last executing test programs: 1m6.805117748s ago: executing program 3 (id=2670): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x228000, 0x1000, 0x0, 0x4}, 0x20) 1m6.767009312s ago: executing program 3 (id=2671): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400002, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000008c0)={[{@uid}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@showassoc}, {@unhide}, {@nojoliet}, {@uid}, {@dmode={'dmode', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x0, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a00)={0xfea0, {{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, &(0x7f0000000340)={0xeec4, 0x1, [{0x6}]}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@empty, {}, {0xfffffffffffffffd, 0x7, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) open(&(0x7f0000000980)='./file0\x00', 0x880, 0xe) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0xffffffffffffffff}, 0x0, 0x3, 0x0, 0x0, 0xfff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m6.623506816s ago: executing program 3 (id=2672): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x488c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x404, &(0x7f0000000580)={[{@nobh}, {@nodioread_nolock}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x2e) r2 = syz_io_uring_setup(0x1d1f, &(0x7f00000002c0)={0x0, 0xcd1d, 0x4, 0x0, 0xaa}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xf0bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x0, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1004, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0x9, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x6cc20d16, 0x40, 0x80}, {0x3, 0xde5, 0x1, 0xbd}]}}]}}]}, 0xa4}}, 0x24040084) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000001f) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r9, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001400)='syzkaller\x00'}, 0x90) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x10001, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB='$\x00']) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) 1m6.254056673s ago: executing program 3 (id=2673): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000d40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYRESHEX=r0], 0xfe37, 0x0) 1m5.369582921s ago: executing program 3 (id=2684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xfffdfff3, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, 0x0, &(0x7f0000000480)='./file0\x00') r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)='\x00', 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x18, 0xfffffffffffffff9) r6 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x3ac6, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x0) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000780)="f95e9af246a541e6d1309b2d282fbffd23a8498b507d2cb2fc47fe3d001f2d35e4933a7ef3326fd115558a2ead5c80566f7ac1074dfc32775524f6892fa0b8d9ff5d2096e6bbefccddb8656d0ee57d144eb6419ec3c8ded413c09329a090e9ad39edac3901feea55cb358b5ec7ddf2abfa980f50fced799ed070995f1d89c29019f590123d75099358ed843d15d3b18ae9870f9eb7d2bf4977e6a91e603c2d1f839b66e2bf31ba699dcd9e7e52cb", 0xae, r5) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) keyctl$set_timeout(0xf, r8, 0x100000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x3}}, 0x2e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r12, 0x5411, &(0x7f0000002080)) r13 = inotify_init1(0x80800) close(r13) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070800000000000000a400000000000007040000f0ffffffb7020000080000131823000053780b3b4621092880f786ecf4901408c7a2a5ac52a393bd7f46687dce55814807e7cd0000000ef7a000003a09", @ANYRES32=r5, @ANYBLOB="0005000008f6ffff840000"], &(0x7f0000000380)='syzkaller\x00', 0xfa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m5.266883281s ago: executing program 3 (id=2687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x20008004) 1m5.243724404s ago: executing program 32 (id=2687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x20008004) 3.915780882s ago: executing program 1 (id=3723): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r2], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1a90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1a5c, 0x2, [@TCA_MATCHALL_ACT={0x5e4, 0x2, [@m_nat={0x174, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x40, 0x5, 0x5, 0xe8c}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7f, 0xffffffffffffffff, 0x5, 0xc0b}, @loopback, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x37, 0xffffffffffffffff, 0x28000000, 0xdada}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6bc, 0x3, 0x800, 0x3}, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xcb6, 0x20000000, 0x7, 0x1}, @multicast1, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf9, 0x6, 0x1, 0x1}, @rand_addr=0x64010100, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x20000003, 0x1000, 0x90a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x0, 0x3, 0x9}, @loopback, @local, 0xff, 0x1}}]}, {0xc, 0x6, "11b61f7a267eb8d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x44, 0x14, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, {0xe, 0x6, "f099110f9b23ffbf1aec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe0, 0xe, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x9d, 0x6, "5a7d3b119e9f6ad7cb4e186af6e14fdc3ce2ca0e330b2574e24ded3883bbf48bb62e0afc275db4c1775a8a69ff1139cce77385f9ed914dd8baf64a4a3f8dd42313bd5783d1d86f31016620d46d23303f61fff5ac8ce7c844115c04aedaa912be2f9d4a6792a193c2a2a13fab28f72ce92a4e253e3557d1a2e36d1a2521549baad96624147bb32d9ae27082fe73f9ea34f5db400134a7525bb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_vlan={0xfc, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3d5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b}]}, {0xb6, 0x6, "2973deb6a3bd110d951c77e91bc7d6938ecec6ce4ba5e84c4ebb993859883d0da6d4378c67c44e00a565ae148c6c37d9458adcb43612a7725fbdb229262a5ad3a1a807111215c463b0882b65890b33f74a89ea7f9edd4b263399a4b5e2802642975e1840f975c1520287b1101ce60d822613b2c94c8f1aa2779640b3a7ebcac56ae6a67bfceb2296047e0dbc1db4b582fd9e55d76c96b3a3bf3896ac9c6eca7d190afe275a9b438717f01c61b660c60de2ce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ife={0x110, 0x10, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfffd}]}, {0xdd, 0x6, "01236db4fc544b77dee341279b56e9570290ecf05505d043555610b577da7c2d63f6f81ee6911f8dbc7460d83b3ffa5ceadf99f87375e9bb3056bc79ef30d52e49e658e57927384065d11261960d16c361f3af7d3f95e9c69e20c7e736ddaf4a28698038d921632c1f0e67ec6c8f4c8b8e496ab68727ffa95798b0abe544be38a6441feaf07f68ff61245168b667e6f08f013695f6c707a834f5da86226004e3f1b6917712406bb0079b7d3421572bfe4aa295bed63bb2f19e03ebb9a774fd7e623b5cee8a83d9ca3a5226a2cf5b62430f959b12c1999cc70c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x13c, 0x12, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x22}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xffffff10, 0x2, 0x6, 0x40}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x98, 0x6, "cdd3e0e4ff75f9e6ea23e7bad18b22cac5f2db165b630f29c6a3a2b92861efca69afaf4608ef4b85108d0f57409cab0a8bf59b86395a80478bc5a2008416e419d31009dffd607af977852f725742fc0ca9ed7d039eb6bc71d2f984c33d86dd8704836e871ef01f060af5d43c618dd6fad9b4fc0857bf6621ed59ff48debf188cc03b536b7341f8dd74d6ffd02b6eb6a4a648fecf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x190, 0x2, [@m_tunnel_key={0x7c, 0x8, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x39, 0x6, "14b3b50a3a5f7571d6c3ba306cda2ffa6ba653c6954cd015c8e6bdc01768dd50fd2a9c5eefa6ce14330940a04bb35a0a2ac4ee78f1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x110, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x438}]}, {0xd3, 0x6, "0feff0e8e1e0437e20f2b6a1f466140dc7c32561a742ca9626e02ae66ffdce941d9e44481d67cf2f4088c852fe5fa00c7222689fe54fd1a8bff04eccf0b075601182eaff315ec28cd05c7c5564215c00f9bce11cb099da2c40840f9196f213c71190af62cdcd0b7ee2f336a55061c4414506b4d2ee560ee20e3181d3a22081f24edbf9c65150a0084bb41293c793a0ed0bb8327106ff079abbfcc52cb17c0f8a7c942132509670afc9accb0927ea6de40020b926f082664db4999442a33eaa9beba53bf8a11634168dcce72397e8f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xc}}, @TCA_MATCHALL_ACT={0x12cc, 0x2, [@m_ife={0xcc, 0x19, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x95, 0x6, "2c8958321d1c77d0d577243b579ff6e1fa81ca601f5027e702eb8ac9a32d2478cf772f338745aff0c55b943639a3baebcece65d5b419410fee46f56d67cd27399188f8257c82e02f66f1c2329a82c14eae69f548693263031dc0ff33ed8fb7e101a6fe79b8527e2f02cc8dca10b34ba7cd3e0aff29c790cae9eb66cf5a9bf4178b4d7ae9b3cd81d9e77b5ff35c197591bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xe0, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x6, 0xffffffffffffffff, 0x7, 0x5}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xf5975a67, 0x4, 0xe356, 0x7}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x1, 0x7, 0x2}, 0x25}}]}, {0x60, 0x6, "7c6629a9bbcf4cd582bfc57304d16b268b16ff4daed18425f45e089d174d420a59aea0fb68b2048e88dc1104ece15f5084b4a57c72eca1d2a1c909357f6ba441f3d0a47ce37f438cdde0e9780c3c5fb74c125aa4e3f5f7b4469de68b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x1060, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xc}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x33ff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x10}}]}, {0x1004, 0x6, "a679abe2cfdacccd16679e0e6c7bdbfbc420164bb43a5320c986175bf4fc42ee2dabecbb038ae0d6a9a9166450105b4e8510e0d001118900bbcbde19c7547ec0101ef5e15635dedc3227f10b37aca553e2da64069ba724aa8677f4b701f1f2f0f1386bf56ee420f41c4c5aaf77142290d93e68d096f0efcc4573b15bcd685fdef6790cceb1a23c79949d4f86c6e151e07a46baf0288b4b36cf91d1688e63ac7bcc53b36d47645134faa9ab8023e51e0ec099b4875fbaee1d56a2cab8febcb276923eae82c9ab6f365da8745e0f144f0e079559fc8cb33f07191a4041e63b211ef96a7376c4469fc7979bbb9dc84400de9a928c635b8f6f7bedf4234128eb1b53c91a3ef57821999ae268691b5aa6b1ee6ee1c187138f655f8a7d388d9a554a6bf44861df6af8129a6b0f60bd0c551c1195bd663d4afd5aa6a82365c92ca3316516bef4cb10e81f70e523afc2d5d8c4b204691912ed81f38342c0e9811864943f2bf1efff458df51f7879cd353754a1b1f9735fc871d50ecaafec98303136da9694aaa98f5cacef3d7b17f7d7502c71fcf543bc16285f4338e147a1dd0fa2f356cd5ca50b75dc30c8a8bc32a30a576ce2fa37f8f4611708ce187aed375d04cf961afcf96bd4711493004b9a7fff9ba33d3b6c82e9f11b077afcea49da2e0f5f2fd8358b4ac50135226e8c603abbfe045811687dea39425f47cc1845e86957d697c69428369f2c3e43089bf3b62c0fb37117e51490c8ba67b7c1c78ecb9de7d460cc0b7a18ada417c4e928990926c747d19ffd74d12d53cc47fa90f016e3ce3d93c75fb9520959dd717196c13dc4f2ade64d5e7810101531df501e7795060f426a2baf4be9ecba4e09ebe1ce56fcf35f595f413da33a98adbea68fd5c2317a43ce5de62f625251abb874c651e8418d8560a6757baaa0e5acaa095930be2bceec821beb25124c073c755fd352d989b4f6d530316241b39a87b63f9d733494fc485e1a662c66d9810c251a7329644c8095a8d583cd8f5cc33e5a06b2a668e75e7a99b6473b348b2e949b174b7010bc80f0da759326b4d5113705b43ff4ef9d6779d0acc4d6c44f8b775af0779869ce886696317a1c88f08e4994e6d354f273de8546afc668dd3b37f1c46036259ddfedf6dbf6250706ccecab30df2a6a7f4548e6413b13743918cc1a64e3b62eb85be3add82654c314e279d5ca6694d7ea28df4677018c53f031aaaf1447b93ad23bb8feb04bed375f785119d887236e69ab475f54a1c121a89c4d3219cd064ce1174e8bd88bc4237a5fadf854dbd98f7e8b72f29c1e9b408b93bf5592ceb91c0597ef80f0eb35fd1393408b7f3549546a3d1df321c71f31a7cea8baff2f0dd2ab8935ae42d1792e9e3be74bbb12b3a35b9b26162a537e122a3c4b01ba71fe89f794595b70dd735e6393ce6676e3b92880b2afd6bd361b9e9c9005d9e0c1e6e2fe470a497408a4b837dc585a8fd4deaff66e9d1e80932ae6f0fa04214ae08052538d161bc1b332af59f842b1edaeaa1154ad3f1cce118270cd08020f1abc4064257d4aa0f7a9b8feae7b7813e67c289f9710317b736d4e8a624121bcdd65594b03f9dc505e5c161c1cab996171dbd684d8ba1019cbbbc505e4038f160201202d9531f218ff5216924efb69952daabe1d30af55e1533845162dd33c1e69ea9c165471395940fb96ab50a0c49ea5b1464e2315da5aaca0371eeacde14a766004a0515e9d77536304c36b407c66608e04cf0425cc040c2801db80f0e79fbf81649be4e92086bd9fce29b20fe9f60a14a1bdb5c580db775c0285ab6ad044c6493592b134a88507ee985c513618bc197e351b77fa906863da350b92b9e87d7502fe42fc760446f40361b942b4385e28fc87e83ab208b0d208ee663a888ddec8391fbacdd49d199261383645de4007c359b12f018cf71b4cbc7f7d4d3af2d2045e15926e1f76c7aced89d67af08bb6a3b0ba4bbfe17e220024c4f358549d5dc1a7017464c5b0eb0ff0c3ccd2d1afc0f62d6ba073dd17345412c74fab1a16cd78e4d87778145d2d07a7fb5af9a6a80784fec1863e34b8b05bcd4e87ddfa50d9e65eec198adb148aa699d796973ce6bad19acf6d4b98bdf1181484ac60b973953467dbe6e652b1a590d04b7b3b2ee83b7b9911e22757dcbca558e05abc72657bc5c330a754a54671c6ac591518ebf54f79109ea0cfcf28ca4c271f402bf9f017ec2650e0a4ada9d23adc08d3477a04a49028a65ade228d2e9972168bf68db5f3d026867e7c930e788e456751fa09ef03c181629f6c7cab5a4faeffd4c74bb821c8aa3caf770cd66b23f175b65aa59482a7e20e0b010c3ef75bd6d47ad07f11d59623020ed9d5fd3fd633d31eeb9b058a0c6bb85621a3e27efd926090d5d4e0c97d3691911dbd7e0fdd0d1175ca232efd4aa0836f87aa8fd09a56315d9c1b63866dde49c5801a85160d71e96b33765cc1b5bde3c4d39af4df466c9fbb9a2753e9bcf2c7649e3eb1bd442ea7d2a8ca4ea13ff2840b963b3404ddd6e7794e784c512518af655360b11cb73c0431fb81110b2d0b1254bc2efff312fecb44e3fa356cb07eb0f0ff6c477c2d51ea8b80a76051a6f0f6550570b1b5fa3bb889c42e1ac426f4c48b43fea94bce689cc89bdf84c00771e43c44fd6e85d491ca12bccb4db64cf71414d41501b348e80b510bdf07d19ffec5b4aa0775394658fc076f42230985a5250a82055232fbbc90162e09de3ad21e0c3cc1e186cf48c49a0ea77979cec42c25852abfbd74e035c8a66f15dba4232e66931e14d8cacb5d8a5fb0bdf6335b6033f18ffe723bbe242cac4d27d10637272908a6fe3d853ad26442bfd0d41d69b6314789838604d00a39718c49e7491628923a42b57305d00b7e53edbe98c6851769fd1ff3693bacd830e01ff77fd150e79fee9a0c110cea06c4e22c4b5bf86a19249d2fd1b9a68de9946281c9b507067febfc89bd5e5f90b2fd4b44f43d94b881d7dca7b715418546b6f4b7ac6a955e38d7ebe31fbb4ea4afc2593b005b4984381938e18b6f35312ea6e3feb11ac7c7eb98e3e4fde04eda6728374afcf7f3f8f0de696154dab0164e2c438174e7b4322b00032c0f33eba5114886a4e4fcae61589d89d0cf5a1514af169418977c3b5026cc9202d6190d23e00a90f12736a44e5fdedd9ff480fbbb4114e504443f9d15696c34fecef5cd12939efd2b5ffc682a393603dea33e13b90ef150ddc55be089220c53ea6b028396319b0e466d126480a7b9b0f8c0c55013e18149761cbce2670987f1a7afc40491de36cdfc827eecb099ac1f081f221f7ed472f758880c10b54dddf73824b000122ca52f89d4b271facee4893b3a7aa38e3885a61593957c863c8d6d18dcbbf2186cbf056d04fe90ae0d9d2b4c943c738ba8e1bdda4c0c8855968cd567e17e8133fd7389dd341eca4577db97502b790d9fc5f3a9deab4d9de4ee45e4d91209d4ebcfd8f0719b390da9f6b74302d65b025341d9e36528a404204595e1873e542ea6dfc2d25f664ec932643aa1a8048962f52e311570f9f9d5a2141489e5152ec654b7488328284ec4433b74ee395001f18aa2a9cd060a9acf873676f7e5657386d8531d99c956941f0daea73712a8e0e2b95fd70a2322113693e63ad7c5d08b91ad9e4031066d4f17439bfb17f019eb8328be8a83f4ce89b514daa2531e46a45df1e31632c82da676c7e794677bbe29800b4b9e3278711dc9998c09263fae404aaf0c8b7264ad591b94f03aad60821768cb484ddefdedd64e774dfb37375ea1267a4f8a0d09354476a27933bca721870b6bc860f453923b244a31746454af8a0ac09c10379d1c3f061fbbcbed9bef548e1ba2c4909cdc31974580e19a63bd24ffb1169a14e4c172293c397e766cf674865d4dc2c1847a2e15b4cb481f9e885263ca1d657c1267ecf2c5817d75ddbfc5451580fbcaf80fdc80f0433ea0fe6d3ca602d2294db203b9fb2824bf47c63f7a8836eee735314692e546d941aa0e2cb504c3c3f0c9325ac6609671c4dacc45cc46d2c1834576460a6581afcff9e5e6e7fd16c7bbb6e3f037b3ef4bdd81f75c5a5d6ce334f3f7230d2f98d33b7fd37e42c0b2a65ae49f8bd59d70523d01e604ff532b3155028f2090c1241ce2e25c2486a946011549617bda86e8246d04575a7d1ffaec46e3961646fac37f716ce15722993811f7e9c8060435f22ebbb09fce521843454225cb3399c643ac28e3c957e16cfadaa831959b6cdfa5e3ac2e2f9f31afa792d47561f049c7bfc80fe657eb78a783d0d7a0f5a245748c8f63984a1896f129bdc744276004d0e00b655788e694b014ed706c65321c8577a7864177596f90e8dcb68e765607d941bd0546861b6e2067f9c1479b7f0fc54a817ae9ae988eaa33f4d960c22c306974aafaaaf0fa0c20fe1a45ab6dc50b4da0f69e0949e6d772a0bf95c2c07dc0bee96642c2e76ae333b1897dfd4a8c431bde3f0b4d27b461fb2089b17d07b1c26984ab2a02d17195adf16c625c6fde38d35c1f33d2fb48a8af68d0850a18ea31ef608b788b4bfcb76f03101e0f103c8c0de258e7ed2a0ad82de5d643705be6cf9dc2fc54fa5edf180125cfb8a7d3254f2db67d5a8966e1bfacb548b9a51f6ce9e42ca11be38cd0c5abff32a0ddaba666eb41f384b607def6e470e3c42a3331c78fa501f4b747d422568e39f564606766238cabf80146dd75af53d97e0d4996ca62055842eaff9b5921a683f19a4fe9804313bf33723dfaa1cb6e2aba46c2c994c49092a0197201fc58c89970ebc7ae1ef6ebf21fd869b54021a1f9e43eba4946fb90df979d76858dd944c90d47c57a79e8e2a9ad090261f21a2298beae44dc728af41fea1979ddb824be1052e4d8cd1158da4986f6489eb8686f75b1d9a27a44ba832c1819b8e345be76238668fb4f9e203a3e0c6fe8a5592452370416331e6c24e01dd7ba6c6dcb8ad43fbbe3fc308440f000fd3bff5e3344327ad147c864e6734a995fb7aeec8a05aecb921b21f9f3d20999a5723e09f0c097461536f4f1a02a6bb35f650e2a782ef567cd8c303766babe60b193869aed669bd15fc098f92da9d0b58fc158274a6f8afb0b14a9b5756f45b2877189304b00b37bf8528b99b13f0c22a58a5db6a2249b45cbb0e9073d2154f32bea3108f225158fde984bcb7fff015149a8befd66550f12664a71d7cebda317210ef7e61675b5fb58849ecd53baa5e8f0332470825a14e3e05a2d53a2bc0b6f0999b20887ec189770141108378602d5f376f154bfb782b4201e9eadc7e5b0223562008f55e67e0be647e6bb0d87867d01f3d9ccd90badd0344ea377394a64ec6bff6fcd68eb1485bdc294be9908ec1a03cfac950b25b095d74126013843937e6b5bff569bf2d533d5aa0652e9545d8125f06ef679f3d0b655267380fe838253a18a70e7575e0538d8287200d529b6125b10739f9b1235537932e5e827e4262a3ef6a217d400b844a02a80939aa210619513424fdb4a335459a4f9f185f33391d9ad69549a12085f6fffe1b097e32248ab73bf545e815e0af43fffb2ef0babf9528f8533adb92e8d20afe13b3ad416e50120a95007bdf9a696a86d1e11677ad85a2e2ec53bf085cf2aa224c117324fac887b9aae605085898337c32ffe227822ad5c2c317660b067f3db68e5a958c547bface88d689ab08b53acc15fa3f03134860355cce7fba36c7e792b15012e6a4e06e5dc28f127fb67699590a616745173114c6d65fd7a9b626f79bb6abcbb6fac97233e44141216"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x5, 