214] dump_stack+0x15/0x1b [ 69.108422][ T5214] should_fail_ex+0x265/0x280 [ 69.108454][ T5214] should_fail+0xb/0x20 [ 69.108508][ T5214] should_fail_usercopy+0x1a/0x20 [ 69.108591][ T5214] _copy_from_user+0x1c/0xb0 [ 69.108685][ T5214] kstrtouint_from_user+0x69/0xf0 [ 69.108715][ T5214] ? 0xffffffff81000000 [ 69.108733][ T5214] ? selinux_file_permission+0x1e2/0x320 [ 69.108788][ T5214] proc_fail_nth_write+0x50/0x160 [ 69.108823][ T5214] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.108859][ T5214] vfs_write+0x269/0x960 [ 69.108882][ T5214] ? vfs_read+0x4e6/0x770 [ 69.108958][ T5214] ? __rcu_read_unlock+0x4f/0x70 [ 69.108984][ T5214] ? __fget_files+0x184/0x1c0 [ 69.109013][ T5214] ? mutex_lock+0x58/0x90 [ 69.109102][ T5214] ksys_write+0xda/0x1a0 [ 69.109129][ T5214] __x64_sys_write+0x40/0x50 [ 69.109154][ T5214] x64_sys_call+0x2847/0x3000 [ 69.109220][ T5214] do_syscall_64+0xca/0x2b0 [ 69.109269][ T5214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.109291][ T5214] RIP: 0033:0x7fe48a11e1ff [ 69.109378][ T5214] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 69.109400][ T5214] RSP: 002b:00007fe488b7f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 69.109423][ T5214] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe48a11e1ff [ 69.109501][ T5214] RDX: 0000000000000001 RSI: 00007fe488b7f0a0 RDI: 0000000000000006 [ 69.109527][ T5214] RBP: 00007fe488b7f090 R08: 0000000000000000 R09: 000000000000001c [ 69.109540][ T5214] R10: 0000000020000845 R11: 0000000000000293 R12: 0000000000000001 [ 69.109559][ T5214] R13: 00007fe48a376038 R14: 00007fe48a375fa0 R15: 00007fffbdeaf438 [ 69.109581][ T5214] [ 69.323828][ T5217] Failed to initialize the IGMP autojoin socket (err -2) [ 69.371213][ T5220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5220 comm=syz.1.396 [ 69.385716][ T5223] loop4: detected capacity change from 0 to 128 [ 69.525673][ T5238] __nla_validate_parse: 9 callbacks suppressed [ 69.525689][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.405'. [ 69.562565][ T5240] Failed to initialize the IGMP autojoin socket (err -2) [ 69.573452][ T5241] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.587697][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 69.599015][ T5240] loop1: detected capacity change from 0 to 128 [ 69.625002][ T5248] syzkaller0: entered allmulticast mode [ 69.632078][ T5241] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.652152][ T5243] loop4: detected capacity change from 0 to 1024 [ 69.683825][ T5243] /dev/loop4: Can't open blockdev [ 69.698073][ T5248] syzkaller0 (unregistering): left allmulticast mode [ 69.728686][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5250 comm=syz.7.413 [ 69.787120][ T5241] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.857265][ T5254] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.917338][ T5241] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.959692][ T5254] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.070102][ T5254] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.182627][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.211070][ T5254] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.244055][ T5258] loop6: detected capacity change from 0 to 512 [ 70.272535][ T910] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.282184][ T5258] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.350922][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.391899][ T5258] EXT4-fs (loop6): 1 truncate cleaned up [ 70.402934][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.431117][ T5258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.453918][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.416'. [ 70.462828][ T5258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.416'. [ 70.475281][ T53] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.498545][ T5258] bridge2: entered promiscuous mode [ 70.503795][ T5258] bridge2: entered allmulticast mode [ 70.548799][ T53] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.574926][ T53] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.603906][ T53] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.616284][ T4277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.689892][ T5284] SELinux: failed to load policy [ 70.703518][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.423'. [ 70.723445][ T5291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5291 comm=syz.1.425 [ 70.743349][ T5295] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.775654][ T5298] Failed to initialize the IGMP autojoin socket (err -2) [ 70.808907][ T5295] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.822707][ T5307] loop4: detected capacity change from 0 to 128 [ 70.855705][ T5300] ================================================================== [ 70.863890][ T5300] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 70.870934][ T5300] [ 70.873263][ T5300] write to 0xffff88811bd4a5c8 of 8 bytes by task 3317 on cpu 1: [ 70.880900][ T5300] release_task+0x6ef/0xb60 [ 70.885413][ T5300] wait_consider_task+0x114a/0x1660 [ 70.890606][ T5300] __do_wait+0xfa/0x510 [ 70.894772][ T5300] do_wait+0xb7/0x250 [ 70.898792][ T5300] kernel_wait4+0x16b/0x1e0 [ 70.903302][ T5300] __x64_sys_wait4+0x91/0x120 [ 70.907996][ T5300] x64_sys_call+0x28ec/0x3000 [ 70.912684][ T5300] do_syscall_64+0xca/0x2b0 [ 70.917205][ T5300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.923104][ T5300] [ 70.925420][ T5300] read to 0xffff88811bd4a100 of 3264 bytes by task 5300 on cpu 0: [ 70.933230][ T5300] memcpy_and_pad+0x48/0x80 [ 70.937764][ T5300] arch_dup_task_struct+0x2c/0x40 [ 70.942800][ T5300] dup_task_struct+0x6e/0x950 [ 70.947466][ T5300] copy_process+0x37d/0x1ef0 [ 70.952043][ T5300] kernel_clone+0x16c/0x5c0 [ 70.956548][ T5300] __se_sys_clone3+0x1c2/0x200 [ 70.961340][ T5300] __x64_sys_clone3+0x31/0x40 [ 70.966027][ T5300] x64_sys_call+0x2c0f/0x3000 [ 70.970731][ T5300] do_syscall_64+0xca/0x2b0 [ 70.975279][ T5300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.981198][ T5300] [ 70.983510][ T5300] Reported by Kernel Concurrency Sanitizer on: [ 70.989670][ T5300] CPU: 0 UID: 0 PID: 5300 Comm: syz.6.428 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.999289][ T5300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.009338][ T5300] ================================================================== [ 71.020039][ T5308] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.035969][ T5309] syzkaller0: entered allmulticast mode [ 71.042808][ T5295] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.056295][ T5310] syzkaller0 (unregistering): left allmulticast mode [ 71.117523][ T5308] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.131006][ T5295] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.176863][ T5308] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.217977][ T5308] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.285810][ T53] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.297789][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.312909][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.321692][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.475254][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 71.475268][ T29] audit: type=1326 audit(1767394615.969:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.505086][ T29] audit: type=1326 audit(1767394615.969:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.528625][ T29] audit: type=1326 audit(1767394615.969:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.551999][ T29] audit: type=1326 audit(1767394615.969:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.575344][ T29] audit: type=1326 audit(1767394615.969:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.598690][ T29] audit: type=1326 audit(1767394615.969:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.622159][ T29] audit: type=1326 audit(1767394615.969:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.645461][ T29] audit: type=1326 audit(1767394615.969:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.668929][ T29] audit: type=1326 audit(1767394615.979:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 71.692324][ T29] audit: type=1326 audit(1767394615.979:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17bc32005 code=0x7ffc0000 [ 74.270462][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.281678][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.293206][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.304594][ T53] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0