last executing test programs: 18m3.04491437s ago: executing program 2 (id=66): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0xe, 0x8, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x9, 0x0, 0x8, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0x8}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x3, 0x1, 0xe3, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, 0x7, 0x7800, 0x0, 0x3}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr, @loopback}, &(0x7f0000000300)=0xc) io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 18m3.001406901s ago: executing program 32 (id=66): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0xe, 0x8, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x9, 0x0, 0x8, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0x8}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x3, 0x1, 0xe3, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, 0x7, 0x7800, 0x0, 0x3}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr, @loopback}, &(0x7f0000000300)=0xc) io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 17m57.594780768s ago: executing program 33 (id=110): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000)=0x800, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r5, 0x0, 0x20000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x79) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004) 16m40.710402895s ago: executing program 34 (id=763): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES64=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x3, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffefffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 16m22.347259107s ago: executing program 35 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r2, 0x4bfa, &(0x7f0000000180)) 14m55.893157582s ago: executing program 36 (id=1711): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000019080)={[{@nodioread_nolock}, {@min_batch_time}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@nodioread_nolock}]}, 0x5, 0x795, &(0x7f0000000cc0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9fcc01d43e8413ddadd1fe0b1d0000000000ddff010000100000"], &(0x7f0000000740)=""/105, 0x1a, 0x69, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x50, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x3c, 0x1, [@m_mirred={0x38, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x9, 0x6, "040000004c"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x2b1e}, 0x0) sendmsg$key(r2, 0x0, 0x48010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180008ff4400"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x100, 0x7, &(0x7f0000000300)="5742e3109bac2e8d6422447d9bcebb17565ae5d65285f7c7aab185dd78ea2b333941f5692339ac8f6cec88ac3b003bf6016c61ab2187809e1eeadb879176b4a895ed97e52b3d160eb4b28311c18728a7601893ae7b021128f92e1c5f2a4c9f60d63c55c2271056a9a64f45c0b5f2b7754ded3e0c2fc5745ec97b1686e730a619bc17f795c80dc1a3801922d9ef82a9026587fd714de0d683a5bfc1c0b2d5058121db52e25d1cadc6d3165b79f0a633946937807faa91ad7807bb9b567bbd61c3ded8c80273bb16a2", 0xc8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f00000004c0)="83bd67a0e6f0cd955309d70fc6f28ed27fa1bd31", 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x42) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r8], 0x4, 0x25e, &(0x7f0000000900)="$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") 14m50.69770807s ago: executing program 37 (id=1806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080)=0x6, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000280)="fbf4e7810b75088f27e5cd41f511cd72", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x1, 0x6, 0x2c, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x780, 0x7, 0x8001}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x5, 0x100000001, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x9, 0xc, 0xfffffffc, 0x48, r0, 0x0, '\x00', r3, r4, 0x1, 0x0, 0x3}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) inotify_init() 14m49.300083211s ago: executing program 38 (id=1834): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) fchdir(0xffffffffffffffff) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x100, 0x36}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = socket$inet_tcp(0x2, 0x1, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000004c0)='./file0\x00', 0x80000000) unlink(&(0x7f0000000000)='./file0\x00') close_range(r1, r4, 0x0) getdents(r0, &(0x7f00000000c0)=""/116, 0x74) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) 14m47.598046247s ago: executing program 2 (id=1808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x4, 0x0, 0x0, 0x0, 0x7, 0x510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x4c58, 0x10000, 0x0, 0x1, 0xa, 0x20002, 0x71, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./bus\x00', 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) 14m47.532232977s ago: executing program 2 (id=1849): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x0, 0x1, 0x3, 0x51}}]}}]}}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 14m46.968066336s ago: executing program 39 (id=1861): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'veth0_to_bridge\x00', @multicast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (fail_nth: 2) 14m46.897243797s ago: executing program 2 (id=1864): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000eef3", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x20000000) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e22, 0x101, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2, 0xaa]}}, 0x5c) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x40, 0x7, 0xf01, 0x0, {{0x1c, 0x4, 0x0, 0x11, 0x70, 0x65, 0x0, 0xb, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, {[@end, @lsrr={0x83, 0x1b, 0x3f, [@local, @rand_addr=0x64010101, @private=0xa010101, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}]}, @ssrr={0x89, 0x27, 0x42, [@remote, @empty, @local, @local, @broadcast, @remote, @multicast1, @empty, @multicast1]}, @ssrr={0x89, 0x17, 0x3a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @multicast1, @remote]}]}}}}}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000f62d0068a5d484e1ef74cffca52599e993e3af7c7ca3018ade6026624a4914dc8227ca0dd5b45855baaa285435282f85c13d2a89a20775ea264af4d5288a3292f047da52bfe9bb297e054448c7d714285fb0eac808f3e60000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x29, '\x00', r4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRES64=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x100000001) 14m46.797767838s ago: executing program 2 (id=1865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0xe, 0x8, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x9, 0x0, 0x8, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x4, 0xad, 0x3, 0x8}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x3, 0x1, 0xe3, 0xa, @dev={0xfe, 0x80, '\x00', 0x18}, @private2, 0x7, 0x7800, 0x0, 0x3}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@rand_addr, @loopback}, &(0x7f0000000300)=0xc) r3 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = socket(0x40000000015, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006198128bdc682debb20c3047cf282c07e9b1e02e7bfdd5799c99bc570158ffb42efeb6d34b5e24fd2e3c6c26c1f90000000000000000d95faad74872362f23f937767aaad89300179e0fae727a204ab65ac118c17e4bdd720f0888ccec032948962949480ce9c99e0a3a9ef621b9b7f09d76feb903eae3797ec96b584a18b6dc"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback={0x9d}, 0xa77}, 0x1c) 14m45.113472944s ago: executing program 2 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14m45.062744435s ago: executing program 40 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14m31.906350692s ago: executing program 3 (id=2046): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 14m31.656348266s ago: executing program 3 (id=2053): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x64000600) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_clone(0x200, &(0x7f00000000c0)="e6b60244ad4a5ddedfd8b523387991b81bb7ea0808973071dd88af3c", 0x1c, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="992db59cd0349c85c24f519648d4ccbbec21c8386d43e2be648b6b559cf7") 14m31.547976768s ago: executing program 3 (id=2054): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6(0xa, 0x80000, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x30, r5, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b033cea6ec", @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf25080000000c009900000400000d000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x8d0) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000180)={0x0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1800) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='c\x90T{\xff\x9b\b\x00\xd0\xf5\x84\xd4\x80\x1a\xa0]h\xea~\xd9\xfe\x14\x06\x7fP\xd8\x0eh\xf8\xf7V\x91\xe0n\xfd\xc8\x7f\xaf\xba\xd24\x00n_\xdb\xabv2\x9c\x15u\x100x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffefffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 14m30.67825541s ago: executing program 8 (id=2065): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x64000600) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_clone(0x200, &(0x7f00000000c0)="e6b60244ad4a5ddedfd8b523387991b81bb7ea0808973071dd88af3c", 0x1c, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="992db59cd0349c85c24f519648d4ccbbec21c8386d43e2be648b6b559cf7") 14m29.668537176s ago: executing program 8 (id=2075): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffefffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 14m29.122733984s ago: executing program 8 (id=2089): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x32, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000180)='proc\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 14m29.063319095s ago: executing program 8 (id=2091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xd0000, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x10, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) socket(0x6, 0xa, 0x5) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4142, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300020000000000000000000000000000aa14000400fe8800e2ff00000000000000000000010c00028005000100000000000861074000000000180006"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14m28.976690626s ago: executing program 8 (id=2095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 14m15.991800901s ago: executing program 41 (id=2060): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) unshare(0x22020600) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6, 0x0, 0x8}, 0x18) alarm(0x7) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000000c0)={0x3, "87d7538113902485f76f657d0d40eb0fb9bfa8ed3d3197c4741d137264d465469ff4cbde5bb273e3d1e826c2104056aeca535168cd3dc94ee86218e14599a966079a2541e0a8bb53e8813d94b74312aa4248e2418ad99d10e8d8d03741d79bf35d2f7a571ddd7eee01dc7628c7acf62ca009179c9ab4b288fd73ef54741ca2cc5f99921b1bf124dfc6d5918022efef46642f92395c92ef1bc16bf5c80001fed2baf4829c806365291b5dbc1e2c68f63990aa983285cd31e5ef8de9bbd56983b6e64bd803c66abc021793759b30d6024882866bfa5c90ed469a64313ff0eaf07cc4a6e08b41e837813327f8926f2b8bfb85d945a8cae2b1ecfcd326117fd8c6b3e202f8153853c32fcec3f3949d8dacc76f7609320d40c218955d0dcb3495fc89d921acc403f133477aa43269f9027e8bf6f5db125904f18853e79a948cb29dfd36328dde0baac59d61de4e7db8c32dd4844d845779ac0a25f026a10eeeb19aa9b180ea6646b83458e240e097c0a5ded2d08a447157e8ee8e2b52132c8026a90258d97730aa941e0c509e890fb7c52b54a80350f909053d8045c181252d7cc54740974f98c2ffe25a5bba0e1a7e372b9ecde39b731033adf967fe7b5d65f3837f239047b48435fdbc14d7fe94ce267d6a6314dec1544b3434d811deeb72e50773454d8c9ba3868adf29b4e879701457914d98cb4f14a627b408db58b74d019f03"}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4083, 0xff3}], 0x1, 0x31, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r7) 14m13.855729234s ago: executing program 42 (id=2095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 5m3.134632577s ago: executing program 4 (id=9369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ftruncate(0xffffffffffffffff, 0x3) (async) r5 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) (async) read$snapshot(r5, &(0x7f0000000c40)=""/143, 0x8f) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r8}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r11}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x0, 0x0, 0xa, 0x7, 0x6, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0xd, 0x1, 0x2, 0x4, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0xffff742f, 0x71, &(0x7f0000000440)=""/113, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, r11, 0x8, &(0x7f0000000240)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xffffffff, 0xfffffff9, 0x10}, 0x10, 0x0, r3, 0x6, &(0x7f00000004c0)=[r2, r2, r2, r2, r2], &(0x7f0000000b00)=[{0x1, 0x1, 0x1, 0x8}, {0x2, 0x1, 0xe, 0x1d}, {0x1, 0x1, 0xb, 0x1}, {0x4, 0x5, 0x4, 0x6}, {0x5, 0x2, 0x10, 0x1}, {0x1, 0x1, 0x8, 0x2}], 0x10, 0xffffffc8}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 5m3.075550018s ago: executing program 4 (id=9370): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x73, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 5m3.074659588s ago: executing program 4 (id=9371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) 5m2.111273692s ago: executing program 4 (id=9383): socket$kcm(0x10, 0x2, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x6c}}, 0x44000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r5, @ANYBLOB="00477067e641fb3a0581a3b20ddd29e900"/35, @ANYRES32=0x0, @ANYRES32=r5, @ANYRESHEX=r3], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a94000000020a01010000000000000000050000034b000600916178766b54ead5095aa3428c09067853c089cc6eee527f0f9a1b7858d7e0b577b8a5dde4c97ac918a3e6636d1817b2b37087f3906813c3b2be6def0f6b2adef252579eb637f40fb7d6091e16a649549519b48b5da4bf7d6c22eca2ab92abe0c400000900010073797a3008000000140000001100010000000000000000000300000a"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), 0x0}, 0x20) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000000bc0)={0x0, 0x0, "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", "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"}) ioctl$AUTOFS_IOC_EXPIRE(r10, 0x810c9365, &(0x7f0000000480)={{0x5, 0x5}, 0x100, './file0\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r13, 0x3305) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r14}, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'gretap0\x00', 0x0}) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r11, @ANYBLOB='\a\x00'/20, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="02000000020000000200000000000000000000000000000000000000f9aad710ced2a38e64c5a7052bf11a2ecc63712d560c6d2c71f7d3540e4ff831ecc0e0187323f814070322ee490cfceb934a372102a555892eda272a70ae6d21196e1868fb28ee4795bd98a02261d459d6f2748d377dfece4aa6b03dd972000000"], 0x50) 5m2.013898393s ago: executing program 4 (id=9385): unshare(0x20400) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x580, &(0x7f0000000d00)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xa7}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, 0x0}, 0x78) 5m2.008542004s ago: executing program 4 (id=9386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006a0083130000000000000000040000000000000008000e0000000000080005"], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00400014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf8, 0xd, 0x5, 0x3, 0x0, 0xfffffffffffffffe, 0x108, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x4}, 0x100040, 0x3, 0x1, 0x8cdb5cb66cae24c0, 0x3, 0x80000001, 0x0, 0x0, 0xfffffff7, 0x0, 0x10}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x12, r2, 0x80000000) 4m46.814733472s ago: executing program 43 (id=9386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006a0083130000000000000000040000000000000008000e0000000000080005"], 0x28}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00400014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf8, 0xd, 0x5, 0x3, 0x0, 0xfffffffffffffffe, 0x108, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x4}, 0x100040, 0x3, 0x1, 0x8cdb5cb66cae24c0, 0x3, 0x80000001, 0x0, 0x0, 0xfffffff7, 0x0, 0x10}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x12, r2, 0x80000000) 3m10.448604119s ago: executing program 9 (id=10592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000002c0)={0xf97cff8c, 0x8}, 0x10) 3m10.36807157s ago: executing program 9 (id=10594): openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000002c80)={0x628002, 0x10}, 0x18) 3m10.348134061s ago: executing program 9 (id=10595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 3m10.326570811s ago: executing program 9 (id=10596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000580)='./file0/../file0/../file0/../file0\x00', 0x0, 0x103) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') (async) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x8042) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) syz_clone(0x8000000, &(0x7f0000000180)="263d7eeb44f607", 0x7, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480)="ded5afb6a9011936c61492e91549b1017261140c3c9413b610f7794be40c230233478932eadde755b89ac738d37a810c5957eb0bab9e3dd30340523eb2") (async) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@dellink={0x20, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x8500, 0x4003}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r6) sendfile(r3, r3, 0x0, 0x24002deb) (async) ioctl$LOOP_CLR_FD(r3, 0x4c01) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000005000000010001000800000001"], 0x48) 3m10.265081352s ago: executing program 9 (id=10599): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200"/655], 