0x20000000, 0x9, 0x1}}, @TCA_DEF_DATA={0x9, 0x3, '(\\[&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x4, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x1, 0x1, 0xfffffff9}}]}, {0x33, 0x6, "ff73c1cb6c5a9286857317b264b336a24d70e655b693fe031e95080ff179151a48d82268aa73d826fbdf84c6accccd"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1a90}}, 0x0) 3.891151174s ago: executing program 1 (id=3725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88801) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x76eab42beba6fa74, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.450601118s ago: executing program 1 (id=3738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r2, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x21, 0x0) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000000)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14e6829b", @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.137548839s ago: executing program 5 (id=3745): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.101881733s ago: executing program 5 (id=3746): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@remote, @initdev, 0x0}, &(0x7f0000000240)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x20, 0xc, 0x7, 0x10001, 0x1120, r0, 0x6, '\x00', r1, r0, 0x2, 0x5, 0x5}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x498200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0x4, 0x0, 0x2, 0x8200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.936303139s ago: executing program 5 (id=3747): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 2.537583449s ago: executing program 1 (id=3753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb0cf81c00000018000180140002007475"], 0x2c}}, 0x0) 2.375733465s ago: executing program 1 (id=3755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 2.307745332s ago: executing program 1 (id=3757): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) 1.803670382s ago: executing program 5 (id=3767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.779402764s ago: executing program 4 (id=3768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.740776608s ago: executing program 5 (id=3769): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000000000005000000ff", @ANYRES64=r0], 0x48) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 1.740362348s ago: executing program 4 (id=3770): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chroot(&(0x7f0000000000)='./file0/../file0\x00') (fail_nth: 8) 1.450672677s ago: executing program 4 (id=3772): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1.450042587s ago: executing program 5 (id=3773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2}, 0x5d}], 0x1, 0x10022, 0x0) 1.41677381s ago: executing program 4 (id=3774): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000000000000008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'rose0\x00', 0x4}, 0x18) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x6}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x1010, r4, 0x10000000) r5 = syz_io_uring_complete(0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1000, 0x0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x10, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000340)='GPL\x00', 0x10000, 0xc9, &(0x7f0000000500)=""/201, 0x61980, 0x2, '\x00', r1, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x7, 0x830c, 0xc}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r7], 0x0, 0x10, 0x2}, 0x94) semop(r3, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$GETZCNT(r3, 0x4, 0xf, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}]}, 0x24}}, 0x0) 1.167881415s ago: executing program 2 (id=3781): unshare(0x68040200) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) socket(0x5, 0x80000, 0xe0) r3 = socket$kcm(0x10, 0x4, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0) 1.004993081s ago: executing program 2 (id=3784): socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x42842, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000001440)=ANY=[@ANYBLOB="2b090000000000000023c1415c914af0d175602ea2c4222961b2463b48be72577b31efeb6acf8f46442f387c00c2ad9bad387a9a51950fa179377c80065c55d91e95c0aac5dd86e420b6462f81828c8e81b559c8540e092b446276ccd923d4267b834ce8d465ac717e3b8cda3f7a3eb63d40fb06295f4a9889c06f69d53e9e5a336fca585582082bfccec801e680d4030f1b6eec"], 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, r5, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000001400)={&(0x7f0000006000)={[{&(0x7f0000000340)="8b31380d654d22f886f8d925c6fa016c33be5ada561ed84412fcf130e627b9f62e7c24c7cb3dd75dd712149294cc22750859c9cd589949fa69c66a4b4920818cd07135dbb948098f9329dc40fb983361", 0xfffffffffffffebe, 0x3}, {&(0x7f0000002380)="d0fd6cbe7cfd5f085ca63f66f5543ca783b02bd2d5ccf21a6cb7cae3566cac83f49b5702290f96799c1680ea3f87617855d1cb07b0b932cbb3cb70d6d8fe924df133951f15d2cc4d7926982acebe2567641e8500a958473174a9e7bd57998e9947c6f1847b4e637b6b343083ff1286bb082766e3f03ec5f3ce77f674020cb54b1b05573eb332b19c1bcc9ac80e8c495bbb560c94e8029147ec3cfd0b160f96f31d9e48379d70f656730706bbf1d3785788ab298e650f54d685fe181cc6292c1b7bf2fd30d2d5a1057e0d8460c277feab214314386802c122f7ce1ac28f05696dcee10c12dfadd35efa7d6a3b7c591500f72294ca0da61af441662d892c49df66958a139dcca157ea9d11b075f6c307ee3bd7d8826d0690df2d2198dfa42b180faebb3a57bf7d3eabf69c6dca777dda7b10de6ade7cbf4797f4d36633277e9d68da580673dd732f7f7dec4b705ad8580095d7f9643ba5012bf857c2a6cb9a95e8806b82a47363fb26680824e4d5756c997a058394ff984f1e179f149e4772a2625859a55db31b89bca13b677e5c01312c0c39e37406ac6a93110b549ad8a24defc57595e83c290e0c63912fe22e306e88b127e026454c0fedd04103fd9f06be8c4c391adc13eaf7388e1fe1838d97e9f6f5423a404fa58ee8b2201b56036524ee07058a0ee79396a10a65381b43203b83ed1467d724a0899429fc8efe2431c395e104721ffb45b48042645fb382066fa56096f6465c277bae097656c272e7f4ed16f4ce07fe91cd5c1c057e6ff2b9beaddbd03042b1894b96443f97d690e2c8249c926b3a50b29b01e0fe63f95d03be99000eb969790bbf3585d6a698ec0e6328fe019676619bad5dd137bdb8fb07411999ac3e5770657e67dd33ec7b5182f96035d107ada39612ec34988a5426a8ebf83324615516e6e63c8711123f7dee4f2260a258f946d3fae3baaa352359fe0ab10d4b763f40845b82b54a4f867cbccab54fa2ac5b74a9c87b2201c4021025c2c7b4b21d0a1bd9ddc6b08494e48f43e304fc4d80ee720141aab54de82ae24dc1e045149a721079da82dd07714e2bda135922364b05471af7fd9c30b780d19c884c410b93d72f501c397f5a8026ddaf22ea975ec7c91bfe2cf9bc8ed6183a709315312a2c3709c0b3c42b36c80e755b268d8ee7e30ff085e84513af7b1330a5e3bf46305c79e16aa6dc670d8790423c69542414ab860bd0f65c47354c9d5cf3fd9e00d784037cf27adb7f6a1761e41317f0d4d404fed5ae1174044afd63f82bfd093f9fb0846cea2d06c09acbb1d2c410c5503a973fc945656428d3816c17d5efe5f95a06949e47fef33b7d5001bdefe68a1d90efe9a23baac48bda2f24fce85644bad337abf4c4c7df1a36a00c75b3881a21590fd025a4957f011703f1e5c06fef3ddfc1879bdd9553b509e8c1cc303c8656dafcd69c1f853d140ceaa07f9963c581025c91525708c73e9f2e57879028d5865be8a7c12788aa5960dd0ebdc6a5172dd29e176eaae6df1ad7e4d97e5f5f9b1bbb3914ca9f61be2a63520c2eb1df14a1f6bf08b07a1a1241a2ad9f45f33bc4c4b85058bf95ebe840c6c00a96b1e1caeb1b5a08ae867effd29df8be8450e01393cfde82944a4e97e1fed90a1ba2c0f2c10516b588204556b39b218e46c04f9a9babda003607eb0d04239428b5905e11d40aa3114b897aeb3ace6b6e7b7bfeeee790d1672f4ba5d02af8354b08fe0980375be7604f20a288f7775680a7f5498c16c280da4206b0fc77a48bc7b560acbc3f82ae26b60ce11d90135780e035e2d09196d8085a95c150feeb2c41bfd7e14ad2cc193c5bf8a13b886393665c494fb2682d5ed13a1ad22ac803a23f7d4958dd88a36603809fed392fed446d52a1caa265aec01119b0549c2c0302c7263f3fa4afb52d4a8da4213ec69cb27de6420a014aecfb0723a777b643f9227f3bcd407dd0589080a8dbce6a43c1ed9db9b89c7928b2e47606db803b8da8b6322f1866113ec006e842480f7acda90c4f65412f4edaa514063b706558062eaf5133298096caf824bb6bdde4531a8bb3d6651fe582268091afe141e5c121876cc762781affc66b934e59aa27243a425a195f1fefde543b5abc0f6095a6d3f5db4eaba4ff882bc646ecc46f0c709743565d8cc626fdf6d6c2786c1c7109f012806f55cf1adc2b972b764f5989fccd4eecea31a661ffdac1b6bc7705bc2d16b788904fb38e09859fd9529502f9ed61691017f30564793698738ca8161eef5132de2a2dc190078126355ceeae040aa514c4cff763c6957eab8cca6912e2364bb03c311749088c04a77d4d5e2b6fb6567150a91064a3c6d9b8ff52a7308527cb21d0aa635fd0c94bc7ca5321edba9b12728234918eb381cd77d4d087a4063add1fb53b004456d14599adc5805583a7fab4cdf4456fed444f1b50e35056c5251ada964a8846ead09d81883f366041b85f1945f117438badcea4ed2899a8410822144c75bc1f12b0e36bf1e2dc54b74842f483210efb3e9b3306c77df4b07d10932b6c0beeead8fa079ae80d01e608acd85b81fbea54be016dfcff5bc2f52ab4f4039af5e93a27995ac22105dd1a8eb3a56c372f86983fa5cc05791b5946fe7092ec30c5789fc1a3fce5be2a998933af03a8b2be5f1092219e592e90f2affe02f6d25684a6d9ad986298e7e7c20b4e6a99de16997a66fc70b96279b867305538baf9b1cef268412b693fbc80f1946ab5150f8e224c2d0135770cd8e3047589e79e1439a874d1336237fac16175a9e2ccd78f9d9c7e0b46a0bd40a1d06df80cc6a01d3309c285ecbd9ddf9bf8be1fc109e707784f0325c0128382f78e1bb69bcf61154c75097d55c96ed48c3070a8220fb22f64b2b7ec6eed55f8712c5342acbd77f245b74a8e91099458c1325ad803989c4702d12ad36dfe7b9949c94fe7a829334423e3730453846d004a5805ea1a65f64f1df915d8197cd5b57e306672c161a880bae3d485206b6c13f23e8b65b696b3e849bc8c9e9cb87abe5d2b470a9223c18317088e7aedbeb9c9d07eea7babcc51e2bc872a08d8885a18555fed7e386422226e664c0970810f93b50fba611db6a1ca11a4d357e177c4dccc64961084bbe7f43abce4dc35825cad68c69209802efc63e3300c3a66b20dc4c42a7457df2e7d13c0b4e686974a473b8efffcddae6337f1c6446d664bc5769d31422944478c2bb8b2dbafd4ee0bda4dd6187bd651ae41e349de03bcff224142a414d477e3002f686a65f70dbdb38703bdf281d6e9a77145e68a2638d3e025e43c128920fd1d7332928a1714a30b7f03d97f2a909f084379353b27feb221295a29e40147f23c7a43c4d9192889fce7c7975b841dbb03562ca2c9df132154713390e6ee09764ac11ff438a66499a45262cc5f124fb76b7f437e025d4c7c5abab8249373142fa0d0ecd8a6c252a1334a7b1e327a7c32ddd05951f4fe8bae3c8689ae0e55b9d1afa2d190894395fadd5c830765edc9bf87649ab29acc77fed3dc8a3e5b76900c760152e78909bad3c94af5ab8735c2c2790c94ac3b1ae2f651adc1f3f62f5115685ce9bfb9acae91b405321d23d794f95c9bb9dafe09b00a6618b230db8e04bdefc37a8cbdb0361e371d02a419bdb744ba8fcc05e8713dad7af428d32bea8e9c89c4a54ea91013f671c0c0ddfb314a29e424eb8296afd827268e7792f436c660001d8fee3eb87cc821f5b58b9a8c2356a56bdff57bc68715def559f3eb9d31da32f59ce3ed58701cb5ad3265ebbef2a11391c3f11e0b1462143d9c2c1b46ba78eaafa226f207b0d1e95b0510297d8d7a26efede5ed7edcce77e8c9ab84a43bdedb5e8b3d257a1ff61a4f79c73a740b4f8597ec8d1c28df4d759cbaae4e7080ed810b7ba34114b935b79cad0928d6215d5d58beda1291e2422de19f5599066e27e49b7bfaf9458a6306e462d0ae574d08b7336e8d93108e255691d196b4335c4fe150d675bfda3e3366148179c2e40f33b953a7ab98f816e82cfbe22c19719de5c1ce5080eb6f0987f5b68227cf0899f1d47b8be9bc0f5bd96c0ef103073f78d6549cd7c6316b9ee3017464900eca8775a1e4676ef2fab89e09639aca60117023860ed644ed89833a9ce2b34b75c186d94c78dc2709252b514299e944ef0bbb101445244e0933af1fe218171c57ace6c2bb63e5dd4df1b9d2fa4484e912716fcaf469b3c7fe1507d9b53e7f2430a25f3e340700541c389b73674ee05fb643eb5510a58b243481c184a0d86819c09d27ec6cc48a7d008e9113f06fc1407c3d05c12d4a31649d6433158da900d2cf15384bf73eed70f884f4c7ea8f9371266729fcab88c3f8d1280b6c82d99937847ef3e3b37b03704237d91210f152dcf053f085350c3a31b552ccdf3322a66962dc3317f2557b8c9bcd655a34b7aa7856211e024dbd3b44966aa110df9e2c15db9b39d4720e77d5d0e27505fcb4a5401e138877381c70241e2919efbc0c08b38818562bb35213bfb62a36fe2fc4b5de36035e109df1c685371d1b9c120277e4763935a035ffc8bafde15bd6ae59aa0b521e0ce6e04b522396cab9dbc7b0cf1e7635c71536d35f2f8d862ae6ce0e326ac2617d9234d1eaedac8d5550209ab4cb1da9e4fee7d497aa3049e4d5c13d0484607b16129b0feb7c84b05f7a6ef680ebbd0ab72cb01b2f1ee37932aafd575584760af414aa837b13ea177b0e166357cde631b6af949816e020b17681093d87e7a7056b74ef2f1e4484fb6d90afbdfa7ab211b14edef4e64dc29795fac1d378406fd00317b36e5074d126316c3f978758cfa32ad535bc4bce552590f7a1b135e04837ea1a25498437b00f16dc197d2e68242d4741cadfc7091d351246ea9e39212425fe17f904d3fe2ebfb22cb4b1eb85e7cff5328c29db829492f788ab04067e24ee108a3c0cc6fa269cc55d4b13e9b8d6da93adcb47b9441e4f68c33e627a2f30e7594d230d184cb811c0c6c8815aa72c483ac90a11f8f413d8df97ea0adfa3d7d9b9f8430c22a0dee069c6edd8595c30463ed17681ed386d3e825abef3e0935c2dd5ac9564e22e34ea52e7e87d7c8527d649281cabd7984c868be35df7c30d11d187c75420bc4b62e135175971574885cff1d83979ad1ed2160f5d0070fd77b8b8d3de980f5884b1f6ac23a3c1a64756a81cfb55a0de48f9c6ed1cfbd209adc0f8a0d55ef9b41df7619212d03be8b95f3c1b9e9628b9c66e892126ce6c591ebc15b37c4e05107c5cea15466991079bfd583df06d75906fcc941ae7e35e2942a705d143f0c76e71ed36a3d626d719e2195dc38398b4e196dc9ba1c111f05308cc5e51cbc93c6cd86d383e24cf4716024886120ca036ccce77ef0ff08b7e6090ab8a59d8bad1962f122f74f29a62ee55dd0c79eef80cc7208139b7172098e4ac7a3d2d1e1dc8a4840327194a0a8e1156c823420b80f59370b45ed121f61ae73ee7a4687ef907998426a1d7ac7d11c2e1b6f5cf6f9bebcbed9546b7f7545ef6b7c39be18de824f531cf32907d54815bbb826fe484fac82e3bfde3a1a97af9461c524abdc67ed1b3c96074d5048053a0efdf77a7356d75dad4ce6de29b50582290bfcab10acdb56c3ec2dc1ad1e4c9e70c306d6491703452d314f2e4d619e1d2766c016ff15ebde96295fe00597e6bb7f9e6d1da07ff3c95c3977d2d44875cb862190478e8cc1deb91a5f378bb3e4058783613a01cab9145890d7f7f29c308683b28469d0c117435fb8d291bc4a176044760a1bde50295542bc209b720f6", 0x1000}, {&(0x7f0000001240)="06edbd4696022a0a51ba860debf965d60dc3d36bea58ac84be423e2171661898424b81752599a350c21487226d728ff2fcac5c0639c2b65cb499ba70ee137bbe8ca9cefe0da5cfaeba27fe016d580ed55d6270528c4f713414b8e8571c7ae8dcf7622650cb8926f67e6df29c73d972566a0050ec5832fb4361b1c0673efc552ac03cb604843c0da7a0a860b1a3ea837ad33f54d1391b42e2409fc5044cfda1c9b903cac0158898bf29281f88fcc5913d06e328821afc2c881978f286a638", 0xbe, 0x3}, {&(0x7f0000000200)="179e35a20f1186e35a1bc71a4727985e148ee990ee22", 0x16}, {&(0x7f0000001300)="9365360b81a2e3028fa711ff23cbb8ab4c32e4aead7007416165dfdef71083fa7008722f6adc55e3895e07a8f27e121d19d8d9b535d2af7bfb1290ba9fc28606c8502e129ce566b93a9165b01803e16e9ee0fb284426210edbd1f8d424a4b292a6345fe71f42", 0x66, 0x3}, {&(0x7f0000001380)="35642c1f8a20b35a60898a9d96dd828bdddc2b639c707c4dabc1f872c2a40e3566115b1a6de10bda90a12798d543be2418a78fd6dae8211856836dfbd99a035e6444423f8b0f79aca371e44f8e9c9e9dc20fa98846c6cf05b7e76b", 0x5b, 0x400}, {&(0x7f0000004440)="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", 0xf64, 0x3}, {&(0x7f0000000280)="fc663a420e21c729f99a43b2677aa20d7900c15e6acb786acf3c4c7e8d7254937e2c3b", 0x23, 0x2}]}, 0x2}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r6, 0x0, 0x3}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r8, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800, 0xffffffff}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x8000009}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0xfffffffc, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 817.85627ms ago: executing program 0 (id=3785): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 793.269802ms ago: executing program 0 (id=3786): pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) 753.254686ms ago: executing program 0 (id=3787): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xf, &(0x7f0000000080)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000001cc0)={0x0, 0xf07d, 0x400, 0x40000, 0x101}, &(0x7f0000000400), &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='cachefiles_ondemand_open\x00', r6}, 0x18) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYRES64=r9, @ANYRESDEC=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) socket(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 487.649722ms ago: executing program 4 (id=3788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x1}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 487.003012ms ago: executing program 4 (id=3789): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='+\x93[@\x00_\x16\xaa\xd8)\xea\xc4\x86\xab\xec\xf4\xf3\xce\x05\xc7\x8f1\x117\xc7q*\x98\x9f\xa9\x8b\xce\xf1') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) 326.004698ms ago: executing program 2 (id=3790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200a05000000000000000000020000000900010073797a3000000000090002"], 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r2, 0x1e67e000) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000977000/0x1000)=nil) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 269.062274ms ago: executing program 2 (id=3791): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r1) 268.389214ms ago: executing program 2 (id=3792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 253.341656ms ago: executing program 2 (id=3793): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) 197.333981ms ago: executing program 0 (id=3794): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 196.671721ms ago: executing program 0 (id=3795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88801) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x76eab42beba6fa74, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='mm_page_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 0 (id=3796): socket$inet6(0xa, 