last executing test programs: 11m3.336655495s ago: executing program 32 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200002, &(0x7f0000000040)={[{@i_version}, {@norecovery}, {@grpjquota}]}, 0x9, 0x63a, &(0x7f0000000100)="$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") 10m48.750764575s ago: executing program 33 (id=1144): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) unshare(0x68040200) 10m5.078378642s ago: executing program 34 (id=1438): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000000}, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 9m50.888848697s ago: executing program 35 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$hiddev(0x0, 0x2, 0x440) ioctl$HIDIOCGUCODE(r8, 0xc018480d, &(0x7f00000000c0)={0x3, 0x2, 0x460, 0x7f, 0xc0000000, 0x10005}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 9m49.587185595s ago: executing program 36 (id=1566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) 9m41.60240583s ago: executing program 37 (id=1600): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0, 0x0, 0x8000000000000}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) fstat(r3, &(0x7f0000000740)) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P|\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 9m32.764757467s ago: executing program 3 (id=1787): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m32.673250079s ago: executing program 3 (id=1789): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001500000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='nystem_u:object_r:auth_cache_t '], 0x27) 9m32.624027889s ago: executing program 3 (id=1791): epoll_create1(0x80000) lchown(0x0, 0x0, 0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000240)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c000280080005400000000308000140000000000800024000d066020900010073797a30000000000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 9m32.476641101s ago: executing program 8 (id=1794): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m31.628521353s ago: executing program 8 (id=1800): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m31.581194874s ago: executing program 8 (id=1801): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 9m31.427131656s ago: executing program 8 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0x7) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0xe1, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000340)="7075bd77b679ffe573090df4633fa29def868756b235eec8d3e95fb4e62db21cda40bf00e2d3955a795a9ee29f25cef7deeaf4b9a0ed56caaf4c33667217e04c5cc4a31a32b6e893d2f08a1702810d570dc64d5ac5068e64726482d27196e94a6eae2f630c714c17970d6b34df4b146727fc4d5fc87d2fdc72f2a6f6b28184097b2b4cb062c74f500156ca01258aca77686d26d38e812922d0f812a170f9e50e8f52656a7d7fa65ec06e45f922b918378ee2903e1ef92f95697dc3674cb80e5fc6d8fab9141ff55c1f9f527a89edef3857946bf118440cad766ee7a854e487030b3b49f0f2f1d9e95bb6d4e387360b") connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 9m31.399342027s ago: executing program 8 (id=1806): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/9, 0x9}}], 0x1, 0x40000042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mount$9p_fd(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x80000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@ignoreqv}, {@cache_fscache}, {@msize={'msize', 0x3d, 0x9}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000580)="1c8b03bfa1ab7bd712aaf33845a162500ec2e24929def24741e23b275ebae281738564ec53601c970256102b44514b89a619f4906765d6186887edb7dcb0b63200d2a35ab7574bd41f5cd9375b34ae791e9525846dc80779537f47f18d0448e44ea34fcaac8b0cdf6d6dec53cbc6f79ab36762d1b4dc020544707e6f583fb00403b0934095d421487f26ee518b2c781174c2cafd96bb4c550691b631f9756c4250565b4a9e972cdcfa8df33553497f182dbad141a76b7c85f6ea5cfb4317c684ad2e6eb952b2158f16a6ad4d92f0bc4806e3e62660d0", 0xd6}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='sys_enter\x00', r4, 0x0, 0x2}, 0x18) sysinfo(&(0x7f0000000280)=""/125) 9m30.846854425s ago: executing program 8 (id=1812): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m30.548225019s ago: executing program 3 (id=1819): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 9m30.275119543s ago: executing program 3 (id=1822): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/9, 0x9}}], 0x1, 0x40000042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mount$9p_fd(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x80000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@ignoreqv}, {@cache_fscache}, {@msize={'msize', 0x3d, 0x9}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000580)="1c8b03bfa1ab7bd712aaf33845a162500ec2e24929def24741e23b275ebae281738564ec53601c970256102b44514b89a619f4906765d6186887edb7dcb0b63200d2a35ab7574bd41f5cd9375b34ae791e9525846dc80779537f47f18d0448e44ea34fcaac8b0cdf6d6dec53cbc6f79ab36762d1b4dc020544707e6f583fb00403b0934095d421487f26ee518b2c781174c2cafd96bb4c550691b631f9756c4250565b4a9e972cdcfa8df33553497f182dbad141a76b7c85f6ea5cfb4317c684ad2e6eb952b2158f16a6ad4d92f0bc4806e3e62660d0", 0xd6}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='sys_enter\x00', r4, 0x0, 0x2}, 0x18) sysinfo(&(0x7f0000000280)=""/125) 9m30.215471354s ago: executing program 3 (id=1823): r0 = socket$kcm(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0xff, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 9m28.791839935s ago: executing program 6 (id=1827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x3a0ffffffff) r3 = socket$kcm(0x11, 0x3, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000380)="adbfbf929713eff2ee04be11438655b2b6d58651b70927a6ed93aad0c66dc5f437023e5116352d603c120bcab69ee6f2904292fa391f6db39f0da0f0640efedde5a53f38697a280dc7ecb9060cca344c5a2ffb29e4a0b3394201b91b9bed1c07610df65b8b4aee1b6e20c7e3cbb5928a3fa3144f0aa8d0710282023a7e662ee83735164706f0dd3c962da3f62269bb4319814edbd0cbc7aa4b5bf7", 0x9b}], 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000600)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57000010", 0x40}, {&(0x7f0000002100)="1fb5beb51368f2dfc240a6e471ddb22805a116bde4c12a05dd756c2175db4de985e8d5", 0x23}, {&(0x7f0000000500)="46f68e91f4012165bf45cc88c3529d93c35e91c30438b6504b7513a33e62cde2b47f65c87edd75cb89627f6bea6b57d382708c1f742f0f", 0x37}, {&(0x7f0000000d80)="9592042a4d57546dcafe4748480c510f82fdf8b7f9605b34c70f0e35ed5e61441788fdcb4a3da9df9d935479cdc8a1c85c5e26f841e8ba9ab315bb07064d862ac73a6e3d48dcf1b87e0ed3f5a59893ca73e4cf43452f55bb66d37179823d5f289eca4245c80ad6eb61d1926401fae3aa2afa12b1c48ba03d97a60981ccd04996cbd1cd5f1cb763ec3c8513164b910f44df73486fdc5d6b988b2b0c68571cd965f204fbf725685bd81bc33027d293704e9007b8638c675343337056e85ab3efc8f40a2951221bc1773d05f61b0f288a785a59f8fa8b1223440944a9", 0xdb}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe3f) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x33, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffd}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @generic={0x8, 0x8, 0x8, 0x1, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x286c}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x1, 0xa, 0xb, 0xb, 0x2, 0xfffffffffffffff0}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0xa, &(0x7f0000000940)=""/10, 0x41000, 0x10, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000980)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0xc, 0x6, 0xe}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000ac0)=[r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x1, 0x4, 0x1, 0x8}, {0x4, 0x5, 0x2, 0x9}, {0x1, 0x4, 0x6, 0x6}, {0x3, 0x1, 0xe, 0x6}, {0x5, 0x4, 0x9}, {0x1, 0x1, 0x10, 0x8}, {0x1, 0x3, 0xb, 0xc}, {0x1, 0x2, 0x0, 0xc}], 0x10, 0x5, @void, @value}, 0x94) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000580), &(0x7f0000000740)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r8, 0xc0305302, &(0x7f0000000300)={0x401, 0xfffffffe, 0x8, 0x1, 0x77800000, 0x6}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x743e, 0x2, 0x4, 0x85, 0x9a8, 0x9}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x9}, 0x20000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000640)={'ah\x00'}, &(0x7f0000000680)=0x1e) setreuid(0x0, 0xee00) 9m28.627381147s ago: executing program 6 (id=1828): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vcsn(&(0x7f0000000380), 0x8, 0x401) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x8010000}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x10, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0x7, 0x0) 9m28.44140694s ago: executing program 6 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000002000000950000009500000000000000bc3f892195195876bd656070fe6cbe9358af966bce924c46469371cc50bfc07b973ae8f947683d21cf4abf66c413b2f9"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3812000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 9m28.034222415s ago: executing program 6 (id=1832): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 9m27.814024609s ago: executing program 6 (id=1833): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/9, 0x9}}], 0x1, 0x40000042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mount$9p_fd(0x0, &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x80000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@ignoreqv}, {@cache_fscache}, {@msize={'msize', 0x3d, 0x9}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) sysinfo(&(0x7f0000000280)=""/125) 9m27.71533949s ago: executing program 6 (id=1834): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) unshare(0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x8d38d77e0a1de048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0xe, 0x1}}, 0x40) r6 = socket$packet(0x11, 0x2, 0x300) close(r6) 9m15.746400722s ago: executing program 38 (id=1812): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m14.729399207s ago: executing program 39 (id=1823): r0 = socket$kcm(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0xff, @loopback, @loopback, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 9m12.41402677s ago: executing program 40 (id=1834): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) unshare(0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070002000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x8d38d77e0a1de048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0xe, 0x1}}, 0x40) r6 = socket$packet(0x11, 0x2, 0x300) close(r6) 8m15.634551007s ago: executing program 0 (id=2862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmctl$IPC_RMID(0x0, 0x0) 8m15.590332847s ago: executing program 0 (id=2863): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value, @void, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20000000040000000200000000000000010200001f5661f6e8fb680bc8bc9608caa9d8f089e79e9846c63e0f0098339468234bf5b6ea94a73a016c290d9d429281204ba421a19f7e706438d2800887a6000927d468882f17c852", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x6, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 8m14.487299883s ago: executing program 0 (id=2872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x81e00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 8m14.425313994s ago: executing program 0 (id=2874): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd7000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 8m14.166656507s ago: executing program 0 (id=2880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000600)=0x0) timer_gettime(r3, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf251a000000400022803c00008008000200ff000000080002000004000008000700040000000800070006000000080003000800000008000300fcffff7f080007000900000007002100616100000800010052000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000842}, 0x44000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x200, 0x0) vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000140)="89a25031b0f94f2cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f32a856cc68dfe41ae7eaf23ba91d8cb1bb99cae9c9001dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc999be55753de3ae1ace2f313cba0dfb0e71a05026668601c2090a27bba39468ed10b5bf93924d2be58fa992211d0a9017b8d930804a67b48544373cf957fc5ad96dd279dab54661e4ed14fa483bce200a94ab1a6012b47", 0xc8}, {&(0x7f0000002c40)="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", 0x139}], 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x1, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) 8m13.927671381s ago: executing program 0 (id=2885): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@get={0x1, 0x0, 0x8001}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = timerfd_create(0x0, 0x800) timerfd_settime(r7, 0x3, &(0x7f0000000080), 0x0) 8m13.838293772s ago: executing program 41 (id=2885): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000180)=@get={0x1, 0x0, 0x8001}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = timerfd_create(0x0, 0x800) timerfd_settime(r7, 0x3, &(0x7f0000000080), 0x0) 5m54.022953602s ago: executing program 9 (id=5603): syz_emit_ethernet(0x46, &(0x7f00000003c0)={@random='C7xo;V', @local, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "4bab6b", 0x10, 0x0, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0xf1}, {[@hopopts={0xd7, 0x0, '\x00', [@generic={0x9}]}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socket(0x1e, 0x800, 0xfff) write$binfmt_script(r0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2b10", 0x2}, {&(0x7f0000000280)="72e2ae23477c2be04da85170282c8baca4adffbff2e3df09babfbfc7621650618dbc3daeb76bbf1db734cccdfb0636d1eef07f77df4788a4c0d9d34f569dc3bd7197bd89ed0a71c20cd14cde9b78259d8e36797ba8f223f877809e9c47333fbb37be6c996149dd23d4f40e9d2864f683823ade75f2b7cf2cfafa5f89b9f846193de35c849f11b7d19e5409bb84bf1bd5a3fca3ae85bc31c2471868aca3d5f7621fc7f8c57c04e09b9d6d8eb453e35b63443e", 0xb2}], 0x2, 0x0, 0x0, 0x2c}, 0x4000000) 5m53.978851472s ago: executing program 9 (id=5605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000002000000950000009500000000000000bc3f892195195876bd656070fe6cbe9358af966bce924c46469371cc50bfc07b973ae8f947683d21cf4abf66c413b2"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3812000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 5m53.699116716s ago: executing program 9 (id=5609): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000a00)={0x380, 0x10, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x4000084) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x20005) ioctl$SG_IO(r2, 0x2285, 0x0) prctl$PR_SET_NAME(0xf, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 5m53.606675878s ago: executing program 9 (id=5610): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 5m53.509567219s ago: executing program 9 (id=5612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd22, 0x25dfdc01, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x34}}, 0x24040804) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x553a8462f60e4382, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="a906544ffc5692181c038db467561e8309809667f13a6e884f3127fc31eb288600a601ffeb903e5ec7b00cb89afa4c0c12256a744ec7eb21a8e5b6f6327804276ecbbdc642a3601c5bb0048ede23ac0201bd"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0xff000000, 0x80, 0xc22, r6, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='syzkaller\x00', &(0x7f00000000c0)="6769f4f8c91f697778c771673747ab24c03b671409b6f690da59ccf4b4ce0a977691431dc20cb0d415a26a15d3bb837dae78ae6de8ab66530096c2abd09d6d77e03029908f3fa3107dadfd66d8031e4121166c48339036dfa9e1710cfdc342787790f3d110151549c0b4c68ac69b3d4575dfecfd55d1175b6e1d88a6b78ebec64dc8e52686662f8a2c72dd99c4efed2e1866a78400640c6a39983ea5c07fc0f536c1452e29847dfb5efd34928b7e7f81494a123526036894fae58120bcce0c2672c3234e4f0a01666d64a37b321132", 0xcf) getpgrp(0x0) 5m53.43733019s ago: executing program 9 (id=5614): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f0000000c00)=[{&(0x7f0000000b00)="8c", 0x1}], 0x1, 0xe7b, 0x8000000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x800004}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x7, 0x1}, {0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) pivot_root(&(0x7f0000000e00)='./file1\x00', 0x0) 5m53.402827961s ago: executing program 42 (id=5614): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f0000000c00)=[{&(0x7f0000000b00)="8c", 0x1}], 0x1, 0xe7b, 0x8000000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000bc0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x800004}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x7, 0x1}, {0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6, 0xfe}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) pivot_root(&(0x7f0000000e00)='./file1\x00', 0x0) 3.085261305s ago: executing program 5 (id=11147): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@nolazytime}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.065946646s