last executing test programs:

6m53.702635683s ago: executing program 1 (id=854):
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain)

6m53.632672856s ago: executing program 1 (id=855):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$lock(r4, 0x5, &(0x7f0000000000)={0x613cc87bb00b7f51, 0x3, 0x9, 0x81})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x145402, 0x8)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

6m53.590883998s ago: executing program 1 (id=858):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x41}, 0x100b28, 0x6, 0x200, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000020000000000000001811beb794db4deaf48cfcf2446cdfad01000000", @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c8}, 0x1, 0x0, 0x0, 0x20004804}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001a000100000000000000000002"], 0x3c}}, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c73687865d2068a008e48488cc8642c6e66733d6e6f73"], 0x1, 0x26c, &(0x7f0000000340)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18)

6m52.688939087s ago: executing program 1 (id=880):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffd, 0x32d83)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001740)=""/4085}, 0x20)
r3 = getpgrp(0x0)
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0xa0203, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x10001, 0xb02, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x632}, 0x6025, 0x4005, 0x3, 0x0, 0x1, 0x1, 0xb, 0x0, 0x2000, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8], 0x6, 0x801, &(0x7f0000001540)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
close(0x3)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)

6m52.411977559s ago: executing program 1 (id=890):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
io_submit(0x0, 0x0, 0x0)
acct(0xfffffffffffffffe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1405, 0x0, 0x0, 0x800000, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0xf}}, 0x0)
r2 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="0400000000000000100000000000000020"], 0x2c, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xf1c38fa000000000}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="080025bd7000fbdbdf2500060064e4ffffff", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000010000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfd, 0x9}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x1, 0x1f9}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000300)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r9, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0)

6m52.290946174s ago: executing program 1 (id=892):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00')
getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002)

6m52.245948976s ago: executing program 32 (id=892):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00'}, 0x18)
r1 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00')
getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002)

5m50.793067709s ago: executing program 4 (id=1947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x18)
removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00')

5m50.773848099s ago: executing program 4 (id=1948):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000001cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00')
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0xc, 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r5=>0x0, 0x20, 0x700, 0x0, 0x5, {{0xd, 0x4, 0x1, 0x2c, 0x34, 0x66, 0x0, 0x80, 0x2d, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@generic={0x17, 0xd, "0028d68d8ff348bf710299"}, @timestamp={0x44, 0x10, 0x37, 0x0, 0x0, [0x5, 0xa, 0x4]}]}}}}})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@ifindex=r5, r0, 0x1f, 0x2, r0, @void, @value=r2, @void, @void, r4}, 0x20)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008048, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a8, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10)
socket$kcm(0x21, 0x2, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r8=>0xffffffffffffffff})
syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r9=>0x0, &(0x7f0000000200)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100"], 0x18}, 0x0, 0x48004, 0x1})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
gettid()
gettid()

5m50.592870707s ago: executing program 4 (id=1950):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000240000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_shutdown\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0xfffffffffffffd25)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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")
r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000000)={0x200, 0x1, 0xfffffffffffffffc, 0x6, 0x1})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000000000000c00000004000380180001802f000200786672000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r11 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r11, &(0x7f0000000100), 0xa, 0x0, 0x0)
unlinkat(r11, 0x0, 0x0)

5m50.504926201s ago: executing program 4 (id=1951):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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")
chdir(0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random='\x00\x00\x00@\x00', @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @local, @remote}}}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
r6 = syz_io_uring_setup(0x4171, &(0x7f0000000180)={0x0, 0x776a, 0x40, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400))
capset(0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
io_uring_enter(r6, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000fc0)={0xee4, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_TID_CONFIG={0x3c4, 0x11d, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdc}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4b}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7f, 0xfff8, 0x2, 0x4, 0x8, 0xd, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x4, 0xffff, 0x1ff, 0x101, 0x800, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xc616, 0xffff, 0x3, 0x4, 0x5, 0x7fff, 0x1bbe]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd257, 0x1, 0x7, 0x1, 0x81, 0x2, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x65, 0x8, 0xa, 0x8, 0xaf1, 0x9, 0x7, 0xa20f]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x12, 0x2a, 0x3, 0x48, 0x1, 0x6c, 0x6c, 0x36, 0x6c, 0x1, 0x2, 0x6c, 0x6, 0x5, 0x1, 0x48, 0xc, 0x30, 0x77, 0x9, 0x4, 0x48, 0x30, 0x12, 0x3, 0x0, 0x48, 0x24, 0x30, 0xb, 0x1]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x6}, {0x1, 0x5}, {}, {0x6, 0x4}, {0x5, 0x9}, {0x3, 0x9}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {}, {0x0, 0x9}, {0x5, 0x7}, {0x5, 0x1}, {0x4, 0x5}, {0x6, 0x3}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {}, {0x6, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x2}, {0x2, 0x8}, {0x4, 0x1}, {0x2}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x7}, {0x3, 0x5}, {0x7, 0x5}, {0x0, 0xa}, {0x3}, {0x5, 0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff9, 0x8, 0x8, 0x1, 0x9, 0x21, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x6, 0x9, 0x0, 0xc0, 0x8, 0x7]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x6c, 0x1, 0xb, 0xc, 0x5, 0x36, 0x60, 0x6, 0x16, 0x1b, 0x6c, 0x64, 0x0, 0x6c, 0xb, 0x30, 0x1b, 0x3, 0x5, 0x18, 0xb, 0x18, 0x6c, 0xb, 0x16, 0x5, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xc0, 0xc, 0x0, 0x4, 0xfff8, 0x5, 0xa9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x401, 0x0, 0x4, 0x5, 0xfff, 0x9, 0x9]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x12, 0x5, 0x24, 0x4, 0xb, 0xb, 0x12, 0xb, 0x12, 0xb, 0x16, 0x1, 0x6, 0x3, 0x18, 0x60, 0xb, 0x60, 0x12, 0x1b, 0x1, 0x36, 0x1, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x12, 0x5, 0x4, 0xa, 0x3, 0x0, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x9]}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4, 0x24, 0x48, 0x36, 0x9, 0x8, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x5}, {0x7, 0xa}, {0x6, 0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x2}, {0x6, 0x7}, {0x6, 0xa}, {}, {0x7, 0x1}, {0x1}, {0x3, 0x9}, {0x7, 0xa}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x6, 0x7}, {0x1}, {0x5, 0x7}, {0x2, 0x4}, {0x6, 0x3}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x6}, {0x7, 0xa}, {0x1, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x1, 0x9}, {0x5}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0xa}, {0x4, 0x3}, {0x5, 0x8}, {0x4, 0x8}, {0x3}, {0x7, 0x8}, {0x6, 0x3}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x7}, {0x5}, {0x1, 0x2}, {0x7, 0x7}, {0x4, 0x7}, {}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x16, 0xde5391e855b1561c, 0x2, 0x8, 0x36, 0xb, 0x13, 0x3, 0x0, 0x36, 0x16, 0x24, 0x12, 0x0, 0x16, 0x2, 0x24, 0x12, 0x5, 0x36, 0x1, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x2, 0x5, 0x9, 0x6, 0x3ff, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xff, 0x3, 0x100, 0x8510, 0xff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x7, 0x6, 0x2, 0xa, 0xd, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8bb, 0x2, 0x7, 0x1e5, 0xffff, 0x4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x6, 0x24, 0x18, 0x6c, 0x2, 0x3, 0x24, 0x36, 0x5, 0xc, 0x16, 0x1, 0x48, 0x30, 0x24, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x6, 0x5, 0x0, 0xf, 0x280, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd9da}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd7}]}, {0x400, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc19}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xc, 0x9, 0x1b, 0x5, 0x18, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x6, 0x6, 0x2, 0x6, 0x2, 0xc, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf, 0x5, 0x6, 0x2, 0x3d8, 0x6e1, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x6, 0x1, 0x60, 0x65, 0x3d, 0xc, 0x4, 0x6c, 0xb, 0x0, 0x5, 0xb, 0x5, 0x3, 0x1b]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x2}, {0x4, 0x1}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x6, 0x8}, {0x0, 0x6}, {0x2, 0x7}, {0x5}, {0x1, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xa61, 0x2, 0x59a, 0x40, 0x8, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xcbdb, 0x9, 0x1, 0xf, 0x3800, 0x6, 0x1ec]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0xa}, {0x6, 0x6}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0x3}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0xa}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x2, 0x8}, {0x1, 0xa}, {0x3, 0x4}, {0x4, 0x4}, {0x4}, {0x5, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x7}, {0x1, 0x19}, {0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x2, 0x3}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {0x2, 0x5}, {0x6, 0x8}, {0x1}, {0x4, 0x4}, {0x4, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x7}, {0x7}, {0x2, 0x6}, {0x2, 0x9}, {0x2, 0x4}, {0x1, 0x6}, {0x7, 0x8}, {0x7, 0x6}, {}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a5, 0x7, 0x7ff, 0x8, 0x1, 0xfffe, 0x3]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7fff, 0x2, 0x1799, 0xfffb, 0x24, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x21a, 0x7ff, 0xc52, 0x6, 0xfc00, 0x9, 0x9]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x7}, {0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x16}, {0x2, 0x9}, {0x4, 0x3}, {0x7, 0x8}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x6}, {0x4, 0xa}, {0x5, 0x3}, {0x1, 0x1}, {0x2, 0x5}, {0x4, 0x2}, {0x2, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x9}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x8}, {0x1}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x6, 0x4}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x3}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x2}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0x7, 0x1, 0xf4c, 0x4, 0xf40, 0x3, 0x54]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x3, 0x8, 0x40, 0x7, 0x4, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb3, 0x7, 0xfff8, 0x0, 0x0, 0x7ff, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x6, 0xd5, 0x1000, 0x8, 0x9, 0xfe00, 0x347]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1fbc, 0x8, 0x6, 0x2, 0xa, 0x5, 0x7, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x1f8e, 0x1, 0x10, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x401, 0x9, 0x8e00, 0x6, 0x7, 0x1000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0xb, 0x1b, 0x3, 0x36, 0x9, 0x39, 0x2, 0x24, 0x12, 0x48, 0x6, 0x36, 0x60, 0x0, 0x36, 0x1, 0x18, 0x4, 0x3, 0x3, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x5, 0x7}, {0x6, 0x8}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0x7}, {0x7}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x4, 0x3}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x6}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x3}, {0x4}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x8}, {0x2, 0xa}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x6, 0x12, 0x16, 0x18, 0x36, 0x1, 0x5, 0x1, 0x30, 0x2e, 0x6, 0x6c, 0x2, 0x1, 0x2, 0x1c, 0xb6, 0x60, 0x3]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0x7}, {0x2, 0x9}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x9}, {0x2, 0x5}, {0x3, 0x3}, {0x0, 0x5}, {0x6}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x8}, {}, {0x7}, {0x6, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x7}, {0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x6}, {0x6, 0x5}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x1}, {0x3, 0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x6}, {0x3, 0x9}, {0x2, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0x7}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x9}, {}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x3}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0xff80, 0x80, 0x8, 0x3, 0x7a, 0x5, 0xfe0]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x2, 0x4, 0x1, 0x60, 0x6, 0x24, 0x5, 0x12, 0x1b, 0x71, 0x5, 0x30, 0x24, 0x46, 0x1b, 0x1b, 0x18, 0x30, 0x1b, 0x16, 0x5, 0x3, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xcc}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xd0, 0x11d, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x48, 0x36, 0x16, 0x1b, 0x4, 0x6, 0x0, 0xc, 0x16, 0x6, 0x7a, 0x1b, 0x60, 0x1, 0x12, 0x1, 0x4, 0x1b, 0xb, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x2, 0x1, 0x24, 0x12, 0x18, 0x12, 0x4, 0x1, 0x30, 0xb, 0x5, 0x3, 0x30, 0x36, 0x2, 0x9, 0x6, 0x18, 0x4, 0x36]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x26c, 0x11d, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x2}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x6}, {0x6, 0x8}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x2, 0x800, 0x7ff, 0x65b, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x4, 0x36, 0xb, 0x36, 0x24, 0x36, 0x30, 0x36, 0x12, 0x5, 0x36, 0xc, 0x1, 0x18, 0x3, 0x12, 0x16, 0x2, 0x2, 0x36, 0x6c, 0x9, 0x0, 0x30, 0x9, 0x6c, 0x48, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x4, 0x0, 0x8, 0xb7b, 0x0, 0xe4, 0x9]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xfffe, 0x3, 0x6, 0x5, 0x8, 0x6]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x361c, 0x0, 0x5, 0x4, 0x10, 0xd5, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xbb}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xa0, 0x1, 0x400, 0x2, 0x0, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x99330fe90f3dc089, 0x2, 0x5, 0x6c, 0x48, 0x3, 0x6, 0x12, 0xc, 0x4, 0x1b, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x7f, 0x2b, 0x8, 0x4, 0x5, 0x986a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0x81, 0x0, 0x0, 0x9, 0x9, 0xb5a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xee, 0x7, 0x5, 0x6, 0x2, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x36, 0x30, 0x6c, 0x18, 0x48, 0x2, 0x1b, 0x60, 0x5, 0x18, 0x16, 0x4, 0x3, 0x16, 0xc, 0x60, 0x30, 0x36, 0x36]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xffff, 0xfffe, 0x8, 0x177, 0x0, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x9, 0xd8db, 0x9000, 0x401, 0x400, 0x9]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x1}, {0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x4}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x6}, {0x7}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x6}, {0x7, 0x3}, {0x4, 0x6}, {}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3000000000}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xee}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x25}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x28c, 0x11d, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xfff9, 0x10, 0x8, 0xffff, 0x137, 0x8, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x1b, 0x1, 0x1, 0x9, 0x5, 0x48, 0x28, 0x3, 0xf, 0x1, 0xb, 0x12, 0x12, 0x5, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xe, 0x9, 0x3, 0x2, 0xd, 0xfff9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x9, 0xfffd, 0x2, 0x5, 0x7, 0x0, 0xb]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xe, 0x24, 0x6, 0x16, 0x24, 0x4, 0x60, 0x9, 0x24, 0x55, 0xb, 0x16, 0x18, 0x12, 0x1, 0x60, 0x6, 0x36, 0x4, 0x36, 0x30, 0x60, 0x9ea2ac6170fd9c0b, 0x14, 0xc, 0xc, 0x3, 0x2, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x4410, 0x2, 0x0, 0x400, 0x0, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x1}, {0x7, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x2, 0xa}, {0x6, 0x3}, {0x0, 0x3}, {0x2, 0x8}, {0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x7}, {0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e, 0x8, 0x3, 0x2e, 0x4c41, 0x0, 0xc1d6, 0xbb]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x4, 0x36, 0x4, 0xb, 0x36, 0x18, 0x12, 0x24, 0xb, 0x48, 0x9, 0x30, 0x24, 0x60, 0x4, 0x24, 0x6c, 0x6, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x2}, {0x2, 0x1}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x2, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x5}, {0x0, 0x2}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x8}, {0x6}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0x9}, {0x5, 0x8}, {0x4}, {0x2, 0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x8}, {0x6, 0x1}, {0x2, 0x9}, {0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6, 0x16, 0x36, 0x30, 0x0, 0xb, 0x60, 0x2, 0x1, 0x1, 0x5, 0x1, 0x1, 0x1, 0x6c, 0x6c, 0x5, 0x1, 0x12, 0x2, 0x5d6f43ba28cabc83, 0x1, 0x48, 0x60, 0x48, 0x11, 0x9, 0x16, 0x3, 0x0, 0x6c]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x7}, {0x2, 0xa}, {0x7, 0x8}, {0x7, 0x5}, {}, {0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x6}, {0x7, 0x5}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0x3}, {0x5, 0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x0, 0x6}, {0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x7}, {0x3, 0x6}, {0x1}, {0x4, 0x8}, {0x5, 0x8}, {0x2, 0x6}, {0x5, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x6}, {0x1}, {0x1, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x7, 0x6}, {0x7, 0x8}, {0x5, 0x5}, {0x6, 0x4}, {0x3, 0xb}, {0x2, 0x6}, {0x4, 0x8}, {0x6, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8001, 0x6, 0x7ff, 0x9, 0x7, 0x4, 0x4000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xee4}, 0x1, 0x0, 0x0, 0x20004011}, 0x4048000)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r7, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r3, @ANYRES16=r1, @ANYRES16=r2, @ANYBLOB="0bb9ac324cb460bcdaf9ddbf3bd29c7b08ffebb4fb94fdc0e9aafb026fc485aa11c50a72ef1682849e3e9e07c6962e4a"], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5953fdfffffffddbdf256b"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x20080050)
accept4(r9, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000140)=0x80, 0x80800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))