0x310) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9fe6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000000b0601020000000000000000030000082d81f2b2444e9a6ddebae20867bb52b306d66ff5a11914342958b4f6518ce7fa0b49928bc4f92e52e7da280cba66fa8e3e9c304480004ee3d89be7344bc9066369d2d81a210912a21cd65491f504d2"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x100, 0x0, 0x0, 0x10, 0x0, 0x40, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x4e1, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/4083, 0x0, 0xff3}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2708"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2}, 0x1b) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/127) setrlimit(0xa, &(0x7f0000000000)={0x20000000, 0xb}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 3m9.868525808s ago: executing program 9 (id=10608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000740)='ext4_error\x00', r4, 0x0, 0x8000000000000000}, 0x18) syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) 3m9.812611539s ago: executing program 44 (id=10608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000740)='ext4_error\x00', r4, 0x0, 0x8000000000000000}, 0x18) syz_emit_ethernet(0x5e, &(0x7f00000005c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @local}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) 3.547979017s ago: executing program 1 (id=13595): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200000005000100"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000030601040000000000000021070000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x40002, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000001c0), 0x4) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.33034755s ago: executing program 1 (id=13597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0a1414ac"}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r3}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000dc0), 0x10, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) 2.136688138s ago: executing program 1 (id=13608): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="11030000200000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2.060799419s ago: executing program 1 (id=13609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) 1.206777332s ago: executing program 1 (id=13619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000bf2505a8a44000012203ddba1c010902240001010105090501024000060203090582020002"], &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x25, 0x4, 0x4, 0xff, 0x1}, 0x46, &(0x7f0000000340)={0x5, 0xf, 0x46, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "18b587df1c6343db116a88a8af96f4ef"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "1aab33c9313557e3651dcb914b0637e7"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x48, 0x6, 0x7, 0xfffa, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x6, 0xd6, 0x3f, 0x8}]}, 0x2, [{0x6c, &(0x7f00000004c0)=@string={0x6c, 0x3, "146f7d39bd398dad5cf00e01009b9b5024ddb0c218a79f828f1e6384df321aefc213e54f526a0042c7ceca44da8cc6b39ffe76632a291478a7f35c1e04705ffe07fced6ff4397ca8e1eb286f56d632afef8259c617c46b1b84ee55de078de76c3ee62dd0b3f338b08331"}}, {0xce, &(0x7f0000000a40)=@string={0xce, 0x3, "0b6cbdf8f8ddcb6cd772e0ad51ee6647de5c7cfe726bd0b2c8bb69f40c304a99e414d5af4a2668f3adef0214f1a63e4de436da77f1d7c9eabe1f021ccdda6ddb69d1b6ccde7fb52a2505237706d8433015b77b8b848dd25a9a9e1794bf5e2c692dbc05d0d8afaa232e1e1284fb842bbaeac3a014823ca091718dc7fbe6df32098d4c41c74fc4c10ce88f960bdbef58293814dd725531defbc7b4ab23fee84d00a43641c7b565901b753ae672ed4331b1ad0fb04aae64606a32e51dc6dfba05bf8774dc25d11d3066271a34bd"}}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwrite64(r5, &(0x7f0000000040)="fe4ff9be2064e12579", 0x4000, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r7, 0x5608) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="8b3329bd70000000000005000000080003"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x1c, 0x4) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3518, 0x1153, 0x24, 0x0, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 1.052138544s ago: executing program 7 (id=13621): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000540c00005400000003000000030000000000000b0400000006000000000000101087000003000000000000101000000004000000f900000002000000060000000000000a01000000000000000000000902000000003000"], &(0x7f00000002c0)=""/90, 0x6f, 0x5a, 0x1, 0xf}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mq_unlink(0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fallocate(r4, 0x0, 0xffffffffffffffff, 0x17) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, '.\x00'}) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911045000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.012931265s ago: executing program 7 (id=13622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x3d0, 0x0, 0x4a0, 0x2d8, 0x4a0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x7400}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x821, 0x2000}, 0x2c) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r2, 0x400, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='security.selinux\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000200)={0x9, 0x3, 0x8000}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='kmem_cache_free\x00', r7, 0x0, 0x800}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, 0x0, 0x40000101) socket$inet6_mptcp(0xa, 0x1, 0x106) 714.984549ms ago: executing program 6 (id=13636): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000800)={0x80040000, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000380), {0x2}, &(0x7f00000004c0)=""/213, 0xd5, &(0x7f0000000740)=""/139, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) rt_tgsigqueueinfo(r2, r3, 0x15, &(0x7f0000000880)={0x21, 0xf, 0xb14}) 677.31382ms ago: executing program 6 (id=13638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x3000800, 0x0, 0x0, 0x0, &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[]) 676.24951ms ago: executing program 6 (id=13639): bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="eee3d6a0040000000800000008"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000001180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x3, &(0x7f0000001080)) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xf, {"a2e3ad214fc752f90b5e094f4bf70e0dd038e7ff7fc6e5539b1b4d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146680400416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb53682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e08d4db9d76864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251aec29b32f8210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ac015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67784f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a700d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="a4b4b6b4dfc07db98a97ae22410550155e77ec9d1d84b0d5228cff97ce180ea9fecbb7ad2a0b157e7b9a5b9c6521b33636e3ce2d06e64e7b0d3d7202ac5ac4eb9a7117f595ec733ebe409c493c0512cbefd57abe2a3cf26cac6b09a82cc23bbbcef57ecc433b37876900ebfafa78b3105e896ed354c80a1a279c5c610e847bfcae835b", @ANYBLOB="040025bd7000fcdbdf2500000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08003569bbea1c2ea229621fbaa291e9060001000100"], 0x38}}, 0x801) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000050000000090100000000000000424c41c500f2ff07000a40000000000900020073797a31000000000900010073797a3100000000000003400000008900000440000000dc140000001000010000000000000000000084000a"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x20000010) 597.239881ms ago: executing program 0 (id=13641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) 537.446042ms ago: executing program 0 (id=13642): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 536.822852ms ago: executing program 0 (id=13643): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x110) mount$9p_fd(0x900, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[]) 512.710872ms ago: executing program 0 (id=13645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=0x0], &(0x7f0000001040)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spmi_write_begin\x00', r0, 0x0, 0x9}, 0x18) ioperm(0x3, 0x7, 0x7) ioperm(0x2, 0x7ff, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}}, 0x10) capset(&(0x7f0000000b40)={0x20071026}, &(0x7f0000000140)={0xb0e, 0x0, 0xffffffff, 0x81, 0x0, 0x894}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x17f, 0xb2, @scatter={0xa, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)=""/148, 0x94}, {&(0x7f0000000940)=""/185, 0xb9}, {&(0x7f0000000a00)=""/241, 0xf1}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000c80)=""/226, 0xe2}, {&(0x7f0000000d80)=""/246, 0xf6}, {&(0x7f00000005c0)=""/110, 0x6e}, {&(0x7f0000000e80)=""/194, 0xc2}, {&(0x7f0000000b00)=""/24, 0x18}]}, &(0x7f0000000700)="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", 0x0, 0x3, 0x10000, 0x22, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x402, r4}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) 467.238143ms ago: executing program 5 (id=13646): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000540c00005400000003000000030000000000000b0400000006000000000000101087000003000000000000101000000004000000f900000002000000060000000000000a01000000000000000000000902000000003000"], &(0x7f00000002c0)=""/90, 0x6f, 0x5a, 0x1, 0xf}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mq_unlink(0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fallocate(r4, 0x0, 0xffffffffffffffff, 0x17) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, '.\x00'}) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911045000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 466.460943ms ago: executing program 5 (id=13647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() (fail_nth: 1) 465.810873ms ago: executing program 6 (id=13648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0a1414ac"}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/41, 0x29) 193.189477ms ago: executing program 0 (id=13649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="5372b702f72965013792c8f5edcfb079a4ae1e0ece9303dfc2358102d31f2586b3c60b42b45a5313e2036afbf69299a0439f903864ea3bdc2361db0cbf5cf04970acb6a65b4a97451f47aee435dbc5598e2b9a8d737f1de947426b9a752fbbefca65666a7a2f3ea94b18d075241fc8d65691053222b67b8e8703d80998e90c5c74f80dc8968e4dca8707801c0a9f94d6448959a3ddaa5b57290be1ad2a5370fbfefaba8390010e36beb0ffb01e8825e6f3", 0xb1, 0xfffffffffffffff8) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x4) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}) socket$kcm(0x10, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) flistxattr(0xffffffffffffffff, 0x0, 0x0) 144.420568ms ago: executing program 6 (id=13650): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000800)={0x80040000, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000380), {0x2}, &(0x7f00000004c0)=""/213, 0xd5, &(0x7f0000000740)=""/139, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) rt_tgsigqueueinfo(r2, r3, 0x15, &(0x7f0000000880)={0x21, 0xf, 0xb14}) 143.648448ms ago: executing program 5 (id=13651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() 142.687738ms ago: executing program 0 (id=13652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="110000ffe3000000040000000900000000c236581aed8b2c187f996d232542922336dd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32], 0x50) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0d00000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0, 0x1000000}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x1b) pause() fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0xd8) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f0000000240)={[0x225c17cfe]}, 0x8) 137.608558ms ago: executing program 7 (id=13653): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 133.854828ms ago: executing program 6 (id=13654): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffec1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x42) setresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000280)="07934f5238660dfcaf02f114627440f823aa9fb303e33f43507df8bdcfeb82f1f0224a53cc5ede6f6d5f2f24bcea9cc0f239da82092044be382ea125b9e193d301f4e4869509392365b934c5450de1ba8a", 0x51}], 0x1, 0x0, 0x0, 0x4000040}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000001cc0)="5809a3212fabb86e2e9d828b432a99873ab3c83158925bff10a1e767bb9de66c7b9dd8f2fda83b6178be6934f7f90dd3f4a53dd55909aa19f0b9642e29fb2f7e193d49595b302152a9ba87e6296cbc12365998eca2b31b4b1054ea5d990bfacbee11dd2e78a90e6f26623141a7d1e0b9db9a7d9d8ca06b6f5d41291f1082d5a8497f6adc14122c4b7e53f8c678d9b63c8e51ac6555443606cf4f8e5722c0bd06a2a3f670249a146b6c198cab452e21049debd1d077b87ac62fac695506b9ffd14c9741f21c81818c7157d78ee74e3570e61e14b8cc103ad4bb959d5266825fc00d6731089aef77c17d9fcf5b3952ed247d4e85690409c28fcf246386eb6e1932dd49c8ab568ba4ec8b245e27cbeb43eeb3d30a39c0e972e4a391d49a7ef57918fb629c17c200ed9197acd7ad4b6501ae335bd5c7d50e25980bd08f6dbacd03c1c7e1c530397c335f48b87a32fba2d42dc4dfe0e10bb058981cf771092d7abf76ba840ab01b3c92bfc31a1389432a9d767c9dc7e566416b3d4e333e1ef8688340104d18c0fed3934e27e131304b390252a27d6181a798fa4a1242d32e6ba19405552167f222780bd8ed8e52d7dcd4ad44698c1ef1e85baa0b65b66f014aa4ed75577486f7dfdfac3f80ddf0c7406234d67198d610b437eced7790482e6ce5fff9408decdd7245ced4025b2ac0401660ad76f2a9ca0cacae1fa61beb8207abfe71cfcda1f2cadcd55cdf7b02e8a1d89bf619d2a681e265556afdc09dcfa28887acd4fd2d0ad2a57cc2dfd53bb40992d0c776cb9d12d031a3f22641ddac7bd180b231d53bdd3dfd730778f556e75dc81637aff39b695922dec6761ba0befe82c22c366700108dc41f87359e83b533c702f92a82b66243773ca260ab81ce272a9718145490c48da1a2e4fbb8683617063b78e54e2271caa8ec84078b0f5b2b7bb81b90ebd6bdb2c8eaa3059928fd9a28b4cb5eed0e0aa63ec31c2dd8ebebe2d69f9c5546bb979bf6cad16d96f817d32a5dc90fd51112984a4f0980a9fd004a150b7e55db75eb23e0836a406f56c10723228d4becf24221a94b9d2391b24c80fd1d02506d62cd6520171a3832c631b129b09b5ca19e18aa44a2050849d009a1a0a9e88e5ac4c30264f2c6c2d44e851ed7f96dcbe9b6fa1b0d7938587c27a1376853dd2ea8d4380148f32192f59c16ff69f6fd00b73f3fe7ff8c432bdb7c415676faf381779ef2f5fe0f6aebd5436caa427175ff41a1c1f900a9c219093902abade0fd5cc69a78623109d34e3858cd3428d8cb73ea1c66d3b23aadb48b2622041ac7025aab7e5beefe08343d81be0bfdffa87cfa70cde26e0b60069b76a35677599f6f4f699d294738fd863640622e167f4d1b391d2b22d807331805acb4f07f576a6e1628960fe62c9876ebb2da483a4c68adfbb75d1d831d2a95ac139dc2629b2877afb3df15bb2d82392b76688e212d41868f6e5e4a290f2c7dd1a83410d69e9f0810e3987df8578323e3f810116cd6761b80656b79fbee5169560b03bb6a1dd139fab8c6293feae17b94823d67b89716cad0d873e0e4b067993c7e78a4c1fddac5cba1aa091cbc5b6bbe2ec31d1af26d13c527f981574a690c2a89a5e5f432ef46732c4b736676c3889754be42947b7456c9fad86ba906232f142be5d49eb4da0aa0afc7596347bab2a30b7383ea1a5276f5f514d77ecdc47f50dd40bd8ec02bdfe4fb805aa78d9296a41e2cd71d7953c9f106cbe0a083da5e31b80f8958ad986270cae2b9c47beb2fd16de3cbf7bbd050bc389a60b8d2b0a002fa0e05c3f267f899d27410e56dc1302fd51038ea17668764bdbd85537e49af1216624b65c1ca97cc4b06fa41f3e19913c9c0073a3468aedd22f631c7476004cde0f95b277754cbf7f6508e597e5991d8adcc0ade8dab1d26edfae8d28b88050c47cfbd65d59a663732a6d801fccaa0cb03b029ce7299376669b9544ebec264b48f3865bec4dafc6e8aeafbe549102ce1790ec3bdee9fba2f29266781e0ae1b05bff6f6abe859a3ff9d33dab39c28b625b142e43d94b1dac1dfeeaf58f08ae68d204cc9fae40ed3ee93e70ad68d37af54944aebff00352b2085bc795a5050aba0de21d784fd76b08f8c7e2e12aa5629968a8543b130780b4c8d30b56bfe29a0baf78fe7e6bebd2afb3a94885ec006ed21c1060c056c6f626966b5e31b46745ca6d32c88928986b6f002e704be500580f0744578cbb3dc03b4f86ddf01740ce646c8ba405ea5a27ed77431dc5d5fbe4cb7a72833a88f2550835513d4ab841405a5766f2fa607045ad00502b51554c5b37c75d6f1eba65b29d5967dcfe82d799c49ff1386c86d7aaa1bffe6b1acd2e2a55dc5a0a43b34df5b61d903e5ea36b26737e43579e18f279a72f6526651625b429e4227af8dc1b2297b727d188a1a3665349d5604e2185a7c7c6be90a6bb45b4915513e66bc67f8d3fbe7153f553f996238fa793e1dee46a8576cf923ef1dd9e8005f21b552f85440ab67f7273435d96b557b5e24f88b3a18ba14e693fd26b0cdab2e7a7a013835b31f10121355233f57cb627e94cc314c535eeac15c71addd197bd3aa4901e55278bcbbe3888799ae3738fffd9d2563154dcd96b1325aeda4dd532994b1fb2ef65eb771d4eaae0effc146c5adec260f88bf23f865f9426cb444dbb6ae59460d8e69178d8b56345f04d7cadec03bb2b63e2874db90bfc2c9c78d6509074eba301c58cc1130adf90cd7af855621c81c8f00d652b2685d6443c88b1403ef14068cac4d876dde25f2d96868896d008c842828e95c214b7f1455ba0268e4c724767b50c1e535c037c92d1810d94db6fc2b9664665ee5e2fa89666c7adb47be372dbca975d27ed47a039e39dea7f755cc9d", 0x7fd}], 0x1, 0x0, 0x0, 0x2400c805}}], 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="1400000002060108000000000000000000000040e1cd55c2ffdd865b8aecf6f0a08a0cdc8d825d3877cd95346b7065efd4b2168e581e76d8b41ec37dd8dcb4a49b749a3d8bf3c9d5c1bab8d5eff362506300843959a1e20cce5804fb57e41afed1fbe79d26006aa38f86e0767bbf88a3f89d78fe030000000000000029fa6d39aea4352cab3a25215a6b36e393da5616f5ca116a2cfa67c15f937c1b7043dac586facf547e436104db15e9202565"], 0x14}}, 0x0) 117.887408ms ago: executing program 7 (id=13655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f0000000440)=""/91}, 0x20) 111.317578ms ago: executing program 5 (id=13656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000480)={0x0, 0x21, '\x00', [@generic={0x7b, 0xee, "aa81285ed73feefe827721aa799a4330bbb2a5b2804612fceb36b29a13f55a10e05450003e15092b74ceb92b7febe8e0c59b41cd5244a2fad8074a46d13f52eef218d83e5a4f1fc299f092bd7ff20c346b472c480fc272575a523fa54fb71d429306eaaf216c2271195322185d74985fe1990bf06912105c268c7d79e18fc1aac8c631d82bae377565eaef50885b5a1f2380af444512f8a9d27f677cd7ae12258aa1cfaed143270ad56b59b8135c4cc9b06fd0a5168e8b995249d3e8cdccf7bba1657ade493e0fca5038ce0ab39ecee16264bb2899708b0a77da1ab55dcd631f0e5673ad866f0dbee7f3ea47fc52"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x401, [0xbb]}}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0xff}]}, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xd0, &(0x7f0000000080)={0x0, 0x8b48, 0x2000, 