ago: executing program 5 (id=11149): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) 2.920181188s ago: executing program 5 (id=11153): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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") setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) 2.05107048s ago: executing program 5 (id=11174): epoll_create1(0x80000) lchown(0x0, 0x0, 0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x80) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000240)=0x14) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.143969144s ago: executing program 7 (id=11180): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x4c}}, 0x0) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.090387424s ago: executing program 5 (id=11184): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) keyctl$dh_compute(0x17, 0x0, &(0x7f0000001cc0)=""/199, 0xc7, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f4, 0x0, 0x0, 0x0, 0x0) 913.149036ms ago: executing program 1 (id=11185): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000640)=0x1) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0) 822.500648ms ago: executing program 2 (id=11187): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0xfffd, 0x0, {0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 801.048119ms ago: executing program 2 (id=11188): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='mm_page_pcpu_drain\x00', 0xffffffffffffffff, 0x0, 0xb82}, 0x18) socket$netlink(0x10, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x2, 0x10, 0x7, 0x6}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)={r8, 0x7601, 0x73, "1f9537f992b1b735b5cfdcdbcd633bd7cf83560760aaa56057f3446b00d5d36a9cdf6987c51f343eff4282970b9c90ec7a4b9651e69db2b9522230f2e6311f136246fd5ca02e0cecb220e1de8e1a51a3a4debee0efeab08ac691ec032edc79f118fce5aa5a239ef7d0eae723433bc2b8940787"}, 0x7b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 769.531319ms ago: executing program 5 (id=11189): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$evdev(&(0x7f0000000340), 0x3, 0x185002) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) close(0xffffffffffffffff) 718.957069ms ago: executing program 2 (id=11191): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="184a", 0x2}], 0x1}}], 0x1, 0x110) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x0, 0x1}, &(0x7f0000000080)=0xc) 641.181411ms ago: executing program 2 (id=11192): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 556.314232ms ago: executing program 2 (id=11193): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 464.996583ms ago: executing program 4 (id=11194): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000002580), &(0x7f00000025c0)=0x8) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x8, 0x0, 0xe38, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x9}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x26041004}, 0x80) listen(r1, 0x2) socket$inet6(0xa, 0x1, 0xfffffffa) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4, 0x0, 0x101, 0x8}}) 464.124823ms ago: executing program 2 (id=11195): creat(&(0x7f0000000040)='./file0\x00', 0x81) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x4c}}, 0x0) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 399.547734ms ago: executing program 1 (id=11196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xb, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) ftruncate(r1, 0x101) 399.039974ms ago: executing program 4 (id=11197): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) close(0x4) 398.499174ms ago: executing program 1 (id=11198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000002000000950000009500000000000000bc3f892195195876bd656070fe6cbe9358af966bce924c46469371cc50bfc07b973ae8f947683d21cf4abf66c413b2f9"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3812000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 303.364236ms ago: executing program 4 (id=11199): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0xfffd, 0x0, {0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 301.985555ms ago: executing program 1 (id=11200): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$evdev(&(0x7f0000000340), 0x3, 0x185002) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) close(0xffffffffffffffff) 284.430936ms ago: executing program 7 (id=11201): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[], 0x50) 268.469896ms ago: executing program 4 (id=11202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) close(0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) 237.168967ms ago: executing program 1 (id=11203): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000009f0b0000000800000500000000440400ec195ad91c031fd37ef3e7984727f056b0347adbe74df469f9100bc396a0d216948187a75af72217c3929995cbef34aee2f1437bb513e2e58f9ea3e788ec8e6e2a0b12f9f560c06b9448003a3552b614238cd23b", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002008000028000000900"/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e120800", 0x2a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) fdatasync(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') flistxattr(0xffffffffffffffff, &(0x7f0000001140)=""/24, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000825c00"], 0x164}, 0x1, 0x0, 0x0, 0x4803}, 0x4000) 181.748837ms ago: executing program 7 (id=11204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fallocate(0xffffffffffffffff, 0x0, 0xfffffff, 0x1000f4) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x3, 0xffffffff, 0x4248, 0x7, 0x6, 0x6, 0xfcf, 0xdd23, 0xff}}, 0x43) 181.202487ms ago: executing program 7 (id=11205): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000200)) flock(0xffffffffffffffff, 0x5) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 133.529728ms ago: executing program 4 (id=11206): bpf$BPF_PROG_TEST_RUN(0x21, 0x0, 0x0) 118.122118ms ago: executing program 1 (id=11207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"}) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000480)) 55.187029ms ago: executing program 4 (id=11208): creat(&(0x7f0000000040)='./file0\x00', 0x81) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x4c}}, 0x0) r6 = gettid() r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 20.18914ms ago: executing program 7 (id=11209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xb, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) ftruncate(r1, 0x101) 0s ago: executing program 7 (id=11210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000002000000950000009500000000000000bc3f892195195876bd656070fe6cbe9358af966bce924c46469371cc50bfc07b973ae8f947683d21cf4abf66c413b2f9"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, 0x0, 0x20000010) kernel console output (not intermixed with test programs): entered allmulticast mode [ 707.898310][T31912] 8021q: adding VLAN 0 to HW filter on device bond16 [ 708.032471][T31912] bond16 (unregistering): Released all slaves [ 708.555502][T31933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9850'. [ 708.682765][T31937] xt_TPROXY: Can be used only with -p tcp or -p udp [ 708.775764][T31939] block device autoloading is deprecated and will be removed. [ 708.818997][T31937] wireguard3: entered promiscuous mode [ 708.852136][T31947] siw: device registration error -23 [ 708.895881][T31952] 9pnet_fd: Insufficient options for proto=fd [ 708.911356][T31952] proc: Unknown parameter 'ÿÿÿÿÿÿÿÿ´0²£ùÃ' [ 708.983178][T31958] netlink: 'syz.5.9859': attribute type 13 has an invalid length. [ 708.992216][T31960] 9pnet_fd: Insufficient options for proto=fd [ 709.065198][T31958] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.072882][T31958] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.094489][T31968] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 709.111134][T31963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9858'. [ 709.176321][T31958] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.186419][T31958] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.195547][T31958] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.204653][T31958] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.203363][T32000] netlink: 'syz.1.9873': attribute type 2 has an invalid length. [ 710.211451][T32000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9873'. [ 710.497728][T32003] 9pnet_fd: Insufficient options for proto=fd [ 710.556657][T32005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9875'. [ 710.592345][T32007] siw: device registration error -23 [ 710.806196][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 710.806217][ T29] audit: type=1326 audit(1749468448.023:76080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 710.858009][ T29] audit: type=1326 audit(1749468448.023:76081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 710.881838][ T29] audit: type=1326 audit(1749468448.063:76082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 710.906169][ T29] audit: type=1326 audit(1749468448.063:76083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 710.930040][ T29] audit: type=1326 audit(1749468448.063:76084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 710.954702][ T29] audit: type=1326 audit(1749468448.063:76085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 710.964601][T32027] FAULT_INJECTION: forcing a failure. [ 710.964601][T32027] name failslab, interval 1, probability 0, space 0, times 0 [ 710.979149][ T29] audit: type=1326 audit(1749468448.063:76086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 710.992466][T32027] CPU: 1 UID: 0 PID: 32027 Comm: syz.5.9886 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 710.992542][T32027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.992562][T32027] Call Trace: [ 710.992574][T32027] [ 710.992587][T32027] __dump_stack+0x1d/0x30 [ 710.992619][T32027] dump_stack_lvl+0xe8/0x140 [ 710.992655][T32027] dump_stack+0x15/0x1b [ 710.992761][T32027] should_fail_ex+0x265/0x280 [ 710.992812][T32027] should_failslab+0x8c/0xb0 [ 710.992847][T32027] kmem_cache_alloc_node_noprof+0x57/0x320 [ 710.992937][T32027] ? __alloc_skb+0x101/0x320 [ 710.992987][T32027] __alloc_skb+0x101/0x320 [ 710.993150][T32027] netlink_alloc_large_skb+0xba/0xf0 [ 710.993201][T32027] netlink_sendmsg+0x3cf/0x6b0 [ 710.993237][T32027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.993337][T32027] __sock_sendmsg+0x142/0x180 [ 710.993438][T32027] ____sys_sendmsg+0x31e/0x4e0 [ 710.993472][T32027] ___sys_sendmsg+0x17b/0x1d0 [ 710.993523][T32027] __x64_sys_sendmsg+0xd4/0x160 [ 710.993573][T32027] x64_sys_call+0x2999/0x2fb0 [ 710.993605][T32027] do_syscall_64+0xd2/0x200 [ 710.993670][T32027] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 710.993721][T32027] ? clear_bhb_loop+0x40/0x90 [ 710.993753][T32027] ? clear_bhb_loop+0x40/0x90 [ 710.993784][T32027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.993836][T32027] RIP: 0033:0x7f652edae929 [ 710.993861][T32027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.993886][T32027] RSP: 002b:00007f652d417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.993914][T32027] RAX: ffffffffffffffda RBX: 00007f652efd5fa0 RCX: 00007f652edae929 [ 710.993931][T32027] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 710.993995][T32027] RBP: 00007f652d417090 R08: 0000000000000000 R09: 0000000000000000 [ 710.994012][T32027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.994027][T32027] R13: 0000000000000000 R14: 00007f652efd5fa0 R15: 00007fff66624688 [ 710.994102][T32027] [ 711.028175][T32029] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 711.037772][ T29] audit: type=1326 audit(1749468448.063:76087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 711.262124][ T29] audit: type=1326 audit(1749468448.063:76088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="syz.7.9882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 711.286345][ T29] audit: type=1326 audit(1749468448.063:76089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32020 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 711.610769][T32046] FAULT_INJECTION: forcing a failure. [ 711.610769][T32046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.624307][T32046] CPU: 1 UID: 0 PID: 32046 Comm: syz.1.9890 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 711.624338][T32046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.624422][T32046] Call Trace: [ 711.624432][T32046] [ 711.624522][T32046] __dump_stack+0x1d/0x30 [ 711.624546][T32046] dump_stack_lvl+0xe8/0x140 [ 711.624566][T32046] dump_stack+0x15/0x1b [ 711.624595][T32046] should_fail_ex+0x265/0x280 [ 711.624639][T32046] should_fail+0xb/0x20 [ 711.624686][T32046] should_fail_usercopy+0x1a/0x20 [ 711.624751][T32046] _copy_from_user+0x1c/0xb0 [ 711.624779][T32046] __copy_msghdr+0x244/0x300 [ 711.624810][T32046] ___sys_sendmsg+0x109/0x1d0 [ 711.624856][T32046] __sys_sendmmsg+0x178/0x300 [ 711.624963][T32046] __x64_sys_sendmmsg+0x57/0x70 [ 711.624992][T32046] x64_sys_call+0x2f2f/0x2fb0 [ 711.625071][T32046] do_syscall_64+0xd2/0x200 [ 711.625094][T32046] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 711.625130][T32046] ? clear_bhb_loop+0x40/0x90 [ 711.625166][T32046] ? clear_bhb_loop+0x40/0x90 [ 711.625194][T32046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.625285][T32046] RIP: 0033:0x7f745212e929 [ 711.625304][T32046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.625354][T32046] RSP: 002b:00007f7450797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 711.625379][T32046] RAX: ffffffffffffffda RBX: 00007f7452355fa0 RCX: 00007f745212e929 [ 711.625397][T32046] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000006 [ 711.625495][T32046] RBP: 00007f7450797090 R08: 0000000000000000 R09: 0000000000000000 [ 711.625512][T32046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.625529][T32046] R13: 0000000000000000 R14: 00007f7452355fa0 R15: 00007fff144af6e8 [ 711.625555][T32046] [ 712.932583][T32068] FAULT_INJECTION: forcing a failure. [ 712.932583][T32068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.946387][T32068] CPU: 1 UID: 0 PID: 32068 Comm: syz.4.9896 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 712.946418][T32068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.946432][T32068] Call Trace: [ 712.946442][T32068] [ 712.946464][T32068] __dump_stack+0x1d/0x30 [ 712.946548][T32068] dump_stack_lvl+0xe8/0x140 [ 712.946572][T32068] dump_stack+0x15/0x1b [ 712.946666][T32068] should_fail_ex+0x265/0x280 [ 712.946713][T32068] should_fail+0xb/0x20 [ 712.946821][T32068] should_fail_usercopy+0x1a/0x20 [ 712.946848][T32068] _copy_from_user+0x1c/0xb0 [ 712.946880][T32068] __copy_msghdr+0x244/0x300 [ 712.946904][T32068] ___sys_sendmsg+0x109/0x1d0 [ 712.946976][T32068] __sys_sendmmsg+0x178/0x300 [ 712.947079][T32068] __x64_sys_sendmmsg+0x57/0x70 [ 712.947109][T32068] x64_sys_call+0x2f2f/0x2fb0 [ 712.947208][T32068] do_syscall_64+0xd2/0x200 [ 712.947296][T32068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 712.947331][T32068] ? clear_bhb_loop+0x40/0x90 [ 712.947395][T32068] ? clear_bhb_loop+0x40/0x90 [ 712.947421][T32068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.947516][T32068] RIP: 0033:0x7f885385e929 [ 712.947533][T32068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.947552][T32068] RSP: 002b:00007f8851ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 712.947573][T32068] RAX: ffffffffffffffda RBX: 00007f8853a85fa0 RCX: 00007f885385e929 [ 712.947586][T32068] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000006 [ 712.947599][T32068] RBP: 00007f8851ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 712.947677][T32068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.947693][T32068] R13: 0000000000000000 R14: 00007f8853a85fa0 R15: 00007ffee4ab1a28 [ 712.947716][T32068] [ 713.171746][T32070] block device autoloading is deprecated and will be removed. [ 713.239169][T32072] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 713.239169][T32072] program GPL not setting count and/or reply_len properly [ 713.240136][T32082] __nla_validate_parse: 3 callbacks suppressed [ 713.240196][T32082] netlink: 88 bytes leftover after parsing attributes in process `syz.7.9903'. [ 713.318388][T32085] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 713.332710][T32087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 713.360636][T32091] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 713.397534][T32087] wireguard1: entered promiscuous mode [ 713.505250][T32100] FAULT_INJECTION: forcing a failure. [ 713.505250][T32100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.519072][T32100] CPU: 0 UID: 0 PID: 32100 Comm: syz.4.9909 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 