5m50.370474407s ago: executing program 4 (id=1956):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
fsetxattr$security_selinux(r5, &(0x7f0000000840), &(0x7f0000000880)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31, 0x1)

5m49.002540366s ago: executing program 4 (id=1981):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001880)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0x6, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000000)="c1", 0x1)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000100)=""/17, &(0x7f00000000c0)=0x11)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x88282, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18608, 0x33822}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x11}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
recvfrom$inet(r6, 0x0, 0x5d, 0x0, 0x0, 0x0)
ioctl$SIOCGSTAMP(r6, 0x8906, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
inotify_init()

5m49.002106326s ago: executing program 33 (id=1981):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001880)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0x6, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000000)="c1", 0x1)
getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000100)=""/17, &(0x7f00000000c0)=0x11)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x88282, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18608, 0x33822}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x11}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
recvfrom$inet(r6, 0x0, 0x5d, 0x0, 0x0, 0x0)
ioctl$SIOCGSTAMP(r6, 0x8906, 0x0)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
inotify_init()

3m56.970309532s ago: executing program 6 (id=4280):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x29)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r2=>0x0})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000540)=""/73, 0x34, 0x49, 0x1, 0x6}, 0x28)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0)
io_setup(0x7d, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000)="96", 0xfffffe3b, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}])
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0xab, 0xfffffff8, 0x1016c, r1, 0x8, '\x00', r2, r3, 0x0, 0x1, 0x3, 0xc, @void, @value, @value=r4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, 0x0, 0x109, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000780)='kmem_cache_free\x00', r8}, 0x18)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r10, 0x400, 0x0)
fremovexattr(r10, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00')

3m56.824914388s ago: executing program 6 (id=4281):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {0x0, 0x3}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x9a, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

3m56.78337909s ago: executing program 6 (id=4282):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0xa)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(0x0, r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0)

3m56.761984011s ago: executing program 6 (id=4283):
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x84, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffff00, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff000000], 'veth1_macvtap\x00', 'ip6erspan0\x00', {}, {0xff}, 0x7d, 0x86, 0x7, 0x48}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0x4, 0x2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x62}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8)

3m56.702718933s ago: executing program 6 (id=4284):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000400))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r3 = dup3(r1, r1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r3, 0x20, &(0x7f00000004c0)={&(0x7f0000000540)=""/66, 0x42, <r4=>0x0, &(0x7f00000005c0)=""/72, 0x48}}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}}, 0x200c8080)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x36, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db08a9d815762789002d90"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000300000000000000ffffffffffff0000000000001a9a25463a9a8d01c7006857c144f515e09e6d0dd9c1a272dd8e9d7dbec8c45ec2c18ee537bf3eea63c2f938f60b061d8fe0786414fc063cede1810890a4792f9448c564a774136e862a3e092ad10678076a7ffec07fa01c323b5bbf2be7d0cdbe6929631e7ff6acbbe879e2c8f17b8d119a4d46940e1a"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r14, 0x82307201, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

3m56.468068413s ago: executing program 6 (id=4287):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080))

3m41.420184073s ago: executing program 34 (id=4287):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080))

2.32099805s ago: executing program 5 (id=9131):
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendto$inet6(r3, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0xc)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x1}, 0x18)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170)
fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x18)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r9}, 0x10)

2.259154083s ago: executing program 5 (id=9133):
socket$tipc(0x1e, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
pipe2$9p(&(0x7f00000000c0), 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000000})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
syz_pidfd_open(0x0, 0x0)
syz_open_dev$sg(&(0x7f0000001100), 0xffffffffffff9e70, 0x402)

2.225131244s ago: executing program 5 (id=9135):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x17, 0xc, &(0x7f0000001100)=ANY=[@ANYRES32=<r1=>0xffffffffffffffff, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x1f, &(0x7f0000001140)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="27cd9f854fdc4f2bfee6741e5049ce4e2aff465af38ec407cab73f0ccdbe6fbdf5f4130a050ce79a363ff46aa76e67d397eb792aa44410cbebb8def7dce61ae2faf67d61c366df0e20f451218d2d49fd5479b5", @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES64, @ANYRES16], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0xfffffffffffffe5b)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c810)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x7, 0x9)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$P9_RWRITE(r8, &(0x7f0000000040)={0xb}, 0x11000)
read(r7, &(0x7f0000032440)=""/102364, 0x18fdc)

1.534575314s ago: executing program 3 (id=9148):
write$selinux_load(0xffffffffffffffff, 0x0, 0xfd44)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x10000, 0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xcd, 0x0, 0xe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x1, 0x8000002, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.533655164s ago: executing program 3 (id=9149):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00')
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2)
fcntl$setlease(r1, 0x400, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0xfffffffffffffe55}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = epoll_create1(0x0)
r7 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x1ff, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0x10000008})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2d, 0x3, 0xfd, 0xfff, 0x11, @empty, @empty, 0x20, 0x7, 0x40, 0x6}})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4d}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000004c0)={@mcast1}, 0x14)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)=""/239, &(0x7f00000000c0)=0xef)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0})