0x2, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000000200000000000000040000000300000002000000000000000100014000000000ff980000000000000500000000000000000000000000000000000000000000008c000000000000000000000000000000990a0000000000002b000000000000008100000000000000000000000000000000000000000000000300000000000000000000000000000063e455c3adb2c0c72b8f7c5f5f517c"]) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x40) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="9730faa2659ffdb2a1284ccb1a90a3deda059dba4c315eaa89085cf0ef7a76779a7a964c7e30bb031c5e4d928b7977406b790ea21d82031a9889232bb958ecb9a2c37922f2c5e552d86e006ab27dba10e1ed29081b3c1434207e8a3bc8bbfcacc5767a138431676c9ea7acf61cc5354919b63d"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x38) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000040000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c20000000180c200000108004600002c006500000006907864010101ac1414bb0703020000004e22", @ANYRESDEC, @ANYRES32=r3, @ANYBLOB="84d6988954edf8f3ab124e"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='scmi_xfer_begin\x00', r7}, 0x18) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x40002, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) (async) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x0, 0x0, r8, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r10}, 0x10) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffeed, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x13a8}, 0x1, 0x0, 0x0, 0x48850}, 0x0) truncate(&(0x7f0000002540)='./file2\x00', 0xe) (async, rerun: 32) close(0x3) (rerun: 32) kernel console output (not intermixed with test programs): [ 182.527303][T11625] lo speed is unknown, defaulting to 1000 [ 182.542611][T11625] lo speed is unknown, defaulting to 1000 [ 182.590600][T11641] loop4: detected capacity change from 0 to 1024 [ 182.598118][T11641] EXT4-fs: Ignoring removed orlov option [ 182.610713][T11508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.617919][T11641] EXT4-fs: test_dummy_encryption option not supported [ 182.646062][T11643] netlink: 'syz.5.3038': attribute type 14 has an invalid length. [ 182.814208][T11508] veth0_vlan: entered promiscuous mode [ 182.822525][T11508] veth1_vlan: entered promiscuous mode [ 182.848480][T11654] loop5: detected capacity change from 0 to 512 [ 182.860079][T11508] veth0_macvtap: entered promiscuous mode [ 182.871913][T11508] veth1_macvtap: entered promiscuous mode [ 182.879680][T11654] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 182.898643][T11508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.907804][T11656] loop4: detected capacity change from 0 to 512 [ 182.918443][T11508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.928432][T11656] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 182.933542][ T4913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.952860][ T4913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.982182][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 182.995345][ T4879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.019414][T11658] wireguard0: entered promiscuous mode [ 183.025297][T11658] wireguard0: entered allmulticast mode [ 183.035065][T11665] FAULT_INJECTION: forcing a failure. [ 183.035065][T11665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.048282][T11665] CPU: 1 UID: 0 PID: 11665 Comm: syz.4.3043 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.048308][T11665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.048320][T11665] Call Trace: [ 183.048328][T11665] [ 183.048335][T11665] __dump_stack+0x1d/0x30 [ 183.048356][T11665] dump_stack_lvl+0xe8/0x140 [ 183.048375][T11665] dump_stack+0x15/0x1b [ 183.048391][T11665] should_fail_ex+0x265/0x280 [ 183.048409][T11665] should_fail+0xb/0x20 [ 183.048433][T11665] should_fail_usercopy+0x1a/0x20 [ 183.048452][T11665] _copy_from_user+0x1c/0xb0 [ 183.048475][T11665] ___sys_sendmsg+0xc1/0x1d0 [ 183.048537][T11665] __x64_sys_sendmsg+0xd4/0x160 [ 183.048595][T11665] x64_sys_call+0x191e/0x3000 [ 183.048616][T11665] do_syscall_64+0xd2/0x200 [ 183.048635][T11665] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.048661][T11665] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 183.048735][T11665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.048754][T11665] RIP: 0033:0x7fb1c830f6c9 [ 183.048768][T11665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.048784][T11665] RSP: 002b:00007fb1c6d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.048801][T11665] RAX: ffffffffffffffda RBX: 00007fb1c8565fa0 RCX: 00007fb1c830f6c9 [ 183.048812][T11665] RDX: 0000000004000094 RSI: 0000200000000480 RDI: 0000000000000006 [ 183.048857][T11665] RBP: 00007fb1c6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 183.048868][T11665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.048934][T11665] R13: 00007fb1c8566038 R14: 00007fb1c8565fa0 R15: 00007ffcd95928a8 [ 183.048951][T11665] [ 183.228686][ T4879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.246140][ T4879] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.254476][ T4879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.290891][ T4879] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.299181][ T4879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.329345][ T4879] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.337831][ T4879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.341318][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'. [ 183.414597][ T29] kauditd_printk_skb: 889 callbacks suppressed [ 183.414615][ T29] audit: type=1326 audit(183.396:25284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.452783][ T4879] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.461088][ T4879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.470095][ T29] audit: type=1326 audit(183.426:25285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.493761][ T29] audit: type=1326 audit(183.426:25286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.517217][ T29] audit: type=1326 audit(183.426:25287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.518415][T11682] ip6t_srh: unknown srh match flags 4000 [ 183.540389][ T29] audit: type=1326 audit(183.426:25288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.569183][ T29] audit: type=1326 audit(183.426:25289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.592166][ T29] audit: type=1326 audit(183.426:25290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.615173][ T29] audit: type=1326 audit(183.446:25291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.638221][ T29] audit: type=1326 audit(183.446:25292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.648483][T11687] loop4: detected capacity change from 0 to 512 [ 183.661242][ T29] audit: type=1326 audit(183.446:25293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.2.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c239cf6c9 code=0x7ffc0000 [ 183.737395][T11687] EXT4-fs: inline encryption not supported [ 183.752197][T11687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.771683][T11682] loop2: detected capacity change from 0 to 8192 [ 183.779400][T11687] FAULT_INJECTION: forcing a failure. [ 183.779400][T11687] name failslab, interval 1, probability 0, space 0, times 0 [ 183.792126][T11687] CPU: 0 UID: 0 PID: 11687 Comm: syz.4.3052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.792178][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.792203][T11687] Call Trace: [ 183.792210][T11687] [ 183.792218][T11687] __dump_stack+0x1d/0x30 [ 183.792248][T11687] dump_stack_lvl+0xe8/0x140 [ 183.792273][T11687] dump_stack+0x15/0x1b [ 183.792301][T11687] should_fail_ex+0x265/0x280 [ 183.792326][T11687] should_failslab+0x8c/0xb0 [ 183.792363][T11687] __kmalloc_noprof+0xa5/0x570 [ 183.792393][T11687] ? ext4_htree_store_dirent+0x52/0x2e0 [ 183.792440][T11687] ext4_htree_store_dirent+0x52/0x2e0 [ 183.792475][T11687] htree_dirblock_to_tree+0x4a5/0x5b0 [ 183.792576][T11687] ext4_htree_fill_tree+0x423/0x9c0 [ 183.792587][T11693] siw: device registration error -23 [ 183.792613][T11687] ? __rcu_read_unlock+0x4f/0x70 [ 183.792720][T11687] ? bpf_trace_run2+0x124/0x1c0 [ 183.792771][T11687] ? kfree+0xdb/0x400 [ 183.792812][T11687] ext4_readdir+0x1729/0x1d40 [ 183.792850][T11687] ? 0xffffffff81000000 [ 183.792870][T11687] ? get_pid_task+0x96/0xd0 [ 183.792948][T11687] ? proc_fail_nth_write+0x13b/0x160 [ 183.792993][T11687] ? avc_policy_seqno+0x15/0x30 [ 183.793020][T11687] ? selinux_file_permission+0x1e4/0x320 [ 183.793103][T11687] iterate_dir+0x114/0x330 [ 183.793134][T11687] ? mutex_lock+0xd/0x30 [ 183.793249][T11687] __se_sys_getdents64+0x88/0x1b0 [ 183.793283][T11687] ? __pfx_filldir64+0x10/0x10 [ 183.793319][T11687] __x64_sys_getdents64+0x43/0x50 [ 183.793351][T11687] x64_sys_call+0x2dae/0x3000 [ 183.793447][T11687] do_syscall_64+0xd2/0x200 [ 183.793542][T11687] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.793584][T11687] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 183.793633][T11687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.793664][T11687] RIP: 0033:0x7fb1c830f6c9 [ 183.793686][T11687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.793738][T11687] RSP: 002b:00007fb1c6d77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 183.793765][T11687] RAX: ffffffffffffffda RBX: 00007fb1c8565fa0 RCX: 00007fb1c830f6c9 [ 183.793784][T11687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 183.793802][T11687] RBP: 00007fb1c6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 183.793818][T11687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.793835][T11687] R13: 00007fb1c8566038 R14: 00007fb1c8565fa0 R15: 00007ffcd95928a8 [ 183.793863][T11687] [ 183.844037][T11696] siw: device registration error -23 [ 184.052192][T11685] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.062925][T11685] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.073765][T11682] loop2: p1 p2 p3 p4 [ 184.075646][T11245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.082410][T11682] loop2: p1 size 196608 extends beyond EOD, truncated [ 184.097307][T11682] loop2: p2 start 164919041 is beyond EOD, truncated [ 184.104075][T11682] loop2: p3 size 66846464 extends beyond EOD, truncated [ 184.115996][T11682] loop2: p4 size 37048832 extends beyond EOD, truncated [ 184.175022][T11685] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.185415][T11685] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.305662][T11685] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.316127][T11685] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.404563][T11710] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.518482][T11685] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.528885][T11685] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.563275][T11710] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.598192][T11712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.726337][T11714] loop1: detected capacity change from 0 to 512 [ 184.733406][T11716] serio: Serial port ptm0 [ 184.755115][ T4968] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.764050][ T4968] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.777869][T11710] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.792208][T11714] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 184.812193][ T4968] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.820431][ T4968] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.829247][ T4968] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.837529][ T4968] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.846950][ T4968] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.855226][ T4968] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.875257][T11719] netlink: 'syz.5.3060': attribute type 14 has an invalid length. [ 184.885963][T11710] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.005748][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.023593][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.047980][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.066583][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.081821][T11732] loop1: detected capacity change from 0 to 764 [ 185.095281][T11728] loop5: detected capacity change from 0 to 512 [ 185.103146][T11732] rock: directory entry would overflow storage [ 185.109401][T11732] rock: sig=0x5245, size=8, remaining=5 [ 185.124503][T11728] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.140442][T11728] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #17: comm syz.5.3064: corrupted in-inode xattr: invalid size in ea xattr [ 185.157664][T11728] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3064: couldn't read orphan inode 17 (err -117) [ 185.177392][T11728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.254942][T10685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.299027][T11739] loop5: detected capacity change from 0 to 512 [ 185.330256][T11739] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 185.345524][T11739] EXT4-fs (loop5): mount failed [ 185.376512][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 185.510978][T11771] loop4: detected capacity change from 0 to 512 [ 185.517929][T11771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.528858][T11771] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #17: comm syz.4.3080: corrupted in-inode xattr: invalid size in ea xattr [ 185.543396][T11771] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3080: couldn't read orphan inode 17 (err -117) [ 185.543507][T11770] loop5: detected capacity change from 0 to 8192 [ 185.561917][T11771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.732137][T11245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.814349][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3088'. [ 185.844230][T11791] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.854056][T11791] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.935070][T11791] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.944918][T11791] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.066120][T11791] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.076005][T11791] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.157905][T11712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.282799][T11791] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.292706][T11791] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.403809][T11712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.443984][T11712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.507077][ T4968] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.518408][ T4968] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.530210][ T4968] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.555465][ T4968] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.617782][T11808] loop2: detected capacity change from 0 to 764 [ 186.640798][T11808] rock: directory entry would overflow storage [ 186.647150][T11808] rock: sig=0x5245, size=8, remaining=5 [ 186.865350][T11818] loop5: detected capacity change from 0 to 128 [ 186.893317][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 186.908633][T11818] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.923325][T11825] wireguard0: entered promiscuous mode [ 186.928828][T11825] wireguard0: entered allmulticast mode [ 186.953979][T11818] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.972813][T11818] FAULT_INJECTION: forcing a failure. [ 186.972813][T11818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.986086][T11818] CPU: 0 UID: 0 PID: 11818 Comm: syz.5.3099 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.986195][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.986212][T11818] Call Trace: [ 186.986220][T11818] [ 186.986230][T11818] __dump_stack+0x1d/0x30 [ 186.986259][T11818] dump_stack_lvl+0xe8/0x140 [ 186.986364][T11818] dump_stack+0x15/0x1b [ 186.986407][T11818] should_fail_ex+0x265/0x280 [ 186.986434][T11818] should_fail+0xb/0x20 [ 186.986455][T11818] should_fail_usercopy+0x1a/0x20 [ 186.986477][T11818] strncpy_from_user+0x25/0x230 [ 186.986590][T11818] ? kmem_cache_alloc_noprof+0x242/0x480 [ 186.986630][T11818] ? getname_flags+0x80/0x3b0 [ 186.986680][T11818] getname_flags+0xae/0x3b0 [ 186.986729][T11818] __x64_sys_rename+0x40/0x70 [ 186.986803][T11818] x64_sys_call+0x1f9/0x3000 [ 186.986830][T11818] do_syscall_64+0xd2/0x200 [ 186.986898][T11818] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.986936][T11818] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 186.986980][T11818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.987044][T11818] RIP: 0033:0x7f17e008f6c9 [ 186.987062][T11818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.987085][T11818] RSP: 002b:00007f17deaef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 186.987109][T11818] RAX: ffffffffffffffda RBX: 00007f17e02e5fa0 RCX: 00007f17e008f6c9 [ 186.987125][T11818] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000180 [ 186.987142][T11818] RBP: 00007f17deaef090 R08: 0000000000000000 R09: 0000000000000000 [ 186.987157][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.987181][T11818] R13: 00007f17e02e6038 R14: 00007f17e02e5fa0 R15: 