713.519161][T32100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.519178][T32100] Call Trace: [ 713.519188][T32100] [ 713.519198][T32100] __dump_stack+0x1d/0x30 [ 713.519226][T32100] dump_stack_lvl+0xe8/0x140 [ 713.519253][T32100] dump_stack+0x15/0x1b [ 713.519269][T32100] should_fail_ex+0x265/0x280 [ 713.519400][T32100] should_fail+0xb/0x20 [ 713.519442][T32100] should_fail_usercopy+0x1a/0x20 [ 713.519470][T32100] _copy_from_iter+0xcf/0xe40 [ 713.519501][T32100] ? alloc_pages_mpol+0x201/0x250 [ 713.519712][T32100] copy_page_from_iter+0x178/0x2a0 [ 713.519801][T32100] tun_get_user+0x5f0/0x2500 [ 713.519849][T32100] ? ref_tracker_alloc+0x1f2/0x2f0 [ 713.519900][T32100] tun_chr_write_iter+0x15e/0x210 [ 713.519987][T32100] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 713.520046][T32100] vfs_write+0x49d/0x8e0 [ 713.520079][T32100] ksys_write+0xda/0x1a0 [ 713.520114][T32100] __x64_sys_write+0x40/0x50 [ 713.520140][T32100] x64_sys_call+0x2cdd/0x2fb0 [ 713.520167][T32100] do_syscall_64+0xd2/0x200 [ 713.520194][T32100] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 713.520273][T32100] ? clear_bhb_loop+0x40/0x90 [ 713.520300][T32100] ? clear_bhb_loop+0x40/0x90 [ 713.520330][T32100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.520358][T32100] RIP: 0033:0x7f885385d3df [ 713.520416][T32100] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 713.520441][T32100] RSP: 002b:00007f8851ec7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 713.520466][T32100] RAX: ffffffffffffffda RBX: 00007f8853a85fa0 RCX: 00007f885385d3df [ 713.520482][T32100] RDX: 000000000000004a RSI: 00002000000004c0 RDI: 00000000000000c8 [ 713.520498][T32100] RBP: 00007f8851ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 713.520527][T32100] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 713.520543][T32100] R13: 0000000000000001 R14: 00007f8853a85fa0 R15: 00007ffee4ab1a28 [ 713.520568][T32100] [ 713.758099][T32102] FAULT_INJECTION: forcing a failure. [ 713.758099][T32102] name failslab, interval 1, probability 0, space 0, times 0 [ 713.771151][T32102] CPU: 1 UID: 0 PID: 32102 Comm: syz.7.9910 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 713.771180][T32102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.771194][T32102] Call Trace: [ 713.771202][T32102] [ 713.771233][T32102] __dump_stack+0x1d/0x30 [ 713.771262][T32102] dump_stack_lvl+0xe8/0x140 [ 713.771288][T32102] dump_stack+0x15/0x1b [ 713.771306][T32102] should_fail_ex+0x265/0x280 [ 713.771395][T32102] should_failslab+0x8c/0xb0 [ 713.771437][T32102] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 713.771484][T32102] ? __d_alloc+0x3d/0x350 [ 713.771520][T32102] __d_alloc+0x3d/0x350 [ 713.771615][T32102] d_alloc_parallel+0x53/0xc40 [ 713.771693][T32102] ? selinux_inode_permission+0x532/0x620 [ 713.771732][T32102] ? make_vfsuid+0x49/0xa0 [ 713.771765][T32102] ? lockref_get_not_dead+0x120/0x1c0 [ 713.771800][T32102] ? __rcu_read_unlock+0x4f/0x70 [ 713.771836][T32102] __lookup_slow+0x8c/0x250 [ 713.771877][T32102] lookup_slow+0x3c/0x60 [ 713.771961][T32102] walk_component+0x1ec/0x220 [ 713.771995][T32102] path_lookupat+0xfe/0x2a0 [ 713.772050][T32102] filename_lookup+0x147/0x340 [ 713.772098][T32102] user_path_at+0x3e/0x130 [ 713.772135][T32102] __se_sys_pivot_root+0xbc/0x720 [ 713.772201][T32102] ? fput+0x8f/0xc0 [ 713.772240][T32102] __x64_sys_pivot_root+0x31/0x40 [ 713.772328][T32102] x64_sys_call+0x2aac/0x2fb0 [ 713.772356][T32102] do_syscall_64+0xd2/0x200 [ 713.772381][T32102] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 713.772488][T32102] ? clear_bhb_loop+0x40/0x90 [ 713.772516][T32102] ? clear_bhb_loop+0x40/0x90 [ 713.772554][T32102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.772590][T32102] RIP: 0033:0x7f01d469e929 [ 713.772610][T32102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.772636][T32102] RSP: 002b:00007f01d2d07038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 713.772684][T32102] RAX: ffffffffffffffda RBX: 00007f01d48c5fa0 RCX: 00007f01d469e929 [ 713.772702][T32102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 713.772769][T32102] RBP: 00007f01d2d07090 R08: 0000000000000000 R09: 0000000000000000 [ 713.772783][T32102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.772849][T32102] R13: 0000000000000000 R14: 00007f01d48c5fa0 R15: 00007ffca11f6a68 [ 713.772876][T32102] [ 714.098017][T32108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9913'. [ 714.107158][T32108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9913'. [ 714.119509][T32108] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 714.128464][T32108] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 714.297850][T32121] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 714.364689][T32120] FAULT_INJECTION: forcing a failure. [ 714.364689][T32120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.378061][T32120] CPU: 1 UID: 0 PID: 32120 Comm: syz.5.9916 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 714.378096][T32120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.378112][T32120] Call Trace: [ 714.378140][T32120] [ 714.378151][T32120] __dump_stack+0x1d/0x30 [ 714.378215][T32120] dump_stack_lvl+0xe8/0x140 [ 714.378235][T32120] dump_stack+0x15/0x1b [ 714.378252][T32120] should_fail_ex+0x265/0x280 [ 714.378298][T32120] should_fail+0xb/0x20 [ 714.378387][T32120] should_fail_usercopy+0x1a/0x20 [ 714.378416][T32120] _copy_from_user+0x1c/0xb0 [ 714.378469][T32120] ___sys_sendmsg+0xc1/0x1d0 [ 714.378591][T32120] __x64_sys_sendmsg+0xd4/0x160 [ 714.378627][T32120] x64_sys_call+0x2999/0x2fb0 [ 714.378656][T32120] do_syscall_64+0xd2/0x200 [ 714.378684][T32120] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 714.378782][T32120] ? clear_bhb_loop+0x40/0x90 [ 714.378804][T32120] ? clear_bhb_loop+0x40/0x90 [ 714.378830][T32120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.378851][T32120] RIP: 0033:0x7f652edae929 [ 714.378890][T32120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.378912][T32120] RSP: 002b:00007f652d3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.378996][T32120] RAX: ffffffffffffffda RBX: 00007f652efd6080 RCX: 00007f652edae929 [ 714.379008][T32120] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 714.379022][T32120] RBP: 00007f652d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 714.379039][T32120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.379062][T32120] R13: 0000000000000000 R14: 00007f652efd6080 R15: 00007fff66624688 [ 714.379089][T32120] [ 714.666884][T32150] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 715.105314][T32160] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 715.409893][T32179] infiniband syz!: set active [ 715.415336][T32179] infiniband syz!: added team_slave_0 [ 715.427088][T32179] RDS/IB: syz!: added [ 715.431227][T32179] smc: adding ib device syz! with port count 1 [ 715.438365][T32179] smc: ib device syz! port 1 has pnetid [ 715.696766][T32191] netlink: 'syz.7.9944': attribute type 1 has an invalid length. [ 715.722590][T32191] 8021q: adding VLAN 0 to HW filter on device bond15 [ 715.739835][T32196] netlink: 'syz.2.9945': attribute type 13 has an invalid length. [ 715.803600][T32200] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 715.814291][ T29] kauditd_printk_skb: 1533 callbacks suppressed [ 715.814313][ T29] audit: type=1326 audit(1749468453.033:77623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.5.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652eda58e7 code=0x7ffc0000 [ 715.844836][ T29] audit: type=1326 audit(1749468453.033:77624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.5.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f652ed4ab19 code=0x7ffc0000 [ 715.869175][ T29] audit: type=1326 audit(1749468453.033:77625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.5.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 715.896140][T32206] FAULT_INJECTION: forcing a failure. [ 715.896140][T32206] name failslab, interval 1, probability 0, space 0, times 0 [ 715.909262][T32206] CPU: 1 UID: 0 PID: 32206 Comm: syz.7.9947 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 715.909383][T32206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.909402][T32206] Call Trace: [ 715.909413][T32206] [ 715.909425][T32206] __dump_stack+0x1d/0x30 [ 715.909457][T32206] dump_stack_lvl+0xe8/0x140 [ 715.909487][T32206] dump_stack+0x15/0x1b [ 715.909591][T32206] should_fail_ex+0x265/0x280 [ 715.909638][T32206] ? audit_log_d_path+0x8d/0x150 [ 715.909681][T32206] should_failslab+0x8c/0xb0 [ 715.909713][T32206] __kmalloc_cache_noprof+0x4c/0x320 [ 715.909805][T32206] audit_log_d_path+0x8d/0x150 [ 715.909849][T32206] audit_log_d_path_exe+0x42/0x70 [ 715.909893][T32206] audit_log_task+0x1e9/0x250 [ 715.910008][T32206] audit_seccomp+0x61/0x100 [ 715.910043][T32206] ? __seccomp_filter+0x68c/0x10d0 [ 715.910075][T32206] __seccomp_filter+0x69d/0x10d0 [ 715.910172][T32206] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 715.910274][T32206] ? vfs_write+0x75e/0x8e0 [ 715.910297][T32206] ? __rcu_read_unlock+0x4f/0x70 [ 715.910324][T32206] ? __fget_files+0x184/0x1c0 [ 715.910356][T32206] __secure_computing+0x82/0x150 [ 715.910386][T32206] syscall_trace_enter+0xcf/0x1e0 [ 715.910428][T32206] do_syscall_64+0xac/0x200 [ 715.910535][T32206] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 715.910575][T32206] ? clear_bhb_loop+0x40/0x90 [ 715.910604][T32206] ? clear_bhb_loop+0x40/0x90 [ 715.910633][T32206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.910688][T32206] RIP: 0033:0x7f01d469e929 [ 715.910710][T32206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.910738][T32206] RSP: 002b:00007f01d2d07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 715.910818][T32206] RAX: ffffffffffffffda RBX: 00007f01d48c5fa0 RCX: 00007f01d469e929 [ 715.910835][T32206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 715.910851][T32206] RBP: 00007f01d2d07090 R08: 0000000000000000 R09: 0000000000000000 [ 715.910867][T32206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.910883][T32206] R13: 0000000000000000 R14: 00007f01d48c5fa0 R15: 00007ffca11f6a68 [ 715.910938][T32206] [ 716.148933][ T29] audit: type=1326 audit(1749468453.063:77626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32199 comm="syz.7.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 716.172989][ T29] audit: type=1326 audit(1749468453.063:77627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32199 comm="syz.7.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 716.197236][ T29] audit: type=1326 audit(1749468453.063:77628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.5.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652eda58e7 code=0x7ffc0000 [ 716.221127][ T29] audit: type=1326 audit(1749468453.063:77629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.5.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f652ed4ab19 code=0x7ffc0000 [ 716.245298][ T29] audit: type=1326 audit(1749468453.063:77630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32157 comm="syz.5.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 716.269467][ T29] audit: type=1326 audit(1749468453.073:77631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32199 comm="syz.7.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 716.294030][ T29] audit: type=1326 audit(1749468453.073:77632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32199 comm="syz.7.9947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 716.375296][T32196] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.382594][T32196] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.429962][T32216] siw: device registration error -23 [ 716.439738][T32225] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9949'. [ 716.555431][T32196] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.564096][T32196] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.572737][T32196] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.581998][T32196] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.763441][T32262] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 716.773733][T32264] netlink: 'syz.2.9959': attribute type 1 has an invalid length. [ 716.791297][T32264] 8021q: adding VLAN 0 to HW filter on device bond13 [ 716.845846][T32274] FAULT_INJECTION: forcing a failure. [ 716.845846][T32274] name failslab, interval 1, probability 0, space 0, times 0 [ 716.858629][T32274] CPU: 0 UID: 0 PID: 32274 Comm: syz.7.9964 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 716.858671][T32274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.858689][T32274] Call Trace: [ 716.858699][T32274] [ 716.858710][T32274] __dump_stack+0x1d/0x30 [ 716.858741][T32274] dump_stack_lvl+0xe8/0x140 [ 716.858820][T32274] dump_stack+0x15/0x1b [ 716.858844][T32274] should_fail_ex+0x265/0x280 [ 716.858895][T32274] ? ipv6_add_addr+0x389/0x830 [ 716.858943][T32274] should_failslab+0x8c/0xb0 [ 716.859048][T32274] __kmalloc_cache_noprof+0x4c/0x320 [ 716.859092][T32274] ipv6_add_addr+0x389/0x830 [ 716.859141][T32274] inet6_addr_add+0x26e/0x6a0 [ 716.859169][T32274] ? selinux_capable+0x1f9/0x270 [ 716.859280][T32274] ? should_fail_ex+0xdb/0x280 [ 716.859334][T32274] addrconf_add_ifaddr+0x1ab/0x270 [ 716.859387][T32274] inet6_ioctl+0xb0/0x190 [ 716.859416][T32274] ? ioctl_has_perm+0x257/0x2a0 [ 716.859454][T32274] sock_do_ioctl+0x70/0x220 [ 716.859494][T32274] sock_ioctl+0x41b/0x610 [ 716.859570][T32274] ? __pfx_sock_ioctl+0x10/0x10 [ 716.859603][T32274] __se_sys_ioctl+0xce/0x140 [ 716.859646][T32274] __x64_sys_ioctl+0x43/0x50 [ 716.859718][T32274] x64_sys_call+0x19a8/0x2fb0 [ 716.859748][T32274] do_syscall_64+0xd2/0x200 [ 716.859798][T32274] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 716.859834][T32274] ? clear_bhb_loop+0x40/0x90 [ 716.859863][T32274] ? clear_bhb_loop+0x40/0x90 [ 716.859937][T32274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.859966][T32274] RIP: 0033:0x7f01d469e929 [ 716.859986][T32274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.860016][T32274] RSP: 002b:00007f01d2d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.860098][T32274] RAX: ffffffffffffffda RBX: 00007f01d48c5fa0 RCX: 00007f01d469e929 [ 716.860118][T32274] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000006 [ 716.860136][T32274] RBP: 00007f01d2d07090 R08: 0000000000000000 R09: 0000000000000000 [ 716.860154][T32274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.860171][T32274] R13: 0000000000000000 R14: 00007f01d48c5fa0 R15: 00007ffca11f6a68 [ 716.860198][T32274] [ 717.092480][T32278] siw: device registration error -23 [ 717.109886][T32276] wireguard3: entered promiscuous mode [ 717.295580][T32301] FAULT_INJECTION: forcing a failure. [ 717.295580][T32301] name failslab, interval 1, probability 0, space 0, times 0 [ 717.308642][T32301] CPU: 1 UID: 0 PID: 32301 Comm: syz.1.9975 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 717.308677][T32301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 717.308695][T32301] Call Trace: [ 717.308702][T32301] [ 717.308711][T32301] __dump_stack+0x1d/0x30 [ 717.308733][T32301] dump_stack_lvl+0xe8/0x140 [ 717.308752][T32301] dump_stack+0x15/0x1b [ 717.308783][T32301] should_fail_ex+0x265/0x280 [ 717.308885][T32301] should_failslab+0x8c/0xb0 [ 717.308909][T32301] kmem_cache_alloc_noprof+0x50/0x310 [ 717.308936][T32301] ? prepare_creds+0x37/0x4c0 [ 717.308987][T32301] prepare_creds+0x37/0x4c0 [ 717.309009][T32301] __sys_setgid+0x6a/0x1d0 [ 717.309096][T32301] __x64_sys_setgid+0x1e/0x30 [ 717.309134][T32301] x64_sys_call+0xeaf/0x2fb0 [ 717.309184][T32301] do_syscall_64+0xd2/0x200 [ 717.309212][T32301] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 717.309247][T32301] ? clear_bhb_loop+0x40/0x90 [ 717.309344][T32301] ? clear_bhb_loop+0x40/0x90 [ 717.309404][T32301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.309427][T32301] RIP: 0033:0x7f745212e929 [ 717.309442][T32301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.309463][T32301] RSP: 002b:00007f7450797038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 717.309482][T32301] RAX: ffffffffffffffda RBX: 00007f7452355fa0 RCX: 00007f745212e929 [ 717.309530][T32301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.309548][T32301] RBP: 00007f7450797090 R08: 0000000000000000 R09: 0000000000000000 [ 717.309656][T32301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.309675][T32301] R13: 0000000000000000 R14: 00007f7452355fa0 R15: 00007fff144af6e8 [ 717.309702][T32301] [ 717.499656][T32304] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 717.524859][T32309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9977'. [ 717.534310][T32309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9977'. [ 717.547131][T32309] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 