1.498020356s ago: executing program 3 (id=9150):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x17, 0xc, &(0x7f0000001100)=ANY=[@ANYRES32=<r1=>0xffffffffffffffff, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x1f, &(0x7f0000001140)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="27cd9f854fdc4f2bfee6741e5049ce4e2aff465af38ec407cab73f0ccdbe6fbdf5f4130a050ce79a363ff46aa76e67d397eb792aa44410cbebb8def7dce61ae2faf67d61c366df0e20f451218d2d49fd5479b5", @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES64, @ANYRES16], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0xfffffffffffffe5b)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c810)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x7, 0x9)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$P9_RWRITE(r8, &(0x7f0000000040)={0xb}, 0x11000)
read(r7, &(0x7f0000032440)=""/102364, 0x18fdc)

1.372055081s ago: executing program 5 (id=9151):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x1000000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10)
clock_getres(0x6, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xff, 0x0, @void}}}}}}}, 0x0)
cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0)

1.137895101s ago: executing program 0 (id=9159):
write$selinux_load(0xffffffffffffffff, 0x0, 0xfd44)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x10000, 0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xcd, 0x0, 0xe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x1, 0x8000002, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.066350704s ago: executing program 0 (id=9160):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0xf3, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1)

644.305613ms ago: executing program 3 (id=9164):
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r1=>0x0})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0)
write$P9_RWALK(r2, 0x0, 0x30)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x4, 0x0, 0x0, 0x4, 0x1}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @restrict={0x7, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x3f, 0x0, 0x0, 0x7fff, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='@\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3], 0x50)
r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x50, &(0x7f00000002c0), 0x64, 0x505, &(0x7f0000000940)="$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")
socketpair(0x9, 0x1, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffe82)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
socketpair(0x3, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
timer_settime(0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="140300001000010000000000000000000000000a5c000000060a0b16000000000000000202000008300004802c0001800b0001006e756d6765d000001c000280080001400000000308000340010000000800024000000050f9ffffff73917a3000000000090002007340000005000000000000001100010000000000005e99a399bac042cd15237852bedee9bd5c194bce9443998a11d5"], 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0xab16, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a0000cdff00000102000100080006000000000008000a0000000100c7b181f336dac0568fa8"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x8000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)

583.269245ms ago: executing program 3 (id=9166):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xfdef, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)

582.051195ms ago: executing program 3 (id=9168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000c000002000006181100ad", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b78400000000000085100000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x44}, 0x28)
getpgrp(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x18)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
socket$inet6(0xa, 0x3, 0x7)

523.425678ms ago: executing program 5 (id=9170):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x2000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000022c0)="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", 0xa93}], 0x1}, 0x20000044)

501.886119ms ago: executing program 5 (id=9171):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x17, 0xc, &(0x7f0000001100)=ANY=[@ANYRES32=<r1=>0xffffffffffffffff, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x1f, &(0x7f0000001140)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64=r0, @ANYBLOB="27cd9f854fdc4f2bfee6741e5049ce4e2aff465af38ec407cab73f0ccdbe6fbdf5f4130a050ce79a363ff46aa76e67d397eb792aa44410cbebb8def7dce61ae2faf67d61c366df0e20f451218d2d49fd5479b5", @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES64, @ANYRES16], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0xfffffffffffffe5b)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c810)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x7, 0x9)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$P9_RWRITE(r8, &(0x7f0000000040)={0xb}, 0x11000)
read(r7, &(0x7f0000032440)=""/102364, 0x18fdc)

372.636514ms ago: executing program 7 (id=9172):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0})

278.317898ms ago: executing program 7 (id=9175):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$kcm(0x29, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

277.844469ms ago: executing program 2 (id=9176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x20, r3, 0x311, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x24000010)

233.55644ms ago: executing program 7 (id=9177):
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x4, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x9000000f, 0x8ed, 0x0, 0xfffff30b, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x40, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x80000000, 0x3, 0x1, 0x8963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x7, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x9, 0xfffffffa, 0x9, 0x18d0, 0x0, 0x3, 0x5, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x8, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0xa, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x6, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x2, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x7, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x5, 0xa, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0)

232.75923ms ago: executing program 2 (id=9178):
socket$tipc(0x1e, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
pipe2$9p(&(0x7f00000000c0), 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x2000000})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
syz_pidfd_open(0x0, 0x0)
syz_open_dev$sg(&(0x7f0000001100), 0xffffffffffff9e70, 0x402)

221.024611ms ago: executing program 7 (id=9179):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0, 0x0, 0x101}, 0x18)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kexec_load(0x5, 0x0, &(0x7f00000002c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r3}, 0x18)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r4, 0xa, 0x13)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2)
fcntl$setlease(r4, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$poke(0x4, r5, &(0x7f00000011c0), 0xfffffffffffffffe)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)

185.168562ms ago: executing program 0 (id=9180):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
execve(0x0, 0x0, 0x0)

184.628552ms ago: executing program 2 (id=9181):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)

166.592313ms ago: executing program 0 (id=9182):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

147.708494ms ago: executing program 7 (id=9183):
r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x0)
fchdir(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r3 = syz_open_pts(r1, 0x28101)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0x2, 0x10, 0x8, 0x2})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
close(r8)

145.137364ms ago: executing program 2 (id=9184):
r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x28, r2, 0x311, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000801}, 0x24000010)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x268, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x150, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb21cb155512eeca4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1c}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x268}}, 0x8100)

97.673286ms ago: executing program 0 (id=9185):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x64, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40808f4)
io_uring_enter(r0, 0x44bf, 0x15ee, 0x4, &(0x7f0000000080)={[0x2]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x5}}, './file0\x00'})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
pipe2(&(0x7f0000000000), 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0x6e, 0x1, {{0x5, 0x8e, 0x1}, {0x5, 0xc0}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

94.232246ms ago: executing program 2 (id=9186):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0})

76.378107ms ago: executing program 7 (id=9187):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0})

61.148908ms ago: executing program 0 (id=9188):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x119000, 0x12345})
mmap(&(0x7f0000592000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x4010, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea010018000000000000001c0000001c00000004000000f2ff00000000000e020000000000000000000000000000020000000000002e00"], 0x0, 0x38}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="f4ab73aec6372c14c028929565d92c0097651a2b0f38993f508580805c5ca5362c8e2f2cdaee67db8beac37e4fe11cd1cb1627aa243384ad9aa40125035f5ef9ff50bbbb92a53d4fe02e62b6ec8ed23e2ee30b8fbff466b868103dc0b029ccb3a02c8102a3bf8e0ad94ccde291ba7bd1326903338a3db2420347cd1613d175e7efc7", @ANYBLOB="52e46697002011a518132e0be35e5f66e3f980a1731067679d627414ebf58aef9ca8ac819ad991609aaaae4cf9b3d842c94d1580a383e33bd3112c1e8bd60d2a7b7b0210e4160215e12bf0026f57992d81a37a8c1340f5ed654860674caf97d96b75133dbe85113574aa414df695384c3a4803778093448073bfc27210e491d330b036136599ff8a37f155202085811d8cf93299eb7de5066993347d5e", @ANYRES16=r9, @ANYRES16=r2, @ANYRES16=r0, @ANYRESHEX=r1], 0x48)
io_uring_enter(r2, 0x59f1, 0x2, 0x8, 0x0, 0xb2)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x0, 0x30, &(0x7f0000001d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x336, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x82}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x5, 0x1, 0x0, r7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x7, 0x1, 0x5, 0xa, 0x6, 0xc, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000c40)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0x8, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000780)=[r10, r10, r10], &(0x7f0000001c40)=[{0x3, 0x4, 0xb, 0x5}, {0x4, 0x5, 0x8, 0x7}, {0x3, 0x5, 0xe, 0x5}, {0x4, 0x5, 0xa, 0x3}, {0x4, 0x3, 0x5, 0x1}, {0x3, 0x3, 0x0, 0x7}], 0x10, 0xb4b8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r13}, 0x10)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r14, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffea5, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000009b5e27b87c91", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r15, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x2, 0x0)

0s ago: executing program 2 (id=9189):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x20, r3, 0x311, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x24000010)

kernel console output (not intermixed with test programs):

] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.583723][T32660] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.591320][T32660] bridge0: entered allmulticast mode
[  438.734148][T32679] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  438.741873][T32679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.750330][T32679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.074752][T32694] macvtap0: refused to change device tx_queue_len
[  439.405205][T32704] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  439.447883][T32704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.501218][T32704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.625838][T32735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.660010][T32735] tipc: Disabling bearer <eth:syzkaller0>
[  440.013278][  T305] pimreg: entered allmulticast mode
[  440.024967][  T305] pimreg: left allmulticast mode
[  440.389653][  T331] FAULT_INJECTION: forcing a failure.
[  440.389653][  T331] name failslab, interval 1, probability 0, space 0, times 0
[  440.402284][  T331] CPU: 0 UID: 0 PID: 331 Comm: syz.3.8260 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  440.402303][  T331] Tainted: [W]=WARN
[  440.402307][  T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  440.402319][  T331] Call Trace:
[  440.402323][  T331]  <TASK>
[  440.402328][  T331]  __dump_stack+0x1d/0x30
[  440.402342][  T331]  dump_stack_lvl+0xe8/0x140
[  440.402356][  T331]  dump_stack+0x15/0x1b
[  440.402367][  T331]  should_fail_ex+0x265/0x280
[  440.402450][  T331]  should_failslab+0x8c/0xb0
[  440.402467][  T331]  kmem_cache_alloc_noprof+0x50/0x480
[  440.402484][  T331]  ? alloc_empty_file+0x76/0x200
[  440.402514][  T331]  alloc_empty_file+0x76/0x200
[  440.402563][  T331]  path_openat+0x68/0x2170
[  440.402640][  T331]  ? path_openat+0x1bf8/0x2170
[  440.402658][  T331]  ? _parse_integer_limit+0x170/0x190
[  440.402697][  T331]  ? _parse_integer+0x27/0x40
[  440.402722][  T331]  ? kstrtoull+0x111/0x140
[  440.402820][  T331]  do_filp_open+0x109/0x230
[  440.402838][  T331]  file_open_name+0xfa/0x120
[  440.402851][  T331]  __se_sys_acct+0xeb/0x530
[  440.402940][  T331]  __x64_sys_acct+0x1f/0x30
[  440.402958][  T331]  x64_sys_call+0x2f3a/0x3000
[  440.403037][  T331]  do_syscall_64+0xd2/0x200
[  440.403050][  T331]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  440.403066][  T331]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  440.403086][  T331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.403114][  T331] RIP: 0033:0x7fde162bf749
[  440.403124][  T331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.403203][  T331] RSP: 002b:00007fde14d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[  440.403215][  T331] RAX: ffffffffffffffda RBX: 00007fde16515fa0 RCX: 00007fde162bf749
[  440.403223][  T331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140
[  440.403230][  T331] RBP: 00007fde14d27090 R08: 0000000000000000 R09: 0000000000000000
[  440.403238][  T331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.403245][  T331] R13: 00007fde16516038 R14: 00007fde16515fa0 R15: 00007ffccb3204b8
[  440.403269][  T331]  </TASK>
[  440.674775][  T344] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  440.846066][  T373] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8275'.
[  441.025429][   T29] kauditd_printk_skb: 570 callbacks suppressed
[  441.025441][   T29] audit: type=1400 audit(1764188457.534:41906): avc:  denied  { mounton } for  pid=390 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  441.280044][  T390] chnl_net:caif_netlink_parms(): no params data found
[  441.321247][  T390] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.328376][  T390] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.335705][  T390] bridge_slave_0: entered allmulticast mode
[  441.342216][  T390] bridge_slave_0: entered promiscuous mode
[  441.349791][  T390] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.356818][  T390] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.364126][  T390] bridge_slave_1: entered allmulticast mode
[  441.370573][  T390] bridge_slave_1: entered promiscuous mode
[  441.398140][  T390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.408767][  T390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.431887][  T390] team0: Port device team_slave_0 added
[  441.438317][  T390] team0: Port device team_slave_1 added
[  441.456398][  T390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.463362][  T390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.489317][  T390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.500656][  T390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.500700][  T682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  441.507638][  T390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.514145][  T682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  441.514229][  T682] vhci_hcd vhci_hcd.0: Device attached
[  441.540061][  T390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.560443][  T683] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  441.566651][  T686] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[  441.572019][  T683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  441.576631][  T686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  441.585385][  T683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  441.592437][  T686] vhci_hcd vhci_hcd.0: Device attached
[  441.617761][  T390] hsr_slave_0: entered promiscuous mode
[  441.623903][  T390] hsr_slave_1: entered promiscuous mode
[  441.633659][   T29] audit: type=1400 audit(1764188458.144:41907): avc:  denied  { create } for  pid=681 comm="syz.0.8289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  441.653957][   T29] audit: type=1400 audit(1764188458.144:41908): avc:  denied  { ioctl } for  pid=681 comm="syz.0.8289" path="socket:[101802]" dev="sockfs" ino=101802 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  441.693377][  T682] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15)
[  441.699990][  T682] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  441.707586][  T682] vhci_hcd vhci_hcd.0: Device attached
[  441.721126][  T689] vhci_hcd: connection closed
[  441.721232][  T731] vhci_hcd: connection closed
[  441.726232][ T7005] vhci_hcd: stop threads
[  441.726483][  T684] vhci_hcd: connection closed
[  441.730934][ T7005] vhci_hcd: release socket
[  441.730946][ T7005] vhci_hcd: disconnect device
[  441.733683][ T6998] bridge_slave_1: left allmulticast mode
[  441.745424][ T7005] vhci_hcd: stop threads
[  441.749045][ T6998] bridge_slave_1: left promiscuous mode
[  441.749184][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.754686][ T7005] vhci_hcd: release socket
[  441.754697][ T7005] vhci_hcd: disconnect device
[  441.780769][ T7005] vhci_hcd: stop threads
[  441.785016][ T7005] vhci_hcd: release socket
[  441.789460][ T7005] vhci_hcd: disconnect device
[  441.794587][ T6998] bridge_slave_0: left allmulticast mode
[  441.795254][  T761] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8290'.
[  441.800231][ T6998] bridge_slave_0: left promiscuous mode
[  441.800322][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.821898][    T9] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[  441.829307][    T9] usb 1-1: enqueue for inactive port 0
[  441.834962][    T9] usb 1-1: enqueue for inactive port 0
[  441.840826][    T9] usb 1-1: enqueue for inactive port 0
[  441.907812][    T9] vhci_hcd: vhci_device speed not set
[  442.168562][ T6998] bond0 (unregistering): (slave bridge7): Releasing active interface
[  442.176669][ T6998] bridge7 (unregistering): left promiscuous mode
[  442.183039][ T6998] bridge7 (unregistering): left allmulticast mode
[  442.242125][ T6998] bond0 (unregistering): Released all slaves
[  442.302315][ T6998] tipc: Left network mode
[  442.324969][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.352348][ T6998] team0 (unregistering): Port device team_slave_1 removed
[  442.362612][ T6998] team0 (unregistering): Port device team_slave_0 removed
[  442.370027][ T6996] smc: removing ib device syz!
[  442.594245][   T29] audit: type=1400 audit(1764188459.105:41909): avc:  denied  { connect } for  pid=823 comm="syz.7.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  442.619053][   T29] audit: type=1326 audit(1764188459.135:41910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  442.642547][   T29] audit: type=1326 audit(1764188459.135:41911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  442.666094][   T29] audit: type=1326 audit(1764188459.135:41912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  442.689563][   T29] audit: type=1326 audit(1764188459.135:41913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  442.712947][   T29] audit: type=1326 audit(1764188459.135:41914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  442.736366][   T29] audit: type=1326 audit(1764188459.135:41915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=823 comm="syz.7.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  442.797995][  T390] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  442.806530][  T390] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  442.815349][  T390] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  442.823910][  T390] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  442.863508][  T390] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.884034][  T390] 8021q: adding VLAN 0 to HW filter on device team0
[  442.894168][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.901208][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.912783][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.919838][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.991449][  T863] macvtap0: refused to change device tx_queue_len
[  443.029077][  T390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  443.186504][  T868] netlink: 'syz.3.8302': attribute type 8 has an invalid length.
[  443.195396][  T390] veth0_vlan: entered promiscuous mode
[  443.203037][  T868] bridge0: entered promiscuous mode
[  443.214530][  T390] veth1_vlan: entered promiscuous mode
[  443.240420][  T390] veth0_macvtap: entered promiscuous mode
[  443.248358][  T390] veth1_macvtap: entered promiscuous mode
[  443.261736][  T390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  443.280295][  T390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  443.291977][ T6998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  443.306525][ T6998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  443.374864][ T6998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  443.385302][ T6998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.422233][  T917] FAULT_INJECTION: forcing a failure.
[  443.422233][  T917] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.435408][  T917] CPU: 1 UID: 0 PID: 917 Comm: syz.2.8309 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  443.435499][  T917] Tainted: [W]=WARN
[  443.435507][  T917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  443.435521][  T917] Call Trace:
[  443.435529][  T917]  <TASK>
[  443.435536][  T917]  __dump_stack+0x1d/0x30
[  443.435623][  T917]  dump_stack_lvl+0xe8/0x140
[  443.435645][  T917]  dump_stack+0x15/0x1b
[  443.435665][  T917]  should_fail_ex+0x265/0x280
[  443.435704][  T917]  should_fail+0xb/0x20
[  443.435731][  T917]  should_fail_usercopy+0x1a/0x20
[  443.435754][  T917]  _copy_to_user+0x20/0xa0
[  443.435782][  T917]  put_sg_io_hdr+0x206/0x250
[  443.435822][  T917]  ? __schedule+0x6b9/0xb30
[  443.435852][  T917]  sg_new_read+0x294/0x460
[  443.435884][  T917]  sg_ioctl+0x1279/0x1360
[  443.435911][  T917]  ? __pfx_autoremove_wake_function+0x10/0x10
[  443.435950][  T917]  ? __pfx_sg_ioctl+0x10/0x10
[  443.435978][  T917]  __se_sys_ioctl+0xce/0x140
[  443.436002][  T917]  __x64_sys_ioctl+0x43/0x50
[  443.436099][  T917]  x64_sys_call+0x1816/0x3000
[  443.436122][  T917]  do_syscall_64+0xd2/0x200
[  443.436174][  T917]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  443.436259][  T917]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  443.436294][  T917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.436319][  T917] RIP: 0033:0x7fd200d3f749
[  443.436335][  T917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.436432][  T917] RSP: 002b:00007fd1ff79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  443.436489][  T917] RAX: ffffffffffffffda RBX: 00007fd200f95fa0 RCX: 00007fd200d3f749