00007fffe97bf048 [ 186.987264][T11818] [ 187.211877][ T37] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.271005][T11837] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.334155][T11837] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.402583][T11837] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.443587][T11837] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.485378][ T4968] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.493636][ T4968] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.517414][ T4968] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.525703][ T4968] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.551199][ T4968] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.559467][ T4968] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.573911][ T4968] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.582232][ T4968] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.707891][T11855] syzkaller0: entered promiscuous mode [ 187.713587][T11855] syzkaller0: entered allmulticast mode [ 187.836256][T11861] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3117'. [ 187.999022][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3118'. [ 188.008078][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3118'. [ 188.017166][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3118'. [ 188.023570][T11880] tmpfs: Bad value for 'mpol' [ 188.144385][T11873] netlink: 'syz.5.3118': attribute type 5 has an invalid length. [ 188.166726][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3118'. [ 188.175786][T11866] netlink: 'syz.5.3118': attribute type 6 has an invalid length. [ 188.221011][ T3415] IPVS: starting estimator thread 0... [ 188.225660][T11873] batman_adv: batadv0: Adding interface: vxlan1 [ 188.232901][T11873] batman_adv: batadv0: The MTU of interface vxlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.288536][T11873] batman_adv: batadv0: Interface activated: vxlan1 [ 188.406012][T11888] IPVS: using max 1728 ests per chain, 86400 per kthread [ 188.547428][T11899] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.674736][T11908] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.684736][T11908] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.726279][T11899] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.838295][T11908] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.848201][T11908] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.882495][T11889] lo speed is unknown, defaulting to 1000 [ 188.909878][T11899] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.931570][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 188.931587][ T29] audit: type=1400 audit(188.916:25528): avc: denied { ioctl } for pid=11911 comm="syz.1.3130" path="socket:[44802]" dev="sockfs" ino=44802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.964697][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3130'. [ 188.984807][T11908] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.994940][T11908] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.069817][T11899] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.254078][ T4879] bond0 (unregistering): Released all slaves [ 189.265946][T11908] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.275761][T11908] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.322369][T11889] chnl_net:caif_netlink_parms(): no params data found [ 189.381883][ T4879] hsr_slave_0: left promiscuous mode [ 189.387602][ T4879] hsr_slave_1: left promiscuous mode [ 189.459926][T11889] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.467057][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.474762][T11889] bridge_slave_0: entered allmulticast mode [ 189.482599][T11889] bridge_slave_0: entered promiscuous mode [ 189.489878][T11889] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.497105][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.504524][T11889] bridge_slave_1: entered allmulticast mode [ 189.511238][T11889] bridge_slave_1: entered promiscuous mode [ 189.532341][T11889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.545037][T11889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.559878][ T4927] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.568171][ T4927] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.584143][ T4927] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.592419][ T4927] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.601508][T11889] team0: Port device team_slave_0 added [ 189.610159][ T4927] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.618471][ T4927] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.627427][T11889] team0: Port device team_slave_1 added [ 189.645009][ T4927] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.653297][ T4927] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.662328][T11889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.669297][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.695335][T11889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.706885][T11889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.713904][T11919] loop5: detected capacity change from 0 to 764 [ 189.720256][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.720598][T11919] rock: directory entry would overflow storage [ 189.746270][T11889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.763454][T11919] rock: sig=0x5245, size=8, remaining=5 [ 189.778992][T11889] hsr_slave_0: entered promiscuous mode [ 189.785271][T11889] hsr_slave_1: entered promiscuous mode [ 189.791309][T11889] debugfs: 'hsr0' already exists in 'hsr' [ 189.797058][T11889] Cannot create hsr debugfs directory [ 189.928298][ T29] audit: type=1326 audit(189.906:25529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 189.951756][ T29] audit: type=1326 audit(189.906:25530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 189.954478][T11929] ip6t_srh: unknown srh match flags 4000 [ 189.974955][ T29] audit: type=1326 audit(189.906:25531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 189.975003][ T29] audit: type=1326 audit(189.906:25532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 190.026795][ T29] audit: type=1326 audit(189.906:25533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 190.049859][ T29] audit: type=1326 audit(189.906:25534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 190.053131][T11929] loop5: detected capacity change from 0 to 8192 [ 190.072880][ T29] audit: type=1326 audit(189.916:25535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 190.072923][ T29] audit: type=1326 audit(189.916:25536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 190.125224][ T29] audit: type=1326 audit(189.916:25537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11928 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 190.166535][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.175279][T11929] loop5: p1 p2 p3 p4 [ 190.179414][ T4879] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.181004][T11929] loop5: p1 size 196608 extends beyond EOD, truncated [ 190.195239][T11929] loop5: p2 start 164919041 is beyond EOD, truncated [ 190.202016][T11929] loop5: p3 size 66846464 extends beyond EOD, truncated [ 190.209633][T11929] loop5: p4 size 37048832 extends beyond EOD, truncated [ 190.212457][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.229428][ T4879] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.267853][T11889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.287507][T11889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.297195][T11889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.319150][T11889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.539140][T11889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.562622][T11889] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.585276][T11889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.596017][T11889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.632305][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.639427][ T4913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.664230][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.671530][ T4913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.792256][T11889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.031178][T11889] veth0_vlan: entered promiscuous mode [ 191.040877][T11889] veth1_vlan: entered promiscuous mode [ 191.057195][T11889] veth0_macvtap: entered promiscuous mode [ 191.064923][T11889] veth1_macvtap: entered promiscuous mode [ 191.075696][T11889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.087461][T11889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.098679][ T4879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.108277][ T4879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.117702][ T4879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.127004][ T4879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.351134][T11963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3139'. [ 191.475136][T11972] loop5: detected capacity change from 0 to 1024 [ 191.481921][T11972] EXT4-fs: inline encryption not supported [ 191.504697][T11972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.527914][ T4879] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.559341][ T4879] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.599943][T11984] loop4: detected capacity change from 0 to 764 [ 191.611128][ T4879] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.619419][ T4879] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.629835][T11984] rock: directory entry would overflow storage [ 191.636274][T11984] rock: sig=0x5245, size=8, remaining=5 [ 191.645050][ T4879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.659660][ T4879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.668342][ T4879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.688103][ T4879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.773285][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3141'. [ 191.905300][T12001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3151'. [ 191.937778][T12003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3152'. [ 191.971654][T12007] xt_hashlimit: max too large, truncated to 1048576 [ 192.043428][T12008] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.141027][T12012] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.151032][T12008] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.233577][T12008] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.293371][T12008] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.436913][T10685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.524222][T12033] loop5: detected capacity change from 0 to 512 [ 192.532202][T12033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.543589][T12033] EXT4-fs (loop5): 1 truncate cleaned up [ 192.549669][T12033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.572814][T12040] netlink: 'syz.4.3166': attribute type 14 has an invalid length. [ 192.582385][T10685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.627756][T12044] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 192.634353][T12044] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 192.642201][T12044] vhci_hcd vhci_hcd.0: Device attached [ 192.651583][T12045] vhci_hcd: connection closed [ 192.651860][ T4894] vhci_hcd: stop threads [ 192.660857][ T4894] vhci_hcd: release socket [ 192.665596][ T4894] vhci_hcd: disconnect device [ 192.678614][T12048] netlink: 'syz.4.3169': attribute type 14 has an invalid length. [ 192.889920][T12065] __nla_validate_parse: 4 callbacks suppressed [ 192.889953][T12065] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3177'. [ 192.921795][T12067] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12067 comm=syz.4.3178 [ 193.176227][T12074] loop1: detected capacity change from 0 to 764 [ 193.197292][T12074] rock: directory entry would overflow storage [ 193.203574][T12074] rock: sig=0x5245, size=8, remaining=5 [ 193.324630][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3183'. [ 193.326306][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3189'. [ 193.333757][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3183'. [ 193.355518][T12088] syz_tun: entered promiscuous mode [ 193.367449][T12088] syz_tun: left promiscuous mode [ 193.373123][T12091] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3188'. [ 193.386879][T12093] loop5: detected capacity change from 0 to 764 [ 193.397167][T12093] rock: directory entry would overflow storage [ 193.403506][T12093] rock: sig=0x5245, size=8, remaining=5 [ 193.440777][T12101] ip6t_srh: unknown srh match flags 4000 [ 193.460359][T12099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3193'. [ 193.490102][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3195'. [ 193.520460][T12108] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3196'. [ 193.598608][T12110] syzkaller0: entered promiscuous mode [ 193.604264][T12110] syzkaller0: entered allmulticast mode [ 193.625136][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3200'. [ 193.806389][T12137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3208'. [ 193.851820][T12143] FAULT_INJECTION: forcing a failure. [ 193.851820][T12143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.865142][T12143] CPU: 0 UID: 0 PID: 12143 Comm: syz.0.3210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.865302][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.865320][T12143] Call Trace: [ 193.865328][T12143] [ 193.865337][T12143] __dump_stack+0x1d/0x30 [ 193.865391][T12143] dump_stack_lvl+0xe8/0x140 [ 193.865420][T12143] dump_stack+0x15/0x1b [ 193.865444][T12143] should_fail_ex+0x265/0x280 [ 193.865471][T12143] should_fail_alloc_page+0xf2/0x100 [ 193.865558][T12143] __alloc_frozen_pages_noprof+0xff/0x360 [ 193.865590][T12143] alloc_pages_mpol+0xb3/0x260 [ 193.865620][T12143] vma_alloc_folio_noprof+0x1aa/0x300 [ 193.865652][T12143] do_wp_page+0xf60/0x2510 [ 193.865752][T12143] ? __rcu_read_lock+0x37/0x50 [ 193.865789][T12143] ? css_rstat_updated+0xb7/0x240 [ 193.865815][T12143] ? __rcu_read_lock+0x37/0x50 [ 193.865852][T12143] handle_mm_fault+0x77d/0x2be0 [ 193.865887][T12143] ? vma_start_read+0x141/0x1f0 [ 193.865960][T12143] do_user_addr_fault+0x630/0x1080 [ 193.866042][T12143] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 193.866172][T12143] exc_page_fault+0x62/0xa0 [ 193.866213][T12143] asm_exc_page_fault+0x26/0x30 [ 193.866238][T12143] RIP: 0033:0x7fd974ca09e0 [ 193.866257][T12143] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 193.866337][T12143] RSP: 002b:00007fd9738464a0 EFLAGS: 00010202 [ 193.866357][T12143] RAX: 000000000000b400 RBX: 00007fd973846540 RCX: 0000000000000063 [ 193.866374][T12143] RDX: 000000000001ad1d RSI: 0000000000004d1e RDI: 00007fd9738465e0 [ 193.866391][T12143] RBP: 0000000000000064 R08: 00007fd96b427000 R09: 0000000000000073 [ 193.866452][T12143] R10: 00002000000004c2 R11: 00000000000002e9 R12: 0000000000004001 [ 193.866488][T12143] R13: 00007fd974e7dc40 R14: 000000000000001c R15: 00007fd9738465e0 [ 193.866512][T12143] [ 193.866523][T12143] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 193.950470][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 193.950490][ T29] audit: type=1400 audit(193.926:25751): avc: denied { write } for pid=12144 comm="syz.4.3213" path="socket:[45667]" dev="sockfs" ino=45667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.130743][T12147] lo speed is unknown, defaulting to 1000 [ 194.133424][ T3414] Process accounting resumed [ 194.147003][T12152] ip6t_srh: unknown srh match flags 4000 [ 194.167386][ T29] audit: type=1400 audit(194.086:25752): avc: denied { read } for pid=12144 comm="syz.4.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.186434][ T29] audit: type=1326 audit(194.126:25753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.209427][ T29] audit: type=1326 audit(194.126:25754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.232431][ T29] audit: type=1326 audit(194.126:25755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.255576][ T29] audit: type=1326 audit(194.126:25756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.269372][T12150] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 194.278608][ T29] audit: type=1326 audit(194.126:25757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.278644][ T29] audit: type=1326 audit(194.126:25758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.278698][ T29] audit: type=1326 audit(194.126:25759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.357527][ T29] audit: type=1326 audit(194.126:25760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12151 comm="syz.0.