717.556067][T32309] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 718.126090][T32320] wireguard2: entered promiscuous mode [ 718.710494][T32329] 9pnet_fd: Insufficient options for proto=fd [ 718.831661][T32333] __nla_validate_parse: 2 callbacks suppressed [ 718.831735][T32333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9982'. [ 719.043354][T32348] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 719.079524][T32350] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 719.197890][T32355] netlink: 'syz.7.9991': attribute type 13 has an invalid length. [ 719.304415][T32355] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.311862][T32355] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.405354][T32355] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.414501][T32355] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.423702][T32355] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.432939][T32355] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.591538][T32365] FAULT_INJECTION: forcing a failure. [ 719.591538][T32365] name failslab, interval 1, probability 0, space 0, times 0 [ 719.604645][T32365] CPU: 1 UID: 0 PID: 32365 Comm: syz.2.9994 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 719.604717][T32365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 719.604759][T32365] Call Trace: [ 719.604768][T32365] [ 719.604778][T32365] __dump_stack+0x1d/0x30 [ 719.604805][T32365] dump_stack_lvl+0xe8/0x140 [ 719.604903][T32365] dump_stack+0x15/0x1b [ 719.604926][T32365] should_fail_ex+0x265/0x280 [ 719.605020][T32365] should_failslab+0x8c/0xb0 [ 719.605051][T32365] kmem_cache_alloc_noprof+0x50/0x310 [ 719.605168][T32365] ? getname_flags+0x80/0x3b0 [ 719.605227][T32365] getname_flags+0x80/0x3b0 [ 719.605255][T32365] user_path_at+0x28/0x130 [ 719.605349][T32365] do_fchownat+0xb0/0x210 [ 719.605402][T32365] __x64_sys_chown+0x47/0x60 [ 719.605508][T32365] x64_sys_call+0x800/0x2fb0 [ 719.605538][T32365] do_syscall_64+0xd2/0x200 [ 719.605567][T32365] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 719.605595][T32365] ? clear_bhb_loop+0x40/0x90 [ 719.605651][T32365] ? clear_bhb_loop+0x40/0x90 [ 719.605677][T32365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.605712][T32365] RIP: 0033:0x7fa4e90ee929 [ 719.605734][T32365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.605758][T32365] RSP: 002b:00007fa4e7757038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 719.605783][T32365] RAX: ffffffffffffffda RBX: 00007fa4e9315fa0 RCX: 00007fa4e90ee929 [ 719.605799][T32365] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000200000000240 [ 719.605844][T32365] RBP: 00007fa4e7757090 R08: 0000000000000000 R09: 0000000000000000 [ 719.605862][T32365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.605876][T32365] R13: 0000000000000000 R14: 00007fa4e9315fa0 R15: 00007fffdde4c358 [ 719.605897][T32365] [ 719.992053][T32376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9995'. [ 720.898101][T32387] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 720.914435][ T29] kauditd_printk_skb: 856 callbacks suppressed [ 720.914451][ T29] audit: type=1326 audit(1749468458.113:78489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.7.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 720.945359][ T29] audit: type=1326 audit(1749468458.113:78490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.7.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 720.971115][ T29] audit: type=1326 audit(1749468458.113:78491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.7.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 720.996439][ T29] audit: type=1326 audit(1749468458.113:78492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.7.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 721.021917][ T29] audit: type=1326 audit(1749468458.113:78493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.7.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 721.046461][ T29] audit: type=1326 audit(1749468458.113:78494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.7.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 721.070306][ T29] audit: type=1326 audit(1749468458.113:78495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.7.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 721.095019][ T29] audit: type=1326 audit(1749468458.113:78496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 721.118599][ T29] audit: type=1326 audit(1749468458.113:78497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 721.142941][ T29] audit: type=1326 audit(1749468458.113:78498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 721.169240][T32389] FAULT_INJECTION: forcing a failure. [ 721.169240][T32389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.182566][T32389] CPU: 0 UID: 0 PID: 32389 Comm: syz.4.10001 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 721.182595][T32389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 721.182610][T32389] Call Trace: [ 721.182619][T32389] [ 721.182630][T32389] __dump_stack+0x1d/0x30 [ 721.182657][T32389] dump_stack_lvl+0xe8/0x140 [ 721.182759][T32389] dump_stack+0x15/0x1b [ 721.182781][T32389] should_fail_ex+0x265/0x280 [ 721.182861][T32389] should_fail+0xb/0x20 [ 721.182903][T32389] should_fail_usercopy+0x1a/0x20 [ 721.182937][T32389] _copy_from_user+0x1c/0xb0 [ 721.183022][T32389] do_arpt_set_ctl+0x3aa/0x9a0 [ 721.183071][T32389] ? _parse_integer_limit+0x170/0x190 [ 721.183178][T32389] ? _raw_spin_unlock_bh+0x36/0x40 [ 721.183286][T32389] ? tcp_release_cb+0xf1/0x370 [ 721.183327][T32389] ? _raw_spin_unlock_bh+0x36/0x40 [ 721.183368][T32389] nf_setsockopt+0x199/0x1b0 [ 721.183394][T32389] ip_setsockopt+0x102/0x110 [ 721.183484][T32389] tcp_setsockopt+0x95/0xb0 [ 721.183504][T32389] sock_common_setsockopt+0x69/0x80 [ 721.183547][T32389] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 721.183606][T32389] smc_setsockopt+0x183/0x750 [ 721.183641][T32389] ? __pfx_smc_setsockopt+0x10/0x10 [ 721.183674][T32389] __sys_setsockopt+0x184/0x200 [ 721.183701][T32389] __x64_sys_setsockopt+0x64/0x80 [ 721.183732][T32389] x64_sys_call+0x2bd5/0x2fb0 [ 721.183756][T32389] do_syscall_64+0xd2/0x200 [ 721.183779][T32389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 721.183813][T32389] ? clear_bhb_loop+0x40/0x90 [ 721.183922][T32389] ? clear_bhb_loop+0x40/0x90 [ 721.183944][T32389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.183972][T32389] RIP: 0033:0x7f885385e929 [ 721.184055][T32389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.184080][T32389] RSP: 002b:00007f8851ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 721.184104][T32389] RAX: ffffffffffffffda RBX: 00007f8853a85fa0 RCX: 00007f885385e929 [ 721.184121][T32389] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 721.184196][T32389] RBP: 00007f8851ec7090 R08: 0000000000000440 R09: 0000000000000000 [ 721.184209][T32389] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000000000000001 [ 721.184223][T32389] R13: 0000000000000000 R14: 00007f8853a85fa0 R15: 00007ffee4ab1a28 [ 721.184248][T32389] [ 721.431375][T32381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9999'. [ 721.434795][T32395] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10003'. [ 721.453699][T32391] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10003'. [ 721.484501][T32399] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 721.513478][T32401] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 721.650441][T32413] netlink: 'syz.2.10010': attribute type 2 has an invalid length. [ 721.658840][T32413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10010'. [ 721.735611][T32417] hub 1-0:1.0: USB hub found [ 721.740795][T32417] hub 1-0:1.0: 8 ports detected [ 722.287319][T32452] hub 1-0:1.0: USB hub found [ 722.292664][T32452] hub 1-0:1.0: 8 ports detected [ 722.390406][T32458] netlink: 'syz.1.10028': attribute type 1 has an invalid length. [ 722.417011][T32456] wireguard3: entered allmulticast mode [ 722.448711][T32463] program syz.1.10031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 722.497871][T32468] netlink: 'syz.4.10030': attribute type 2 has an invalid length. [ 723.239597][T32502] netlink: 'syz.7.10048': attribute type 2 has an invalid length. [ 723.480310][T32521] netlink: 'syz.2.10056': attribute type 1 has an invalid length. [ 723.612799][T32521] 8021q: adding VLAN 0 to HW filter on device bond14 [ 723.732543][T32541] netlink: 'syz.5.10062': attribute type 2 has an invalid length. [ 723.791087][T32548] FAULT_INJECTION: forcing a failure. [ 723.791087][T32548] name failslab, interval 1, probability 0, space 0, times 0 [ 723.804443][T32548] CPU: 1 UID: 0 PID: 32548 Comm: syz.7.10066 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 723.804499][T32548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.804517][T32548] Call Trace: [ 723.804525][T32548] [ 723.804535][T32548] __dump_stack+0x1d/0x30 [ 723.804564][T32548] dump_stack_lvl+0xe8/0x140 [ 723.804589][T32548] dump_stack+0x15/0x1b [ 723.804611][T32548] should_fail_ex+0x265/0x280 [ 723.804656][T32548] should_failslab+0x8c/0xb0 [ 723.804687][T32548] kmem_cache_alloc_noprof+0x50/0x310 [ 723.804722][T32548] ? vm_area_alloc+0x2c/0xb0 [ 723.804761][T32548] vm_area_alloc+0x2c/0xb0 [ 723.804795][T32548] mmap_region+0xa3a/0x1560 [ 723.804863][T32548] do_mmap+0x9b3/0xbe0 [ 723.804908][T32548] vm_mmap_pgoff+0x17a/0x2e0 [ 723.804948][T32548] ksys_mmap_pgoff+0xc2/0x310 [ 723.804988][T32548] ? __x64_sys_mmap+0x49/0x70 [ 723.805019][T32548] x64_sys_call+0x1602/0x2fb0 [ 723.805046][T32548] do_syscall_64+0xd2/0x200 [ 723.805073][T32548] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 723.805106][T32548] ? clear_bhb_loop+0x40/0x90 [ 723.805133][T32548] ? clear_bhb_loop+0x40/0x90 [ 723.805160][T32548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.805187][T32548] RIP: 0033:0x7f01d469e963 [ 723.805207][T32548] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 723.805231][T32548] RSP: 002b:00007f01d2d06d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 723.805255][T32548] RAX: ffffffffffffffda RBX: 00000000000005dd RCX: 00007f01d469e963 [ 723.805272][T32548] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 723.805287][T32548] RBP: 00002000000006c2 R08: 00000000ffffffff R09: 0000000000000000 [ 723.805302][T32548] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 723.805316][T32548] R13: 00007f01d2d06dec R14: 00007f01d2d06df0 R15: 00007ffca11f6a68 [ 723.805338][T32548] [ 724.080364][T32558] $Hÿ: renamed from bond0 [ 724.087592][T32558] $Hÿ: entered promiscuous mode [ 724.092915][T32558] bond_slave_0: entered promiscuous mode [ 724.099235][T32558] bond_slave_1: entered promiscuous mode [ 724.107422][T32562] netlink: 'syz.7.10075': attribute type 1 has an invalid length. [ 724.117856][T32564] Invalid ELF header magic: != ELF [ 724.134604][T32562] 8021q: adding VLAN 0 to HW filter on device bond16 [ 724.319554][T32579] __nla_validate_parse: 12 callbacks suppressed [ 724.319574][T32579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10079'. [ 724.461335][T32589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10078'. [ 724.545532][T32594] FAULT_INJECTION: forcing a failure. [ 724.545532][T32594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.558941][T32594] CPU: 1 UID: 0 PID: 32594 Comm: syz.5.10084 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 724.558990][T32594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 724.559007][T32594] Call Trace: [ 724.559018][T32594] [ 724.559029][T32594] __dump_stack+0x1d/0x30 [ 724.559058][T32594] dump_stack_lvl+0xe8/0x140 [ 724.559087][T32594] dump_stack+0x15/0x1b [ 724.559107][T32594] should_fail_ex+0x265/0x280 [ 724.559215][T32594] should_fail+0xb/0x20 [ 724.559258][T32594] should_fail_usercopy+0x1a/0x20 [ 724.559289][T32594] strncpy_from_user+0x25/0x230 [ 724.559374][T32594] ? bpf_trace_run2+0x124/0x1c0 [ 724.559519][T32594] ? _raw_spin_unlock+0x26/0x50 [ 724.559552][T32594] __se_sys_request_key+0x57/0x290 [ 724.559594][T32594] __x64_sys_request_key+0x55/0x70 [ 724.559627][T32594] x64_sys_call+0x2f19/0x2fb0 [ 724.559751][T32594] do_syscall_64+0xd2/0x200 [ 724.559780][T32594] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 724.559812][T32594] ? clear_bhb_loop+0x40/0x90 [ 724.559834][T32594] ? clear_bhb_loop+0x40/0x90 [ 724.559922][T32594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.559951][T32594] RIP: 0033:0x7f652edae929 [ 724.559971][T32594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.559995][T32594] RSP: 002b:00007f652d417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 724.560018][T32594] RAX: ffffffffffffffda RBX: 00007f652efd5fa0 RCX: 00007f652edae929 [ 724.560087][T32594] RDX: 0000200000000140 RSI: 0000200000001ffb RDI: 0000200000000040 [ 724.560104][T32594] RBP: 00007f652d417090 R08: 0000000000000000 R09: 0000000000000000 [ 724.560121][T32594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.560138][T32594] R13: 0000000000000000 R14: 00007f652efd5fa0 R15: 00007fff66624688 [ 724.560230][T32594] [ 724.903996][T32606] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10087'. [ 724.936698][T32599] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10087'. [ 724.946358][T32602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10085'. [ 725.032499][T32617] FAULT_INJECTION: forcing a failure. [ 725.032499][T32617] name failslab, interval 1, probability 0, space 0, times 0 [ 725.046659][T32617] CPU: 1 UID: 0 PID: 32617 Comm: syz.4.10090 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 725.046696][T32617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 725.046713][T32617] Call Trace: [ 725.046722][T32617] [ 725.046734][T32617] __dump_stack+0x1d/0x30 [ 725.046759][T32617] dump_stack_lvl+0xe8/0x140 [ 725.046798][T32617] dump_stack+0x15/0x1b [ 725.046820][T32617] should_fail_ex+0x265/0x280 [ 725.046866][T32617] ? audit_log_d_path+0x8d/0x150 [ 725.046990][T32617] should_failslab+0x8c/0xb0 [ 725.047015][T32617] __kmalloc_cache_noprof+0x4c/0x320 [ 725.047047][T32617] audit_log_d_path+0x8d/0x150 [ 725.047081][T32617] audit_log_d_path_exe+0x42/0x70 [ 725.047128][T32617] audit_log_task+0x1e9/0x250 [ 725.047168][T32617] audit_seccomp+0x61/0x100 [ 725.047210][T32617] ? __seccomp_filter+0x68c/0x10d0 [ 725.047318][T32617] __seccomp_filter+0x69d/0x10d0 [ 725.047343][T32617] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 725.047371][T32617] ? vfs_write+0x75e/0x8e0 [ 725.047412][T32617] __secure_computing+0x82/0x150 [ 725.047438][T32617] syscall_trace_enter+0xcf/0x1e0 [ 725.047539][T32617] do_syscall_64+0xac/0x200 [ 725.047564][T32617] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 725.047598][T32617] ? clear_bhb_loop+0x40/0x90 [ 725.047623][T32617] ? clear_bhb_loop+0x40/0x90 [ 725.047689][T32617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.047711][T32617] RIP: 0033:0x7f885385d58a [ 725.047727][T32617] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 725.047747][T32617] RSP: 002b:00007f8851ec6ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 725.047772][T32617] RAX: ffffffffffffffda RBX: 00007f8853a85fa0 RCX: 00007f885385d58a [ 725.047788][T32617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 725.047824][T32617] RBP: 00007f8851ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 725.047837][T32617] R10: 0000000000000006 R11: 0000000000000293 R12: 0000000000000001 [ 725.047850][T32617] R13: 0000000000000000 R14: 00007f8853a85fa0 R15: 00007ffee4ab1a28 [ 725.047876][T32617] [ 725.273187][T32620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10092'. [ 725.350652][T32625] netlink: 'syz.1.10094': attribute type 2 has an invalid length. [ 725.358740][T32625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10094'. [ 725.424450][T32632] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 725.463905][T32635] FAULT_INJECTION: forcing a failure. [ 725.463905][T32635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.479208][T32635] CPU: 0 UID: 0 PID: 32635 Comm: syz.5.10097 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 725.479311][T32635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 725.479322][T32635] Call Trace: [ 725.479328][T32635] [ 725.479335][T32635] __dump_stack+0x1d/0x30 [ 725.479356][T32635] dump_stack_lvl+0xe8/0x140 [ 725.479389][T32635] dump_stack+0x15/0x1b [ 725.479405][T32635] should_fail_ex+0x265/0x280 [ 725.479442][T32635] should_fail+0xb/0x20 [ 725.479514][T32635] should_fail_usercopy+0x1a/0x20 [ 725.479532][T32635] _copy_from_user+0x1c/0xb0 [ 725.479603][T32635] __copy_msghdr+0x244/0x300 [ 725.479632][T32635] ___sys_sendmsg+0x109/0x1d0 [ 725.479745][T32635] __sys_sendmmsg+0x178/0x300 [ 725.479787][T32635] __x64_sys_sendmmsg+0x57/0x70 [ 