[  443.436528][  T917] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000004
[  443.436621][  T917] RBP: 00007fd1ff79f090 R08: 0000000000000000 R09: 0000000000000000
[  443.436635][  T917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.436649][  T917] R13: 00007fd200f96038 R14: 00007fd200f95fa0 R15: 00007ffe7dd832f8
[  443.436671][  T917]  </TASK>
[  444.091543][  T959] netlink: 'syz.5.8314': attribute type 4 has an invalid length.
[  444.099475][  T959] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8314'.
[  444.308152][  T983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8321'.
[  444.320671][  T984] FAULT_INJECTION: forcing a failure.
[  444.320671][  T984] name failslab, interval 1, probability 0, space 0, times 0
[  444.333315][  T984] CPU: 1 UID: 0 PID: 984 Comm: syz.7.8318 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  444.333345][  T984] Tainted: [W]=WARN
[  444.333351][  T984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  444.333363][  T984] Call Trace:
[  444.333371][  T984]  <TASK>
[  444.333379][  T984]  __dump_stack+0x1d/0x30
[  444.333426][  T984]  dump_stack_lvl+0xe8/0x140
[  444.333503][  T984]  dump_stack+0x15/0x1b
[  444.333519][  T984]  should_fail_ex+0x265/0x280
[  444.333622][  T984]  should_failslab+0x8c/0xb0
[  444.333653][  T984]  __kmalloc_node_track_caller_noprof+0xa5/0x580
[  444.333690][  T984]  ? sidtab_sid2str_get+0xa0/0x130
[  444.333719][  T984]  ? skb_put+0xa9/0xf0
[  444.333794][  T984]  kmemdup_noprof+0x2b/0x70
[  444.333899][  T984]  sidtab_sid2str_get+0xa0/0x130
[  444.333930][  T984]  security_sid_to_context_core+0x1eb/0x2e0
[  444.333963][  T984]  security_sid_to_context+0x27/0x40
[  444.334045][  T984]  avc_audit_post_callback+0x9d/0x520
[  444.334122][  T984]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  444.334162][  T984]  common_lsm_audit+0x1bb/0x230
[  444.334211][  T984]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  444.334297][  T984]  slow_avc_audit+0x104/0x140
[  444.334336][  T984]  avc_has_perm+0x13a/0x180
[  444.334360][  T984]  selinux_mount+0x2ba/0x310
[  444.334464][  T984]  security_sb_mount+0x5f/0xb0
[  444.334482][  T984]  ? path_mount+0x89/0xb70
[  444.334504][  T984]  path_mount+0xa9/0xb70
[  444.334529][  T984]  ? user_path_at+0x109/0x130
[  444.334552][  T984]  __se_sys_mount+0x28c/0x2e0
[  444.334655][  T984]  ? fput+0x8f/0xc0
[  444.334677][  T984]  __x64_sys_mount+0x67/0x80
[  444.334705][  T984]  x64_sys_call+0x2b51/0x3000
[  444.334730][  T984]  do_syscall_64+0xd2/0x200
[  444.334753][  T984]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  444.334793][  T984]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  444.334828][  T984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.334852][  T984] RIP: 0033:0x7fa46ab9f749
[  444.334867][  T984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.334960][  T984] RSP: 002b:00007fa4695de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  444.334980][  T984] RAX: ffffffffffffffda RBX: 00007fa46adf6090 RCX: 00007fa46ab9f749
[  444.334992][  T984] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000
[  444.335046][  T984] RBP: 00007fa4695de090 R08: 0000000000000000 R09: 0000000000000000
[  444.335064][  T984] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001
[  444.335078][  T984] R13: 00007fa46adf6128 R14: 00007fa46adf6090 R15: 00007ffc45992828
[  444.335101][  T984]  </TASK>
[  444.615854][  T988] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8322'.
[  444.744572][  T999] netlink: 'syz.3.8322': attribute type 4 has an invalid length.
[  444.768018][  T998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.781391][  T989] infiniband syz!: set active
[  444.786077][  T989] infiniband syz!: added team_slave_0
[  444.811216][ T1002] netlink: 'syz.3.8322': attribute type 4 has an invalid length.
[  444.819898][  T998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.933096][  T989] RDS/IB: syz!: added
[  444.937761][  T989] smc: adding ib device syz! with port count 1
[  444.944131][  T989] smc:    ib device syz! port 1 has no pnetid
[  445.441732][ T1037] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8332'.
[  445.674957][ T1043] netlink: 'syz.7.8332': attribute type 4 has an invalid length.
[  445.720273][ T1043] netlink: 'syz.7.8332': attribute type 4 has an invalid length.
[  446.079223][   T29] kauditd_printk_skb: 327 callbacks suppressed
[  446.079314][   T29] audit: type=1400 audit(1764188462.597:42243): avc:  denied  { create } for  pid=1039 comm="syz.3.8333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  447.065359][   T29] audit: type=1400 audit(1764188463.567:42244): avc:  denied  { create } for  pid=1117 comm="syz.5.8339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  447.085310][   T29] audit: type=1400 audit(1764188463.587:42245): avc:  denied  { read } for  pid=1117 comm="syz.5.8339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  447.108054][   T29] audit: type=1326 audit(1764188463.617:42246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1119 comm="syz.7.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  447.132014][   T29] audit: type=1326 audit(1764188463.617:42247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1119 comm="syz.7.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  447.155663][   T29] audit: type=1326 audit(1764188463.617:42248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1119 comm="syz.7.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  447.179185][   T29] audit: type=1326 audit(1764188463.617:42249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1119 comm="syz.7.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  447.202700][   T29] audit: type=1326 audit(1764188463.617:42250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1119 comm="syz.7.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  447.226204][   T29] audit: type=1326 audit(1764188463.617:42251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1119 comm="syz.7.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  447.249662][   T29] audit: type=1326 audit(1764188463.617:42252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1119 comm="syz.7.8340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46ab9f749 code=0x7ffc0000
[  447.438098][ T1139] pimreg: entered allmulticast mode
[  447.447372][ T1139] pimreg: left allmulticast mode
[  447.537531][ T1152] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8344'.
[  447.782818][ T1160] macvtap0: refused to change device tx_queue_len
[  448.317950][ T1184] FAULT_INJECTION: forcing a failure.
[  448.317950][ T1184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.331104][ T1184] CPU: 0 UID: 0 PID: 1184 Comm: syz.2.8362 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  448.331166][ T1184] Tainted: [W]=WARN
[  448.331173][ T1184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  448.331187][ T1184] Call Trace:
[  448.331193][ T1184]  <TASK>
[  448.331200][ T1184]  __dump_stack+0x1d/0x30
[  448.331222][ T1184]  dump_stack_lvl+0xe8/0x140
[  448.331242][ T1184]  dump_stack+0x15/0x1b
[  448.331338][ T1184]  should_fail_ex+0x265/0x280
[  448.331408][ T1184]  should_fail+0xb/0x20
[  448.331424][ T1184]  should_fail_usercopy+0x1a/0x20
[  448.331473][ T1184]  _copy_from_user+0x1c/0xb0
[  448.331500][ T1184]  memdup_user+0x5e/0xd0
[  448.331528][ T1184]  strndup_user+0x68/0xb0
[  448.331557][ T1184]  __se_sys_mount+0x4d/0x2e0
[  448.331591][ T1184]  ? fput+0x8f/0xc0
[  448.331656][ T1184]  ? ksys_write+0x192/0x1a0
[  448.331736][ T1184]  __x64_sys_mount+0x67/0x80
[  448.331764][ T1184]  x64_sys_call+0x2b51/0x3000
[  448.331790][ T1184]  do_syscall_64+0xd2/0x200
[  448.331814][ T1184]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  448.331855][ T1184]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  448.331938][ T1184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.331962][ T1184] RIP: 0033:0x7fd200d3f749
[  448.331979][ T1184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.331999][ T1184] RSP: 002b:00007fd1ff79f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  448.332021][ T1184] RAX: ffffffffffffffda RBX: 00007fd200f95fa0 RCX: 00007fd200d3f749
[  448.332040][ T1184] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000
[  448.332055][ T1184] RBP: 00007fd1ff79f090 R08: 0000200000000600 R09: 0000000000000000
[  448.332069][ T1184] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001
[  448.332084][ T1184] R13: 00007fd200f96038 R14: 00007fd200f95fa0 R15: 00007ffe7dd832f8
[  448.332106][ T1184]  </TASK>
[  448.590804][ T1185] macvtap0: refused to change device tx_queue_len
[  448.599926][ T1186] pim6reg: entered allmulticast mode
[  448.650813][ T1221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.672829][ T1221] tipc: Disabling bearer <eth:syzkaller0>
[  448.914712][ T4514] pim6reg (unregistering): left allmulticast mode
[  449.629313][ T1265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.637130][ T1265] tipc: Disabling bearer <eth:syzkaller0>
[  450.055623][ T1296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8385'.
[  450.082649][ T1296] netlink: 'syz.0.8385': attribute type 3 has an invalid length.
[  450.285381][ T1310] SELinux: failed to load policy
[  450.404682][ T1313] macvtap0: refused to change device tx_queue_len
[  450.621269][ T1338] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8397'.
[  450.724051][T25551] usb usb8-port1: attempt power cycle
[  450.963021][ T1346] macvtap0: refused to change device tx_queue_len
[  451.196143][ T1355] FAULT_INJECTION: forcing a failure.
[  451.196143][ T1355] name failslab, interval 1, probability 0, space 0, times 0
[  451.208843][ T1355] CPU: 0 UID: 0 PID: 1355 Comm: syz.0.8406 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  451.208899][ T1355] Tainted: [W]=WARN
[  451.208904][ T1355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  451.208911][ T1355] Call Trace:
[  451.208915][ T1355]  <TASK>
[  451.208919][ T1355]  __dump_stack+0x1d/0x30
[  451.208934][ T1355]  dump_stack_lvl+0xe8/0x140
[  451.208946][ T1355]  dump_stack+0x15/0x1b
[  451.208957][ T1355]  should_fail_ex+0x265/0x280
[  451.209060][ T1355]  should_failslab+0x8c/0xb0
[  451.209184][ T1355]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  451.209202][ T1355]  ? __alloc_skb+0x101/0x320
[  451.209220][ T1355]  __alloc_skb+0x101/0x320
[  451.209237][ T1355]  netlink_alloc_large_skb+0xbf/0xf0
[  451.209266][ T1355]  netlink_sendmsg+0x3cf/0x6b0
[  451.209279][ T1355]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.209290][ T1355]  __sock_sendmsg+0x145/0x180
[  451.209418][ T1355]  ____sys_sendmsg+0x31e/0x4e0
[  451.209435][ T1355]  ___sys_sendmsg+0x17b/0x1d0
[  451.209521][ T1355]  __x64_sys_sendmsg+0xd4/0x160
[  451.209583][ T1355]  x64_sys_call+0x191e/0x3000
[  451.209596][ T1355]  do_syscall_64+0xd2/0x200
[  451.209609][ T1355]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  451.209640][ T1355]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  451.209705][ T1355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.209776][ T1355] RIP: 0033:0x7feedf29f749
[  451.209826][ T1355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.209837][ T1355] RSP: 002b:00007feeddcff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.209870][ T1355] RAX: ffffffffffffffda RBX: 00007feedf4f5fa0 RCX: 00007feedf29f749
[  451.209878][ T1355] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003
[  451.209885][ T1355] RBP: 00007feeddcff090 R08: 0000000000000000 R09: 0000000000000000
[  451.209892][ T1355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.209899][ T1355] R13: 00007feedf4f6038 R14: 00007feedf4f5fa0 R15: 00007ffcb0c34c48
[  451.209915][ T1355]  </TASK>
[  451.434423][   T29] kauditd_printk_skb: 634 callbacks suppressed
[  451.434483][   T29] audit: type=1326 audit(1764188467.949:42887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  451.488039][ T1363] FAULT_INJECTION: forcing a failure.
[  451.488039][ T1363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.501173][ T1363] CPU: 1 UID: 0 PID: 1363 Comm: syz.5.8409 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  451.501244][ T1363] Tainted: [W]=WARN
[  451.501251][ T1363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  451.501264][ T1363] Call Trace:
[  451.501271][ T1363]  <TASK>
[  451.501278][ T1363]  __dump_stack+0x1d/0x30
[  451.501301][ T1363]  dump_stack_lvl+0xe8/0x140
[  451.501392][ T1363]  dump_stack+0x15/0x1b
[  451.501411][ T1363]  should_fail_ex+0x265/0x280