0x1, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') io_cancel(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d0000000200000048e5000001000000028000005be04a337b7fc02ec431f58370ba7f081acee7cd0b0f0ddc", @ANYRES32=r5, @ANYBLOB="0400"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="05000000030000000100"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) socket$kcm(0x10, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0) 97.148589ms ago: executing program 7 (id=13657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe, 0x604, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xd) 83.970599ms ago: executing program 5 (id=13658): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_timedsend(r2, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) 62.054549ms ago: executing program 5 (id=13659): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000", @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 42.256359ms ago: executing program 1 (id=13660): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=0x0], &(0x7f0000001040)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='spmi_write_begin\x00', r0, 0x0, 0x9}, 0x18) ioperm(0x3, 0x7, 0x7) ioperm(0x2, 0x7ff, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}}, 0x10) capset(&(0x7f0000000b40)={0x20071026}, &(0x7f0000000140)={0xb0e, 0x0, 0xffffffff, 0x81, 0x0, 0x894}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x17f, 0xb2, @scatter={0xa, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)=""/148, 0x94}, {&(0x7f0000000940)=""/185, 0xb9}, {&(0x7f0000000a00)=""/241, 0xf1}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000c80)=""/226, 0xe2}, {&(0x7f0000000d80)=""/246, 0xf6}, {&(0x7f00000005c0)=""/110, 0x6e}, {&(0x7f0000000e80)=""/194, 0xc2}, {&(0x7f0000000b00)=""/24, 0x18}]}, &(0x7f0000000700)="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", 0x0, 0x3, 0x10000, 0x22, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000810000000200000009"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000280607ee622", 0x2e}], 0x1}, 0x24000044) 0s ago: executing program 7 (id=13661): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000400)={0x0, "aec84b158cf15bd26d0eea0473e7e8deb79fe5103dede9e1606090eb94e0da53a07f6cb2b177ad391d7f406df56a555d8677c1b1a866a5d874285f45b83eb245ee51966851a28f9ed2d0a64aff33a5926772ccfaa439ae68f2767eb79aa08b2c826a2498c395bccf90280de54bae76dfd2590624a99e78c5b55afd370cfed2b9a1f02fb8749b7a72224ebf7abfe8a9f73fc18a81bc807c7d9223dd8d5ae79da3e5f31752917410737a4095544e29d7338c91860d111bccd10780e07ef068c039516774e28d2eee957b758c5720834a671f5f06b0c1cffa55cd8fc367dd5b2f54c3f13a4944d1a14c95b32d2d3914c72666e95ac2d3710558c168e274528ea155"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0xf) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) gettid() r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r6) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) kernel console output (not intermixed with test programs): 00 [ 1056.532497][ T29] audit: type=1326 audit(2000000012.440:73235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.6.12359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1056.556317][ T29] audit: type=1326 audit(2000000012.440:73236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.6.12359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1056.667685][T13455] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12366'. [ 1056.676873][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12366'. [ 1056.686500][T13455] 8021q: VLANs not supported on ip6gre0 [ 1056.789034][T13461] netlink: 'syz.6.12368': attribute type 10 has an invalid length. [ 1056.803151][T13461] team0: Device ipvlan0 failed to register rx_handler [ 1056.884798][T13462] lo speed is unknown, defaulting to 1000 [ 1057.109091][ T29] audit: type=1326 audit(2000000013.060:73237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.7.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1057.132887][ T29] audit: type=1326 audit(2000000013.060:73238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.7.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1057.156647][ T29] audit: type=1326 audit(2000000013.060:73239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.7.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1057.180329][ T29] audit: type=1326 audit(2000000013.060:73240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.7.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1057.204009][ T29] audit: type=1326 audit(2000000013.060:73241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.7.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1057.808846][T13498] netlink: 'syz.5.12373': attribute type 4 has an invalid length. [ 1057.964857][T13497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.010480][T13497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.088128][T23075] hid-generic 0000:0000:0000.00AE: unknown main item tag 0x0 [ 1058.109795][T23075] hid-generic 0000:0000:0000.00AE: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1058.465975][T13521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12381'. [ 1058.594440][T13524] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12382'. [ 1058.603688][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12382'. [ 1058.667233][T13549] IPv6: Can't replace route, no match found [ 1058.699581][T13553] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1058.847444][T13568] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12396'. [ 1058.856706][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12396'. [ 1058.911609][T13572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12398'. [ 1058.936385][T13576] Process accounting resumed [ 1058.952096][T13579] IPv6: Can't replace route, no match found [ 1059.031890][T13592] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12408'. [ 1059.041154][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12408'. [ 1059.107860][T13598] random: crng reseeded on system resumption [ 1059.262129][T13609] IPv6: Can't replace route, no match found [ 1059.513731][T13629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12419'. [ 1059.678944][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12425'. [ 1059.760405][T13651] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1059.892490][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.903109][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.916481][ T3474] hid-generic 0000:0000:0000.00AF: unknown main item tag 0x0 [ 1059.933723][ T3474] hid-generic 0000:0000:0000.00AF: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1060.150649][T13690] IPv6: Can't replace route, no match found [ 1060.806097][T13713] netlink: 'syz.0.12449': attribute type 4 has an invalid length. [ 1060.858468][T13721] IPv6: Can't replace route, no match found [ 1061.144909][T13729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.153626][T13729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.164879][ T3478] hid-generic 0000:0000:0000.00B0: unknown main item tag 0x0 [ 1061.181450][ T3478] hid-generic 0000:0000:0000.00B0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1061.183693][T13739] netlink: 'syz.7.12460': attribute type 4 has an invalid length. [ 1061.560944][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 1061.560966][ T29] audit: type=1326 audit(2000000017.550:73737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.562337][T13779] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1061.579095][ T29] audit: type=1326 audit(2000000017.550:73738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.621652][ T29] audit: type=1326 audit(2000000017.550:73739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.645428][ T29] audit: type=1326 audit(2000000017.550:73740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.669502][ T29] audit: type=1326 audit(2000000017.550:73741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.693259][ T29] audit: type=1326 audit(2000000017.550:73742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.716916][ T29] audit: type=1326 audit(2000000017.550:73743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.740663][ T29] audit: type=1326 audit(2000000017.550:73744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.764565][ T29] audit: type=1326 audit(2000000017.550:73745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.788290][ T29] audit: type=1326 audit(2000000017.550:73746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13778 comm="syz.5.12470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1061.795819][T13783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13783 comm=syz.1.12471 [ 1061.963718][T13794] 8021q: VLANs not supported on ip6tnl0 [ 1062.338010][T13818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.347070][T13818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.360572][T13836] 8021q: VLANs not supported on ip6gre0 [ 1062.361127][T23075] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 1062.391846][T23075] hid-generic 0000:0000:0000.00B1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1062.745734][T13874] netlink: 'syz.1.12501': attribute type 4 has an invalid length. [ 1062.776717][T13876] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1063.143315][T13912] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1063.332057][T13923] 8021q: VLANs not supported on ip6gre0 [ 1063.494838][T13939] __nla_validate_parse: 14 callbacks suppressed [ 1063.494860][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12527'. [ 1063.792663][T13952] lo speed is unknown, defaulting to 1000 [ 1064.279791][T13977] SET target dimension over the limit! [ 1064.292087][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12534'. [ 1064.301372][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12534'. [ 1064.310589][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12534'. [ 1064.356777][T13980] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12535'. [ 1064.365999][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12535'. [ 1064.456141][T13980] 8021q: VLANs not supported on ip6tnl0 [ 1064.544890][T13987] 9pnet_fd: Insufficient options for proto=fd [ 1064.653112][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12538'. [ 1064.903886][T14006] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12542'. [ 1065.315132][T14018] FAULT_INJECTION: forcing a failure. [ 1065.315132][T14018] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.327980][T14018] CPU: 1 UID: 0 PID: 14018 Comm: syz.1.12547 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1065.328073][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1065.328144][T14018] Call Trace: [ 1065.328153][T14018] [ 1065.328164][T14018] __dump_stack+0x1d/0x30 [ 1065.328190][T14018] dump_stack_lvl+0xe8/0x140 [ 1065.328215][T14018] dump_stack+0x15/0x1b [ 1065.328237][T14018] should_fail_ex+0x265/0x280 [ 1065.328345][T14018] should_failslab+0x8c/0xb0 [ 1065.328370][T14018] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1065.328403][T14018] ? shmem_alloc_inode+0x34/0x50 [ 1065.328429][T14018] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1065.328489][T14018] shmem_alloc_inode+0x34/0x50 [ 1065.328514][T14018] alloc_inode+0x40/0x170 [ 1065.328548][T14018] new_inode+0x1d/0xe0 [ 1065.328567][T14018] shmem_get_inode+0x244/0x750 [ 1065.328594][T14018] __shmem_file_setup+0x113/0x210 [ 1065.328701][T14018] shmem_file_setup+0x3b/0x50 [ 1065.328872][T14018] __se_sys_memfd_create+0x2c3/0x590 [ 1065.328926][T14018] __x64_sys_memfd_create+0x31/0x40 [ 1065.328969][T14018] x64_sys_call+0x122f/0x2fb0 [ 1065.329024][T14018] do_syscall_64+0xd2/0x200 [ 1065.329048][T14018] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1065.329083][T14018] ? clear_bhb_loop+0x40/0x90 [ 1065.329106][T14018] ? clear_bhb_loop+0x40/0x90 [ 1065.329203][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.329307][T14018] RIP: 0033:0x7fee9e32e929 [ 1065.329328][T14018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.329353][T14018] RSP: 002b:00007fee9c996e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1065.329376][T14018] RAX: ffffffffffffffda RBX: 000000000000043d RCX: 00007fee9e32e929 [ 1065.329393][T14018] RDX: 00007fee9c996ef0 RSI: 0000000000000000 RDI: 00007fee9e3b14cc [ 1065.329409][T14018] RBP: 0000200000000900 R08: 00007fee9c996bb7 R09: 00007fee9c996e40 [ 1065.329422][T14018] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 1065.329434][T14018] R13: 00007fee9c996ef0 R14: 00007fee9c996eb0 R15: 0000200000000080 [ 1065.329471][T14018] [ 1065.924475][T14050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14050 comm=syz.7.12557 [ 1066.130729][T14062] netlink: 96 bytes leftover after parsing attributes in process `syz.7.12562'. [ 1066.130758][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12562'. [ 1066.130800][T14062] 8021q: VLANs not supported on sit0 [ 1066.493615][T14083] 9pnet_fd: Insufficient options for proto=fd [ 1066.578108][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 1066.578125][ T29] audit: type=1326 audit(2000000022.560:74131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.618128][ T29] audit: type=1326 audit(2000000022.600:74132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.643499][ T29] audit: type=1326 audit(2000000022.610:74133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.667371][ T29] audit: type=1326 audit(2000000022.630:74134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.692669][ T29] audit: type=1326 audit(2000000022.640:74135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.716608][ T29] audit: type=1326 audit(2000000022.650:74136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.740342][ T29] audit: type=1326 audit(2000000022.660:74137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.764232][ T29] audit: type=1326 audit(2000000022.680:74138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.795360][ T29] audit: type=1326 audit(2000000022.780:74139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1066.819452][ T29] audit: type=1326 audit(2000000022.810:74140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14047 comm="syz.6.12556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1067.016612][T14119] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1067.548414][T14160] netlink: 'syz.0.12591': attribute type 4 has an invalid length. [ 1067.850937][T14181] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1067.888419][T14185] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1067.975172][T14196] 8021q: VLANs not supported on ip6gre0 [ 1068.472082][T14229] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1068.542600][T14231] __nla_validate_parse: 7 callbacks suppressed [ 1068.542618][T14231] netlink: 96 bytes leftover after parsing attributes in process `syz.7.12615'. [ 1068.558077][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12615'. [ 1068.568049][T14231] 8021q: VLANs not supported on ip6gre0 [ 1068.634177][T14236] netlink: 'syz.5.12616': attribute type 4 has an invalid length. [ 1068.705599][T14243] netlink: 'syz.7.12617': attribute type 4 has an invalid length. [ 1068.877516][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12622'. [ 1068.911296][T14253] IPv6: Can't replace route, no match found [ 1069.037906][T14265] netlink: 'syz.0.12629': attribute type 4 has an invalid length. [ 1069.110871][T14271] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12633'. [ 1069.125411][T14271] syz!: rxe_newlink: already configured on team_slave_0 [ 1069.195540][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12634'. [ 1069.250825][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12635'. [ 1069.268914][T14282] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1069.373794][T14293] netlink: 'syz.1.12640': attribute type 4 has an invalid length. [ 1069.601492][T14308] IPv6: Can't replace route, no match found [ 1070.418404][T14340] netlink: 'syz.5.12658': attribute type 4 has an invalid length. [ 1070.476820][T14342] FAULT_INJECTION: forcing a failure. [ 1070.476820][T14342] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.489639][T14342] CPU: 1 UID: 0 PID: 14342 Comm: syz.5.12659 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1070.489682][T14342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1070.489761][T14342] Call Trace: [ 1070.489791][T14342] [ 1070.489802][T14342] __dump_stack+0x1d/0x30 [ 1070.489831][T14342] dump_stack_lvl+0xe8/0x140 [ 1070.489872][T14342] dump_stack+0x15/0x1b [ 1070.489895][T14342] should_fail_ex+0x265/0x280 [ 1070.489942][T14342] should_failslab+0x8c/0xb0 [ 1070.489975][T14342] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1070.490009][T14342] ? __alloc_skb+0x101/0x320 [ 1070.490103][T14342] __alloc_skb+0x101/0x320 [ 1070.490154][T14342] netlink_alloc_large_skb+0xba/0xf0 [ 1070.490190][T14342] netlink_sendmsg+0x3cf/0x6b0 [ 1070.490214][T14342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.490253][T14342] __sock_sendmsg+0x145/0x180 [ 1070.490281][T14342] ____sys_sendmsg+0x31e/0x4e0 [ 1070.490334][T14342] ___sys_sendmsg+0x17b/0x1d0 [ 1070.490529][T14342] __x64_sys_sendmsg+0xd4/0x160 [ 1070.490595][T14342] x64_sys_call+0x2999/0x2fb0 [ 1070.490666][T14342] do_syscall_64+0xd2/0x200 [ 1070.490690][T14342] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1070.490740][T14342] ? clear_bhb_loop+0x40/0x90 [ 1070.490767][T14342] ? clear_bhb_loop+0x40/0x90 [ 1070.490801][T14342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.490975][T14342] RIP: 0033:0x7f102c68e929 [ 1070.490993][T14342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.491047][T14342] RSP: 002b:00007f102acf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.491075][T14342] RAX: ffffffffffffffda RBX: 00007f102c8b5fa0 RCX: 00007f102c68e929 [ 1070.491092][T14342] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000b [ 1070.491110][T14342] RBP: 00007f102acf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.491136][T14342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.491155][T14342] R13: 