725.479816][T32635] x64_sys_call+0x2f2f/0x2fb0 [ 725.479873][T32635] do_syscall_64+0xd2/0x200 [ 725.479894][T32635] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 725.479967][T32635] ? clear_bhb_loop+0x40/0x90 [ 725.480024][T32635] ? clear_bhb_loop+0x40/0x90 [ 725.480053][T32635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.480119][T32635] RIP: 0033:0x7f652edae929 [ 725.480139][T32635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.480236][T32635] RSP: 002b:00007f652d417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 725.480256][T32635] RAX: ffffffffffffffda RBX: 00007f652efd5fa0 RCX: 00007f652edae929 [ 725.480273][T32635] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000004 [ 725.480288][T32635] RBP: 00007f652d417090 R08: 0000000000000000 R09: 0000000000000000 [ 725.480300][T32635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.480313][T32635] R13: 0000000000000000 R14: 00007f652efd5fa0 R15: 00007fff66624688 [ 725.480338][T32635] [ 725.819218][T32651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10105'. [ 725.829858][T32651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10105'. [ 725.844151][T32653] $Hÿ: renamed from bond0 [ 725.851652][T32653] $Hÿ: entered promiscuous mode [ 725.856982][T32653] bond_slave_0: entered promiscuous mode [ 725.863253][T32653] bond_slave_1: entered promiscuous mode [ 725.922533][ T29] kauditd_printk_skb: 1754 callbacks suppressed [ 725.922551][ T29] audit: type=1326 audit(1749468463.144:80253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 725.953994][ T29] audit: type=1326 audit(1749468463.174:80254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74520cab19 code=0x7ffc0000 [ 725.977426][ T29] audit: type=1326 audit(1749468463.174:80255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 726.001252][ T29] audit: type=1326 audit(1749468463.174:80256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74520cab19 code=0x7ffc0000 [ 726.025919][ T29] audit: type=1326 audit(1749468463.174:80257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 726.058160][T32666] Invalid ELF header magic: != ELF [ 726.072010][ T29] audit: type=1326 audit(1749468463.214:80258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 726.095393][ T29] audit: type=1326 audit(1749468463.214:80259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74520cab19 code=0x7ffc0000 [ 726.118502][ T29] audit: type=1326 audit(1749468463.214:80260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 726.142276][ T29] audit: type=1326 audit(1749468463.224:80261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 726.165695][ T29] audit: type=1326 audit(1749468463.224:80262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32631 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74520cab19 code=0x7ffc0000 [ 726.310489][T32686] netlink: 'syz.4.10116': attribute type 1 has an invalid length. [ 726.516567][T32702] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 727.432403][T32728] siw: device registration error -23 [ 727.527571][T32741] netlink: 'syz.5.10140': attribute type 2 has an invalid length. [ 727.754580][T32756] siw: device registration error -23 [ 727.790928][T32761] siw: device registration error -23 [ 728.318407][T19258] veth0_to_bridge: left allmulticast mode [ 728.324280][T19258] veth0_to_bridge: left promiscuous mode [ 728.330125][T19258] bridge0: port 1(veth0_to_bridge) entered disabled state [ 728.788726][ T331] siw: device registration error -23 [ 728.862263][T19258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.873280][T19258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.884536][T19258] bond0 (unregistering): Released all slaves [ 728.893669][T19258] bond1 (unregistering): Released all slaves [ 728.905405][T19258] bond2 (unregistering): Released all slaves [ 728.947712][ T338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.972135][T19258] tipc: Disabling bearer [ 728.977265][T19258] tipc: Disabling bearer [ 728.982890][T19258] tipc: Left network mode [ 729.029513][T19258] hsr_slave_0: left promiscuous mode [ 729.049583][T19258] veth1_macvtap: left promiscuous mode [ 729.055152][T19258] veth0_macvtap: left promiscuous mode [ 729.126902][T19258] team0 (unregistering): Port device team_slave_1 removed [ 729.148803][T19258] team0 (unregistering): Port device team_slave_0 removed [ 729.286018][ T359] siw: device registration error -23 [ 729.574764][ T374] 8021q: adding VLAN 0 to HW filter on device bond11 [ 729.860195][ T382] netlink: 'syz.2.10181': attribute type 1 has an invalid length. [ 729.924363][ T382] 8021q: adding VLAN 0 to HW filter on device bond15 [ 730.048999][ T395] siw: device registration error -23 [ 730.499715][ T412] __nla_validate_parse: 10 callbacks suppressed [ 730.499733][ T412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10188'. [ 730.886222][ T419] wireguard1: entered promiscuous mode [ 730.946548][ T29] kauditd_printk_skb: 1523 callbacks suppressed [ 730.946569][ T29] audit: type=1326 audit(1749468468.144:81786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.5.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 730.977979][ T29] audit: type=1326 audit(1749468468.144:81787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.5.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 731.003523][ T29] audit: type=1326 audit(1749468468.144:81788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.5.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 731.027419][ T29] audit: type=1326 audit(1749468468.144:81789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.5.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 731.051960][ T29] audit: type=1326 audit(1749468468.144:81790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=424 comm="syz.5.10194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 731.139056][ T29] audit: type=1326 audit(1749468468.354:81791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.4.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885385e929 code=0x7ffc0000 [ 731.162996][ T29] audit: type=1326 audit(1749468468.354:81792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.4.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885385e929 code=0x7ffc0000 [ 731.186789][ T29] audit: type=1326 audit(1749468468.354:81793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.4.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f885385e929 code=0x7ffc0000 [ 731.196288][ T438] 8021q: adding VLAN 0 to HW filter on device bond16 [ 731.210534][ T29] audit: type=1326 audit(1749468468.354:81794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.4.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885385e929 code=0x7ffc0000 [ 731.241238][ T29] audit: type=1326 audit(1749468468.354:81795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.4.10201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885385e929 code=0x7ffc0000 [ 731.424479][ T459] siw: device registration error -23 [ 731.579756][ T464] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10210'. [ 731.642970][ T460] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10210'. [ 731.698935][ T470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10212'. [ 731.710757][ T470] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10212'. [ 731.859834][ T470] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 731.868675][ T470] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 732.090292][ T487] netlink: 'syz.7.10222': attribute type 2 has an invalid length. [ 732.098484][ T487] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10222'. [ 732.310970][ T509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10219'. [ 732.323854][ T504] siw: device registration error -23 [ 732.821468][ T522] loop1: detected capacity change from 0 to 1024 [ 732.829702][ T522] ext3: Unknown parameter 'obj_type' [ 733.133811][ T528] netlink: 'syz.4.10232': attribute type 1 has an invalid length. [ 733.276903][ T534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10229'. [ 733.327818][ T528] 8021q: adding VLAN 0 to HW filter on device bond7 [ 733.347071][ T530] $Hÿ: renamed from bond0 (while UP) [ 733.358669][ T530] $Hÿ: entered promiscuous mode [ 733.363955][ T530] bond_slave_0: entered promiscuous mode [ 733.369880][ T530] bond_slave_1: entered promiscuous mode [ 733.674800][ T564] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10243'. [ 733.684913][ T558] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10243'. [ 733.753797][ T574] netlink: 'syz.4.10250': attribute type 1 has an invalid length. [ 733.786484][ T574] 8021q: adding VLAN 0 to HW filter on device bond8 [ 734.451770][ T614] netlink: 'syz.2.10262': attribute type 1 has an invalid length. [ 734.466002][ T614] 8021q: adding VLAN 0 to HW filter on device bond16 [ 734.721624][ T643] netlink: 'syz.4.10275': attribute type 1 has an invalid length. [ 734.738532][ T643] 8021q: adding VLAN 0 to HW filter on device bond9 [ 734.825311][ T654] netlink: 'syz.4.10279': attribute type 2 has an invalid length. [ 734.889841][ T656] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 735.674302][ T674] __nla_validate_parse: 9 callbacks suppressed [ 735.674319][ T674] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10284'. [ 735.694105][ T671] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.10284'. [ 735.951822][ T29] kauditd_printk_skb: 1654 callbacks suppressed [ 735.951841][ T29] audit: type=1326 audit(1749468473.174:83450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 736.036872][T32245] Process accounting resumed [ 736.094669][ T29] audit: type=1326 audit(1749468473.174:83451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74520cab19 code=0x7ffc0000 [ 736.118119][ T29] audit: type=1326 audit(1749468473.174:83452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 736.142105][ T29] audit: type=1326 audit(1749468473.204:83453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 736.165325][ T29] audit: type=1326 audit(1749468473.204:83454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74520cab19 code=0x7ffc0000 [ 736.188299][ T29] audit: type=1326 audit(1749468473.204:83455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 736.211670][ T29] audit: type=1326 audit(1749468473.214:83456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 736.235314][ T29] audit: type=1326 audit(1749468473.214:83457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74520cab19 code=0x7ffc0000 [ 736.258317][ T29] audit: type=1326 audit(1749468473.214:83458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 736.281513][ T29] audit: type=1326 audit(1749468473.224:83459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=682 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74521258e7 code=0x7ffc0000 [ 736.678207][ T747] tmpfs: Unknown parameter 'quot' [ 737.318159][ T755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.344191][ T755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.371729][ T753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10315'. [ 737.515522][ T771] netlink: 'syz.2.10322': attribute type 27 has an invalid length. [ 737.554860][ T773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10323'. [ 737.717504][ T798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.727257][ T798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.867064][ T825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.867209][ T825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.034198][ T836] program syz.4.10350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.243632][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.251678][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.259593][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.267390][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.275321][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.283622][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.291754][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.300404][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.308889][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.317220][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.325088][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.333015][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.341110][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.348957][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.356738][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.364626][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.372464][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.380900][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.388677][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.396764][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.404653][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.412530][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.420423][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.428194][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.436093][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.443964][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.451783][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.459690][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.467645][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.475549][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.475600][ T868] tmpfs: Unknown parameter 'grpquota' [ 738.483340][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.497557][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.505713][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.513616][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.521940][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.529780][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.537599][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.545419][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.553462][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.561870][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.569995][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.578040][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.586633][T32247] hid-generic 0000:007F:FFFFFFFE.0053: unknown main item tag 0x0 [ 738.595613][T32247] hid-generic 0000:007F:FFFFFFFE.