[  451.501443][ T1363]  should_fail+0xb/0x20
[  451.501511][ T1363]  should_fail_usercopy+0x1a/0x20
[  451.501535][ T1363]  _copy_to_user+0x20/0xa0
[  451.501705][ T1363]  simple_read_from_buffer+0xb5/0x130
[  451.501732][ T1363]  proc_fail_nth_read+0x10e/0x150
[  451.501764][ T1363]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  451.501840][ T1363]  vfs_read+0x1a8/0x770
[  451.501864][ T1363]  ? __rcu_read_unlock+0x4f/0x70
[  451.502022][ T1363]  ? __fget_files+0x184/0x1c0
[  451.502052][ T1363]  ksys_read+0xda/0x1a0
[  451.502138][ T1363]  __x64_sys_read+0x40/0x50
[  451.502160][ T1363]  x64_sys_call+0x27c0/0x3000
[  451.502183][ T1363]  do_syscall_64+0xd2/0x200
[  451.502202][ T1363]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  451.502281][ T1363]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  451.502312][ T1363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.502331][ T1363] RIP: 0033:0x7f25b47de15c
[  451.502345][ T1363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  451.502431][ T1363] RSP: 002b:00007f25b323f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  451.502452][ T1363] RAX: ffffffffffffffda RBX: 00007f25b4a35fa0 RCX: 00007f25b47de15c
[  451.502466][ T1363] RDX: 000000000000000f RSI: 00007f25b323f0a0 RDI: 0000000000000006
[  451.502480][ T1363] RBP: 00007f25b323f090 R08: 0000000000000000 R09: 0000000000000000
[  451.502494][ T1363] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001
[  451.502539][ T1363] R13: 00007f25b4a36038 R14: 00007f25b4a35fa0 R15: 00007ffcfa750388
[  451.502561][ T1363]  </TASK>
[  451.706088][   T29] audit: type=1326 audit(1764188467.979:42888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  451.729561][   T29] audit: type=1326 audit(1764188467.979:42889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25b47df783 code=0x7ffc0000
[  451.752937][   T29] audit: type=1326 audit(1764188467.979:42890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25b47de1ff code=0x7ffc0000
[  451.776227][   T29] audit: type=1326 audit(1764188467.979:42891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f25b47df7d7 code=0x7ffc0000
[  451.799592][   T29] audit: type=1326 audit(1764188467.979:42892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25b47ddf90 code=0x7ffc0000
[  451.823071][   T29] audit: type=1326 audit(1764188467.979:42893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25b47de3aa code=0x7ffc0000
[  451.846354][   T29] audit: type=1326 audit(1764188467.979:42894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  451.869892][   T29] audit: type=1326 audit(1764188467.979:42895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.5.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  451.872743][ T1367] IPv6: addrconf: prefix option has invalid lifetime
[  451.941629][   T29] audit: type=1400 audit(1764188468.450:42896): avc:  denied  { getopt } for  pid=1366 comm="syz.5.8412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  452.058332][ T1385] hub 9-0:1.0: USB hub found
[  452.063030][ T1385] hub 9-0:1.0: 8 ports detected
[  452.070583][ T1385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8417'.
[  452.079553][ T1385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8417'.
[  452.089592][ T1385] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  452.938512][ T1455] FAULT_INJECTION: forcing a failure.
[  452.938512][ T1455] name failslab, interval 1, probability 0, space 0, times 0
[  452.951278][ T1455] CPU: 1 UID: 0 PID: 1455 Comm: syz.7.8427 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  452.951319][ T1455] Tainted: [W]=WARN
[  452.951326][ T1455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  452.951337][ T1455] Call Trace:
[  452.951343][ T1455]  <TASK>
[  452.951351][ T1455]  __dump_stack+0x1d/0x30
[  452.951427][ T1455]  dump_stack_lvl+0xe8/0x140
[  452.951449][ T1455]  dump_stack+0x15/0x1b
[  452.951468][ T1455]  should_fail_ex+0x265/0x280
[  452.951552][ T1455]  should_failslab+0x8c/0xb0
[  452.951581][ T1455]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  452.951610][ T1455]  ? __alloc_skb+0x101/0x320
[  452.951638][ T1455]  __alloc_skb+0x101/0x320
[  452.951703][ T1455]  netlink_alloc_large_skb+0xbf/0xf0
[  452.951735][ T1455]  netlink_sendmsg+0x3cf/0x6b0
[  452.951758][ T1455]  ? __pfx_netlink_sendmsg+0x10/0x10
[  452.951776][ T1455]  __sock_sendmsg+0x145/0x180
[  452.951830][ T1455]  ____sys_sendmsg+0x31e/0x4e0
[  452.951855][ T1455]  ___sys_sendmsg+0x17b/0x1d0
[  452.951948][ T1455]  __x64_sys_sendmsg+0xd4/0x160
[  452.952032][ T1455]  x64_sys_call+0x191e/0x3000
[  452.952056][ T1455]  do_syscall_64+0xd2/0x200
[  452.952076][ T1455]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  452.952101][ T1455]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  452.952174][ T1455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.952198][ T1455] RIP: 0033:0x7fa46ab9f749
[  452.952256][ T1455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.952325][ T1455] RSP: 002b:00007fa4695ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  452.952342][ T1455] RAX: ffffffffffffffda RBX: 00007fa46adf5fa0 RCX: 00007fa46ab9f749
[  452.952354][ T1455] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  452.952383][ T1455] RBP: 00007fa4695ff090 R08: 0000000000000000 R09: 0000000000000000
[  452.952395][ T1455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.952408][ T1455] R13: 00007fa46adf6038 R14: 00007fa46adf5fa0 R15: 00007ffc45992828
[  452.952429][ T1455]  </TASK>
[  453.082336][T25551] usb usb8-port1: unable to enumerate USB device
[  453.180394][ T1457] FAULT_INJECTION: forcing a failure.
[  453.180394][ T1457] name failslab, interval 1, probability 0, space 0, times 0
[  453.193064][ T1457] CPU: 0 UID: 0 PID: 1457 Comm: syz.5.8428 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  453.193093][ T1457] Tainted: [W]=WARN
[  453.193100][ T1457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  453.193135][ T1457] Call Trace:
[  453.193142][ T1457]  <TASK>
[  453.193151][ T1457]  __dump_stack+0x1d/0x30
[  453.193174][ T1457]  dump_stack_lvl+0xe8/0x140
[  453.193202][ T1457]  dump_stack+0x15/0x1b
[  453.193220][ T1457]  should_fail_ex+0x265/0x280
[  453.193302][ T1457]  should_failslab+0x8c/0xb0
[  453.193378][ T1457]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  453.193512][ T1457]  ? __alloc_skb+0x101/0x320
[  453.193606][ T1457]  __alloc_skb+0x101/0x320
[  453.193633][ T1457]  sock_omalloc+0x81/0xf0
[  453.193652][ T1457]  msg_zerocopy_realloc+0x84/0x420
[  453.193693][ T1457]  ? should_fail_ex+0x30/0x280
[  453.193749][ T1457]  __ip6_append_data+0xaca/0x2390
[  453.193775][ T1457]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  453.193800][ T1457]  ? __rcu_read_unlock+0x4f/0x70
[  453.193941][ T1457]  ? xa_load+0xb1/0xe0
[  453.193969][ T1457]  ip6_append_data+0x138/0x240
[  453.194058][ T1457]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  453.194162][ T1457]  udpv6_sendmsg+0x72d/0x15b0
[  453.194191][ T1457]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  453.194214][ T1457]  ? __account_obj_stock+0x2cc/0x350
[  453.194240][ T1457]  ? __rcu_read_unlock+0x4f/0x70
[  453.194354][ T1457]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  453.194380][ T1457]  inet6_sendmsg+0xac/0xd0
[  453.194407][ T1457]  __sock_sendmsg+0x8b/0x180
[  453.194489][ T1457]  ____sys_sendmsg+0x345/0x4e0
[  453.194566][ T1457]  ___sys_sendmsg+0x17b/0x1d0
[  453.194596][ T1457]  __sys_sendmmsg+0x178/0x300
[  453.194623][ T1457]  __x64_sys_sendmmsg+0x57/0x70
[  453.194645][ T1457]  x64_sys_call+0x1c4a/0x3000
[  453.194704][ T1457]  do_syscall_64+0xd2/0x200
[  453.194722][ T1457]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  453.194783][ T1457]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  453.194814][ T1457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.194838][ T1457] RIP: 0033:0x7f25b47df749
[  453.194854][ T1457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.194872][ T1457] RSP: 002b:00007f25b323f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  453.194922][ T1457] RAX: ffffffffffffffda RBX: 00007f25b4a35fa0 RCX: 00007f25b47df749
[  453.194933][ T1457] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000003
[  453.194946][ T1457] RBP: 00007f25b323f090 R08: 0000000000000000 R09: 0000000000000000
[  453.194960][ T1457] R10: 000000000404c484 R11: 0000000000000246 R12: 0000000000000001
[  453.194979][ T1457] R13: 00007f25b4a36038 R14: 00007f25b4a35fa0 R15: 00007ffcfa750388
[  453.195001][ T1457]  </TASK>
[  453.195483][ T1134] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
[  453.477496][ T1460] FAULT_INJECTION: forcing a failure.
[  453.477496][ T1460] name failslab, interval 1, probability 0, space 0, times 0
[  453.490225][ T1460] CPU: 1 UID: 0 PID: 1460 Comm: syz.2.8429 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  453.490257][ T1460] Tainted: [W]=WARN
[  453.490263][ T1460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  453.490274][ T1460] Call Trace:
[  453.490281][ T1460]  <TASK>
[  453.490289][ T1460]  __dump_stack+0x1d/0x30
[  453.490332][ T1460]  dump_stack_lvl+0xe8/0x140
[  453.490353][ T1460]  dump_stack+0x15/0x1b
[  453.490373][ T1460]  should_fail_ex+0x265/0x280
[  453.490409][ T1460]  should_failslab+0x8c/0xb0
[  453.490441][ T1460]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  453.490510][ T1460]  ? __alloc_skb+0x101/0x320
[  453.490537][ T1460]  __alloc_skb+0x101/0x320
[  453.490642][ T1460]  netlink_alloc_large_skb+0xbf/0xf0
[  453.490672][ T1460]  netlink_sendmsg+0x3cf/0x6b0
[  453.490697][ T1460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.490749][ T1460]  __sock_sendmsg+0x145/0x180
[  453.490772][ T1460]  ____sys_sendmsg+0x31e/0x4e0
[  453.490794][ T1460]  ___sys_sendmsg+0x17b/0x1d0
[  453.490884][ T1460]  __x64_sys_sendmsg+0xd4/0x160
[  453.490905][ T1460]  x64_sys_call+0x191e/0x3000
[  453.491002][ T1460]  do_syscall_64+0xd2/0x200
[  453.491022][ T1460]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  453.491052][ T1460]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  453.491165][ T1460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.491184][ T1460] RIP: 0033:0x7fd200d3f749
[  453.491206][ T1460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.491228][ T1460] RSP: 002b:00007fd1ff79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.491254][ T1460] RAX: ffffffffffffffda RBX: 00007fd200f95fa0 RCX: 00007fd200d3f749
[  453.491269][ T1460] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000005
[  453.491284][ T1460] RBP: 00007fd1ff79f090 R08: 0000000000000000 R09: 0000000000000000
[  453.491297][ T1460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.491309][ T1460] R13: 00007fd200f96038 R14: 00007fd200f95fa0 R15: 00007ffe7dd832f8
[  453.491327][ T1460]  </TASK>
[  453.743700][ T1469] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8433'.
[  453.861051][ T1499] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8439'.
[  453.866690][ T1469] netlink: 'syz.3.8433': attribute type 4 has an invalid length.
[  453.887490][ T1469] netlink: 'syz.3.8433': attribute type 4 has an invalid length.
[  453.983448][ T1508] syzkaller0: entered promiscuous mode
[  453.988930][ T1508] syzkaller0: entered allmulticast mode
[  454.232255][ T1525] 9pnet_fd: Insufficient options for proto=fd
[  454.666133][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8461'.
[  454.672623][ T1571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8462'.
[  454.700780][ T1574] macvtap0: refused to change device tx_queue_len
[  454.767581][ T1582] syz!: rxe_newlink: already configured on team_slave_0
[  454.775429][ T1582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.784004][ T1582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.933716][ T1636] macvtap0: refused to change device tx_queue_len
[  456.236890][ T1665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8482'.
[  456.267616][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8482'.
[  456.390397][ T1681] IPv6: NLM_F_CREATE should be specified when creating new route
[  456.420997][ T1665] veth3: entered promiscuous mode
[  456.426140][ T1665] bridge1: port 1(veth3) entered blocking state
[  456.432584][ T1665] bridge1: port 1(veth3) entered disabled state
[  456.445206][ T1665] veth3: entered allmulticast mode
[  456.493708][   T29] kauditd_printk_skb: 361 callbacks suppressed