0000000000000000 R14: 00007f102c8b5fa0 R15: 00007ffed6e809c8 [ 1070.491185][T14342] [ 1070.831474][T14354] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12665'. [ 1070.840604][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12665'. [ 1070.870323][T14354] 8021q: VLANs not supported on ip6gre0 [ 1070.886116][T14359] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1070.945678][T14366] netlink: 'syz.1.12669': attribute type 4 has an invalid length. [ 1071.040070][T14371] 9pnet_fd: Insufficient options for proto=fd [ 1071.115060][T14375] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1071.329386][T14393] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12679'. [ 1071.338483][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12679'. [ 1071.349632][T14393] 8021q: VLANs not supported on ip6gre0 [ 1071.374711][T14396] IPv6: Can't replace route, no match found [ 1071.487495][T14415] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1071.580349][ T29] kauditd_printk_skb: 734 callbacks suppressed [ 1071.580368][ T29] audit: type=1326 audit(2000000027.570:74875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf160ed290 code=0x7ffc0000 [ 1071.614401][ T29] audit: type=1326 audit(2000000027.570:74876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faf160ed58a code=0x7ffc0000 [ 1071.638240][ T29] audit: type=1326 audit(2000000027.570:74877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.662007][ T29] audit: type=1326 audit(2000000027.570:74878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.685837][ T29] audit: type=1326 audit(2000000027.600:74879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.709579][ T29] audit: type=1326 audit(2000000027.600:74880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.733365][ T29] audit: type=1326 audit(2000000027.600:74881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.737489][T14424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.757123][ T29] audit: type=1326 audit(2000000027.600:74882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.789558][ T29] audit: type=1326 audit(2000000027.600:74883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.789595][ T29] audit: type=1326 audit(2000000027.600:74884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14414 comm="syz.0.12691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1071.790937][T14424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.820805][ T3378] hid-generic 0000:0000:0000.00B2: unknown main item tag 0x0 [ 1071.828095][ T3378] hid-generic 0000:0000:0000.00B2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1071.844755][T14423] 8021q: VLANs not supported on ip6gre0 [ 1071.851528][T14419] siw: device registration error -23 [ 1071.912027][T14432] IPv6: Can't replace route, no match found [ 1072.426995][T14462] 8021q: VLANs not supported on ip6gre0 [ 1072.666279][T14486] 9pnet_virtio: no channels available for device [ 1072.932787][T14500] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1073.075752][T14514] IPv6: Can't replace route, no match found [ 1073.085340][T14516] 8021q: VLANs not supported on ip6gre0 [ 1073.226355][T14509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.249326][T14509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.284486][T14530] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1073.300109][ T3389] hid-generic 0000:0000:0000.00B3: unknown main item tag 0x0 [ 1073.330852][ T3389] hid-generic 0000:0000:0000.00B3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1073.802338][T14570] 9pnet_fd: Insufficient options for proto=fd [ 1074.028147][T14580] __nla_validate_parse: 10 callbacks suppressed [ 1074.028170][T14580] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.12744'. [ 1074.234113][T14587] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12746'. [ 1074.243333][T14587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12746'. [ 1074.348775][T14587] 8021q: VLANs not supported on ip6gre0 [ 1074.536608][T14601] lo speed is unknown, defaulting to 1000 [ 1074.915294][T14624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12753'. [ 1076.818913][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 1076.818933][ T29] audit: type=1326 audit(2000000032.800:75222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1076.917975][ T29] audit: type=1326 audit(2000000032.850:75223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1076.941770][ T29] audit: type=1326 audit(2000000032.850:75224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1076.965475][ T29] audit: type=1326 audit(2000000032.850:75225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1076.989203][ T29] audit: type=1326 audit(2000000032.860:75226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1077.012993][ T29] audit: type=1326 audit(2000000032.860:75227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1077.036938][ T29] audit: type=1326 audit(2000000032.860:75228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1077.061342][ T29] audit: type=1326 audit(2000000032.860:75229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1077.085083][ T29] audit: type=1326 audit(2000000032.860:75230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1077.108808][ T29] audit: type=1326 audit(2000000032.860:75231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14644 comm="syz.7.12760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1077.319631][T14651] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12763'. [ 1077.328851][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12763'. [ 1077.341077][T14653] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12761'. [ 1077.350298][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12761'. [ 1077.357746][T14651] 8021q: VLANs not supported on ip6gre0 [ 1077.365212][T14653] 8021q: VLANs not supported on ip6gre0 [ 1077.526863][T14669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12767'. [ 1077.538190][T14669] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1077.555244][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12768'. [ 1077.616549][T14677] SET target dimension over the limit! [ 1077.683308][T14683] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1077.687391][T14687] netlink: 'syz.6.12775': attribute type 4 has an invalid length. [ 1077.704351][T14685] 8021q: VLANs not supported on ip6gre0 [ 1078.010684][T14718] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=14718 comm=syz.6.12784 [ 1078.178005][T14728] netlink: 'syz.7.12790': attribute type 4 has an invalid length. [ 1078.183375][T14727] 8021q: VLANs not supported on ip6gre0 [ 1078.210866][T14732] syz!: rxe_newlink: already configured on team_slave_0 [ 1078.235599][T14730] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1078.310104][T14738] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1078.396260][T14734] xt_hashlimit: max too large, truncated to 1048576 [ 1078.454907][T14734] netlink: 'syz.0.12792': attribute type 5 has an invalid length. [ 1078.475082][T14734] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1078.483890][T14734] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1078.492706][T14734] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1078.501516][T14734] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1078.537786][T14734] geneve2: entered promiscuous mode [ 1078.543143][T14734] geneve2: entered allmulticast mode [ 1078.934235][T14767] lo speed is unknown, defaulting to 1000 [ 1079.566471][T14775] __nla_validate_parse: 9 callbacks suppressed [ 1079.566493][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12807'. [ 1079.652749][T14777] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1079.765541][T14798] FAULT_INJECTION: forcing a failure. [ 1079.765541][T14798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.778798][T14798] CPU: 1 UID: 0 PID: 14798 Comm: syz.5.12810 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1079.778895][T14798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1079.778913][T14798] Call Trace: [ 1079.778973][T14798] [ 1079.778981][T14798] __dump_stack+0x1d/0x30 [ 1079.779002][T14798] dump_stack_lvl+0xe8/0x140 [ 1079.779026][T14798] dump_stack+0x15/0x1b [ 1079.779047][T14798] should_fail_ex+0x265/0x280 [ 1079.779156][T14798] should_fail+0xb/0x20 [ 1079.779191][T14798] should_fail_usercopy+0x1a/0x20 [ 1079.779231][T14798] _copy_to_user+0x20/0xa0 [ 1079.779338][T14798] simple_read_from_buffer+0xb5/0x130 [ 1079.779379][T14798] proc_fail_nth_read+0x100/0x140 [ 1079.779454][T14798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1079.779497][T14798] vfs_read+0x1a0/0x6f0 [ 1079.779537][T14798] ? __rcu_read_unlock+0x4f/0x70 [ 1079.779617][T14798] ? __fget_files+0x184/0x1c0 [ 1079.779641][T14798] ksys_read+0xda/0x1a0 [ 1079.779683][T14798] __x64_sys_read+0x40/0x50 [ 1079.779725][T14798] x64_sys_call+0x2d77/0x2fb0 [ 1079.779826][T14798] do_syscall_64+0xd2/0x200 [ 1079.779849][T14798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1079.779883][T14798] ? clear_bhb_loop+0x40/0x90 [ 1079.779910][T14798] ? clear_bhb_loop+0x40/0x90 [ 1079.779939][T14798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.780041][T14798] RIP: 0033:0x7f102c68d33c [ 1079.780056][T14798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1079.780079][T14798] RSP: 002b:00007f102acf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1079.780136][T14798] RAX: ffffffffffffffda RBX: 00007f102c8b5fa0 RCX: 00007f102c68d33c [ 1079.780153][T14798] RDX: 000000000000000f RSI: 00007f102acf70a0 RDI: 0000000000000004 [ 1079.780165][T14798] RBP: 00007f102acf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.780177][T14798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.780192][T14798] R13: 0000000000000000 R14: 00007f102c8b5fa0 R15: 00007ffed6e809c8 [ 1079.780216][T14798] [ 1080.028062][T14808] IPv6: Can't replace route, no match found [ 1080.036142][T14809] netlink: 'syz.1.12811': attribute type 4 has an invalid length. [ 1080.124420][T14811] SET target dimension over the limit! [ 1080.217643][T14818] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12804'. [ 1080.815002][T14840] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12819'. [ 1080.921620][T14843] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12820'. [ 1080.930863][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12820'. [ 1080.971710][T14843] 8021q: VLANs not supported on ip6_vti0 [ 1081.279085][T14860] SET target dimension over the limit! [ 1081.410284][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12828'. [ 1081.823935][T14888] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12835'. [ 1081.833116][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12835'. [ 1081.842907][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 1081.842925][ T29] audit: type=1326 audit(2000000037.830:75557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1081.885322][T14888] 8021q: VLANs not supported on sit0 [ 1081.919579][ T29] audit: type=1326 audit(2000000037.840:75558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1081.943487][ T29] audit: type=1326 audit(2000000037.840:75559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1081.967232][ T29] audit: type=1326 audit(2000000037.860:75560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1081.990982][ T29] audit: type=1326 audit(2000000037.870:75561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1082.014682][ T29] audit: type=1326 audit(2000000037.880:75562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1082.038392][ T29] audit: type=1326 audit(2000000037.890:75563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1082.062214][ T29] audit: type=1326 audit(2000000037.900:75564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1082.093820][ T29] audit: type=1326 audit(2000000037.980:75565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1082.117890][ T29] audit: type=1326 audit(2000000037.980:75566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.7.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f13d207e929 code=0x7ffc0000 [ 1082.282635][T14908] SET target dimension over the limit! [ 1082.303195][T14903] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12842'. [ 1082.348195][T14912] IPv6: Can't replace route, no match found [ 1082.378409][T14916] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12848'. [ 1082.388245][T14916] 8021q: VLANs not supported on sit0 [ 1082.458210][T14926] netlink: 'syz.0.12852': attribute type 4 has an invalid length. [ 1082.768114][T14962] netlink: 'syz.7.12864': attribute type 4 has an invalid length. [ 1082.821667][T14966] 8021q: VLANs not supported on ip6_vti0 [ 1083.084954][T14997] 9pnet_fd: Insufficient options for proto=fd [ 1083.142131][T15006] 8021q: VLANs not supported on ip6_vti0 [ 1083.208180][T15014] SET target dimension over the limit! [ 1083.231883][T14995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.253014][T15020] SET target dimension over the limit! [ 1083.254821][T14995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.284618][ T3378] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1083.298672][T15026] 9pnet_virtio: no channels available for device  [ 1083.306957][ T3378] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1083.339313][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.359683][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.383286][ T3389] hid-generic 0000:0000:0000.00B5: unknown main item tag 0x0 [ 1083.400527][ T3389] hid-generic 0000:0000:0000.00B5: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1083.483627][T15054] 9pnet_fd: Insufficient options for proto=fd [ 1083.532749][T15059] 8021q: VLANs not supported on ip6_vti0 [ 1084.041201][T15089] 9pnet_virtio: no channels available for device  [ 1084.063960][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.072688][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.098235][ T3389] hid-generic 0000:0000:0000.00B6: unknown main item tag 0x0 [ 1084.120763][ T3389] hid-generic 0000:0000:0000.00B6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1084.181411][T15104] 9pnet: Unknown protocol version 9 [ 1084.220463][T15106] 8021q: VLANs not supported on ip6_vti0 [ 1084.306440][T15114] 8021q: VLANs not supported on sit0 [ 1084.448218][T15140] 9pnet_fd: Insufficient options for proto=fd [ 1084.470157][T15142] IPv6: Can't replace route, no match found [ 1084.490297][T15144] FAULT_INJECTION: forcing a failure. [ 1084.490297][T15144] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.503006][T15144] CPU: 0 UID: 0 PID: 15144 Comm: syz.0.12916 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1084.503040][T15144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1084.503099][T15144] Call Trace: [ 1084.503106][T15144] [ 1084.503116][T15144] __dump_stack+0x1d/0x30 [ 1084.503142][T15144] dump_stack_lvl+0xe8/0x140 [ 1084.503166][T15144] dump_stack+0x15/0x1b [ 1084.503187][T15144] should_fail_ex+0x265/0x280 [ 1084.503229][T15144] ? __request_module+0x1c4/0x3e0 [ 1084.503256][T15144] should_failslab+0x8c/0xb0 [ 1084.503324][T15144] ? rtnl_newlink+0x658/0x12d0 [ 1084.503366][T15144] __kmalloc_cache_noprof+0x4c/0x320 [ 1084.503403][T15144] ? rtnl_newlink+0x658/0x12d0 [ 1084.503429][T15144] __request_module+0x1c4/0x3e0 [ 1084.503457][T15144] rtnl_newlink+0x658/0x12d0 [ 1084.503562][T15144] ? bpf_trace_run3+0x12c/0x1d0 [ 1084.503614][T15144] ? __memcg_slab_free_hook+0x135/0x230 [ 1084.503658][T15144] ? __kfree_skb+0x109/0x150 [ 1084.503716][T15144] ? __rcu_read_unlock+0x4f/0x70 [ 1084.503740][T15144] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1084.503837][T15144] ? selinux_capable+0x1f9/0x270 [ 1084.503926][T15144] ? security_capable+0x83/0x90 [ 1084.503974][T15144] ? ns_capable+0x7d/0xb0 [ 1084.504018][T15144] ? __pfx_rtnl_newlink+0x10/0x10 [ 1084.504041][T15144] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 1084.504075][T15144] netlink_rcv_skb+0x123/0x220 [ 1084.504195][T15144] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1084.504233][T15144] rtnetlink_rcv+0x1c/0x30 [ 1084.504259][T15144] netlink_unicast+0x59e/0x670 [ 1084.504295][T15144] netlink_sendmsg+0x58b/0x6b0 [ 1084.504321][T15144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.504347][T15144] __sock_sendmsg+0x145/0x180 [ 1084.504449][T15144] ____sys_sendmsg+0x31e/0x4e0 [ 1084.504497][T15144] ___sys_sendmsg+0x17b/0x1d0 [ 1084.504541][T15144] __x64_sys_sendmsg+0xd4/0x160 [ 1084.504574][T15144] x64_sys_call+0x2999/0x2fb0 [ 1084.504593][T15144] do_syscall_64+0xd2/0x200 [ 1084.504662][T15144] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1084.504686][T15144] ? clear_bhb_loop+0x40/0x90 [ 1084.504705][T15144] ? clear_bhb_loop+0x40/0x90 [ 1084.504783][T15144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.504802][T15144] RIP: 0033:0x7faf160ee929 [ 1084.504816][T15144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.504897][T15144] RSP: 002b:00007faf14757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.504915][T15144] RAX: ffffffffffffffda RBX: 00007faf16315fa0 RCX: 00007faf160ee929 [ 1084.504926][T15144] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1084.504937][T15144] RBP: 00007faf14757090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.504948][T15144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.504959][T15144] R13: 0000000000000000 R14: 00007faf16315fa0 R15: 00007fff2af28b28 [ 1084.504977][T15144] [ 1084.506385][T15144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.600801][T15145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.808692][T15145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.838367][ T3474] hid-generic 0000:0000:0000.00B7: unknown main item tag 0x0 [ 1084.855617][ T3474] hid-generic 0000:0000:0000.00B7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1085.052110][T15172] __nla_validate_parse: 12 callbacks