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 194.678927][T12163] xt_hashlimit: max too large, truncated to 1048576 [ 194.917512][T12178] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.927339][T12178] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.994491][T12178] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.004332][T12178] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.044979][T12178] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.054915][T12178] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.093366][T12178] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.103197][T12178] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.139460][T12182] 9pnet_fd: Insufficient options for proto=fd [ 195.225221][ T37] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.233529][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.270577][T12182] FAULT_INJECTION: forcing a failure. [ 195.270577][T12182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.283727][T12182] CPU: 1 UID: 0 PID: 12182 Comm: syz.0.3225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.283760][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.283777][T12182] Call Trace: [ 195.283786][T12182] [ 195.283796][T12182] __dump_stack+0x1d/0x30 [ 195.283869][T12182] dump_stack_lvl+0xe8/0x140 [ 195.283890][T12182] dump_stack+0x15/0x1b [ 195.283909][T12182] should_fail_ex+0x265/0x280 [ 195.283935][T12182] should_fail+0xb/0x20 [ 195.283951][T12182] should_fail_usercopy+0x1a/0x20 [ 195.283977][T12182] _copy_to_user+0x20/0xa0 [ 195.284055][T12182] simple_read_from_buffer+0xb5/0x130 [ 195.284090][T12182] proc_fail_nth_read+0x10e/0x150 [ 195.284126][T12182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.284217][T12182] vfs_read+0x1a8/0x770 [ 195.284253][T12182] ? __cond_resched+0x4e/0x90 [ 195.284382][T12182] ksys_read+0xda/0x1a0 [ 195.284420][T12182] __x64_sys_read+0x40/0x50 [ 195.284455][T12182] x64_sys_call+0x27c0/0x3000 [ 195.284481][T12182] do_syscall_64+0xd2/0x200 [ 195.284501][T12182] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 195.284613][T12182] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 195.284732][T12182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.284770][T12182] RIP: 0033:0x7fd974dde0dc [ 195.284870][T12182] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.284902][T12182] RSP: 002b:00007fd973847030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.284921][T12182] RAX: ffffffffffffffda RBX: 00007fd975035fa0 RCX: 00007fd974dde0dc [ 195.284956][T12182] RDX: 000000000000000f RSI: 00007fd9738470a0 RDI: 0000000000000005 [ 195.284974][T12182] RBP: 00007fd973847090 R08: 0000000000000000 R09: 0000000000000000 [ 195.284991][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.285007][T12182] R13: 00007fd975036038 R14: 00007fd975035fa0 R15: 00007ffd31fde168 [ 195.285033][T12182] [ 195.501176][T12183] wireguard0: entered promiscuous mode [ 195.506682][T12183] wireguard0: entered allmulticast mode [ 195.529216][ T37] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.537592][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.552923][ T37] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.561291][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.569630][ T37] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.578019][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.667530][T12197] syzkaller0: entered promiscuous mode [ 195.673344][T12197] syzkaller0: entered allmulticast mode [ 195.711697][T12203] xt_hashlimit: max too large, truncated to 1048576 [ 195.769629][T12207] syzkaller0: entered promiscuous mode [ 195.775416][T12207] syzkaller0: entered allmulticast mode [ 195.820120][T12209] syzkaller0: entered promiscuous mode [ 195.825900][T12209] syzkaller0: entered allmulticast mode [ 196.070288][T12229] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.080101][T12229] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.143566][T12229] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.153458][T12229] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.196994][T12233] loop4: detected capacity change from 0 to 128 [ 196.244779][T12229] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.254851][T12229] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.269972][T12233] EXT4-fs: Ignoring removed nobh option [ 196.313804][T12229] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.323720][T12229] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.343478][T12235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12235 comm=syz.0.3249 [ 196.360279][T12233] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.416377][T11245] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.483002][T12247] syzkaller0: entered promiscuous mode [ 196.488544][T12247] syzkaller0: entered allmulticast mode [ 196.570515][T12256] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3257' sets config #0 [ 196.611914][T12256] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3257' sets config #1 [ 196.669617][T12256] lo speed is unknown, defaulting to 1000 [ 196.704312][T12264] xt_hashlimit: max too large, truncated to 1048576 [ 196.835914][T12271] netlink: 'syz.4.3262': attribute type 14 has an invalid length. [ 196.856409][ T4913] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.867826][ T4913] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.885035][ T4913] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.900792][ T4913] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.052543][T12277] netlink: 'syz.4.3265': attribute type 4 has an invalid length. [ 197.065049][T12282] syzkaller0: entered promiscuous mode [ 197.070558][T12282] syzkaller0: entered allmulticast mode [ 197.195680][T12289] xt_hashlimit: max too large, truncated to 1048576 [ 197.238551][T12298] wireguard0: entered promiscuous mode [ 197.244245][T12298] wireguard0: entered allmulticast mode [ 197.253486][T12301] netlink: 'syz.4.3274': attribute type 14 has an invalid length. [ 197.603444][T12330] netlink: 'syz.1.3286': attribute type 14 has an invalid length. [ 197.715292][T12336] syzkaller0: entered promiscuous mode [ 197.720876][T12336] syzkaller0: entered allmulticast mode [ 197.789901][T12339] loop1: detected capacity change from 0 to 512 [ 197.797036][T12339] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.808010][T12339] EXT4-fs (loop1): 1 truncate cleaned up [ 197.814262][T12339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.854987][T10454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.882882][T12349] ip6t_srh: unknown srh match flags 4000 [ 197.932484][T12351] __nla_validate_parse: 14 callbacks suppressed [ 197.932502][T12351] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 197.939145][T12349] loop1: detected capacity change from 0 to 8192 [ 197.971054][T12355] netlink: 'syz.0.3296': attribute type 21 has an invalid length. [ 197.979045][T12355] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 197.987041][T12349] loop1: p1 p2 p3 p4 [ 197.988135][T12355] netlink: 'syz.0.3296': attribute type 21 has an invalid length. [ 197.993125][T12349] loop1: p1 size 196608 extends beyond EOD, truncated [ 198.002523][T12355] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 198.007862][T12349] loop1: p2 start 164919041 is beyond EOD, truncated [ 198.020547][T12349] loop1: p3 size 66846464 extends beyond EOD, truncated [ 198.028803][T12349] loop1: p4 size 37048832 extends beyond EOD, truncated [ 198.127538][T12363] netlink: 'syz.0.3298': attribute type 14 has an invalid length. [ 198.302190][T12386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12386 comm=syz.1.3308 [ 198.370337][T12387] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.370378][T12387] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.423150][T12394] netlink: 'syz.4.3310': attribute type 14 has an invalid length. [ 198.442384][T12387] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.452271][T12387] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.480549][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 198.526308][T12400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.539704][T12387] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.549559][T12387] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.577961][T12404] FAULT_INJECTION: forcing a failure. [ 198.577961][T12404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.591141][T12404] CPU: 1 UID: 0 PID: 12404 Comm: syz.4.3313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 198.591177][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.591260][T12404] Call Trace: [ 198.591269][T12404] [ 198.591279][T12404] __dump_stack+0x1d/0x30 [ 198.591305][T12404] dump_stack_lvl+0xe8/0x140 [ 198.591326][T12404] dump_stack+0x15/0x1b [ 198.591418][T12404] should_fail_ex+0x265/0x280 [ 198.591445][T12404] should_fail+0xb/0x20 [ 198.591468][T12404] should_fail_usercopy+0x1a/0x20 [ 198.591552][T12404] _copy_from_user+0x1c/0xb0 [ 198.591587][T12404] __sys_bpf+0x183/0x7c0 [ 198.591624][T12404] __x64_sys_bpf+0x41/0x50 [ 198.591681][T12404] x64_sys_call+0x2aee/0x3000 [ 198.591712][T12404] do_syscall_64+0xd2/0x200 [ 198.591805][T12404] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.591837][T12404] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 198.591872][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.591931][T12404] RIP: 0033:0x7fb1c830f6c9 [ 198.591949][T12404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.591966][T12404] RSP: 002b:00007fb1c6d77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.591985][T12404] RAX: ffffffffffffffda RBX: 00007fb1c8565fa0 RCX: 00007fb1c830f6c9 [ 198.592071][T12404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 198.592088][T12404] RBP: 00007fb1c6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 198.592117][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.592133][T12404] R13: 00007fb1c8566038 R14: 00007fb1c8565fa0 R15: 00007ffcd95928a8 [ 198.592177][T12404] [ 198.778172][T12400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.812785][T12387] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.822650][T12387] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.855137][T12400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.916049][ T37] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.924319][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.943845][T12400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.976753][ T4927] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.985002][ T4927] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.999546][ T4927] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.007812][ T4927] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.022776][ T4913] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.031044][ T4913] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.064895][ T4927] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.078237][ T4913] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.090543][ T4913] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.102644][ T4913] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.147217][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 199.147235][ T29] audit: type=1400 audit(199.126:26095): avc: denied { create } for pid=12410 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.172732][ T29] audit: type=1400 audit(199.126:26096): avc: denied { write } for pid=12410 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 199.245258][ T29] audit: type=1400 audit(199.226:26097): avc: denied { setopt } for pid=12417 comm="syz.1.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.277250][ T29] audit: type=1400 audit(199.246:26098): avc: denied { ioctl } for pid=12417 comm="syz.1.3319" path="socket:[48488]" dev="sockfs" ino=48488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.301915][ T29] audit: type=1400 audit(199.246:26099): avc: denied { write } for pid=12417 comm="syz.1.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 199.340201][T12425] netlink: 'syz.1.3321': attribute type 14 has an invalid length. [ 199.358479][T12423] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3320'. [ 199.387261][ T29] audit: type=1400 audit(199.366:26100): avc: denied { append } for pid=12427 comm="syz.0.3322" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 199.410520][T12428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.417947][T12428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.426069][T12428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.433541][T12428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.462331][ T29] audit: type=1400 audit(199.446:26101): avc: denied { read } for pid=12433 comm="syz.1.3324" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 199.493502][ T29] audit: type=1400 audit(199.446:26102): avc: denied { open } for pid=12433 comm="syz.1.3324" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 199.595343][ T29] audit: type=1400 audit(199.576:26103): avc: denied { ioctl } for pid=12433 comm="syz.1.3324" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 200.084993][ T37] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.093272][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.102762][ T37] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.111012][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.119918][ T37] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.128169][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.137065][ T37] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.145319][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.221673][ T29] audit: type=1326 audit(200.206:26104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12427 comm="syz.0.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7fc00000 [ 200.287892][T12453] loop5: detected capacity change from 0 to 764 [ 200.295827][T12453] rock: directory entry would overflow storage [ 200.302080][T12453] rock: sig=0x5245, size=8, remaining=5 [ 200.509189][T12460] netlink: 'syz.1.3333': attribute type 14 has an invalid length. [ 200.681014][T12464] lo speed is unknown, defaulting to 1000 [ 201.092079][T12481] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3339'. [ 201.198915][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 201.303515][T12490] lo speed is unknown, defaulting to 1000 [ 201.362813][T12492] loop4: detected capacity change from 0 to 8192 [ 201.397036][T12498] ip6t_srh: unknown srh match flags 4000 [ 201.449744][T12498] loop5: detected capacity change from 0 to 8192 [ 201.481486][T12498] loop5: p1 p2 p3 p4 [ 201.485744][T12498] loop5: p1 size 196608 extends beyond EOD, truncated [ 201.494228][T12500] xt_hashlimit: max too large, truncated to 1048576 [ 201.502246][T12498] loop5: p2 start 164919041 is beyond EOD, truncated [ 201.508994][T12498] loop5: p3 size 66846464 extends beyond EOD, truncated [ 201.523538][T12498] loop5: p4 size 37048832 extends beyond EOD, truncated [ 201.659736][T12508] loop4: detected capacity change from 0 to 1024 [ 201.667121][T12508] EXT4-fs: Ignoring removed orlov option [ 201.673512][T12508] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 201.695707][T12508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.732527][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3353'. [ 201.738346][T12508] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.751676][T12508] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.757232][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3354'. [ 201.792704][T12508] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.803146][T12508] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.856448][T12508] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.866360][T12508] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.887849][T12534] FAULT_INJECTION: forcing a failure. [ 201.887849][T12534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.901158][T12534] CPU: 1 UID: 0 PID: 12534 Comm: syz.5.3357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.901256][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.901270][T12534] Call Trace: [ 201.901277][T12534] [ 201.901286][T12534] __dump_stack+0x1d/0x30 [ 201.901315][T12534] dump_stack_lvl+0xe8/0x140 [ 201.901342][T12534] dump_stack+0x15/0x1b [ 201.901360][T12534] should_fail_ex+0x265/0x280 [ 201.901396][T12534] should_fail+0xb/0x20 [ 201.901476][T12534] should_fail_usercopy+0x1a/0x20 [ 201.901504][T12534] _copy_from_iter+0xd2/0xe80 [ 201.901532][T12534] ? __build_skb_around+0x1ab/0x200 [ 201.901568][T12534] ? __alloc_skb+0x223/0x320 [ 201.901605][T12534] netlink_sendmsg+0x471/0x6b0 [ 201.901728][T12534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.901750][T12534] __sock_sendmsg+0x145/0x180 [ 201.901775][T12534] ____sys_sendmsg+0x31e/0x4e0 [ 201.901818][T12534] ___sys_sendmsg+0x17b/0x1d0 [ 201.901854][T12534] __x64_sys_sendmsg+0xd4/0x160 [ 201.901905][T12534] x64_sys_call+0x191e/0x3000 [ 201.901935][T12534] do_syscall_64+0xd2/0x200 [ 201.901955][T12534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 201.901988][T12534] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 201.902022][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.902065][T12534] RIP: 0033:0x7f17e008f6c9 [ 201.902163][T12534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.902182][T12534] RSP: 002b:00007f17deaef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.902218][T12534] RAX: ffffffffffffffda RBX: 00007f17e02e5fa0 RCX: 00007f17e008f6c9 [ 201.902234][T12534] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 201.902249][T12534] RBP: 