[  456.493719][   T29] audit: type=1326 audit(1764188473.012:43258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.571170][   T29] audit: type=1326 audit(1764188473.042:43259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.594710][   T29] audit: type=1326 audit(1764188473.052:43260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.618330][   T29] audit: type=1326 audit(1764188473.052:43261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.641860][   T29] audit: type=1326 audit(1764188473.052:43262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.665372][   T29] audit: type=1326 audit(1764188473.052:43263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.688870][   T29] audit: type=1326 audit(1764188473.052:43264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.712439][   T29] audit: type=1326 audit(1764188473.052:43265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.724564][ T1702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8486'.
[  456.735961][   T29] audit: type=1326 audit(1764188473.052:43266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.768320][   T29] audit: type=1326 audit(1764188473.052:43267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1706 comm="syz.0.8487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  456.885472][ T1739] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  456.911482][ T1739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.947207][ T1739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.475599][ T1756] netlink: 'syz.3.8493': attribute type 4 has an invalid length.
[  457.483542][ T1758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8494'.
[  457.483631][ T1748] macvtap0: refused to change device tx_queue_len
[  457.545090][ T1760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8495'.
[  457.610245][ T1774] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8500'.
[  457.719479][ T1796] macvtap0: refused to change device tx_queue_len
[  457.776847][ T1800] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8509'.
[  457.800988][ T1804] netlink: 'syz.0.8500': attribute type 4 has an invalid length.
[  457.868326][ T1806] 9pnet_fd: Insufficient options for proto=fd
[  457.891853][ T1807] netlink: 'syz.0.8500': attribute type 4 has an invalid length.
[  458.114665][ T1817] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8511'.
[  458.179929][ T1817] hsr_slave_0: left promiscuous mode
[  458.219664][ T1817] hsr_slave_1: left promiscuous mode
[  458.539356][ T1831] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  458.553597][ T1830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.562613][ T1830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.047521][ T1843] IPv6: NLM_F_CREATE should be specified when creating new route
[  459.405078][ T1853] FAULT_INJECTION: forcing a failure.
[  459.405078][ T1853] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  459.418170][ T1853] CPU: 1 UID: 0 PID: 1853 Comm: syz.3.8525 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  459.418204][ T1853] Tainted: [W]=WARN
[  459.418281][ T1853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  459.418293][ T1853] Call Trace:
[  459.418299][ T1853]  <TASK>
[  459.418306][ T1853]  __dump_stack+0x1d/0x30
[  459.418326][ T1853]  dump_stack_lvl+0xe8/0x140
[  459.418347][ T1853]  dump_stack+0x15/0x1b
[  459.418367][ T1853]  should_fail_ex+0x265/0x280
[  459.418407][ T1853]  should_fail+0xb/0x20
[  459.418422][ T1853]  should_fail_usercopy+0x1a/0x20
[  459.418443][ T1853]  _copy_from_user+0x1c/0xb0
[  459.418472][ T1853]  ___sys_sendmsg+0xc1/0x1d0
[  459.418506][ T1853]  __sys_sendmmsg+0x178/0x300
[  459.418570][ T1853]  __x64_sys_sendmmsg+0x57/0x70
[  459.418588][ T1853]  x64_sys_call+0x1c4a/0x3000
[  459.418613][ T1853]  do_syscall_64+0xd2/0x200
[  459.418652][ T1853]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  459.418678][ T1853]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  459.418786][ T1853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.418818][ T1853] RIP: 0033:0x7fde162bf749
[  459.418832][ T1853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.418852][ T1853] RSP: 002b:00007fde14d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  459.418873][ T1853] RAX: ffffffffffffffda RBX: 00007fde16515fa0 RCX: 00007fde162bf749
[  459.418886][ T1853] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006
[  459.418899][ T1853] RBP: 00007fde14d27090 R08: 0000000000000000 R09: 0000000000000000
[  459.418911][ T1853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.418984][ T1853] R13: 00007fde16516038 R14: 00007fde16515fa0 R15: 00007ffccb3204b8
[  459.419005][ T1853]  </TASK>
[  459.696647][ T1862] IPv6: NLM_F_CREATE should be specified when creating new route
[  459.755480][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8527'.
[  459.768186][ T1857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8527'.
[  460.526767][ T1917] veth3: entered promiscuous mode
[  460.536000][ T1934] macvtap0: refused to change device tx_queue_len
[  460.646009][ T1968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  460.659727][ T1968] tipc: Disabling bearer <eth:syzkaller0>
[  460.756349][ T1999] macvtap0: refused to change device tx_queue_len
[  460.964946][ T2022] IPv6: NLM_F_CREATE should be specified when creating new route
[  461.352857][ T2051] __nla_validate_parse: 7 callbacks suppressed
[  461.352872][ T2051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8561'.
[  461.377143][ T2051] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8561'.
[  461.515035][   T29] kauditd_printk_skb: 570 callbacks suppressed
[  461.515051][   T29] audit: type=1326 audit(1764188478.034:43838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.595976][   T29] audit: type=1326 audit(1764188478.064:43839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.619574][   T29] audit: type=1326 audit(1764188478.074:43840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.643042][   T29] audit: type=1326 audit(1764188478.074:43841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.666722][   T29] audit: type=1326 audit(1764188478.074:43842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.690699][   T29] audit: type=1326 audit(1764188478.074:43843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.714236][   T29] audit: type=1326 audit(1764188478.074:43844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.737847][   T29] audit: type=1326 audit(1764188478.074:43845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.761352][   T29] audit: type=1326 audit(1764188478.074:43846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  461.784833][   T29] audit: type=1326 audit(1764188478.074:43847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2062 comm="syz.0.8563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  462.978326][ T2122] FAULT_INJECTION: forcing a failure.
[  462.978326][ T2122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  462.991409][ T2122] CPU: 0 UID: 0 PID: 2122 Comm: syz.3.8574 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  462.991440][ T2122] Tainted: [W]=WARN
[  462.991448][ T2122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  462.991462][ T2122] Call Trace:
[  462.991505][ T2122]  <TASK>
[  462.991512][ T2122]  __dump_stack+0x1d/0x30
[  462.991532][ T2122]  dump_stack_lvl+0xe8/0x140
[  462.991553][ T2122]  dump_stack+0x15/0x1b
[  462.991571][ T2122]  should_fail_ex+0x265/0x280
[  462.991643][ T2122]  should_fail+0xb/0x20
[  462.991657][ T2122]  should_fail_usercopy+0x1a/0x20
[  462.991677][ T2122]  _copy_from_user+0x1c/0xb0
[  462.991725][ T2122]  ___sys_sendmsg+0xc1/0x1d0
[  462.991757][ T2122]  __sys_sendmmsg+0x178/0x300
[  462.991784][ T2122]  __x64_sys_sendmmsg+0x57/0x70
[  462.991805][ T2122]  x64_sys_call+0x1c4a/0x3000
[  462.991828][ T2122]  do_syscall_64+0xd2/0x200
[  462.991895][ T2122]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  462.991920][ T2122]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  462.991952][ T2122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.991976][ T2122] RIP: 0033:0x7fde162bf749
[  462.992059][ T2122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.992080][ T2122] RSP: 002b:00007fde14d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  462.992138][ T2122] RAX: ffffffffffffffda RBX: 00007fde16515fa0 RCX: 00007fde162bf749
[  462.992153][ T2122] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  462.992243][ T2122] RBP: 00007fde14d27090 R08: 0000000000000000 R09: 0000000000000000
[  462.992255][ T2122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.992269][ T2122] R13: 00007fde16516038 R14: 00007fde16515fa0 R15: 00007ffccb3204b8
[  462.992365][ T2122]  </TASK>
[  463.347662][ T2157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.356363][ T2157] tipc: Disabling bearer <eth:syzkaller0>
[  463.441079][ T2173] macvtap0: refused to change device tx_queue_len
[  463.462307][ T2178] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8592'.
[  463.587751][ T2196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.593082][ T2200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.602888][ T2200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.612053][ T2196] tipc: Disabling bearer <eth:syzkaller0>
[  464.064306][ T2217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8602'.
[  464.074658][ T2217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8602'.
[  464.371312][ T2246] pimreg: entered allmulticast mode
[  464.452033][ T7005] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.503253][ T2225] chnl_net:caif_netlink_parms(): no params data found
[  464.523086][ T2369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.531270][ T7005] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.547883][ T2369] tipc: Disabling bearer <eth:syzkaller0>
[  464.571929][ T2225] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.579019][ T2225] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.586187][ T2225] bridge_slave_0: entered allmulticast mode
[  464.592813][ T2225] bridge_slave_0: entered promiscuous mode
[  464.600362][ T7005] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.610946][ T2225] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.618052][ T2225] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.625454][ T2225] bridge_slave_1: entered allmulticast mode
[  464.632606][ T2225] bridge_slave_1: entered promiscuous mode
[  464.635835][ T2429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8619'.
[  464.647611][ T2405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8617'.
[  464.659107][ T7005] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.677471][ T2225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.688254][ T2225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.711430][ T2225] team0: Port device team_slave_0 added
[  464.718315][ T2225] team0: Port device team_slave_1 added
[  464.739640][ T2225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.746669][ T2225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.772660][ T2225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.784670][ T2225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.784680][ T2225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.784706][ T2225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.838066][ T2225] hsr_slave_0: entered promiscuous mode
[  464.845147][ T2225] hsr_slave_1: entered promiscuous mode
[  464.851369][ T7005] bridge_slave_1: left allmulticast mode
[  464.857047][ T7005] bridge_slave_1: left promiscuous mode
[  464.862804][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.870811][ T7005] bridge_slave_0: left allmulticast mode
[  464.876504][ T7005] bridge_slave_0: left promiscuous mode
[  464.882193][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.290294][ T2560] FAULT_INJECTION: forcing a failure.
[  465.290294][ T2560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.303461][ T2560] CPU: 1 UID: 0 PID: 2560 Comm: syz.2.8627 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  465.303538][ T2560] Tainted: [W]=WARN
[  465.303542][ T2560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  465.303550][ T2560] Call Trace:
[  465.303554][ T2560]  <TASK>
[  465.303559][ T2560]  __dump_stack+0x1d/0x30
[  465.303572][ T2560]  dump_stack_lvl+0xe8/0x140
[  465.303601][ T2560]  dump_stack+0x15/0x1b
[  465.303611][ T2560]  should_fail_ex+0x265/0x280
[  465.303631][ T2560]  should_fail+0xb/0x20
[  465.303687][ T2560]  should_fail_usercopy+0x1a/0x20
[  465.303700][ T2560]  _copy_from_user+0x1c/0xb0
[  465.303714][ T2560]  ___sys_sendmsg+0xc1/0x1d0
[  465.303779][ T2560]  __x64_sys_sendmsg+0xd4/0x160