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 738.828976][ T899] tmpfs: Unknown parameter 'usrquota' [ 739.870036][ T924] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10385'. [ 739.989407][ T930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10387'. [ 740.038112][ T934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.066948][ T934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.266252][ T954] program syz.5.10398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.292260][ T956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10399'. [ 740.372274][ T960] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10400'. [ 740.490945][ T965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10403'. [ 740.954799][ T1008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.971243][ T1009] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 740.978120][ T1009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 740.986547][ T1009] vhci_hcd vhci_hcd.0: Device attached [ 740.987729][ T1008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.013264][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 741.013283][ T29] audit: type=1400 audit(1749468478.234:83626): avc: denied { create } for pid=975 comm="syz.1.10407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 741.063901][ T29] audit: type=1400 audit(1749468478.264:83627): avc: denied { create } for pid=1007 comm="syz.2.10422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 741.064395][ T1009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10407'. [ 741.218744][T32247] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 741.498623][ T1022] netlink: 'syz.5.10423': attribute type 10 has an invalid length. [ 741.506879][ T1022] syz_tun: entered promiscuous mode [ 741.514954][ T1022] $Hÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 741.608941][ T1011] vhci_hcd: connection reset by peer [ 741.621090][ T391] vhci_hcd: stop threads [ 741.625554][ T391] vhci_hcd: release socket [ 741.630338][ T391] vhci_hcd: disconnect device [ 741.895085][ T29] audit: type=1326 audit(1749468479.114:83628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 741.932957][ T29] audit: type=1326 audit(1749468479.114:83629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 741.956952][ T29] audit: type=1326 audit(1749468479.114:83630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 741.981538][ T29] audit: type=1326 audit(1749468479.114:83631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 742.005778][ T29] audit: type=1326 audit(1749468479.114:83632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 742.029621][ T29] audit: type=1326 audit(1749468479.114:83633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 742.053442][ T29] audit: type=1326 audit(1749468479.114:83634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 742.078197][ T29] audit: type=1326 audit(1749468479.114:83635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.10424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d469e929 code=0x7ffc0000 [ 742.540149][ T1065] syz_tun: entered allmulticast mode [ 742.547123][ T1065] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 742.555993][ T1065] mroute: pending queue full, dropping entries [ 742.565176][ T1064] syz_tun: left allmulticast mode [ 742.709903][ T1082] netlink: 'syz.1.10447': attribute type 4 has an invalid length. [ 742.748044][ T1082] netlink: 'syz.1.10447': attribute type 4 has an invalid length. [ 742.808886][ T1091] random: crng reseeded on system resumption [ 743.267632][ T1117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10459'. [ 743.303266][ T12] bridge_slave_1: left allmulticast mode [ 743.309221][ T12] bridge_slave_1: left promiscuous mode [ 743.315308][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.339988][ T12] bridge_slave_0: left allmulticast mode [ 743.345765][ T12] bridge_slave_0: left promiscuous mode [ 743.351611][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.495856][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 744.350524][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.359598][ T12] bond_slave_0: left promiscuous mode [ 744.365932][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.375772][ T12] bond_slave_1: left promiscuous mode [ 744.381737][ T12] $Hÿ (unregistering): Released all slaves [ 744.393462][ T12] bond1 (unregistering): Released all slaves [ 744.405088][ T12] bond2 (unregistering): Released all slaves [ 744.416474][ T12] bond3 (unregistering): Released all slaves [ 744.429893][ T12] bond4 (unregistering): Released all slaves [ 744.442639][ T12] bond5 (unregistering): Released all slaves [ 744.455424][ T12] bond6 (unregistering): Released all slaves [ 744.467453][ T12] bond7 (unregistering): Released all slaves [ 744.479609][ T12] bond8 (unregistering): Released all slaves [ 744.491793][ T12] bond9 (unregistering): Released all slaves [ 744.503846][ T12] bond10 (unregistering): Released all slaves [ 744.516675][ T12] bond11 (unregistering): Released all slaves [ 744.530929][ T12] bond12 (unregistering): Released all slaves [ 744.540961][ T12] bond13 (unregistering): Released all slaves [ 744.553161][ T12] bond14 (unregistering): Released all slaves [ 744.563688][ T12] bond15 (unregistering): Released all slaves [ 744.574120][ T12] bond16 (unregistering): Released all slaves [ 744.784089][ T12] hsr_slave_0: left promiscuous mode [ 745.488194][ T12] team0 (unregistering): Port device team_slave_1 removed [ 745.554449][ T12] team0 (unregistering): Port device team_slave_0 removed [ 745.731346][ T1096] chnl_net:caif_netlink_parms(): no params data found [ 745.878726][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.886224][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.909303][ T1096] bridge_slave_0: entered allmulticast mode [ 745.919537][ T1096] bridge_slave_0: entered promiscuous mode [ 745.929970][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.937290][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.950731][ T1096] bridge_slave_1: entered allmulticast mode [ 745.960767][ T1096] bridge_slave_1: entered promiscuous mode [ 745.993945][ T1096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.017188][ T1096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.061015][ T1096] team0: Port device team_slave_0 added [ 746.068178][ T1096] team0: Port device team_slave_1 added [ 746.105265][ T1096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.112346][ T1096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.138918][ T1096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.169153][ T1182] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10482'. [ 746.188472][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 746.188498][ T29] audit: type=1400 audit(1749468483.375:83658): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 746.232414][ T29] audit: type=1400 audit(1749468483.375:83659): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 746.256212][ T29] audit: type=1400 audit(1749468483.385:83660): avc: denied { write } for pid=1179 comm="syz.2.10482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 746.301483][T32247] usb 3-1: enqueue for inactive port 0 [ 746.308436][T32247] usb 3-1: enqueue for inactive port 0 [ 746.332458][ T1096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.339774][ T1096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.366185][ T1096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.388635][T32247] vhci_hcd: vhci_device speed not set [ 746.425087][ T1096] hsr_slave_0: entered promiscuous mode [ 746.439081][ T1096] hsr_slave_1: entered promiscuous mode [ 746.460801][ T1193] netlink: 10 bytes leftover after parsing attributes in process `syz.5.10486'. [ 746.622152][ T29] audit: type=1400 audit(1749468483.845:83661): avc: denied { setopt } for pid=1207 comm="syz.5.10492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 746.643046][ T1210] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10493'. [ 746.653255][ T1210] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10493'. [ 746.938947][ T1096] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 746.955967][ T1096] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 746.972375][ T1096] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 747.502893][ T1096] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 747.598727][ T29] audit: type=1400 audit(1749468484.795:83662): avc: denied { mount } for pid=1243 comm="syz.2.10507" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 747.602193][ T1096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.634242][ T29] audit: type=1400 audit(1749468484.855:83663): avc: denied { mounton } for pid=1243 comm="syz.2.10507" path="/522/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 747.666432][ T1096] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.682626][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.689941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.705777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.712952][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.722012][ T29] audit: type=1400 audit(1749468484.855:83664): avc: denied { create } for pid=1243 comm="syz.2.10507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 747.742484][ T29] audit: type=1400 audit(1749468484.885:83665): avc: denied { sys_admin } for pid=1243 comm="syz.2.10507" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 747.782135][ T29] audit: type=1400 audit(1749468484.965:83666): avc: denied { unmount } for pid=26567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 747.948746][ T1096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.398788][ T1096] veth0_vlan: entered promiscuous mode [ 748.410503][ T1096] veth1_vlan: entered promiscuous mode [ 748.430347][ T1096] veth0_macvtap: entered promiscuous mode [ 748.438797][ T1096] veth1_macvtap: entered promiscuous mode [ 748.453306][ T1096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.465434][ T1096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.476141][ T1096] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.485513][ T1096] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.494436][ T1096] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.501507][ T1314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10522'. [ 748.503511][ T1096] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.554746][ T29] audit: type=1400 audit(1749468485.775:83667): avc: denied { mounton } for pid=1096 comm="syz-executor" path="/root/syzkaller.hmF6ra/syz-tmp" dev="sda1" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 749.158738][ T1383] 9pnet_virtio: no channels available for device syz [ 750.765708][ T1441] netlink: 'syz.7.10575': attribute type 1 has an invalid length. [ 750.774069][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10575'. [ 751.058604][ T1466] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10584'. [ 751.162730][ T1473] netlink: 'syz.4.10587': attribute type 5 has an invalid length. [ 751.326158][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 751.326177][ T29] audit: type=1400 audit(1749468488.545:83690): avc: denied { create } for pid=1482 comm="syz.4.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 751.380819][ T29] audit: type=1400 audit(1749468488.545:83691): avc: denied { write } for pid=1482 comm="syz.4.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 751.585433][ T29] audit: type=1400 audit(1749468488.805:83692): avc: denied { sqpoll } for pid=1482 comm="syz.4.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 751.649083][ T29] audit: type=1400 audit(1749468488.835:83693): avc: denied { bind } for pid=1482 comm="syz.4.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 751.669952][ T29] audit: type=1400 audit(1749468488.855:83694): avc: denied { create } for pid=1482 comm="syz.4.10592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 751.691939][ T29] audit: type=1400 audit(1749468488.855:83695): avc: denied { ioctl } for pid=1482 comm="syz.4.10592" path="socket:[133012]" dev="sockfs" ino=133012 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 751.839273][ T1489] wireguard2: entered promiscuous mode [ 751.845010][ T1489] wireguard2: entered allmulticast mode [ 752.172256][ T1506] 9pnet_virtio: no channels available for device syz [ 752.775520][ T29] audit: type=1400 audit(1749468489.995:83696): avc: denied { mount } for pid=1515 comm="syz.1.10603" name="/" dev="configfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 752.866661][ T1518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10604'. [ 752.951428][ T29] audit: type=1400 audit(1749468490.175:83697): avc: denied { name_bind } for pid=1527 comm="syz.5.10607" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 753.084660][ T29] audit: type=1400 audit(1749468490.305:83698): avc: denied { append } for pid=1530 comm="syz.7.10609" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 753.189102][ T29] audit: type=1400 audit(1749468490.335:83699): avc: denied { write } for pid=1530 comm="syz.7.10609" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 753.270928][ T1544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1544 comm=syz.5.10614 [ 753.417358][ T1565] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 754.047827][ T1653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1653 comm=syz.4.10658 [ 754.225231][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10665'. [ 754.234411][ T1675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10665'. [ 754.382575][ T1683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1683 comm=syz.5.10672 [ 754.905866][ T1731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 755.209941][ T1745] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 755.381484][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10710'. [ 755.426544][ T1772] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 755.433278][ T1772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 755.441173][ T1772] vhci_hcd vhci_hcd.0: Device attached [ 755.454466][ T1772] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 755.461248][ T1772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 755.469225][ T1772] vhci_hcd vhci_hcd.0: Device attached [ 755.479762][ T1772] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(15) [ 755.486507][ T1772] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 755.494003][ T1772] vhci_hcd vhci_hcd.0: Device attached [ 755.505967][ T1772] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(17) [ 755.512931][ T1772] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 755.520734][ T1772] vhci_hcd vhci_hcd.0: Device attached [ 755.529231][ T1772] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(19) [ 755.536342][ T1772] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 755.544260][ T1772] vhci_hcd vhci_hcd.0: Device attached [ 755.551080][ T1772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 755.559965][ T1772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 755.576638][ T1794] vhci_hcd: connection closed [ 755.576682][ T1778] vhci_hcd: connection closed [ 755.577042][ T1783] vhci_hcd: connection closed [ 755.582940][ T391] vhci_hcd: stop threads [ 755.586470][ T1788] vhci_hcd: connection closed [ 755.591066][ T391] vhci_hcd: release socket [ 755.591096][ T391] vhci_hcd: disconnect device [ 755.591323][ T1792] vhci_hcd: connection closed [ 755.618270][T32204] vhci_hcd: vhci_device speed not set [ 755.652911][ T391] vhci_hcd: stop threads [ 755.657839][ T391] vhci_hcd: release socket [ 755.662454][ T391] vhci_hcd: disconnect device [ 755.689540][T32204] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 755.697079][T32204] usb 15-1: enqueue for inactive port 0 [ 755.713234][T32204] usb 15-1: enqueue for inactive port 0 [ 755.723429][T32204] usb 15-1: enqueue for inactive port 0 [ 755.733708][ T391] vhci_hcd: stop threads [ 755.738706][ T391] vhci_hcd: release socket [ 755.743230][ T391] vhci_hcd: disconnect device [ 755.817433][ T391] vhci_hcd: stop threads [ 755.822067][ T391] vhci_hcd: release socket [ 755.826711][ T391] vhci_hcd: disconnect device [ 755.832950][T32204] vhci_hcd: vhci_device speed not set [ 755.859107][ T1812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10725'. [ 755.982861][ T391] vhci_hcd: stop threads [ 755.987333][ T391] vhci_hcd: release socket [ 755.992324][ T391] vhci_hcd: disconnect device [ 756.366240][ T1842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.366324][ T1842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.461416][ T1808] chnl_net:caif_netlink_parms(): no params data found [ 756.536344][ T1808] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.543968][ T1808] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.570371][ T1808] bridge_slave_0: entered allmulticast mode [ 756.580193][ T1808] bridge_slave_0: entered promiscuous mode [ 756.587383][ T1808] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.594544][ T1808] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.602061][ T1808] bridge_slave_1: entered allmulticast mode [ 756.608784][ T1808] bridge_slave_1: entered promiscuous mode [ 756.635784][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.643746][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.651678][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.659584][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.667378][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.675278][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.683308][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.691446][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.699390][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.707295][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.715258][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.723223][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.730655][ T1808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.731155][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.748094][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.751235][ T1808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.755942][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.773286][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.781089][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.789919][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.797900][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.805737][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.813625][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.821463][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.829426][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.837596][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.845613][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.853400][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.861346][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.869146][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.876938][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.884702][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.892467][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.900417][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.908444][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.916381][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.924172][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.932276][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.940970][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.949035][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.956853][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.964841][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.973027][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.980999][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.988975][T32245] hid-generic 0000:007F:FFFFFFFE.0054: unknown main item tag 0x0 [ 756.998140][T32245] hid-generic 0000:007F:FFFFFFFE.