00007f17deaef090 R08: 0000000000000000 R09: 0000000000000000 [ 201.902265][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.902342][T12534] R13: 00007f17e02e6038 R14: 00007f17e02e5fa0 R15: 00007fffe97bf048 [ 201.902368][T12534] [ 202.152471][T12542] xt_hashlimit: max too large, truncated to 1048576 [ 202.178497][T12508] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.188369][T12508] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.261180][ T37] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.269408][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.282398][ T4894] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.290687][ T4894] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.307146][ T4894] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.315531][ T4894] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.325852][ T4894] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.334124][ T4894] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.363824][T11245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.438473][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3366'. [ 202.518333][T12576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12576 comm=syz.4.3368 [ 202.542960][T12577] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.552831][T12577] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.553064][T12579] loop2: detected capacity change from 0 to 512 [ 202.573354][T12579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.616972][T12577] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.626915][T12577] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.644321][T12579] 9pnet_fd: Insufficient options for proto=fd [ 202.685462][T11508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.703318][T12577] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.713316][T12577] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.792185][T12591] loop2: detected capacity change from 0 to 512 [ 202.809783][T12591] EXT4-fs (loop2): orphan cleanup on readonly fs [ 202.826050][T12591] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3370: bad orphan inode 13 [ 202.827864][T12577] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.846289][T12577] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.861437][T12591] ext4_test_bit(bit=12, block=18) = 1 [ 202.866864][T12591] is_bad_inode(inode)=0 [ 202.871149][T12591] NEXT_ORPHAN(inode)=2130706432 [ 202.876001][T12591] max_ino=32 [ 202.879286][T12591] i_nlink=1 [ 202.903700][T12591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.924778][T12591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.939170][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 202.960072][T12591] hsr_slave_1 (unregistering): left promiscuous mode [ 203.279238][T12621] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3375'. [ 203.428231][T12634] xt_hashlimit: max too large, truncated to 1048576 [ 203.510694][T12637] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3382'. [ 203.765062][T12658] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3392'. [ 203.842157][T12661] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.903936][T12661] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.963319][T12661] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.013422][T12661] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.036025][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3394'. [ 204.108995][ T4894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.135470][ T4894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.164059][ T4894] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.174268][ T4894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.228266][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 204.228284][ T29] audit: type=1400 audit(204.206:26330): avc: denied { write } for pid=12694 comm="syz.4.3399" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.257890][ T29] audit: type=1400 audit(204.206:26331): avc: denied { open } for pid=12694 comm="syz.4.3399" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.282202][ T29] audit: type=1400 audit(204.236:26332): avc: denied { ioctl } for pid=12694 comm="syz.4.3399" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 204.348969][T12704] loop1: detected capacity change from 0 to 764 [ 204.356617][T12704] rock: directory entry would overflow storage [ 204.360461][T12695] lo speed is unknown, defaulting to 1000 [ 204.362890][T12704] rock: sig=0x5245, size=8, remaining=5 [ 204.379883][T12706] netlink: 'syz.4.3399': attribute type 10 has an invalid length. [ 204.395441][T12706] team0: Port device dummy0 added [ 204.417273][T12695] netlink: 'syz.4.3399': attribute type 10 has an invalid length. [ 204.432428][T12695] team0: Port device dummy0 removed [ 204.440654][T12695] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.500252][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3405'. [ 204.511334][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 204.523446][ T29] audit: type=1326 audit(204.506:26333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.4.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c830f6c9 code=0x7ffc0000 [ 204.528813][T12739] xt_hashlimit: max too large, truncated to 1048576 [ 204.551737][T12735] wireguard0: entered promiscuous mode [ 204.558843][T12735] wireguard0: entered allmulticast mode [ 204.565436][ T29] audit: type=1326 audit(204.506:26334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.4.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1c830df10 code=0x7ffc0000 [ 204.588581][ T29] audit: type=1326 audit(204.506:26335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.4.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1c830df10 code=0x7ffc0000 [ 204.613073][ T29] audit: type=1326 audit(204.506:26336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.4.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c830f6c9 code=0x7ffc0000 [ 204.636245][ T29] audit: type=1326 audit(204.506:26337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.4.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c830f6c9 code=0x7ffc0000 [ 204.659220][ T29] audit: type=1326 audit(204.506:26338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.4.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c830f6c9 code=0x7ffc0000 [ 204.682183][ T29] audit: type=1326 audit(204.506:26339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12738 comm="syz.4.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c830f6c9 code=0x7ffc0000 [ 204.773485][T12758] loop4: detected capacity change from 0 to 512 [ 204.783176][T12758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.802210][T12758] 9pnet_fd: Insufficient options for proto=fd [ 204.911457][T11245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.943017][T12770] loop2: detected capacity change from 0 to 764 [ 204.970240][T12770] rock: directory entry would overflow storage [ 204.976535][T12770] rock: sig=0x5245, size=8, remaining=5 [ 205.029806][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3416'. [ 205.048867][T12776] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.058786][T12776] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.104562][T12776] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.114426][T12776] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.136733][T12788] siw: device registration error -23 [ 205.173408][T12776] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.183218][T12776] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.253526][T12776] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.263359][T12776] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.340490][T12776] debugfs: 'netdev@ffff88811a2d4558' already exists in 'ref_tracker' [ 205.381084][ T4894] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.389322][ T4894] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.460056][ T4894] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.468400][ T4894] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.540149][ T4894] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.548422][ T4894] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.557011][ T4894] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.565363][ T4894] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.572096][T12811] ip6t_srh: unknown srh match flags 4000 [ 205.587977][ T4894] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.596269][ T4894] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.608971][ T4927] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.617232][ T4927] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.678825][ T4927] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.687214][ T4927] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.696008][ T4927] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.704285][ T4927] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.735165][T12823] xt_hashlimit: max too large, truncated to 1048576 [ 205.742146][T12811] loop4: detected capacity change from 0 to 8192 [ 205.781100][T12811] loop4: p1 p2 p3 p4 [ 205.785240][T12811] loop4: p1 size 196608 extends beyond EOD, truncated [ 205.801727][T12811] loop4: p2 start 164919041 is beyond EOD, truncated [ 205.808647][T12811] loop4: p3 size 66846464 extends beyond EOD, truncated [ 205.825431][T12811] loop4: p4 size 37048832 extends beyond EOD, truncated [ 205.835741][T12828] xt_hashlimit: max too large, truncated to 1048576 [ 205.971856][T12836] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3428'. [ 206.034312][T12843] ip6t_srh: unknown srh match flags 4000 [ 206.066762][T12845] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.116095][T12843] loop1: detected capacity change from 0 to 8192 [ 206.129566][T12845] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.182633][T12843] loop1: p1 p2 p3 p4 [ 206.201798][T12843] loop1: p1 size 196608 extends beyond EOD, truncated [ 206.209980][T12845] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.228298][T12843] loop1: p2 start 164919041 is beyond EOD, truncated [ 206.235135][T12843] loop1: p3 size 66846464 extends beyond EOD, truncated [ 206.255151][T12845] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.276162][T12843] loop1: p4 size 37048832 extends beyond EOD, truncated [ 206.455252][T12878] syzkaller0: entered promiscuous mode [ 206.460977][T12878] syzkaller0: entered allmulticast mode [ 206.541317][T12880] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.551160][T12880] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.675738][T12880] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.685649][T12880] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.744291][T12880] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.754147][T12880] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.815379][T12880] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.825219][T12880] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.853305][T12886] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3438'. [ 206.929386][ T4894] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.950916][ T4894] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.963087][ T4894] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.971985][T12913] siw: device registration error -23 [ 206.980079][ T4894] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.067247][T12919] xt_hashlimit: max too large, truncated to 1048576 [ 207.150063][T12921] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3443'. [ 207.201032][T12926] xt_hashlimit: max too large, truncated to 1048576 [ 207.272329][T12930] wireguard0: entered promiscuous mode [ 207.277898][T12930] wireguard0: entered allmulticast mode [ 207.491736][T12939] wireguard0: entered promiscuous mode [ 207.497318][T12939] wireguard0: entered allmulticast mode [ 207.755132][T12952] FAULT_INJECTION: forcing a failure. [ 207.755132][T12952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.768289][T12952] CPU: 1 UID: 0 PID: 12952 Comm: syz.0.3453 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.768322][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.768338][T12952] Call Trace: [ 207.768345][T12952] [ 207.768428][T12952] __dump_stack+0x1d/0x30 [ 207.768457][T12952] dump_stack_lvl+0xe8/0x140 [ 207.768478][T12952] dump_stack+0x15/0x1b [ 207.768519][T12952] should_fail_ex+0x265/0x280 [ 207.768544][T12952] should_fail+0xb/0x20 [ 207.768565][T12952] should_fail_usercopy+0x1a/0x20 [ 207.768593][T12952] _copy_from_user+0x1c/0xb0 [ 207.768673][T12952] ___sys_sendmsg+0xc1/0x1d0 [ 207.768717][T12952] __x64_sys_sendmsg+0xd4/0x160 [ 207.768749][T12952] x64_sys_call+0x191e/0x3000 [ 207.768774][T12952] do_syscall_64+0xd2/0x200 [ 207.768912][T12952] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 207.768954][T12952] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 207.769001][T12952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.769028][T12952] RIP: 0033:0x7fd974ddf6c9 [ 207.769043][T12952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.769078][T12952] RSP: 002b:00007fd973847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.769097][T12952] RAX: ffffffffffffffda RBX: 00007fd975035fa0 RCX: 00007fd974ddf6c9 [ 207.769109][T12952] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 207.769126][T12952] RBP: 00007fd973847090 R08: 0000000000000000 R09: 0000000000000000 [ 207.769138][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.769150][T12952] R13: 00007fd975036038 R14: 00007fd975035fa0 R15: 00007ffd31fde168 [ 207.769254][T12952] [ 207.948830][T12955] loop1: detected capacity change from 0 to 764 [ 207.956943][T12955] rock: directory entry would overflow storage [ 207.963295][T12955] rock: sig=0x5245, size=8, remaining=5 [ 208.026358][T12962] xt_hashlimit: max too large, truncated to 1048576 [ 208.041037][T12964] wireguard0: entered promiscuous mode [ 208.046544][T12964] wireguard0: entered allmulticast mode [ 208.069657][T12975] loop1: detected capacity change from 0 to 764 [ 208.077421][T12975] rock: directory entry would overflow storage [ 208.083727][T12975] rock: sig=0x5245, size=8, remaining=5 [ 208.191788][T12984] siw: device registration error -23 [ 208.271452][T13001] xt_hashlimit: max too large, truncated to 1048576 [ 208.381773][T13013] __nla_validate_parse: 6 callbacks suppressed [ 208.381794][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 208.401837][T13010] IPv6: Can't replace route, no match found [ 208.424440][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 208.465715][T13018] wireguard0: entered promiscuous mode [ 208.471354][T13018] wireguard0: entered allmulticast mode [ 208.476916][T13025] loop4: detected capacity change from 0 to 764 [ 208.484930][T13025] rock: directory entry would overflow storage [ 208.491225][T13025] rock: sig=0x5245, size=8, remaining=5 [ 208.632043][T13040] xt_hashlimit: max too large, truncated to 1048576 [ 209.026315][T13068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13068 comm=syz.0.3496 [ 209.056675][T13069] loop2: detected capacity change from 0 to 512 [ 209.063964][T13069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.081484][T13069] EXT4-fs (loop2): 1 truncate cleaned up [ 209.087658][T13069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.117528][T11508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.240930][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 209.240947][ T29] audit: type=1326 audit(209.186:26681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.270218][ T29] audit: type=1326 audit(209.186:26682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.293226][ T29] audit: type=1326 audit(209.186:26683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.316369][ T29] audit: type=1326 audit(209.186:26684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.339448][ T29] audit: type=1326 audit(209.186:26685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.362488][ T29] audit: type=1326 audit(209.186:26686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.385657][ T29] audit: type=1326 audit(209.186:26687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.408834][ T29] audit: type=1326 audit(209.186:26688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.431873][ T29] audit: type=1326 audit(209.186:26689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.454990][ T29] audit: type=1326 audit(209.186:26690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13066 comm="syz.0.3496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 209.540244][T13085] ip6t_srh: unknown srh match flags 4000 [ 209.564195][T13086] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.598855][ T37] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.607135][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.627729][ T37] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.636171][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.675400][ T37] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.683769][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.693026][ T37] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.701320][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.723603][T13086] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.773430][T13086] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.796868][T13105] loop5: detected capacity change from 0 to 764 [ 209.807053][T13105] rock: directory entry would overflow storage [ 209.813376][T13105] rock: sig=0x5245, size=8, remaining=5 [ 210.059223][T13111] siw: device registration error -23 [ 210.188381][T13086] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.372298][T13121] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.382209][T13121] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.721169][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 210.730945][T13125] netlink: 'syz.2.3507': attribute type 5 has an invalid length. [ 210.757883][ T4894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.770350][ T4894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.778645][ T4894] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.786929][ T4894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.842381][T13121] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.852242][T13121] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.922528][T13121] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.932522][T13121] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.972631][T13121] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.982508][T13121] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.999681][T13157] xt_hashlimit: max too large, truncated to 1048576 [ 211.043127][T13161] ip6t_srh: unknown srh match flags 4000 [ 211.324762][T13173] siw: device registration error -23 [ 213.203366][T13209] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.227115][T13214] loop1: detected capacity change from 0 to 764 [ 213.237149][T13215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13215 comm=syz.4.3530 [ 213.250090][T13215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17910 sclass=netlink_tcpdiag_socket pid=13215 comm=syz.4.3530 [ 213.301676][T13214] rock: directory entry would overflow storage [ 213.307898][T13214] rock: sig=0x5245, size=8, remaining=5 [ 213.331247][T13209] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.404990][T13209] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.444375][T13226] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3534'. [ 213.479489][T13209] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.526835][T13234] netlink: 'syz.0.3535': attribute type 14 has an invalid length. [ 214.022313][T13285] netlink: 'syz.0.3550': attribute type 12 has an invalid length. [ 214.051731][T13287] syzkaller0: entered promiscuous mode [ 214.057242][T13287] syzkaller0: entered allmulticast mode [ 214.141561][T13294] siw: device registration error -23 [ 214.298216][T13308] siw: device registration error -23 [ 214.428513][T13321] loop1: detected capacity change from 0 to 1024 [ 214.435491][T13321] EXT4-fs: Ignoring removed orlov option [ 214.462743][T13321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.477277][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 214.477308][ T29] audit: type=1400 audit(214.456:26904): avc: denied { setattr } for pid=13320 comm="syz.1.3561" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.506632][T10454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.539100][T13329] syzkaller0: entered promiscuous mode [ 214.544728][T13329] syzkaller0: entered allmulticast mode [ 214.659169][T13335] netlink: 'syz.1.3563': attribute type 14 has an invalid length. [ 214.729135][T13337] siw: device registration error -23 [ 214.846266][ T29] audit: type=1400 audit(214.826:26905): avc: denied { create } for pid=13350 comm="syz.1.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.865656][T13351] loop1: detected capacity change from 0 to 1024 [ 214.872641][T13351] EXT4-fs: Ignoring removed orlov option [ 214.878753][ T29] audit: type=1400 audit(214.826:26906): avc: denied { setattr } for pid=13350 comm="syz.1.3569" name="XDP" dev="sockfs" ino=51691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.900914][ T29] audit: type=1400 audit(214.826:26907): avc: denied { bind } for pid=13350 comm="syz.1.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 214.919867][ T29] audit: type=1400 audit(214.826:26908): avc: denied { name_bind } for pid=13350 comm="syz.1.3569" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 214.941223][ T29] audit: type=1400 audit(214.826:26909): avc: denied { node_bind } for pid=13350 comm="syz.1.3569" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 214.965716][ T29] audit: type=1326 audit(214.946:26910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.0.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 214.989323][ T29] audit: type=1326 audit(214.946:26911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.0.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 215.012515][ T29] audit: type=1326 audit(214.946:26912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.0.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 215.035573][ T29] audit: type=1326 audit(214.946:26913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.0.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 215.043100][T13351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.069270][ T4921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.079073][ T4921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.098179][ T4879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.106739][ T4879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.117765][T10454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.147307][T13368] syzkaller0: entered promiscuous mode [ 215.152854][T13368] syzkaller0: entered allmulticast mode [ 215.202570][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'. [ 215.229010][T13389] xt_hashlimit: max too large, truncated to 1048576 [ 215.545895][T13422] FAULT_INJECTION: forcing a failure. [ 215.545895][T13422] name failslab, interval 1, probability 0, space 0, times 0 [ 215.558584][T13422] CPU: 0 UID: 0 PID: 13422 Comm: syz.2.3584 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.558611][T13422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.558627][T13422] Call Trace: [ 215.558647][T13422] [ 215.558657][T13422] __dump_stack+0x1d/0x30 [ 215.558687][T13422] dump_stack_lvl+0xe8/0x140 [ 215.558763][T13422] dump_stack+0x15/0x1b [ 215.558794][T13422] should_fail_ex+0x265/0x280 [ 215.558821][T13422] ? __se_sys_memfd_create+0x1cc/0x590 [ 215.558855][T13422] should_failslab+0x8c/0xb0 [ 215.558887][T13422] __kmalloc_cache_noprof+0x4c/0x4a0 [ 215.558987][T13422] __se_sys_memfd_create+0x1cc/0x590 [ 215.559017][T13422] __x64_sys_memfd_create+0x31/0x40 [ 215.559147][T13422] x64_sys_call+0x2ac2/0x3000 [ 215.559173][T13422] do_syscall_64+0xd2/0x200 [ 215.559194][T13422] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.559297][T13422] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.559341][T13422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.559418][T13422] RIP: 0033:0x7f0c239cf6c9 [ 215.559438][T13422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.559463][T13422] RSP: 002b:00007f0c223f4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 215.559540][T13422] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007f0c239cf6c9 [ 215.559553][T13422] RDX: 00007f0c223f4ef0 RSI: 0000000000000000 RDI: 00007f0c23a52960 [ 215.559565][T13422] RBP: 0000200000000180 R08: 00007f0c223f4bb7 R09: 00007f0c223f4e40 [ 215.559577][T13422] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 215.559594][T13422] R13: 00007f0c223f4ef0 R14: 00007f0c223f4eb0 R15: 0000200000000940 [ 215.559619][T13422] [ 216.486250][T13424] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.496114][T13424] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.553244][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 216.613944][T13424] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.623989][T13424] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.690294][T13435] syzkaller0: entered promiscuous mode [ 216.695948][T13435] syzkaller0: entered allmulticast mode [ 216.705727][ T37] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.713984][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.737793][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'. [ 216.759426][ T37] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.767773][ T37] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.789013][ T37] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.797473][ T37] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.805974][ T37] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.809003][T13460] FAULT_INJECTION: forcing a failure. [ 216.809003][T13460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.814281][ T37] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.827443][T13460] CPU: 0 UID: 0 PID: 13460 Comm: syz.5.3594 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.827479][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.827498][T13460] Call Trace: [ 216.827508][T13460] [ 216.827520][T13460] __dump_stack+0x1d/0x30 [ 216.827616][T13460] dump_stack_lvl+0xe8/0x140 [ 216.827671][T13460] dump_stack+0x15/0x1b [ 216.827697][T13460] should_fail_ex+0x265/0x280 [ 216.827721][T13460] should_fail+0xb/0x20 [ 216.827804][T13460] should_fail_usercopy+0x1a/0x20 [ 216.827836][T13460] _copy_from_iter+0xd2/0xe80 [ 216.827869][T13460] ? __build_skb_around+0x1ab/0x200 [ 216.827910][T13460] ? __alloc_skb+0x223/0x320 [ 216.827954][T13460] netlink_sendmsg+0x471/0x6b0 [ 216.828028][T13460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.828057][T13460] __sock_sendmsg+0x145/0x180 [ 216.828118][T13460] ____sys_sendmsg+0x31e/0x4e0 [ 216.828173][T13460] ___sys_sendmsg+0x17b/0x1d0 [ 216.828219][T13460] __x64_sys_sendmsg+0xd4/0x160 [ 216.828252][T13460] x64_sys_call+0x191e/0x3000 [ 216.828425][T13460] do_syscall_64+0xd2/0x200 [ 216.828455][T13460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 216.828547][T13460] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 216.828678][T13460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.828755][T13460] RIP: 0033:0x7f17e008f6c9 [ 216.828775][T13460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.828801][T13460] RSP: 002b:00007f17deaef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.828829][T13460] RAX: ffffffffffffffda RBX: 00007f17e02e5fa0 RCX: 00007f17e008f6c9 [ 216.828847][T13460] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 216.828865][T13460] RBP: 00007f17deaef090 R08: 0000000000000000 R09: 0000000000000000 [ 216.828942][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.828960][T13460] R13: 00007f17e02e6038 R14: 00007f17e02e5fa0 R15: 00007fffe97bf048 [ 216.828987][T13460] [ 217.052297][T13424] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.062172][T13424] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.112304][ T4879] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.120530][ T4879] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.130619][T13467] siw: device registration error -23 [ 217.148939][T13424] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.158889][T13424] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.202829][ T4879] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.211991][ T4879] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.271623][ T4879] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.279904][ T4879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.312666][ T4879] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.321038][ T4879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.341143][ T4879] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.349410][ T4879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.363215][ T4879] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.371509][ T4879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.382478][T13500] xt_hashlimit: max too large, truncated to 1048576 [ 217.416587][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 217.724694][T13546] syzkaller0: entered promiscuous mode [ 217.730224][T13546] syzkaller0: entered allmulticast mode [ 218.491848][T13559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3622'. [ 218.506629][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 218.578689][T13559] Process accounting resumed [ 218.650764][T13564] siw: device registration error -23 [ 218.696861][T13577] xt_hashlimit: max too large, truncated to 1048576 [ 218.894574][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3636'. [ 218.928487][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3637'. [ 218.984202][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3636'. [ 219.053942][T13602] loop4: detected capacity change from 0 to 128 [ 219.101665][T13602] vfat: Unknown parameter '00000000000000000009£' [ 219.109684][T13606] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.119491][T13606] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.163302][T13613] netlink: 'syz.0.3638': attribute type 14 has an invalid length. [ 219.306535][T13602] loop4: detected capacity change from 0 to 1024 [ 219.337208][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 219.358747][T13606] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.368584][T13606] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.389572][T13607] loop1: detected capacity change from 0 to 8192 [ 219.441086][T13607] loop1: p1 < > p2 p4 < p5 > [ 219.445843][T13607] loop1: partition table partially beyond EOD, truncated [ 219.453154][T13607] loop1: p1 start 134217728 is beyond EOD, truncated [ 219.459994][T13607] loop1: p2 size 591360 extends beyond EOD, truncated [ 219.468688][T13607] loop1: p5 size 591360 extends beyond EOD, truncated [ 219.469563][T13606] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.485322][T13606] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.556669][T13606] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.566567][T13606] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.612425][T13632] siw: device registration error -23 [ 219.676763][T13644] syzkaller0: entered promiscuous mode [ 219.682587][T13644] syzkaller0: entered allmulticast mode [ 219.712494][ T4921] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.736505][ T4921] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.762999][ T4921] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.780871][ T4921] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.815187][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 219.815205][ T29] audit: type=1326 audit(219.796:27132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 219.867517][ T29] audit: type=1326 audit(219.826:27133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17e008df10 code=0x7ffc0000 [ 219.890689][ T29] audit: type=1326 audit(219.826:27134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17e008df10 code=0x7ffc0000 [ 219.913787][ T29] audit: type=1326 audit(219.826:27135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 219.936852][ T29] audit: type=1326 audit(219.826:27136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 219.960295][ T29] audit: type=1326 audit(219.826:27137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 219.983472][ T29] audit: type=1326 audit(219.826:27138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 220.006543][ T29] audit: type=1326 audit(219.826:27139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 220.029900][ T29] audit: type=1326 audit(219.866:27140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 220.053061][ T29] audit: type=1326 audit(219.876:27141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13662 comm="syz.5.