suppressed [ 1085.052130][T15172] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12921'. [ 1085.093535][T15172] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1085.230216][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12925'. [ 1085.261084][T15187] 9pnet_fd: Insufficient options for proto=fd [ 1085.344652][T15199] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12933'. [ 1085.354060][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12933'. [ 1085.367349][T15199] 8021q: VLANs not supported on ip6_vti0 [ 1085.375751][T15201] netlink: 'syz.1.12934': attribute type 10 has an invalid length. [ 1085.392663][T15201] ipvlan0: entered allmulticast mode [ 1085.398028][T15201] veth0_vlan: entered allmulticast mode [ 1085.407312][T15201] team0: Device ipvlan0 failed to register rx_handler [ 1085.586841][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12941'. [ 1085.610274][T15219] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1085.637918][T15225] IPv6: Can't replace route, no match found [ 1085.742820][T15239] FAULT_INJECTION: forcing a failure. [ 1085.742820][T15239] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.755529][T15239] CPU: 1 UID: 0 PID: 15239 Comm: syz.0.12952 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1085.755558][T15239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1085.755644][T15239] Call Trace: [ 1085.755650][T15239] [ 1085.755658][T15239] __dump_stack+0x1d/0x30 [ 1085.755680][T15239] dump_stack_lvl+0xe8/0x140 [ 1085.755772][T15239] dump_stack+0x15/0x1b [ 1085.755794][T15239] should_fail_ex+0x265/0x280 [ 1085.755830][T15239] should_failslab+0x8c/0xb0 [ 1085.755854][T15239] __kvmalloc_node_noprof+0x123/0x4e0 [ 1085.755903][T15239] ? xt_alloc_table_info+0x3b/0x80 [ 1085.755935][T15239] ? should_fail_ex+0xdb/0x280 [ 1085.755967][T15239] xt_alloc_table_info+0x3b/0x80 [ 1085.756036][T15239] do_ip6t_set_ctl+0x5a5/0x840 [ 1085.756077][T15239] nf_setsockopt+0x199/0x1b0 [ 1085.756100][T15239] ipv6_setsockopt+0x11a/0x130 [ 1085.756129][T15239] udpv6_setsockopt+0x99/0xb0 [ 1085.756199][T15239] sock_common_setsockopt+0x69/0x80 [ 1085.756227][T15239] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1085.756329][T15239] __sys_setsockopt+0x184/0x200 [ 1085.756368][T15239] __x64_sys_setsockopt+0x64/0x80 [ 1085.756421][T15239] x64_sys_call+0x2bd5/0x2fb0 [ 1085.756452][T15239] do_syscall_64+0xd2/0x200 [ 1085.756474][T15239] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1085.756507][T15239] ? clear_bhb_loop+0x40/0x90 [ 1085.756529][T15239] ? clear_bhb_loop+0x40/0x90 [ 1085.756622][T15239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.756650][T15239] RIP: 0033:0x7faf160ee929 [ 1085.756664][T15239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.756700][T15239] RSP: 002b:00007faf14757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1085.756720][T15239] RAX: ffffffffffffffda RBX: 00007faf16315fa0 RCX: 00007faf160ee929 [ 1085.756736][T15239] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1085.756752][T15239] RBP: 00007faf14757090 R08: 0000000000000568 R09: 0000000000000000 [ 1085.756832][T15239] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.756845][T15239] R13: 0000000000000000 R14: 00007faf16315fa0 R15: 00007fff2af28b28 [ 1085.756867][T15239] [ 1086.031347][T15249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12957'. [ 1086.041618][T15249] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1086.078329][T15255] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1086.129247][T15262] SET target dimension over the limit! [ 1086.177003][T15268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12965'. [ 1086.187746][T15268] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1086.211841][T15270] netlink: 'syz.1.12966': attribute type 4 has an invalid length. [ 1086.242919][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1086.252123][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12968'. [ 1086.265434][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12969'. [ 1086.275603][T15276] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1086.421594][T15295] SET target dimension over the limit! [ 1086.739850][T15326] SET target dimension over the limit! [ 1086.824068][T15332] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1086.830722][T15332] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1086.838307][T15332] vhci_hcd vhci_hcd.0: Device attached [ 1086.846860][T15334] vhci_hcd: connection closed [ 1086.847106][ T8013] vhci_hcd: stop threads [ 1086.856382][ T8013] vhci_hcd: release socket [ 1086.861533][ T8013] vhci_hcd: disconnect device [ 1086.895518][ T29] kauditd_printk_skb: 830 callbacks suppressed [ 1086.895532][ T29] audit: type=1326 audit(2000000042.880:76397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.5.12992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1086.935253][ T29] audit: type=1326 audit(2000000042.890:76398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.5.12992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1086.959077][ T29] audit: type=1326 audit(2000000042.890:76399): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.5.12992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1086.983486][ T29] audit: type=1326 audit(2000000042.890:76400): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.5.12992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1087.023833][ T29] audit: type=1400 audit(2000000043.000:76401): avc: denied { create } for pid=15341 comm="syz.5.12993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1087.043892][ T29] audit: type=1400 audit(2000000043.000:76402): avc: denied { connect } for pid=15341 comm="syz.5.12993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1087.063974][ T29] audit: type=1400 audit(2000000043.000:76403): avc: denied { write } for pid=15341 comm="syz.5.12993" path="socket:[159142]" dev="sockfs" ino=159142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1087.094068][T15342] team0: Device ip6tnl1 is of different type [ 1087.144175][ T29] audit: type=1326 audit(2000000043.130:76404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.5.12993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1087.167967][ T29] audit: type=1326 audit(2000000043.130:76405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.5.12993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1087.191831][ T29] audit: type=1326 audit(2000000043.130:76406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.5.12993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1087.502013][T15375] 8021q: VLANs not supported on ip6_vti0 [ 1087.551775][T15377] netlink: 'syz.1.13005': attribute type 298 has an invalid length. [ 1087.903443][T15400] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1087.980628][T15404] 8021q: VLANs not supported on sit0 [ 1088.000864][T15406] 9pnet_fd: Insufficient options for proto=fd [ 1088.082761][T15413] netlink: 'syz.7.13019': attribute type 4 has an invalid length. [ 1088.226060][T15431] 9pnet_fd: Insufficient options for proto=fd [ 1088.256387][T15433] 8021q: VLANs not supported on sit0 [ 1088.316237][T15440] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1088.484403][T15447] netlink: 'syz.0.13033': attribute type 4 has an invalid length. [ 1088.567663][T15453] FAULT_INJECTION: forcing a failure. [ 1088.567663][T15453] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.580431][T15453] CPU: 0 UID: 0 PID: 15453 Comm: syz.6.13035 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1088.580466][T15453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1088.580486][T15453] Call Trace: [ 1088.580493][T15453] [ 1088.580501][T15453] __dump_stack+0x1d/0x30 [ 1088.580530][T15453] dump_stack_lvl+0xe8/0x140 [ 1088.580621][T15453] dump_stack+0x15/0x1b [ 1088.580644][T15453] should_fail_ex+0x265/0x280 [ 1088.580685][T15453] should_failslab+0x8c/0xb0 [ 1088.580710][T15453] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1088.580879][T15453] ? __alloc_skb+0x101/0x320 [ 1088.580919][T15453] __alloc_skb+0x101/0x320 [ 1088.580968][T15453] ? audit_log_start+0x365/0x6c0 [ 1088.581009][T15453] audit_log_start+0x380/0x6c0 [ 1088.581057][T15453] audit_seccomp+0x48/0x100 [ 1088.581169][T15453] ? __seccomp_filter+0x68c/0x10d0 [ 1088.581306][T15453] __seccomp_filter+0x69d/0x10d0 [ 1088.581334][T15453] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1088.581399][T15453] ? vfs_write+0x75e/0x8e0 [ 1088.581529][T15453] __secure_computing+0x82/0x150 [ 1088.581552][T15453] syscall_trace_enter+0xcf/0x1e0 [ 1088.581580][T15453] do_syscall_64+0xac/0x200 [ 1088.581604][T15453] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1088.581692][T15453] ? clear_bhb_loop+0x40/0x90 [ 1088.581721][T15453] ? clear_bhb_loop+0x40/0x90 [ 1088.581798][T15453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.581820][T15453] RIP: 0033:0x7f6fd903e929 [ 1088.581839][T15453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.581864][T15453] RSP: 002b:00007f6fd76a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1088.581942][T15453] RAX: ffffffffffffffda RBX: 00007f6fd9265fa0 RCX: 00007f6fd903e929 [ 1088.582035][T15453] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 000000000000000a [ 1088.582052][T15453] RBP: 00007f6fd76a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.582068][T15453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.582080][T15453] R13: 0000000000000000 R14: 00007f6fd9265fa0 R15: 00007ffd60e863f8 [ 1088.582100][T15453] [ 1088.894612][T15464] 8021q: VLANs not supported on sit0 [ 1089.018723][T15480] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1089.026912][T15483] netlink: 'syz.5.13048': attribute type 4 has an invalid length. [ 1089.266361][T15507] netlink: 'syz.1.13059': attribute type 4 has an invalid length. [ 1089.390853][T15519] FAULT_INJECTION: forcing a failure. [ 1089.390853][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.403689][T15519] CPU: 0 UID: 0 PID: 15519 Comm: syz.1.13065 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1089.403724][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1089.403780][T15519] Call Trace: [ 1089.403788][T15519] [ 1089.403797][T15519] __dump_stack+0x1d/0x30 [ 1089.403823][T15519] dump_stack_lvl+0xe8/0x140 [ 1089.403849][T15519] dump_stack+0x15/0x1b [ 1089.403880][T15519] should_fail_ex+0x265/0x280 [ 1089.403920][T15519] should_failslab+0x8c/0xb0 [ 1089.403950][T15519] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1089.403994][T15519] ? __alloc_skb+0x101/0x320 [ 1089.404102][T15519] __alloc_skb+0x101/0x320 [ 1089.404189][T15519] netlink_alloc_large_skb+0xba/0xf0 [ 1089.404223][T15519] netlink_sendmsg+0x3cf/0x6b0 [ 1089.404248][T15519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.404270][T15519] __sock_sendmsg+0x145/0x180 [ 1089.404363][T15519] ____sys_sendmsg+0x31e/0x4e0 [ 1089.404561][T15519] ___sys_sendmsg+0x17b/0x1d0 [ 1089.404608][T15519] __x64_sys_sendmsg+0xd4/0x160 [ 1089.404726][T15519] x64_sys_call+0x2999/0x2fb0 [ 1089.404762][T15519] do_syscall_64+0xd2/0x200 [ 1089.404782][T15519] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1089.404815][T15519] ? clear_bhb_loop+0x40/0x90 [ 1089.404848][T15519] ? clear_bhb_loop+0x40/0x90 [ 1089.404872][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.404896][T15519] RIP: 0033:0x7fee9e32e929 [ 1089.404913][T15519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.404933][T15519] RSP: 002b:00007fee9c997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.404954][T15519] RAX: ffffffffffffffda RBX: 00007fee9e555fa0 RCX: 00007fee9e32e929 [ 1089.405006][T15519] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1089.405021][T15519] RBP: 00007fee9c997090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.405034][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.405045][T15519] R13: 0000000000000000 R14: 00007fee9e555fa0 R15: 00007fff56ba6f08 [ 1089.405064][T15519] [ 1089.732845][T15531] 9pnet_fd: Insufficient options for proto=fd [ 1089.777486][T15541] netlink: 'syz.7.13072': attribute type 4 has an invalid length. [ 1089.909906][T15557] netlink: 'syz.6.13075': attribute type 4 has an invalid length. [ 1089.988165][T15562] FAULT_INJECTION: forcing a failure. [ 1089.988165][T15562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.001415][T15562] CPU: 0 UID: 0 PID: 15562 Comm: syz.5.13080 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1090.001445][T15562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1090.001532][T15562] Call Trace: [ 1090.001541][T15562] [ 1090.001552][T15562] __dump_stack+0x1d/0x30 [ 1090.001579][T15562] dump_stack_lvl+0xe8/0x140 [ 1090.001611][T15562] dump_stack+0x15/0x1b [ 1090.001633][T15562] should_fail_ex+0x265/0x280 [ 1090.001742][T15562] should_fail+0xb/0x20 [ 1090.001778][T15562] should_fail_usercopy+0x1a/0x20 [ 1090.001835][T15562] _copy_from_user+0x1c/0xb0 [ 1090.001862][T15562] restore_altstack+0x4b/0x2d0 [ 1090.001895][T15562] ? __set_task_blocked+0x23a/0x2a0 [ 1090.001989][T15562] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 1090.002018][T15562] ? _raw_spin_unlock_irq+0x26/0x50 [ 1090.002080][T15562] ? signal_setup_done+0x266/0x290 [ 1090.002124][T15562] ? xfd_validate_state+0x45/0xf0 [ 1090.002165][T15562] ? fpu__clear_user_states+0x63/0x1e0 [ 1090.002200][T15562] ? fpregs_mark_activate+0x66/0x140 [ 1090.002291][T15562] ? fpu__clear_user_states+0x63/0x1e0 [ 1090.002375][T15562] ? arch_do_signal_or_restart+0x2f3/0x480 [ 1090.002479][T15562] ? __rcu_read_unlock+0x4f/0x70 [ 1090.002504][T15562] x64_sys_call+0x2e8a/0x2fb0 [ 1090.002532][T15562] do_syscall_64+0xd2/0x200 [ 1090.002555][T15562] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1090.002640][T15562] ? clear_bhb_loop+0x40/0x90 [ 1090.002668][T15562] ? clear_bhb_loop+0x40/0x90 [ 1090.002698][T15562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.002792][T15562] RIP: 0033:0x7f102c62ab19 [ 1090.002808][T15562] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1090.002880][T15562] RSP: 002b:00007f102acf6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1090.002904][T15562] RAX: ffffffffffffffda RBX: 00007f102c8b5fa0 RCX: 00007f102c62ab19 [ 1090.002919][T15562] RDX: 00007f102acf6a80 RSI: 00007f102acf6bb0 RDI: 0000000000000021 [ 1090.002935][T15562] RBP: 00007f102acf7090 R08: 0000200000048000 R09: 0000000000000000 [ 1090.002951][T15562] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1090.002967][T15562] R13: 0000000000000000 R14: 00007f102c8b5fa0 R15: 00007ffed6e809c8 [ 1090.003024][T15562] [ 1090.506458][T15564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.515020][T15564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.525102][ T3474] hid-generic 0000:0000:0000.00B8: unknown main item tag 0x0 [ 1090.535499][ T3474] hid-generic 0000:0000:0000.00B8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1090.555214][T15559] Set syz1 is full, maxelem 65536 reached [ 1090.750293][T15590] netlink: 'syz.1.13089': attribute type 298 has an invalid length. [ 1091.129958][T15619] netlink: 'syz.6.13098': attribute type 4 has an invalid length. [ 1091.221732][T15627] siw: device registration error -23 [ 1091.269197][T15629] siw: device registration error -23 [ 1091.304874][T15626] __nla_validate_parse: 22 callbacks suppressed [ 1091.304895][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13101'. [ 1091.372813][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13102'. [ 1091.381894][T15631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13102'. [ 1091.544072][T15647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13105'. [ 1091.553291][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13105'. [ 1092.121441][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 1092.121457][ T29] audit: type=1326 audit(2000000048.110:76735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.172877][ T29] audit: type=1326 audit(2000000048.110:76736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.196733][ T29] audit: type=1326 audit(2000000048.110:76737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.220678][ T29] audit: type=1326 audit(2000000048.120:76738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.244451][ T29] audit: type=1326 audit(2000000048.120:76739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.268199][ T29] audit: type=1326 audit(2000000048.120:76740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.292056][ T29] audit: type=1326 audit(2000000048.120:76741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.316064][ T29] audit: type=1326 audit(2000000048.120:76742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.339794][ T29] audit: type=1326 audit(2000000048.120:76743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.363482][ T29] audit: type=1326 audit(2000000048.120:76744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.0.13110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1092.495230][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13117'. [ 1092.504586][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13117'. [ 1092.710681][T15694] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13122'. [ 1092.719939][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13122'. [ 1092.730784][T15694] 8021q: VLANs not supported on sit0 [ 1092.854429][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13123'. [ 1092.915338][T15700] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1093.022874][T15713] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1093.068650][T15717] netlink: 'syz.0.13132': attribute type 298 has an invalid length. [ 1093.140120][T15726] FAULT_INJECTION: forcing a failure. [ 1093.140120][T15726] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.152884][T15726] CPU: 1 UID: 0 PID: 15726 Comm: syz.6.13136 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1093.152920][T15726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1093.152972][T15726] Call