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 757.022584][ T1808] team0: Port device team_slave_0 added [ 757.038792][ T1808] team0: Port device team_slave_1 added [ 757.086346][ T1893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10757'. [ 757.099803][ T1808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.106933][ T1808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.133430][ T1808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.157497][ T1808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.164749][ T1808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.191294][ T1808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.233909][ T1808] hsr_slave_0: entered promiscuous mode [ 757.247612][ T1808] hsr_slave_1: entered promiscuous mode [ 757.261956][ T1808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.275909][ T1808] Cannot create hsr debugfs directory [ 757.358494][ T1905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10762'. [ 757.434363][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 757.434380][ T29] audit: type=1400 audit(1749468494.655:83713): avc: denied { connect } for pid=1889 comm="syz.7.10756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 757.943589][ T1921] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10767'. [ 758.025319][ T29] audit: type=1400 audit(1749468495.245:83714): avc: denied { name_bind } for pid=1930 comm="syz.1.10772" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 758.116506][ T1808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 758.139679][ T1808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 758.161729][ T1808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 758.175991][ T1808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 758.250639][ T1939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10776'. [ 758.259878][ T1939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10776'. [ 758.272273][ T1808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.307532][ T1808] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.358416][T31668] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.365609][T31668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.399097][T31668] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.406363][T31668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.440272][ T1808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 758.450852][ T1808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.642560][ T1967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10782'. [ 759.065797][T32203] usb usb16-port1: attempt power cycle [ 759.102932][ T29] audit: type=1326 audit(1749468496.325:83715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.158438][ T29] audit: type=1326 audit(1749468496.325:83716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.183027][ T29] audit: type=1326 audit(1749468496.355:83717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.207595][ T29] audit: type=1326 audit(1749468496.355:83718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.231775][ T29] audit: type=1326 audit(1749468496.355:83719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.255433][ T29] audit: type=1326 audit(1749468496.365:83720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.277525][ T1808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.279480][ T29] audit: type=1326 audit(1749468496.365:83721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.310579][ T29] audit: type=1326 audit(1749468496.365:83722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.7.10791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 759.384949][ T1808] veth0_vlan: entered promiscuous mode [ 759.453129][ T1994] ip6erspan0: entered allmulticast mode [ 759.516336][ T1808] veth1_vlan: entered promiscuous mode [ 759.650652][ T1808] veth0_macvtap: entered promiscuous mode [ 759.732629][ T1808] veth1_macvtap: entered promiscuous mode [ 759.810143][ T1808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.829986][ T1808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.844102][ T1808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.853116][ T1808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.862153][ T1808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.871071][ T1808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.307727][ T2026] netlink: 'syz.5.10806': attribute type 2 has an invalid length. [ 760.317201][ T2026] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10806'. [ 760.621255][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10803'. [ 761.379477][ T2038] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10805'. [ 761.389087][ T2038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10805'. [ 761.520356][ T2038] wireguard0: entered promiscuous mode [ 761.538471][ T2046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10808'. [ 761.798737][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10814'. [ 761.820363][ T2057] netlink: 'syz.5.10816': attribute type 1 has an invalid length. [ 761.844021][ T2057] 8021q: adding VLAN 0 to HW filter on device bond18 [ 762.157844][T32203] usb usb16-port1: unable to enumerate USB device [ 762.194318][ T2087] 9pnet_virtio: no channels available for device syz [ 762.439672][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 762.439692][ T29] audit: type=1326 audit(1749468499.666:83929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652eda58e7 code=0x7ffc0000 [ 762.652504][ T29] audit: type=1326 audit(1749468499.696:83930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f652ed4ab19 code=0x7ffc0000 [ 762.675908][ T29] audit: type=1326 audit(1749468499.696:83931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652eda58e7 code=0x7ffc0000 [ 762.699082][ T29] audit: type=1326 audit(1749468499.696:83932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f652ed4ab19 code=0x7ffc0000 [ 762.723226][ T29] audit: type=1326 audit(1749468499.696:83933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 762.747301][ T29] audit: type=1326 audit(1749468499.706:83934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652eda58e7 code=0x7ffc0000 [ 762.771119][ T29] audit: type=1326 audit(1749468499.706:83935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f652ed4ab19 code=0x7ffc0000 [ 762.795014][ T29] audit: type=1326 audit(1749468499.706:83936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f652edae929 code=0x7ffc0000 [ 762.818872][ T29] audit: type=1326 audit(1749468499.716:83937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f652eda58e7 code=0x7ffc0000 [ 762.843434][ T29] audit: type=1326 audit(1749468499.716:83938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f652ed4ab19 code=0x7ffc0000 [ 762.949878][ T2100] netlink: 'syz.1.10832': attribute type 1 has an invalid length. [ 762.990718][ T2100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.006759][ T2103] netlink: 'syz.5.10833': attribute type 2 has an invalid length. [ 763.014817][ T2103] __nla_validate_parse: 3 callbacks suppressed [ 763.014895][ T2103] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10833'. [ 763.101089][ T2108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10834'. [ 763.110380][ T2108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10834'. [ 763.261501][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10837'. [ 763.295335][ T2115] wireguard1: entered promiscuous mode [ 763.584692][ T2152] netlink: 'syz.2.10851': attribute type 2 has an invalid length. [ 763.593086][ T2152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10851'. [ 763.872085][ T2174] netlink: 'syz.2.10862': attribute type 1 has an invalid length. [ 764.068814][ T2184] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10866'. [ 764.114236][ T2190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10870'. [ 764.123958][ T2190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10870'. [ 764.138624][ T2190] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 764.156845][ T2190] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 764.191321][ T2201] qrtr: Invalid version 0 [ 764.216840][ T2203] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10873'. [ 764.227354][ T2196] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10873'. [ 764.276886][ T2208] qrtr: Invalid version 0 [ 764.464878][ T2224] wireguard0: entered promiscuous mode [ 764.951464][ T2242] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 764.987440][ T2242] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 765.233214][ T2247] qrtr: Invalid version 0 [ 765.270534][ T2253] netlink: 'syz.4.10896': attribute type 1 has an invalid length. [ 765.287802][ T2253] 8021q: adding VLAN 0 to HW filter on device bond10 [ 765.675644][ T2280] siw: device registration error -23 [ 765.816400][ T2287] qrtr: Invalid version 0 [ 766.288467][ T2305] qrtr: Invalid version 0 [ 766.736840][ T2309] qrtr: Invalid version 0 [ 766.896271][ T2335] qrtr: Invalid version 0 [ 767.358600][ T2362] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 767.368031][ T2362] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 767.550028][ T2373] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 767.566701][ T2375] netlink: 'syz.7.10948': attribute type 1 has an invalid length. [ 767.582302][ T2375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 767.606512][ T2375] bond1: (slave gretap1): making interface the new active one [ 767.616303][ T2375] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 767.652212][ T29] kauditd_printk_skb: 1031 callbacks suppressed [ 767.652234][ T29] audit: type=1326 audit(1749468504.876:84970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.682566][ T29] audit: type=1326 audit(1749468504.876:84971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.707353][ T29] audit: type=1326 audit(1749468504.876:84972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.731931][ T29] audit: type=1326 audit(1749468504.876:84973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.755852][ T29] audit: type=1326 audit(1749468504.876:84974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.779925][ T29] audit: type=1326 audit(1749468504.876:84975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.804587][ T29] audit: type=1326 audit(1749468504.876:84976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.828555][ T29] audit: type=1326 audit(1749468504.876:84977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.853278][ T29] audit: type=1326 audit(1749468504.876:84978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 767.877008][ T29] audit: type=1326 audit(1749468504.876:84979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2383 comm="syz.7.10952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 768.022331][ T2400] __nla_validate_parse: 17 callbacks suppressed [ 768.022420][ T2400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10958'. [ 768.067639][ T2402] netlink: 'syz.1.10959': attribute type 2 has an invalid length. [ 768.077872][ T2402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10959'. [ 768.170497][ T2406] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 768.483854][ T2422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10968'. [ 768.547792][ T2424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10969'. [ 768.589619][ T2426] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 768.747754][ T2429] netlink: 'syz.7.10971': attribute type 2 has an invalid length. [ 768.756086][ T2429] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10971'. [ 769.402725][ T2446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10978'. [ 769.472903][ T2450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10980'. [ 769.504209][ T2454] netlink: 'syz.2.10982': attribute type 1 has an invalid length. [ 769.520712][ T2454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 769.540430][ T2454] bond1: (slave gretap1): making interface the new active one [ 769.549429][ T2454] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 769.550698][ T2457] netlink: 'syz.1.10983': attribute type 2 has an invalid length. [ 769.566368][ T2457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10983'. [ 769.801982][ T2486] netlink: 'syz.7.10996': attribute type 1 has an invalid length. [ 769.843914][ T2486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 770.026426][ T2511] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 770.672980][ T2534] siw: device registration error -23 [ 770.713540][ T2538] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 771.324173][ T2560] netlink: 'syz.4.11026': attribute type 2 has an invalid length. [ 771.665019][ T2591] netlink: 'syz.4.11040': attribute type 1 has an invalid length. [ 771.680165][ T2591] 8021q: adding VLAN 0 to HW filter on device bond11 [ 772.203433][ T2616] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 772.468149][ T2647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.475988][ T2647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.485422][ T2647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.493240][ T2647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.824204][ T29] kauditd_printk_skb: 1867 callbacks suppressed [ 772.824226][ T29] audit: type=1326 audit(1749468510.046:86847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 772.855925][ T29] audit: type=1326 audit(1749468510.046:86848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 772.879769][ T29] audit: type=1326 audit(1749468510.046:86849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 772.903454][ T29] audit: type=1326 audit(1749468510.046:86850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 772.927783][ T29] audit: type=1326 audit(1749468510.046:86851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 772.951712][ T29] audit: type=1326 audit(1749468510.046:86852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 772.975933][ T29] audit: type=1326 audit(1749468510.046:86853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 773.000081][ T29] audit: type=1326 audit(1749468510.046:86854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 773.024925][ T29] audit: type=1326 audit(1749468510.046:86855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 773.049056][ T29] audit: type=1326 audit(1749468510.046:86856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2663 comm="syz.1.11071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745212e929 code=0x7ffc0000 [ 773.168747][ T2672] netlink: 'syz.5.11074': attribute type 1 has an invalid length. [ 773.183984][ T2672] 8021q: adding VLAN 0 to HW filter on device bond19 [ 773.192760][ T2675] $Hÿ: renamed from bond0 (while UP) [ 773.201697][ T2675] $Hÿ: entered promiscuous mode [ 773.206952][ T2675] bond_slave_0: entered promiscuous mode [ 773.212934][ T2675] bond_slave_1: entered promiscuous mode [ 773.272585][ T2681] __nla_validate_parse: 23 callbacks suppressed [ 773.272676][ T2681] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 773.309052][ T2689] netlink: 'syz.5.11082': attribute type 1 has an invalid length. [ 773.324632][ T2689] 8021q: adding VLAN 0 to HW filter on device bond20 [ 773.345541][ T2694] siw: device registration error -23 [ 773.373618][ T2700] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 773.403920][ T2702] netlink: 'syz.5.11087': attribute type 1 has an invalid length. [ 773.419421][ T2702] 8021q: adding VLAN 0 to HW filter on device bond21 [ 773.519220][ T2711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11089'. [ 773.528975][ T2711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.536709][ T2711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.544919][ T2711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.552588][ T2711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.175926][ T2720] 9pnet: Unknown protocol version 