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e008f6c9 code=0x7ffc0000 [ 220.238888][T13667] loop5: detected capacity change from 0 to 764 [ 220.251379][T13667] rock: directory entry would overflow storage [ 220.257616][T13667] rock: sig=0x5245, size=8, remaining=5 [ 220.436649][T13673] lo speed is unknown, defaulting to 1000 [ 220.486811][T13675] netlink: 'syz.0.3650': attribute type 16 has an invalid length. [ 220.494718][T13675] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3650'. [ 221.135736][T13705] loop5: detected capacity change from 0 to 512 [ 221.151379][T13703] ip6t_srh: unknown srh match flags 4000 [ 221.172493][T13705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.214310][T13705] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.402714][T10685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.465418][T13718] netlink: 19 bytes leftover after parsing attributes in process `syz.5.3654'. [ 221.583546][T13724] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3657'. [ 221.653481][T13738] xt_hashlimit: max too large, truncated to 1048576 [ 221.740918][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3664'. [ 222.316967][T13767] loop5: detected capacity change from 0 to 1024 [ 222.327054][T13767] EXT4-fs: inline encryption not supported [ 222.369378][T13767] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.600157][T10685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.618837][ T4921] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.627164][ T4921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.754345][ T4921] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.762775][ T4921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.804551][ T4921] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.812832][ T4921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.842092][ T4921] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.850319][ T4921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.957763][T13805] loop2: detected capacity change from 0 to 764 [ 222.972319][T13805] rock: directory entry would overflow storage [ 222.978530][T13805] rock: sig=0x5245, size=8, remaining=5 [ 223.211360][T13821] netlink: 'syz.2.3680': attribute type 16 has an invalid length. [ 223.242786][T13822] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.252656][T13822] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.332701][T13822] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.342574][T13822] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.434689][T13822] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.444566][T13822] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.613214][T13822] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.623094][T13822] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.762516][T13837] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.772419][T13837] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.902635][T13837] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.912507][T13837] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.925123][T13846] xt_hashlimit: max too large, truncated to 1048576 [ 224.097925][ T4927] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.097956][ T4927] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.121057][ T4921] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.121094][ T4921] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.141694][T13837] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.141740][T13837] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.187344][ T4927] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.187452][ T4927] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.219884][T13837] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.219977][T13837] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.273180][ T4921] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.273220][ T4921] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.328465][ T4921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.328506][ T4921] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.328675][ T4921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.328703][ T4921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.348481][ T4879] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.348532][ T4879] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.348772][ T4879] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.348808][ T4879] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.366071][T13887] __nla_validate_parse: 1 callbacks suppressed [ 224.366091][T13887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3691'. [ 224.522484][T13891] siw: device registration error -23 [ 224.903469][T13894] lo speed is unknown, defaulting to 1000 [ 225.143645][T13923] syzkaller0: entered promiscuous mode [ 225.149184][T13923] syzkaller0: entered allmulticast mode [ 225.471001][T13934] lo speed is unknown, defaulting to 1000 [ 225.671475][T13934] loop4: detected capacity change from 0 to 2048 [ 225.787362][T13934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.815618][T13960] loop2: detected capacity change from 0 to 764 [ 225.836685][T13960] rock: directory entry would overflow storage [ 225.842939][T13960] rock: sig=0x5245, size=8, remaining=5 [ 225.892100][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 225.911168][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3702'. [ 225.920095][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 225.961303][T13969] wireguard0: entered promiscuous mode [ 225.966879][T13969] wireguard0: entered allmulticast mode [ 226.001881][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3703'. [ 226.035619][T13986] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3704'. [ 226.084348][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 226.084425][ T29] audit: type=1400 audit(226.066:27441): avc: granted { setsecparam } for pid=13991 comm="syz.2.3708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 226.113059][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3706'. [ 226.142051][T11245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.155143][T13975] lo speed is unknown, defaulting to 1000 [ 226.183920][T14000] netlink: 'syz.2.3711': attribute type 14 has an invalid length. [ 226.193613][ T29] audit: type=1400 audit(226.176:27442): avc: denied { write } for pid=13995 comm="syz.0.3710" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.240913][ T29] audit: type=1326 audit(226.176:27443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.264043][ T29] audit: type=1326 audit(226.176:27444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.287075][ T29] audit: type=1326 audit(226.176:27445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.310140][ T29] audit: type=1326 audit(226.176:27446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.333230][ T29] audit: type=1326 audit(226.176:27447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.356551][ T29] audit: type=1326 audit(226.176:27448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.379643][ T29] audit: type=1326 audit(226.176:27449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.402633][ T29] audit: type=1326 audit(226.176:27450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd974ddf6c9 code=0x7ffc0000 [ 226.505288][T14040] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3717'. [ 226.512664][T14032] syzkaller0: entered promiscuous mode [ 226.519859][T14032] syzkaller0: entered allmulticast mode [ 226.591290][T14021] lo speed is unknown, defaulting to 1000 [ 226.612972][T14026] loop1: detected capacity change from 0 to 2048 [ 226.652282][T14026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.701380][T14026] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.786679][T14074] vhci_hcd: invalid port number 96 [ 226.791936][T14074] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 226.837315][T14077] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 226.886001][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3723'. [ 226.948293][T14088] netlink: 'syz.5.3726': attribute type 14 has an invalid length. [ 226.961544][T14085] ip6t_srh: unknown srh match flags 4000 [ 227.088690][T14085] loop1: detected capacity change from 0 to 8192 [ 227.120927][T14103] loop5: detected capacity change from 0 to 512 [ 227.151413][T14085] loop1: p1 p2 p3 p4 [ 227.155584][T14085] loop1: p1 size 196608 extends beyond EOD, truncated [ 227.163236][T14085] loop1: p2 start 164919041 is beyond EOD, truncated [ 227.170052][T14085] loop1: p3 size 66846464 extends beyond EOD, truncated [ 227.179752][T14085] loop1: p4 size 37048832 extends beyond EOD, truncated [ 227.371170][T14129] netlink: 'syz.5.3739': attribute type 14 has an invalid length. [ 227.521551][T14139] loop1: detected capacity change from 0 to 1024 [ 227.648711][T14139] EXT4-fs (loop1): bad geometry: first data block is 0 with a 1k block and cluster size [ 227.929283][T14160] xt_hashlimit: max too large, truncated to 1048576 [ 227.945616][T14162] ip6t_srh: unknown srh match flags 4000 [ 227.977607][T14164] wireguard0: entered promiscuous mode [ 227.983156][T14164] wireguard0: entered allmulticast mode [ 228.050444][T14170] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.060291][T14170] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.148116][T14172] infiniband syû: set active [ 228.152946][T14172] infiniband syû: added bond_slave_0 [ 228.164350][T14170] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.174287][T14170] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.191556][T14172] RDS/IB: syû: added [ 228.195643][T14172] smc: adding ib device syû with port count 1 [ 228.202627][T14172] smc: ib device syû port 1 has no pnetid [ 228.242804][T14170] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.252686][T14170] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.302491][T14170] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.312431][T14170] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.544729][T14203] 0ªX¹¦À: renamed from caif0 [ 228.555637][T14203] 0ªX¹¦À: entered allmulticast mode [ 228.560921][T14203] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 228.579755][ T4921] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.588064][ T4921] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.604876][T14202] 1ªX¹¦À: renamed from 60ªX¹¦À [ 228.614296][T14202] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 228.630223][ T4921] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.638491][ T4921] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.646872][ T4921] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.655111][ T4921] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.680875][ T4921] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.689152][ T4921] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.743855][T14218] xt_hashlimit: max too large, truncated to 1048576 [ 228.881572][T14232] ip6t_srh: unknown srh match flags 4000 [ 228.966478][T14232] loop2: detected capacity change from 0 to 8192 [ 229.011126][T14232] loop2: p1 p2 p3 p4 [ 229.015398][T14232] loop2: p1 size 196608 extends beyond EOD, truncated [ 229.023153][T14232] loop2: p2 start 164919041 is beyond EOD, truncated [ 229.030031][T14232] loop2: p3 size 66846464 extends beyond EOD, truncated [ 229.038110][T14232] loop2: p4 size 37048832 extends beyond EOD, truncated [ 229.090757][T14248] FAULT_INJECTION: forcing a failure. [ 229.090757][T14248] name failslab, interval 1, probability 0, space 0, times 0 [ 229.103652][T14248] CPU: 1 UID: 0 PID: 14248 Comm: syz.4.3770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.103684][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.103761][T14248] Call Trace: [ 229.103771][T14248] [ 229.103780][T14248] __dump_stack+0x1d/0x30 [ 229.103809][T14248] dump_stack_lvl+0xe8/0x140 [ 229.103837][T14248] dump_stack+0x15/0x1b [ 229.103862][T14248] should_fail_ex+0x265/0x280 [ 229.103888][T14248] should_failslab+0x8c/0xb0 [ 229.104001][T14248] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 229.104038][T14248] ? __d_alloc+0x3d/0x340 [ 229.104120][T14248] __d_alloc+0x3d/0x340 [ 229.104199][T14248] d_alloc_parallel+0x58/0xc70 [ 229.104248][T14248] ? trace_event_buffer_commit+0x196/0x5c0 [ 229.104291][T14248] ? lockref_get_not_dead+0x120/0x1c0 [ 229.104327][T14248] ? __rcu_read_unlock+0x4f/0x70 [ 229.104399][T14248] __lookup_slow+0x8c/0x250 [ 229.104428][T14248] lookup_slow+0x3c/0x60 [ 229.104452][T14248] link_path_walk+0x753/0x900 [ 229.104564][T14248] path_lookupat+0x63/0x2a0 [ 229.104607][T14248] filename_lookup+0x147/0x340 [ 229.104731][T14248] user_path_at+0x3e/0x130 [ 229.104753][T14248] __se_sys_chroot+0x45/0x230 [ 229.104789][T14248] __x64_sys_chroot+0x1f/0x30 [ 229.104884][T14248] x64_sys_call+0x214f/0x3000 [ 229.104914][T14248] do_syscall_64+0xd2/0x200 [ 229.104955][T14248] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 229.104993][T14248] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 229.105038][T14248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.105066][T14248] RIP: 0033:0x7fb1c830f6c9 [ 229.105112][T14248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.105177][T14248] RSP: 002b:00007fb1c6d77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 229.105202][T14248] RAX: ffffffffffffffda RBX: 00007fb1c8565fa0 RCX: 00007fb1c830f6c9 [ 229.105219][T14248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 229.105236][T14248] RBP: 00007fb1c6d77090 R08: 0000000000000000 R09: 0000000000000000 [ 229.105253][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.105308][T14248] R13: 00007fb1c8566038 R14: 00007fb1c8565fa0 R15: 00007ffcd95928a8 [ 229.105335][T14248] [ 229.351563][T14253] xt_hashlimit: max too large, truncated to 1048576 [ 229.383445][T14255] syzkaller0: entered promiscuous mode [ 229.389016][T14255] syzkaller0: entered allmulticast mode [ 229.401715][T14263] IPVS: Unknown mcast interface: rose0 [ 229.407470][T14263] veth0_to_bond: entered promiscuous mode [ 229.453144][T14261] lo speed is unknown, defaulting to 1000 [ 229.479800][T14268] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 229.487223][T14268] vhci_hcd: invalid port number 96 [ 229.492413][T14268] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 229.607093][T14294] netlink: 'syz.2.3778': attribute type 14 has an invalid length. [ 229.666534][T14306] __nla_validate_parse: 6 callbacks suppressed [ 229.666630][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 229.678131][T14298] lo speed is unknown, defaulting to 1000 [ 229.688217][T14306] wireguard1: entered promiscuous mode [ 229.693784][T14306] wireguard1: entered allmulticast mode [ 229.737531][T14313] ip6t_srh: unknown srh match flags 4000 [ 229.816325][T14333] loop2: detected capacity change from 0 to 1024 [ 229.823666][T14333] EXT4-fs: Ignoring removed orlov option [ 229.832776][T14333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.874626][T14333] Driver unsupported XDP return value 0 on prog (id 2411) dev N/A, expect packet loss! [ 229.920020][T14333] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 229.926831][T14333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.935119][T14333] vhci_hcd vhci_hcd.0: Device attached [ 229.947760][T14338] vhci_hcd: connection closed [ 229.948116][ T4927] vhci_hcd: stop threads [ 229.957126][ T4927] vhci_hcd: release socket [ 229.961575][ T4927] vhci_hcd: disconnect device [ 229.997466][T14342] xt_hashlimit: max too large, truncated to 1048576 [ 230.232492][T14262] veth0_to_bond: left promiscuous mode [ 230.483091][T11508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.628188][T14374] ip6t_srh: unknown srh match flags 4000 [ 230.768795][T14376] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.778663][T14376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.827055][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3796'. [ 230.841726][T14380] ================================================================== [ 230.849890][T14380] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 230.857216][T14380] [ 230.859546][T14380] write to 0xffff88810460af00 of 8 bytes by task 14379 on cpu 0: [ 230.867265][T14380] mas_wmb_replace+0x208/0xfa0 [ 230.872047][T14380] mas_wr_store_entry+0x13e3/0x2750 [ 230.877271][T14380] mas_store_prealloc+0x760/0xa90 [ 230.882319][T14380] vma_iter_store_new+0x1c5/0x200 [ 230.887378][T14380] mmap_region+0x10f7/0x1620 [ 230.892000][T14380] do_mmap+0x9b3/0xbe0 [ 230.896084][T14380] vm_mmap_pgoff+0x17a/0x2e0 [ 230.900703][T14380] ksys_mmap_pgoff+0xc2/0x310 [ 230.905407][T14380] x64_sys_call+0x14a3/0x3000 [ 230.910108][T14380] do_syscall_64+0xd2/0x200 [ 230.914729][T14380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.920646][T14380] [ 230.923013][T14380] read to 0xffff88810460af00 of 8 bytes by task 14380 on cpu 1: [ 230.930659][T14380] mas_state_walk+0x119/0x650 [ 230.935383][T14380] mas_walk+0x60/0x150 [ 230.939491][T14380] lock_vma_under_rcu+0x95/0x170 [ 230.944469][T14380] do_user_addr_fault+0x233/0x1080 [ 230.949634][T14380] exc_page_fault+0x62/0xa0 [ 230.954173][T14380] asm_exc_page_fault+0x26/0x30 [ 230.959061][T14380] [ 230.961385][T14380] value changed: 0xffff8881037cb9c1 -> 0xffff88810460af00 [ 230.968493][T14380] [ 230.970830][T14380] Reported by Kernel Concurrency Sanitizer on: [ 230.976989][T14380] CPU: 1 UID: 0 PID: 14380 Comm: syz.0.3796 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.986818][T14380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.996984][T14380] ================================================================== [ 231.032673][T14376] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.042594][T14376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.132372][T14376] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.142171][T14376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.224322][T14376] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.234227][T14376] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.303027][ T4921] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.311321][ T4921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.349772][ T4921] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.358035][ T4921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.366423][ T4921] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.374656][ T4921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.383009][ T4921] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.391257][ T4921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0