Trace: [ 1093.152980][T15726] [ 1093.152987][T15726] __dump_stack+0x1d/0x30 [ 1093.153008][T15726] dump_stack_lvl+0xe8/0x140 [ 1093.153028][T15726] dump_stack+0x15/0x1b [ 1093.153061][T15726] should_fail_ex+0x265/0x280 [ 1093.153154][T15726] should_failslab+0x8c/0xb0 [ 1093.153179][T15726] kmem_cache_alloc_noprof+0x50/0x310 [ 1093.153237][T15726] ? audit_log_start+0x365/0x6c0 [ 1093.153278][T15726] audit_log_start+0x365/0x6c0 [ 1093.153323][T15726] audit_seccomp+0x48/0x100 [ 1093.153434][T15726] ? __seccomp_filter+0x68c/0x10d0 [ 1093.153464][T15726] __seccomp_filter+0x69d/0x10d0 [ 1093.153495][T15726] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1093.153565][T15726] ? vfs_write+0x75e/0x8e0 [ 1093.153606][T15726] ? __rcu_read_unlock+0x4f/0x70 [ 1093.153630][T15726] ? __fget_files+0x184/0x1c0 [ 1093.153727][T15726] __secure_computing+0x82/0x150 [ 1093.153758][T15726] syscall_trace_enter+0xcf/0x1e0 [ 1093.153791][T15726] do_syscall_64+0xac/0x200 [ 1093.153876][T15726] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1093.153969][T15726] ? clear_bhb_loop+0x40/0x90 [ 1093.153996][T15726] ? clear_bhb_loop+0x40/0x90 [ 1093.154018][T15726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.154039][T15726] RIP: 0033:0x7f6fd903e929 [ 1093.154054][T15726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.154137][T15726] RSP: 002b:00007f6fd76a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.154165][T15726] RAX: ffffffffffffffda RBX: 00007f6fd9265fa0 RCX: 00007f6fd903e929 [ 1093.154181][T15726] RDX: 0000000000000000 RSI: 000000008008f513 RDI: 0000000000000004 [ 1093.154197][T15726] RBP: 00007f6fd76a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.154212][T15726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.154284][T15726] R13: 0000000000000000 R14: 00007f6fd9265fa0 R15: 00007ffd60e863f8 [ 1093.154362][T15726] [ 1093.608113][T15762] netlink: 'syz.7.13151': attribute type 4 has an invalid length. [ 1094.093285][T15782] 8021q: VLANs not supported on sit0 [ 1094.121079][T15784] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1094.156000][T15790] netlink: 'syz.1.13165': attribute type 298 has an invalid length. [ 1094.241397][T15794] lo speed is unknown, defaulting to 1000 [ 1094.295819][T15825] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1094.346443][T15829] 8021q: VLANs not supported on sit0 [ 1094.676636][T15831] lo speed is unknown, defaulting to 1000 [ 1094.806842][T15902] netlink: 'syz.7.13187': attribute type 4 has an invalid length. [ 1094.839395][T15909] netlink: 'syz.5.13190': attribute type 298 has an invalid length. [ 1094.959590][T15928] 8021q: VLANs not supported on ip6tnl0 [ 1095.142922][T15934] siw: device registration error -23 [ 1095.361404][T15943] netlink: 'syz.5.13203': attribute type 4 has an invalid length. [ 1095.613785][T15955] 8021q: VLANs not supported on ip6tnl0 [ 1096.012861][T15981] netlink: 'syz.6.13216': attribute type 298 has an invalid length. [ 1096.071620][T15985] netlink: 'syz.6.13218': attribute type 4 has an invalid length. [ 1096.204753][T15990] 8021q: VLANs not supported on ip6tnl0 [ 1096.217057][T15992] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1096.365833][T15997] lo speed is unknown, defaulting to 1000 [ 1096.518637][T16022] __nla_validate_parse: 26 callbacks suppressed [ 1096.518730][T16022] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13225'. [ 1096.534436][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13225'. [ 1096.551759][T16022] 8021q: VLANs not supported on sit0 [ 1096.949446][T16035] netlink: 'syz.1.13228': attribute type 8 has an invalid length. [ 1097.136418][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 1097.136437][ T29] audit: type=1326 audit(2000000053.120:77199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee9e3258e7 code=0x7ffc0000 [ 1097.216731][ T29] audit: type=1326 audit(2000000053.120:77200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee9e2cab19 code=0x7ffc0000 [ 1097.240427][ T29] audit: type=1326 audit(2000000053.150:77201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee9e3258e7 code=0x7ffc0000 [ 1097.264145][ T29] audit: type=1326 audit(2000000053.150:77202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee9e2cab19 code=0x7ffc0000 [ 1097.287790][ T29] audit: type=1326 audit(2000000053.150:77203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fee9e32e929 code=0x7ffc0000 [ 1097.311522][ T29] audit: type=1326 audit(2000000053.160:77204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee9e3258e7 code=0x7ffc0000 [ 1097.335335][ T29] audit: type=1326 audit(2000000053.160:77205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee9e2cab19 code=0x7ffc0000 [ 1097.359039][ T29] audit: type=1326 audit(2000000053.160:77206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fee9e32e929 code=0x7ffc0000 [ 1097.382724][ T29] audit: type=1326 audit(2000000053.180:77207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fee9e3258e7 code=0x7ffc0000 [ 1097.406356][ T29] audit: type=1326 audit(2000000053.180:77208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16034 comm="syz.1.13228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee9e2cab19 code=0x7ffc0000 [ 1097.674784][T16052] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13232'. [ 1097.891545][T16054] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13234'. [ 1097.900820][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13234'. [ 1097.915164][T16054] 8021q: VLANs not supported on sit0 [ 1098.356987][T16066] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 1098.404529][T16068] netlink: 'syz.0.13239': attribute type 4 has an invalid length. [ 1098.455603][T16072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13241'. [ 1098.466024][T16072] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1098.928765][T16095] netlink: 'syz.7.13246': attribute type 298 has an invalid length. [ 1098.969355][T16097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13247'. [ 1098.978451][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13247'. [ 1099.211504][T16115] netlink: 'syz.1.13252': attribute type 298 has an invalid length. [ 1099.714175][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13260'. [ 1099.837876][T16143] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1099.883855][T16149] netlink: 'syz.5.13264': attribute type 298 has an invalid length. [ 1099.995817][T16172] netlink: 'syz.7.13273': attribute type 298 has an invalid length. [ 1100.032328][T16175] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1100.147010][T16188] FAULT_INJECTION: forcing a failure. [ 1100.147010][T16188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.160517][T16188] CPU: 0 UID: 0 PID: 16188 Comm: syz.7.13279 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1100.160547][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1100.160562][T16188] Call Trace: [ 1100.160570][T16188] [ 1100.160580][T16188] __dump_stack+0x1d/0x30 [ 1100.160603][T16188] dump_stack_lvl+0xe8/0x140 [ 1100.160728][T16188] dump_stack+0x15/0x1b [ 1100.160746][T16188] should_fail_ex+0x265/0x280 [ 1100.160780][T16188] should_fail+0xb/0x20 [ 1100.160809][T16188] should_fail_usercopy+0x1a/0x20 [ 1100.160849][T16188] strncpy_from_user+0x25/0x230 [ 1100.160875][T16188] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1100.160932][T16188] ? getname_flags+0x80/0x3b0 [ 1100.161006][T16188] getname_flags+0xae/0x3b0 [ 1100.161054][T16188] do_sys_openat2+0x60/0x110 [ 1100.161084][T16188] __x64_sys_openat+0xf2/0x120 [ 1100.161115][T16188] x64_sys_call+0x1af/0x2fb0 [ 1100.161199][T16188] do_syscall_64+0xd2/0x200 [ 1100.161218][T16188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1100.161247][T16188] ? clear_bhb_loop+0x40/0x90 [ 1100.161269][T16188] ? clear_bhb_loop+0x40/0x90 [ 1100.161312][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.161335][T16188] RIP: 0033:0x7f13d207d290 [ 1100.161351][T16188] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1100.161371][T16188] RSP: 002b:00007f13d06e4ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1100.161391][T16188] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f13d207d290 [ 1100.161429][T16188] RDX: 0000000000000002 RSI: 00007f13d2100814 RDI: 00000000ffffff9c [ 1100.161443][T16188] RBP: 00007f13d2100814 R08: 0000000000000000 R09: 0000000000000000 [ 1100.161456][T16188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1100.161469][T16188] R13: 0000000000000024 R14: 0000200000000940 R15: 00007ffff89dbba8 [ 1100.161489][T16188] [ 1100.581306][T16209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.592494][T16209] bridge_slave_1 (unregistering): left allmulticast mode [ 1100.599882][T16209] bridge_slave_1 (unregistering): left promiscuous mode [ 1100.606930][T16209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.704285][T16217] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1100.883886][T16230] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1100.985787][T16251] FAULT_INJECTION: forcing a failure. [ 1100.985787][T16251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.994208][T16252] netlink: 'syz.5.13297': attribute type 298 has an invalid length. [ 1100.999009][T16251] CPU: 0 UID: 0 PID: 16251 Comm: syz.1.13296 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1100.999089][T16251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1100.999109][T16251] Call Trace: [ 1100.999118][T16251] [ 1100.999128][T16251] __dump_stack+0x1d/0x30 [ 1100.999161][T16251] dump_stack_lvl+0xe8/0x140 [ 1100.999189][T16251] dump_stack+0x15/0x1b [ 1100.999213][T16251] should_fail_ex+0x265/0x280 [ 1100.999275][T16251] should_fail+0xb/0x20 [ 1100.999316][T16251] should_fail_usercopy+0x1a/0x20 [ 1100.999363][T16251] _copy_from_user+0x1c/0xb0 [ 1100.999455][T16251] proc_ioctl_default+0x43/0xa0 [ 1100.999506][T16251] usbdev_ioctl+0xe97/0x1710 [ 1100.999671][T16251] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1100.999713][T16251] __se_sys_ioctl+0xce/0x140 [ 1100.999757][T16251] __x64_sys_ioctl+0x43/0x50 [ 1100.999806][T16251] x64_sys_call+0x19a8/0x2fb0 [ 1100.999837][T16251] do_syscall_64+0xd2/0x200 [ 1100.999864][T16251] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1100.999939][T16251] ? clear_bhb_loop+0x40/0x90 [ 1100.999971][T16251] ? clear_bhb_loop+0x40/0x90 [ 1101.000002][T16251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.000037][T16251] RIP: 0033:0x7fee9e32e929 [ 1101.000058][T16251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.000085][T16251] RSP: 002b:00007fee9c997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.000112][T16251] RAX: ffffffffffffffda RBX: 00007fee9e555fa0 RCX: 00007fee9e32e929 [ 1101.000131][T16251] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000003 [ 1101.000149][T16251] RBP: 00007fee9c997090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.000168][T16251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.000237][T16251] R13: 0000000000000000 R14: 00007fee9e555fa0 R15: 00007fff56ba6f08 [ 1101.000264][T16251] [ 1101.227797][T16260] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1101.293077][T16275] serio: Serial port ttyS3 [ 1101.353736][T16294] 8021q: VLANs not supported on ip6tnl0 [ 1101.361161][T16291] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1101.410899][T16303] netlink: 'syz.1.13312': attribute type 4 has an invalid length. [ 1101.445718][T16313] 8021q: VLANs not supported on sit0 [ 1101.454134][T16306] syz!: rxe_newlink: already configured on team_slave_0 [ 1101.612998][T16326] __nla_validate_parse: 20 callbacks suppressed [ 1101.613016][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13320'. [ 1101.651255][T16323] serio: Serial port ttyS3 [ 1101.707956][T16336] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13323'. [ 1101.717117][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13323'. [ 1101.757971][T16336] 8021q: VLANs not supported on ip6tnl0 [ 1101.790179][T16341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13324'. [ 1101.832003][T16339] serio: Serial port ttyS3 [ 1101.833240][T16341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1101.879570][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13327'. [ 1101.916066][T16354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13328'. [ 1101.928069][T16354] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1101.979886][T16357] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13329'. [ 1101.989106][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13329'. [ 1102.019319][T16357] 8021q: VLANs not supported on sit0 [ 1102.259414][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 1102.259433][ T29] audit: type=1326 audit(2000000058.250:77685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.319354][ T29] audit: type=1326 audit(2000000058.250:77686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.343279][ T29] audit: type=1326 audit(2000000058.250:77687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.367055][ T29] audit: type=1326 audit(2000000058.250:77688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.390845][ T29] audit: type=1326 audit(2000000058.250:77689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.414514][ T29] audit: type=1326 audit(2000000058.250:77690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.438397][ T29] audit: type=1326 audit(2000000058.250:77691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.462135][ T29] audit: type=1326 audit(2000000058.250:77692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.485875][ T29] audit: type=1326 audit(2000000058.250:77693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.509676][ T29] audit: type=1326 audit(2000000058.250:77694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16368 comm="syz.6.13333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1102.613632][T16379] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13337'. [ 1102.622863][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13337'. [ 1102.672380][T16379] 8021q: VLANs not supported on ip6tnl0 [ 1102.913844][T16385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.932254][T16385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.942243][ T10] hid-generic 0000:0000:0000.00B9: unknown main item tag 0x0 [ 1102.962017][ T10] hid-generic 0000:0000:0000.00B9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1102.967612][T16389] serio: Serial port ttyS3 [ 1103.161806][T16420] serio: Serial port ttyS3 [ 1103.299502][T16439] 8021q: VLANs not supported on ip6tnl0 [ 1103.364623][T16446] netlink: 'syz.7.13351': attribute type 4 has an invalid length. [ 1103.418111][T16450] netlink: 'syz.7.13353': attribute type 298 has an invalid length. [ 1103.567751][T16461] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1103.756186][T16465] lo speed is unknown, defaulting to 1000 [ 1105.230757][T16514] netlink: 'syz.1.13364': attribute type 4 has an invalid length. [ 1106.326421][T16559] netlink: 'syz.1.13377': attribute type 298 has an invalid length. [ 1106.589812][T16583] FAULT_INJECTION: forcing a failure. [ 1106.589812][T16583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.603123][T16583] CPU: 0 UID: 0 PID: 16583 Comm: syz.7.13384 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1106.603168][T16583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1106.603182][T16583] Call Trace: [ 1106.603189][T16583] [ 1106.603196][T16583] __dump_stack+0x1d/0x30 [ 1106.603217][T16583] dump_stack_lvl+0xe8/0x140 [ 1106.603242][T16583] dump_stack+0x15/0x1b [ 1106.603261][T16583] should_fail_ex+0x265/0x280 [ 1106.603294][T16583] should_fail+0xb/0x20 [ 1106.603336][T16583] should_fail_usercopy+0x1a/0x20 [ 1106.603379][T16583] strncpy_from_user+0x25/0x230 [ 1106.603412][T16583] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1106.603476][T16583] ? getname_flags+0x80/0x3b0 [ 1106.603508][T16583] getname_flags+0xae/0x3b0 [ 1106.603619][T16583] __x64_sys_renameat+0x50/0x80 [ 1106.603641][T16583] x64_sys_call+0x2d98/0x2fb0 [ 1106.603662][T16583] do_syscall_64+0xd2/0x200 [ 1106.603697][T16583] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1106.603775][T16583] ? clear_bhb_loop+0x40/0x90 [ 1106.603795][T16583] ? clear_bhb_loop+0x40/0x90 [ 1106.603816][T16583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.603840][T16583] RIP: 0033:0x7f13d207e929 [ 1106.603868][T16583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.603891][T16583] RSP: 002b:00007f13d06e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 1106.603910][T16583] RAX: ffffffffffffffda RBX: 00007f13d22a5fa0 RCX: 00007f13d207e929 [ 1106.603923][T16583] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 1106.603935][T16583] RBP: 00007f13d06e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.603946][T16583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.603958][T16583] R13: 0000000000000000 R14: 00007f13d22a5fa0 R15: 00007ffff89dbba8 [ 1106.603990][T16583] [ 1106.628001][T16580] lo speed is unknown, defaulting to 1000 [ 1106.802456][T16602] __nla_validate_parse: 8 callbacks suppressed [ 1106.802472][T16602] netlink: 96 bytes leftover after parsing attributes in process `syz.5.13390'. [ 1106.817968][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13390'. [ 1106.862573][T16602] 8021q: VLANs not supported on sit0 [ 1106.910993][T16598] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 1107.022105][T16635] netlink: 'syz.1.13395': attribute type 298 has an invalid length. [ 1107.239248][T16649] serio: Serial port ttyS3 [ 1107.561487][T16667] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13403'. [ 1107.570718][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13403'. [ 1107.580484][T16667] 8021q: VLANs not supported on sit0 [ 1108.001382][ T29] kauditd_printk_skb: 2303 callbacks suppressed [ 1108.001518][ T29] audit: type=1326 