9 [ 774.210374][ T2726] netlink: 'syz.2.11096': attribute type 1 has an invalid length. [ 774.226184][ T2726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.262519][ T2730] siw: device registration error -23 [ 774.298818][ T2733] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 774.349477][ T2741] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 774.643373][ T2749] 9pnet: Unknown protocol version 9 [ 775.055735][ T2760] siw: device registration error -23 [ 775.098146][ T2765] netlink: 'syz.4.11111': attribute type 1 has an invalid length. [ 775.112471][ T2765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.313292][ T2778] netlink: 'syz.4.11117': attribute type 1 has an invalid length. [ 775.347232][ T2778] 8021q: adding VLAN 0 to HW filter on device bond12 [ 775.441316][ T2795] netlink: 'syz.5.11124': attribute type 1 has an invalid length. [ 775.457230][ T2795] 8021q: adding VLAN 0 to HW filter on device bond22 [ 775.460830][ T2798] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 775.551839][ T2799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11119'. [ 775.669655][ T2812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11129'. [ 776.449215][ T2839] netlink: 'syz.5.11138': attribute type 1 has an invalid length. [ 776.484110][ T2839] 8021q: adding VLAN 0 to HW filter on device bond23 [ 777.418965][ T2898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11162'. [ 777.465027][ T2905] siw: device registration error -23 [ 777.814879][ T35] bond1 (unregistering): (slave gretap1): Releasing active interface [ 777.933021][ T2937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11174'. [ 778.312110][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.324060][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.335684][ T35] bond0 (unregistering): Released all slaves [ 778.351744][ T35] bond1 (unregistering): Released all slaves [ 778.367120][ T35] bond2 (unregistering): Released all slaves [ 778.376605][ T35] bond3 (unregistering): Released all slaves [ 778.386007][ T35] bond4 (unregistering): Released all slaves [ 778.395372][ T35] bond5 (unregistering): Released all slaves [ 778.406624][ T35] bond6 (unregistering): Released all slaves [ 778.418594][ T35] bond7 (unregistering): Released all slaves [ 778.429638][ T35] bond8 (unregistering): Released all slaves [ 778.441875][ T35] bond9 (unregistering): Released all slaves [ 778.450777][ T2927] $Hÿ: renamed from bond0 (while UP) [ 778.458845][ T2927] $Hÿ: entered promiscuous mode [ 778.464080][ T2927] bond_slave_0: entered promiscuous mode [ 778.470134][ T2927] bond_slave_1: entered promiscuous mode [ 778.479770][ T29] kauditd_printk_skb: 1450 callbacks suppressed [ 778.479806][ T29] audit: type=1326 audit(1749468515.707:88307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2922 comm="syz.2.11175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee5dbe929 code=0x7ffc0000 [ 778.515385][ T29] audit: type=1326 audit(1749468515.707:88308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2922 comm="syz.2.11175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee5dbe929 code=0x7ffc0000 [ 778.606182][ T35] tipc: Disabling bearer [ 778.611773][ T35] tipc: Disabling bearer [ 778.615483][ T2943] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 778.617225][ T35] tipc: Left network mode [ 778.627542][ T29] audit: type=1326 audit(1749468515.827:88309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.656560][ T29] audit: type=1326 audit(1749468515.827:88310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.680557][ T29] audit: type=1326 audit(1749468515.837:88311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.704923][ T29] audit: type=1326 audit(1749468515.837:88312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.728817][ T29] audit: type=1326 audit(1749468515.837:88313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.752723][ T29] audit: type=1326 audit(1749468515.837:88314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.776648][ T29] audit: type=1326 audit(1749468515.837:88315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.801114][ T29] audit: type=1326 audit(1749468515.837:88316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855ae1e929 code=0x7ffc0000 [ 778.829756][ T2953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11183'. [ 778.878582][ T35] hsr_slave_0: left promiscuous mode [ 778.893120][ T35] veth1_macvtap: left promiscuous mode [ 778.901924][ T35] veth0_macvtap: left promiscuous mode [ 778.913555][ T2965] siw: device registration error -23 [ 779.004073][ T35] team0 (unregistering): Port device team_slave_1 removed [ 779.049438][ T35] team0 (unregistering): Port device team_slave_0 removed [ 779.109985][T32246] infiniband syz1: ib_query_port failed (-19) [ 779.119134][T32312] $Hÿ: (slave syz_tun): Releasing backup interface [ 779.203723][ T2991] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11193'. [ 779.213631][ T2984] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11193'. [ 779.280925][ T2994] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 779.354470][ T2973] chnl_net:caif_netlink_parms(): no params data found [ 779.366022][ T3005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11198'. [ 779.441528][ T3016] netlink: 'syz.4.11202': attribute type 1 has an invalid length. [ 779.468496][ T3016] 8021q: adding VLAN 0 to HW filter on device bond13 [ 779.477465][ T3019] netlink: 'syz.1.11203': attribute type 2 has an invalid length. [ 779.485386][ T3019] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11203'. [ 779.503409][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.510584][ T2973] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.518994][ T2973] bridge_slave_0: entered allmulticast mode [ 779.526336][ T2973] bridge_slave_0: entered promiscuous mode [ 779.534875][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.542255][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.550121][ T2973] bridge_slave_1: entered allmulticast mode [ 779.557513][ T2973] bridge_slave_1: entered promiscuous mode [ 779.588925][ T3028] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.11205'. [ 779.612916][ T2973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.615071][ T2973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.629616][ T3031] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 779.631754][ T3023] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.11205'. [ 779.689468][ T2973] team0: Port device team_slave_0 added [ 779.696681][ T2973] team0: Port device team_slave_1 added [ 779.727553][ T2973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.727572][ T2973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.761615][ T2973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.766678][ T2973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.780497][ T2973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.780629][ T2973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.829724][ T3043] wireguard2: entered promiscuous mode [ 779.829840][ T3029] ================================================================== [ 779.829885][ T3029] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 779.829943][ T3029] [ 779.829949][ T3029] write to 0xffffffff8689fe30 of 88 bytes by task 3043 on cpu 1: [ 779.829965][ T3029] prb_reserve+0x696/0xaf0 [ 779.829998][ T3029] vprintk_store+0x56d/0x860 [ 779.830019][ T3029] vprintk_emit+0x178/0x650 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 779.830041][ T3029] vprintk_default+0x26/0x30 [ 779.830059][ T3029] vprintk+0x1d/0x30 [ 779.830083][ T3029] _printk+0x79/0xa0 [ 779.830118][ T3029] __netdev_printk+0x321/0x3e0 [ 779.830144][ T3029] netdev_info+0x9b/0xd0 [ 779.830174][ T3029] __dev_set_promiscuity+0x233/0x450 [ 779.830207][ T3029] __dev_change_flags+0x2c6/0x400 [ 779.830244][ T3029] rtnl_newlink_create+0x36b/0x620 [ 779.830277][ T3029] rtnl_newlink+0xf29/0x12d0 [ 779.830307][ T3029] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 779.830338][ T3029] netlink_rcv_skb+0x120/0x220 [ 779.830361][ T3029] rtnetlink_rcv+0x1c/0x30 [ 779.830385][ T3029] netlink_unicast+0x5a1/0x670 [ 779.830425][ T3029] netlink_sendmsg+0x58b/0x6b0 [ 779.830448][ T3029] __sock_sendmsg+0x142/0x180 [ 779.830475][ T3029] ____sys_sendmsg+0x31e/0x4e0 [ 779.830498][ T3029] ___sys_sendmsg+0x17b/0x1d0 [ 779.830517][ T3029] __x64_sys_sendmsg+0xd4/0x160 [ 779.830537][ T3029] x64_sys_call+0x2999/0x2fb0 [ 779.830563][ T3029] do_syscall_64+0xd2/0x200 [ 779.830590][ T3029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.830611][ T3029] [ 779.830618][ T3029] read to 0xffffffff8689fe30 of 8 bytes by task 3029 on cpu 0: [ 779.830633][ T3029] _prb_read_valid+0x1c4/0x920 [ 779.830664][ T3029] prb_read_valid+0x3c/0x60 [ 779.830696][ T3029] printk_get_next_message+0xc8/0x510 [ 779.830724][ T3029] console_flush_all+0x290/0x730 [ 779.830752][ T3029] console_unlock+0xa1/0x330 [ 779.830774][ T3029] con_flush_chars+0xb2/0x1b0 [ 779.830798][ T3029] con_write+0x2e/0x40 [ 779.830822][ T3029] n_tty_write+0x7db/0xb10 [ 779.830845][ T3029] file_tty_write+0x38c/0x670 [ 779.830883][ T3029] tty_write+0x25/0x30 [ 779.830920][ T3029] vfs_write+0x49d/0x8e0 [ 779.830943][ T3029] ksys_write+0xda/0x1a0 [ 779.830969][ T3029] __x64_sys_write+0x40/0x50 [ 779.830987][ T3029] x64_sys_call+0x2cdd/0x2fb0 [ 779.831009][ T3029] do_syscall_64+0xd2/0x200 [ 779.831030][ T3029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.831057][ T3029] [ 779.831062][ T3029] value changed: 0x0000000000002136 -> 0x0000000000004136 [ 779.831077][ T3029] [ 779.831082][ T3029] Reported by Kernel Concurrency Sanitizer on: [ 779.831096][ T3029] CPU: 0 UID: 0 PID: 3029 Comm: syz.1.11207 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(voluntary) [ 779.831124][ T3029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.831137][ T3029] ================================================================== [ 779.906621][ T35] bridge_slave_1: left allmulticast mode [ 779.906645][ T35] bridge_slave_1: left promiscuous mode [ 779.906802][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.909733][ T35] bridge_slave_0: left allmulticast mode [ 779.909751][ T35] bridge_slave_0: left promiscuous mode [ 779.909946][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.946743][T32246] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 780.007661][ T35] bond1 (unregistering): (slave gretap1): Releasing active interface [ 780.919122][ T35] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.928049][ T35] bond_slave_0: left promiscuous mode [ 780.934238][ T35] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.943759][ T35] bond_slave_1: left promiscuous mode [ 780.949893][ T35] $Hÿ (unregistering): Released all slaves [ 780.961302][ T35] bond1 (unregistering): Released all slaves [ 780.972981][ T35] bond2 (unregistering): Released all slaves [ 780.983965][ T35] bond3 (unregistering): Released all slaves [ 780.995472][ T35] bond4 (unregistering): Released all slaves [ 781.006503][ T35] bond5 (unregistering): Released all slaves [ 781.017632][ T35] bond6 (unregistering): Released all slaves [ 781.028328][ T35] bond7 (unregistering): Released all slaves [ 781.039792][ T35] bond8 (unregistering): Released all slaves [ 781.050400][ T35] bond9 (unregistering): Released all slaves [ 781.061872][ T35] bond10 (unregistering): Released all slaves [ 781.072210][ T35] bond11 (unregistering): Released all slaves [ 781.082768][ T35] bond12 (unregistering): Released all slaves [ 781.093914][ T35] bond13 (unregistering): Released all slaves [ 781.105105][ T35] bond14 (unregistering): Released all slaves [ 781.113848][ T35] bond15 (unregistering): Released all slaves [ 781.124475][ T35] bond0 (unregistering): Released all slaves [ 781.135033][ T35] bond16 (unregistering): Released all slaves [ 781.143578][ T35] bond17 (unregistering): Released all slaves [ 781.154915][ T35] bond18 (unregistering): Released all slaves [ 781.164171][ T35] bond19 (unregistering): Released all slaves [ 781.175121][ T35] bond20 (unregistering): Released all slaves [ 781.184653][ T35] bond21 (unregistering): Released all slaves [ 781.195111][ T35] bond22 (unregistering): Released all slaves [ 781.206006][ T35] bond23 (unregistering): Released all slaves [ 781.217493][ T2973] hsr_slave_0: entered promiscuous mode [ 781.223876][ T2973] hsr_slave_1: entered promiscuous mode [ 781.230537][ T2973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.238365][ T2973] Cannot create hsr debugfs directory [ 781.288484][ T35] hsr_slave_0: left promiscuous mode [ 781.328493][ T35] team0 (unregistering): Port device team_slave_1 removed [ 781.338410][ T35] team0 (unregistering): Port device team_slave_0 removed [ 781.811237][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.869550][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.959394][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.029498][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.091171][ T35] bridge_slave_1: left allmulticast mode [ 782.097048][ T35] bridge_slave_1: left promiscuous mode [ 782.102775][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.111136][ T35] bridge_slave_0: left allmulticast mode [ 782.117068][ T35] bridge_slave_0: left promiscuous mode [ 782.123118][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.132099][ T35] bridge_slave_1: left allmulticast mode [ 782.138375][ T35] bridge_slave_1: left promiscuous mode [ 782.144182][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.152329][ T35] bridge_slave_0: left allmulticast mode [ 782.159051][ T35] bridge_slave_0: left promiscuous mode [ 782.165013][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.230023][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.240603][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.250487][ T35] bond0 (unregistering): Released all slaves [ 782.272010][ T35] bond1 (unregistering): (slave gretap1): Releasing active interface [ 782.358610][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.368697][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.379307][ T35] bond0 (unregistering): Released all slaves [ 782.391932][ T35] bond1 (unregistering): Released all slaves [ 782.401127][ T35] bond2 (unregistering): Released all slaves [ 782.490228][ T35] hsr_slave_0: left promiscuous mode [ 782.496077][ T35] hsr_slave_1: left promiscuous mode [ 782.502308][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.510324][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.520468][ T35] hsr_slave_0: left promiscuous mode [ 782.526186][ T35] hsr_slave_1: left promiscuous mode [ 782.537899][ T35] veth1_macvtap: left promiscuous mode [ 782.543562][ T35] veth0_macvtap: left promiscuous mode [ 782.549460][ T35] veth1_vlan: left promiscuous mode [ 782.554708][ T35] veth0_vlan: left promiscuous mode [ 782.605254][ T35] team0 (unregistering): Port device team_slave_1 removed [ 782.615077][ T35] team0 (unregistering): Port device team_slave_0 removed [ 782.677692][ T35] team0 (unregistering): Port device team_slave_1 removed [ 782.688622][ T35] team0 (unregistering): Port device team_slave_0 removed [ 783.240401][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.289781][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.329701][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.369310][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.460323][ T35] bridge_slave_1: left allmulticast mode [ 783.466015][ T35] bridge_slave_1: left promiscuous mode [ 783.471890][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.479741][ T35] bridge_slave_0: left allmulticast mode [ 783.485857][ T35] bridge_slave_0: left promiscuous mode [ 783.491779][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.542339][ T35] bond1 (unregistering): (slave gretap1): Releasing active interface [ 783.829123][ T35] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.838265][ T35] bond_slave_0: left promiscuous mode [ 783.845140][ T35] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.854658][ T35] bond_slave_1: left promiscuous mode [ 783.861318][ T35] $Hÿ (unregistering): Released all slaves [ 783.870222][ T35] bond1 (unregistering): Released all slaves [ 783.881939][ T35] bond2 (unregistering): Released all slaves [ 783.956814][ T35] hsr_slave_0: left promiscuous mode [ 783.962759][ T35] hsr_slave_1: left promiscuous mode [ 783.972066][ T35] veth1_macvtap: left promiscuous mode [ 783.978131][ T35] veth0_macvtap: left promiscuous mode [ 783.983783][ T35] veth1_vlan: left promiscuous mode [ 783.989232][ T35] veth0_vlan: left promiscuous mode [ 784.061746][ T35] team0 (unregistering): Port device team_slave_1 removed [ 784.071980][ T35] team0 (unregistering): Port device team_slave_0 removed