audit(2000000063.990:79998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.004183][T16674] netlink: 'syz.0.13406': attribute type 8 has an invalid length. [ 1108.008077][ T29] audit: type=1326 audit(2000000063.990:79999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.063796][ T29] audit: type=1326 audit(2000000063.990:80000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.087679][ T29] audit: type=1326 audit(2000000063.990:80001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.111458][ T29] audit: type=1326 audit(2000000063.990:80002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.135438][ T29] audit: type=1326 audit(2000000063.990:80003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.136111][T16659] serio: Serial port ttyS3 [ 1108.159356][ T29] audit: type=1326 audit(2000000063.990:80004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.187647][ T29] audit: type=1326 audit(2000000063.990:80005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.211494][ T29] audit: type=1326 audit(2000000063.990:80006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.235367][ T29] audit: type=1326 audit(2000000063.990:80007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.0.13406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1108.284625][T16693] FAULT_INJECTION: forcing a failure. [ 1108.284625][T16693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.297857][T16693] CPU: 1 UID: 0 PID: 16693 Comm: syz.6.13410 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1108.297934][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.297948][T16693] Call Trace: [ 1108.297956][T16693] [ 1108.297966][T16693] __dump_stack+0x1d/0x30 [ 1108.297994][T16693] dump_stack_lvl+0xe8/0x140 [ 1108.298021][T16693] dump_stack+0x15/0x1b [ 1108.298064][T16693] should_fail_ex+0x265/0x280 [ 1108.298103][T16693] should_fail+0xb/0x20 [ 1108.298140][T16693] should_fail_usercopy+0x1a/0x20 [ 1108.298251][T16693] _copy_from_user+0x1c/0xb0 [ 1108.298274][T16693] ___sys_sendmsg+0xc1/0x1d0 [ 1108.298336][T16693] __x64_sys_sendmsg+0xd4/0x160 [ 1108.298435][T16693] x64_sys_call+0x2999/0x2fb0 [ 1108.298464][T16693] do_syscall_64+0xd2/0x200 [ 1108.298489][T16693] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1108.298569][T16693] ? clear_bhb_loop+0x40/0x90 [ 1108.298595][T16693] ? clear_bhb_loop+0x40/0x90 [ 1108.298625][T16693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.298653][T16693] RIP: 0033:0x7f6fd903e929 [ 1108.298702][T16693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.298786][T16693] RSP: 002b:00007f6fd76a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.298807][T16693] RAX: ffffffffffffffda RBX: 00007f6fd9265fa0 RCX: 00007f6fd903e929 [ 1108.298825][T16693] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 1108.298842][T16693] RBP: 00007f6fd76a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.298867][T16693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.298884][T16693] R13: 0000000000000000 R14: 00007f6fd9265fa0 R15: 00007ffd60e863f8 [ 1108.298910][T16693] [ 1108.492901][T16694] netlink: 'syz.1.13408': attribute type 4 has an invalid length. [ 1108.524953][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1108.540561][T16703] netlink: 'syz.5.13409': attribute type 4 has an invalid length. [ 1108.572218][T16709] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 2, id = 0 [ 1108.577422][T16711] FAULT_INJECTION: forcing a failure. [ 1108.577422][T16711] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.594173][T16711] CPU: 1 UID: 0 PID: 16711 Comm: syz.5.13416 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1108.594208][T16711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.594224][T16711] Call Trace: [ 1108.594232][T16711] [ 1108.594241][T16711] __dump_stack+0x1d/0x30 [ 1108.594269][T16711] dump_stack_lvl+0xe8/0x140 [ 1108.594317][T16711] dump_stack+0x15/0x1b [ 1108.594340][T16711] should_fail_ex+0x265/0x280 [ 1108.594380][T16711] should_failslab+0x8c/0xb0 [ 1108.594490][T16711] kmem_cache_alloc_noprof+0x50/0x310 [ 1108.594526][T16711] ? getname_flags+0x80/0x3b0 [ 1108.594557][T16711] getname_flags+0x80/0x3b0 [ 1108.594588][T16711] do_sys_openat2+0x60/0x110 [ 1108.594652][T16711] __x64_sys_open+0xe6/0x110 [ 1108.594689][T16711] x64_sys_call+0x14d4/0x2fb0 [ 1108.594712][T16711] do_syscall_64+0xd2/0x200 [ 1108.594811][T16711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1108.594845][T16711] ? clear_bhb_loop+0x40/0x90 [ 1108.594873][T16711] ? clear_bhb_loop+0x40/0x90 [ 1108.594975][T16711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.595004][T16711] RIP: 0033:0x7f102c68e929 [ 1108.595024][T16711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.595105][T16711] RSP: 002b:00007f102acf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1108.595130][T16711] RAX: ffffffffffffffda RBX: 00007f102c8b5fa0 RCX: 00007f102c68e929 [ 1108.595147][T16711] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 00002000000002c0 [ 1108.595162][T16711] RBP: 00007f102acf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.595178][T16711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.595195][T16711] R13: 0000000000000000 R14: 00007f102c8b5fa0 R15: 00007ffed6e809c8 [ 1108.595218][T16711] [ 1108.827734][T16730] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13420'. [ 1108.837152][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13420'. [ 1108.849927][T16730] 8021q: VLANs not supported on sit0 [ 1108.930855][T16740] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13425'. [ 1108.942352][T16740] syz!: rxe_newlink: already configured on team_slave_0 [ 1108.976547][T16742] FAULT_INJECTION: forcing a failure. [ 1108.976547][T16742] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.989273][T16742] CPU: 0 UID: 0 PID: 16742 Comm: syz.6.13426 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1108.989306][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.989318][T16742] Call Trace: [ 1108.989385][T16742] [ 1108.989396][T16742] __dump_stack+0x1d/0x30 [ 1108.989424][T16742] dump_stack_lvl+0xe8/0x140 [ 1108.989451][T16742] dump_stack+0x15/0x1b [ 1108.989474][T16742] should_fail_ex+0x265/0x280 [ 1108.989585][T16742] should_failslab+0x8c/0xb0 [ 1108.989616][T16742] __kmalloc_noprof+0xa5/0x3e0 [ 1108.989651][T16742] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 1108.989753][T16742] ? selinux_file_permission+0x1e4/0x320 [ 1108.989779][T16742] kernfs_fop_write_iter+0xe1/0x2d0 [ 1108.989846][T16742] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1108.989877][T16742] vfs_write+0x4a0/0x8e0 [ 1108.989979][T16742] ksys_write+0xda/0x1a0 [ 1108.990020][T16742] __x64_sys_write+0x40/0x50 [ 1108.990087][T16742] x64_sys_call+0x2cdd/0x2fb0 [ 1108.990109][T16742] do_syscall_64+0xd2/0x200 [ 1108.990128][T16742] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1108.990223][T16742] ? clear_bhb_loop+0x40/0x90 [ 1108.990250][T16742] ? clear_bhb_loop+0x40/0x90 [ 1108.990276][T16742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.990299][T16742] RIP: 0033:0x7f6fd903e929 [ 1108.990314][T16742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.990363][T16742] RSP: 002b:00007f6fd76a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1108.990388][T16742] RAX: ffffffffffffffda RBX: 00007f6fd9265fa0 RCX: 00007f6fd903e929 [ 1108.990405][T16742] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000005 [ 1108.990420][T16742] RBP: 00007f6fd76a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.990433][T16742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.990444][T16742] R13: 0000000000000000 R14: 00007f6fd9265fa0 R15: 00007ffd60e863f8 [ 1108.990539][T16742] [ 1109.545549][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13432'. [ 1109.560874][T16747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.575048][T16766] serio: Serial port ttyS3 [ 1109.583856][T16747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.594283][ T10] hid-generic 0000:0000:0000.00BA: unknown main item tag 0x0 [ 1109.652918][ T10] hid-generic 0000:0000:0000.00BA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1109.705666][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13434'. [ 1109.797864][T16795] syz!: rxe_newlink: already configured on team_slave_0 [ 1109.895005][T16809] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1110.061826][T16820] netlink: 'syz.6.13447': attribute type 4 has an invalid length. [ 1110.603442][T16841] lo speed is unknown, defaulting to 1000 [ 1110.957100][T16868] 8021q: VLANs not supported on ip6tnl0 [ 1112.254937][T16905] lo speed is unknown, defaulting to 1000 [ 1112.344065][T16938] netlink: 'syz.5.13474': attribute type 298 has an invalid length. [ 1112.362697][T16936] serio: Serial port ttyS3 [ 1112.445168][T16962] __nla_validate_parse: 6 callbacks suppressed [ 1112.445193][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13481'. [ 1112.636203][T16959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.645229][T16959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.657782][T23075] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 1112.676132][T23075] hid-generic 0000:0000:0000.00BB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1112.911573][T16988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13484'. [ 1112.972665][T17002] netlink: 'syz.6.13487': attribute type 8 has an invalid length. [ 1113.259993][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 1113.260008][ T29] audit: type=1326 audit(2000000069.250:80272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.290137][ T29] audit: type=1326 audit(2000000069.250:80273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.322910][ T29] audit: type=1326 audit(2000000069.250:80274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.346736][ T29] audit: type=1326 audit(2000000069.300:80275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.370626][ T29] audit: type=1326 audit(2000000069.300:80276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.394373][ T29] audit: type=1326 audit(2000000069.310:80277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.418393][ T29] audit: type=1326 audit(2000000069.310:80278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.442173][ T29] audit: type=1326 audit(2000000069.310:80279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.466039][ T29] audit: type=1326 audit(2000000069.310:80280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.489833][ T29] audit: type=1326 audit(2000000069.310:80281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.6.13495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fd903e929 code=0x7ffc0000 [ 1113.534485][T17029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13497'. [ 1113.547694][T17029] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1113.593750][T17034] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1113.867602][T17051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13505'. [ 1113.904193][T17051] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1114.114122][T17053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.138074][T17053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.173936][T23075] hid-generic 0000:0000:0000.00BC: unknown main item tag 0x0 [ 1114.192807][T23075] hid-generic 0000:0000:0000.00BC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1114.509834][T17072] lo speed is unknown, defaulting to 1000 [ 1115.224208][T17107] netlink: 'syz.5.13516': attribute type 4 has an invalid length. [ 1116.103020][T17121] netlink: 'syz.6.13520': attribute type 8 has an invalid length. [ 1116.144603][T17122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.159644][T17122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.199938][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13523'. [ 1116.209117][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13523'. [ 1116.335474][T17144] serio: Serial port ttyS3 [ 1116.363946][T17143] random: crng reseeded on system resumption [ 1116.572615][T17140] bridge_slave_0: left allmulticast mode [ 1116.578366][T17140] bridge_slave_0: left promiscuous mode [ 1116.584226][T17140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.597171][T17140] bridge_slave_1: left allmulticast mode [ 1116.603015][T17140] bridge_slave_1: left promiscuous mode [ 1116.608797][T17140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.625408][T17140] bond0: (slave bond_slave_0): Releasing backup interface [ 1116.637552][T17140] bond0: (slave bond_slave_1): Releasing backup interface [ 1116.650467][T17140] team0: Port device team_slave_0 removed [ 1116.660376][T17140] team0: Port device team_slave_1 removed [ 1116.667239][T17140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.674803][T17140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.685305][T17140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.692808][T17140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.731484][T17151] netlink: 'syz.1.13526': attribute type 4 has an invalid length. [ 1117.305696][T17169] netlink: 'syz.7.13532': attribute type 8 has an invalid length. [ 1117.938902][T17174] netlink: 'syz.0.13533': attribute type 8 has an invalid length. [ 1117.977907][T17178] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1118.271358][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 1118.271372][ T29] audit: type=1326 audit(2000000074.260:80860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf160e58e7 code=0x7ffc0000 [ 1118.301300][ T29] audit: type=1326 audit(2000000074.260:80861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf1608ab19 code=0x7ffc0000 [ 1118.324911][ T29] audit: type=1326 audit(2000000074.260:80862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1118.410943][ T29] audit: type=1326 audit(2000000074.340:80863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf160e58e7 code=0x7ffc0000 [ 1118.434716][ T29] audit: type=1326 audit(2000000074.340:80864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf1608ab19 code=0x7ffc0000 [ 1118.458544][ T29] audit: type=1326 audit(2000000074.340:80865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1118.482316][ T29] audit: type=1326 audit(2000000074.350:80866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf160e58e7 code=0x7ffc0000 [ 1118.506117][ T29] audit: type=1326 audit(2000000074.350:80867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf1608ab19 code=0x7ffc0000 [ 1118.529741][ T29] audit: type=1326 audit(2000000074.350:80868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1118.553419][ T29] audit: type=1326 audit(2000000074.360:80869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17173 comm="syz.0.13533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faf160e58e7 code=0x7ffc0000 [ 1118.578562][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13535'. [ 1118.587755][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13535'. [ 1118.723590][T17193] netlink: 'syz.6.13539': attribute type 10 has an invalid length. [ 1118.739291][T17193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.746508][T17193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.780716][T17193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.787919][T17193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.795345][T17193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.802476][T17193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.847940][T17193] team0: Port device bridge0 added [ 1118.856476][T32139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.902179][T32139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.933581][T32139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.944125][T17208] serio: Serial port ttyS3 [ 1119.052361][T32139] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1119.063571][T32139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.187826][T17196] lo speed is unknown, defaulting to 1000 [ 1119.193843][T32139] bridge_slave_0: left allmulticast mode [ 1119.199531][T32139] bridge_slave_0: left promiscuous mode [ 1119.205312][T32139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.265948][T17239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13542'. [ 1119.330511][T32139] bridge0 (unregistering): left promiscuous mode [ 1119.691189][T32139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.707541][T32139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.717188][T32139] bond0 (unregistering): Released all slaves [ 1119.726668][T32139] bond1 (unregistering): Released all slaves [ 1119.743330][T17247] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1119.885430][T17297] netlink: 'syz.6.13547': attribute type 8 has an invalid length. [ 1119.936020][T32139] hsr_slave_0: left promiscuous mode [ 1119.952312][T32139] hsr_slave_1: left promiscuous mode [ 1119.968779][T32139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.976354][T32139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.999201][T17351] serio: Serial port ttyS3 [ 1120.012051][T32139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.019575][T32139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.030804][T32139] veth1_macvtap: left promiscuous mode [ 1120.036394][T32139] veth0_macvtap: left promiscuous mode [ 1120.042199][T32139] veth1_vlan: left promiscuous mode [ 1120.047599][T32139] veth0_vlan: left promiscuous mode [ 1120.110972][T32139] team0 (unregistering): Port device team_slave_1 removed [ 1120.121665][T32139] team0 (unregistering): Port device team_slave_0 removed [ 1120.168535][T17196] chnl_net:caif_netlink_parms(): no params data found [ 1120.216391][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13553'. [ 1120.264410][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.271768][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.302170][T17196] bridge_slave_0: entered allmulticast mode [ 1120.311480][T17196] bridge_slave_0: entered promiscuous mode [ 1120.332411][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.339584][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.368190][T17196] bridge_slave_1: entered allmulticast mode [ 1120.375192][T17196] bridge_slave_1: entered promiscuous mode [ 1120.397157][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.410602][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.422532][T17399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.438574][T17196] team0: Port device team_slave_0 added [ 1120.442231][T17399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.450345][T17196] team0: Port device team_slave_1 added [ 1120.468151][ T9] hid-generic 0000:0000:0000.00BD: unknown main item tag 0x0 [ 1120.488494][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.495523][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.521624][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.534983][ T9] hid-generic 0000:0000:0000.00BD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1120.548598][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.550876][T32139] IPVS: stop unused estimator thread 0... [ 1120.555591][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.555676][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.672885][T17196] hsr_slave_0: entered promiscuous mode [ 1120.690507][T17196] hsr_slave_1: entered promiscuous mode [ 1120.696441][T17196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.716026][T17196] Cannot create hsr debugfs directory [ 1120.837426][T17629] serio: Serial port ttyS3 [ 1120.952701][T17662] netlink: 'syz.7.13569': attribute type 8 has an invalid length. [ 1121.009239][T17658] geneve2: entered promiscuous mode [ 1121.014829][T17658] geneve2: entered allmulticast mode [ 1121.154552][T17196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1121.163877][T17196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1121.173175][T17196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1121.182588][T17196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1121.197879][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.205005][T17196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.212350][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.219449][T17196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.230183][T32144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.238294][T32144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.290058][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.319169][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.338809][T32139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.345943][T32139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.373867][T32144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.381194][T32144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.392438][T17713] netlink: 'syz.0.13578': attribute type 58 has an invalid length. [ 1121.400462][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13578'. [ 1121.411138][T17714] smc: net device bond0 applied user defined pnetid SYZ0 [ 1121.426140][T17714] smc: net device bond0 erased user defined pnetid SYZ0 [ 1121.513460][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.599762][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13580'. [ 1121.643513][T17196] veth0_vlan: entered promiscuous mode [ 1121.652155][T17196] veth1_vlan: entered promiscuous mode [ 1121.675962][T17196] veth0_macvtap: entered promiscuous mode [ 1121.701360][T17196] veth1_macvtap: entered promiscuous mode [ 1121.724709][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.742090][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.764349][T17196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.773309][T17196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.782167][T17196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.791047][T17196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.894414][T17749] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 1121.913270][T17744] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 1122.361640][T17760] netlink: 'syz.5.13586': attribute type 10 has an invalid length. [ 1122.383343][T17760] team0: Port device bridge0 added [ 1122.478908][T17775] netlink: 'syz.5.13593': attribute type 8 has an invalid length. [ 1122.553864][T17780] netlink: 'syz.6.13594': attribute type 4 has an invalid length. [ 1122.901166][T32144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.984733][T32144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.035937][T32144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.056729][T17785] lo speed is unknown, defaulting to 1000 [ 1123.122103][T32144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.136386][T17785] chnl_net:caif_netlink_parms(): no params data found [ 1123.179509][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.186642][T17785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.193930][T17785] bridge_slave_0: entered allmulticast mode [ 1123.200726][T17785] bridge_slave_0: entered promiscuous mode [ 1123.207400][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.214508][T17785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.221738][T17785] bridge_slave_1: entered allmulticast mode [ 1123.228494][T17785] bridge_slave_1: entered promiscuous mode [ 1123.239136][T17960] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13598'. [ 1123.264475][T17785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.277456][T17785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.295380][ T29] kauditd_printk_skb: 958 callbacks suppressed [ 1123.295396][ T29] audit: type=1326 audit(2000000079.280:81828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17774 comm="syz.5.13593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f102c6858e7 code=0x7ffc0000 [ 1123.325543][ T29] audit: type=1326 audit(2000000079.280:81829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17774 comm="syz.5.13593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f102c62ab19 code=0x7ffc0000 [ 1123.349256][ T29] audit: type=1326 audit(2000000079.280:81830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17774 comm="syz.5.13593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1123.373366][ T29] audit: type=1326 audit(2000000079.300:81831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17774 comm="syz.5.13593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1123.397195][ T29] audit: type=1326 audit(2000000079.300:81832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17774 comm="syz.5.13593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102c68e929 code=0x7ffc0000 [ 1123.439679][T17785] team0: Port device team_slave_0 added [ 1123.441250][T18018] netlink: 'syz.6.13600': attribute type 10 has an invalid length. [ 1123.454465][T17785] team0: Port device team_slave_1 added [ 1123.474568][T32144] bridge_slave_1: left allmulticast mode [ 1123.480490][T32144] bridge_slave_1: left promiscuous mode [ 1123.486248][T32144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.501281][T32144] bridge_slave_0: left allmulticast mode [ 1123.507018][T32144] bridge_slave_0: left promiscuous mode [ 1123.513002][T32144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.617285][ T29] audit: type=1326 audit(2000000079.600:81833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18058 comm="syz.0.13603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1123.641172][ T29] audit: type=1326 audit(2000000079.600:81834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18058 comm="syz.0.13603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1123.665574][ T29] audit: type=1326 audit(2000000079.600:81835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18058 comm="syz.0.13603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1123.679254][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13604'. [ 1123.689453][ T29] audit: type=1326 audit(2000000079.600:81836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18058 comm="syz.0.13603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1123.698422][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13604'. [ 1123.722256][ T29] audit: type=1326 audit(2000000079.600:81837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18058 comm="syz.0.13603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf160ee929 code=0x7ffc0000 [ 1123.961151][T32144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.971404][T32144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.981100][T32144] bond0 (unregistering): Released all slaves [ 1123.989368][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.996594][T18018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.006914][T17785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.013977][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.040130][T17785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.051670][T17785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.058661][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.084756][T17785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.163465][T18063] serio: Serial port ttyS3 [ 1124.186237][T17785] hsr_slave_0: entered promiscuous mode [ 1124.192941][T17785] hsr_slave_1: entered promiscuous mode [ 1124.199839][T17785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.207441][T17785] Cannot create hsr debugfs directory [ 1124.218199][T32144] hsr_slave_0: left promiscuous mode [ 1124.224031][T32144] hsr_slave_1: left promiscuous mode [ 1124.229823][T32144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.237317][T32144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.245208][T32144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.245306][T32144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.253627][T32144] veth1_macvtap: left promiscuous mode [ 1124.253681][T32144] veth1_vlan: left promiscuous mode [ 1124.273294][T32144] veth0_vlan: left promiscuous mode [ 1124.302664][T18117] netlink: 'syz.1.13609': attribute type 8 has an invalid length. [ 1124.332282][T32144] team0 (unregistering): Port device team_slave_1 removed [ 1124.344668][T32144] team0 (unregistering): Port device team_slave_0 removed [ 1124.631342][T32144] IPVS: stop unused estimator thread 0... [ 1124.765155][T17785] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1124.773943][T17785] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1124.782901][T17785] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1124.792255][T17785] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1124.827713][T17785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.840322][T17785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.849807][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.856869][ T8008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.867402][T32139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.874552][T32139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.932500][T18070] serio: Serial port ttyS3 [ 1124.947716][T17785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.992727][T18225] netlink: 'syz.6.13611': attribute type 4 has an invalid length. [ 1125.034554][T18232] netlink: 'syz.5.13610': attribute type 4 has an invalid length. [ 1125.086395][T18241] netlink: 'syz.0.13616': attribute type 4 has an invalid length. [ 1125.127798][T17785] veth0_vlan: entered promiscuous mode [ 1125.141628][T17785] veth1_vlan: entered promiscuous mode [ 1125.166218][T17785] veth0_macvtap: entered promiscuous mode [ 1125.174187][T17785] veth1_macvtap: entered promiscuous mode [ 1125.185367][T17785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.196160][T17785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.206739][T17785] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.215585][T17785] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.224674][T17785] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.226881][T18257] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13614'. [ 1125.233504][T17785] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.322134][T18259] serio: Serial port ttyS3 [ 1125.337867][ T9] IPVS: starting estimator thread 0... [ 1125.359887][T18253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.368676][T18253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.429035][T18270] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1125.456776][T18281] serio: Serial port ttyS3 [ 1125.553542][T18302] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13631'. [ 1125.562760][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13631'. [ 1125.573702][T18302] 8021q: VLANs not supported on sit0 [ 1125.667441][T18317] serio: Serial port ttyS3 [ 1125.760934][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13639'. [ 1125.854398][T18342] netlink: 'syz.0.13645': attribute type 10 has an invalid length. [ 1125.872722][T18342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.885747][T18342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.892874][T18342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.903874][T18342] team0: Port device bridge0 added [ 1125.911306][T18346] FAULT_INJECTION: forcing a failure. [ 1125.911306][T18346] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.924123][T18346] CPU: 1 UID: 0 PID: 18346 Comm: syz.5.13647 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1125.924157][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1125.924170][T18346] Call Trace: [ 1125.924176][T18346] [ 1125.924195][T18346] __dump_stack+0x1d/0x30 [ 1125.924250][T18346] dump_stack_lvl+0xe8/0x140 [ 1125.924270][T18346] dump_stack+0x15/0x1b [ 1125.924288][T18346] should_fail_ex+0x265/0x280 [ 1125.924407][T18346] should_failslab+0x8c/0xb0 [ 1125.924433][T18346] kmem_cache_alloc_noprof+0x50/0x310 [ 1125.924523][T18346] ? audit_log_start+0x365/0x6c0 [ 1125.924559][T18346] audit_log_start+0x365/0x6c0 [ 1125.924657][T18346] audit_seccomp+0x48/0x100 [ 1125.924685][T18346] ? __seccomp_filter+0x68c/0x10d0 [ 1125.924784][T18346] __seccomp_filter+0x69d/0x10d0 [ 1125.924810][T18346] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1125.924846][T18346] ? vfs_write+0x75e/0x8e0 [ 1125.924951][T18346] ? __rcu_read_unlock+0x4f/0x70 [ 1125.924974][T18346] ? __fget_files+0x184/0x1c0 [ 1125.924998][T18346] __secure_computing+0x82/0x150 [ 1125.925022][T18346] syscall_trace_enter+0xcf/0x1e0 [ 1125.925050][T18346] do_syscall_64+0xac/0x200 [ 1125.925140][T18346] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1125.925168][T18346] ? clear_bhb_loop+0x40/0x90 [ 1125.925190][T18346] ? clear_bhb_loop+0x40/0x90 [ 1125.925249][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.925271][T18346] RIP: 0033:0x7f102c68e929 [ 1125.925286][T18346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.925371][T18346] RSP: 002b:00007f102acf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 1125.925390][T18346] RAX: ffffffffffffffda RBX: 00007f102c8b5fa0 RCX: 00007f102c68e929 [ 1125.925403][T18346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1125.925415][T18346] RBP: 00007f102acf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.925460][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.925472][T18346] R13: 0000000000000000 R14: 00007f102c8b5fa0 R15: 00007ffed6e809c8 [ 1125.925493][T18346] [ 1126.321386][T32139] ================================================================== [ 1126.321415][T32139] BUG: KCSAN: data-race in alloc_pid / copy_process [ 1126.321441][T32139] [ 1126.321447][T32139] read-write to 0xffffffff86860860 of 4 bytes by task 18370 on cpu 1: [ 1126.321463][T32139] alloc_pid+0x539/0x720 [ 1126.321480][T32139] copy_process+0xe0e/0x1fe0 [ 1126.321503][T32139] kernel_clone+0x16c/0x5b0 [ 1126.321528][T32139] __se_sys_clone3+0x1c2/0x200 [ 1126.321555][T32139] __x64_sys_clone3+0x31/0x40 [ 1126.321582][T32139] x64_sys_call+0x10c9/0x2fb0 [ 1126.321604][T32139] do_syscall_64+0xd2/0x200 [ 1126.321621][T32139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.321642][T32139] [ 1126.321647][T32139] read to 0xffffffff86860860 of 4 bytes by task 32139 on cpu 0: [ 1126.321663][T32139] copy_process+0x148f/0x1fe0 [ 1126.321686][T32139] kernel_clone+0x16c/0x5b0 [ 1126.321711][T32139] user_mode_thread+0x7d/0xb0 [ 1126.321737][T32139] call_usermodehelper_exec_work+0x41/0x160 [ 1126.321770][T32139] process_scheduled_works+0x4cb/0x9d0 [ 1126.321799][T32139] worker_thread+0x582/0x770 [ 1126.321829][T32139] kthread+0x489/0x510 [ 1126.321846][T32139] ret_from_fork+0xda/0x150 [ 1126.321866][T32139] ret_from_fork_asm+0x1a/0x30 [ 1126.321887][T32139] [ 1126.321891][T32139] value changed: 0x800000cb -> 0x800000cc [ 1126.321901][T32139] [ 1126.321905][T32139] Reported by Kernel Concurrency Sanitizer on: [ 1126.321917][T32139] CPU: 0 UID: 0 PID: 32139 Comm: kworker/u8:0 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 1126.321945][T32139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1126.321960][T32139] Workqueue: events_unbound call_usermodehelper_exec_work [ 1126.321995][T32139] ================================================================== [ 1126.385303][T18382] netlink: 88 bytes leftover after parsing attributes in process `syz.1.13660'. [ 1126.392615][T18382] netlink: 'syz.1.13660': attribute type 10 has an invalid length. [ 1126.392851][T18382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.393003][T18382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.395091][T18382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.395194][T18382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.395367][T18382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.395400][T18382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.397575][T18382] team0: Port device bridge0 added [ 1126.583604][T18381] sch_tbf: burst 3298 is lower than device lo mtu (65550) !