[  465.303804][ T2560]  x64_sys_call+0x191e/0x3000
[  465.303817][ T2560]  do_syscall_64+0xd2/0x200
[  465.303843][ T2560]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  465.303863][ T2560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.303876][ T2560] RIP: 0033:0x7fd200d3f749
[  465.303943][ T2560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  465.303954][ T2560] RSP: 002b:00007fd1ff79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  465.303966][ T2560] RAX: ffffffffffffffda RBX: 00007fd200f95fa0 RCX: 00007fd200d3f749
[  465.303974][ T2560] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[  465.304035][ T2560] RBP: 00007fd1ff79f090 R08: 0000000000000000 R09: 0000000000000000
[  465.304042][ T2560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.304050][ T2560] R13: 00007fd200f96038 R14: 00007fd200f95fa0 R15: 00007ffe7dd832f8
[  465.304062][ T2560]  </TASK>
[  465.502962][ T2566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8629'.
[  465.566956][ T7005] bond1 (unregistering): (slave bridge11): Releasing backup interface
[  465.575275][ T7005] bridge11 (unregistering): left promiscuous mode
[  465.618723][ T2570] FAULT_INJECTION: forcing a failure.
[  465.618723][ T2570] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.631776][ T2570] CPU: 0 UID: 0 PID: 2570 Comm: syz.5.8630 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  465.631799][ T2570] Tainted: [W]=WARN
[  465.631803][ T2570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  465.631818][ T2570] Call Trace:
[  465.631861][ T2570]  <TASK>
[  465.631865][ T2570]  __dump_stack+0x1d/0x30
[  465.631880][ T2570]  dump_stack_lvl+0xe8/0x140
[  465.631892][ T2570]  dump_stack+0x15/0x1b
[  465.631939][ T2570]  should_fail_ex+0x265/0x280
[  465.631958][ T2570]  should_fail+0xb/0x20
[  465.631968][ T2570]  should_fail_usercopy+0x1a/0x20
[  465.631980][ T2570]  _copy_from_user+0x1c/0xb0
[  465.631996][ T2570]  ___sys_recvmsg+0xaa/0x370
[  465.632011][ T2570]  ? _parse_integer+0x27/0x40
[  465.632037][ T2570]  do_recvmmsg+0x1ef/0x540
[  465.632052][ T2570]  ? get_timespec64+0xc9/0x100
[  465.632150][ T2570]  __x64_sys_recvmmsg+0xfb/0x170
[  465.632164][ T2570]  x64_sys_call+0x27aa/0x3000
[  465.632255][ T2570]  do_syscall_64+0xd2/0x200
[  465.632269][ T2570]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  465.632286][ T2570]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  465.632321][ T2570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.632334][ T2570] RIP: 0033:0x7f25b47df749
[  465.632347][ T2570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  465.632404][ T2570] RSP: 002b:00007f25b323f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  465.632440][ T2570] RAX: ffffffffffffffda RBX: 00007f25b4a35fa0 RCX: 00007f25b47df749
[  465.632448][ T2570] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000006
[  465.632526][ T2570] RBP: 00007f25b323f090 R08: 0000200000003700 R09: 0000000000000000
[  465.632533][ T2570] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  465.632541][ T2570] R13: 00007f25b4a36038 R14: 00007f25b4a35fa0 R15: 00007ffcfa750388
[  465.632553][ T2570]  </TASK>
[  465.828463][ T7005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.838781][ T7005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.849130][ T7005] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  465.858632][ T7005] bond0 (unregistering): Released all slaves
[  465.867327][ T7005] bond1 (unregistering): Released all slaves
[  465.890482][ T2566] team0 (unregistering): Port device team_slave_0 removed
[  465.905049][ T2566] team0 (unregistering): Port device team_slave_1 removed
[  465.921621][ T2567] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  465.932683][ T7005] tipc: Left network mode
[  465.958833][ T2627] futex_wake_op: syz.5.8633 tries to shift op by 535; fix this program
[  465.969182][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  465.976625][ T7005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  465.984617][ T2566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8629'.
[  465.999735][ T7005] veth1_macvtap: left promiscuous mode
[  466.005226][ T7005] veth0_macvtap: left promiscuous mode
[  466.010830][ T7005] veth1_vlan: left promiscuous mode
[  466.016096][ T7005] veth0_vlan: left promiscuous mode
[  466.021712][ T2631] futex_wake_op: syz.5.8633 tries to shift op by 535; fix this program
[  466.070374][ T7005] team0 (unregistering): Port device team_slave_0 removed
[  466.106512][ T2566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8629'.
[  466.667117][   T29] kauditd_printk_skb: 570 callbacks suppressed
[  466.667132][   T29] audit: type=1326 audit(1764188483.197:44418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.733617][   T29] audit: type=1326 audit(1764188483.227:44419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.757136][   T29] audit: type=1326 audit(1764188483.227:44420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.780889][   T29] audit: type=1326 audit(1764188483.227:44421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.804567][   T29] audit: type=1326 audit(1764188483.227:44422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.828020][   T29] audit: type=1326 audit(1764188483.227:44423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.851589][   T29] audit: type=1326 audit(1764188483.227:44424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.875053][   T29] audit: type=1326 audit(1764188483.227:44425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.898545][   T29] audit: type=1326 audit(1764188483.227:44426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.922023][   T29] audit: type=1326 audit(1764188483.227:44427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.0.8641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feedf29f749 code=0x7ffc0000
[  466.952666][ T7005] IPVS: stop unused estimator thread 0...
[  467.002547][ T2730] macvtap0: refused to change device tx_queue_len
[  467.092556][ T2739] FAULT_INJECTION: forcing a failure.
[  467.092556][ T2739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  467.105810][ T2739] CPU: 1 UID: 0 PID: 2739 Comm: syz.2.8649 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  467.105846][ T2739] Tainted: [W]=WARN
[  467.105853][ T2739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  467.105866][ T2739] Call Trace:
[  467.105872][ T2739]  <TASK>
[  467.105880][ T2739]  __dump_stack+0x1d/0x30
[  467.105903][ T2739]  dump_stack_lvl+0xe8/0x140
[  467.105971][ T2739]  dump_stack+0x15/0x1b
[  467.106041][ T2739]  should_fail_ex+0x265/0x280
[  467.106132][ T2739]  should_fail+0xb/0x20
[  467.106181][ T2739]  should_fail_usercopy+0x1a/0x20
[  467.106205][ T2739]  _copy_from_user+0x1c/0xb0
[  467.106231][ T2739]  ___sys_sendmsg+0xc1/0x1d0
[  467.106265][ T2739]  __x64_sys_sendmsg+0xd4/0x160
[  467.106311][ T2739]  x64_sys_call+0x191e/0x3000
[  467.106334][ T2739]  do_syscall_64+0xd2/0x200
[  467.106356][ T2739]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  467.106386][ T2739]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  467.106530][ T2739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.106554][ T2739] RIP: 0033:0x7fd200d3f749
[  467.106570][ T2739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  467.106590][ T2739] RSP: 002b:00007fd1ff79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  467.106618][ T2739] RAX: ffffffffffffffda RBX: 00007fd200f95fa0 RCX: 00007fd200d3f749
[  467.106633][ T2739] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003
[  467.106653][ T2739] RBP: 00007fd1ff79f090 R08: 0000000000000000 R09: 0000000000000000
[  467.106668][ T2739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.106682][ T2739] R13: 00007fd200f96038 R14: 00007fd200f95fa0 R15: 00007ffe7dd832f8
[  467.106703][ T2739]  </TASK>
[  467.341492][ T2225] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  467.358883][ T2225] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  467.370448][ T2225] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  467.379183][ T2225] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  467.412580][ T2768] __nla_validate_parse: 62 callbacks suppressed
[  467.412594][ T2768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8654'.
[  467.428373][ T2770] tipc: Enabled bearer <udp:syz2>, priority 10
[  467.452870][ T2768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8654'.
[  467.482574][ T2785] 9pnet_fd: Insufficient options for proto=fd
[  467.491103][ T2225] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.502742][ T2768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8654'.
[  467.556599][ T2790] tipc: Enabled bearer <udp:syz2>, priority 10
[  467.563861][ T2225] 8021q: adding VLAN 0 to HW filter on device team0
[  467.574202][T19018] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.581269][T19018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.592651][ T4514] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.599729][ T4514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.610741][ T2796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8661'.
[  467.624303][ T2796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8661'.
[  467.695572][ T2225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.791154][ T2829] FAULT_INJECTION: forcing a failure.
[  467.791154][ T2829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  467.804250][ T2829] CPU: 0 UID: 0 PID: 2829 Comm: syz.5.8673 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  467.804328][ T2829] Tainted: [W]=WARN
[  467.804335][ T2829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  467.804409][ T2829] Call Trace:
[  467.804415][ T2829]  <TASK>
[  467.804422][ T2829]  __dump_stack+0x1d/0x30
[  467.804441][ T2829]  dump_stack_lvl+0xe8/0x140
[  467.804522][ T2829]  dump_stack+0x15/0x1b
[  467.804541][ T2829]  should_fail_ex+0x265/0x280
[  467.804582][ T2829]  should_fail+0xb/0x20
[  467.804600][ T2829]  should_fail_usercopy+0x1a/0x20
[  467.804621][ T2829]  _copy_to_user+0x20/0xa0
[  467.804772][ T2829]  rng_dev_read+0x3ef/0x740
[  467.804857][ T2829]  ? __pfx_rng_dev_read+0x10/0x10
[  467.804883][ T2829]  vfs_readv+0x3fb/0x690
[  467.804919][ T2829]  __x64_sys_preadv+0xfd/0x1c0
[  467.805016][ T2829]  x64_sys_call+0x282e/0x3000
[  467.805040][ T2829]  do_syscall_64+0xd2/0x200
[  467.805064][ T2829]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  467.805218][ T2829]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  467.805253][ T2829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.805276][ T2829] RIP: 0033:0x7f25b47df749
[  467.805303][ T2829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  467.805321][ T2829] RSP: 002b:00007f25b323f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  467.805339][ T2829] RAX: ffffffffffffffda RBX: 00007f25b4a35fa0 RCX: 00007f25b47df749
[  467.805351][ T2829] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  467.805362][ T2829] RBP: 00007f25b323f090 R08: 0000000000000000 R09: 0000000000000000
[  467.805384][ T2829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.805451][ T2829] R13: 00007f25b4a36038 R14: 00007f25b4a35fa0 R15: 00007ffcfa750388
[  467.805473][ T2829]  </TASK>
[  468.015552][ T2225] veth0_vlan: entered promiscuous mode
[  468.023701][ T2225] veth1_vlan: entered promiscuous mode
[  468.044113][ T2225] veth0_macvtap: entered promiscuous mode
[  468.052510][ T2225] veth1_macvtap: entered promiscuous mode
[  468.069030][ T2225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.069475][ T2840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8675'.
[  468.088208][ T2840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8675'.
[  468.096929][ T2225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.116471][ T4514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.125368][ T4514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.164178][ T2846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8678'.
[  468.174181][ T4514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.192566][ T4514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.202378][ T2846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8678'.
[  468.344065][ T2886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8687'.
[  468.454567][ T3400] tipc: Node number set to 2974518718
[  468.912366][ T2922] veth0_to_bridge: entered promiscuous mode
[  468.922262][ T2921] veth0_to_bridge: left promiscuous mode
[  468.995802][ T2927] 9pnet_fd: Insufficient options for proto=fd
[  469.078937][ T2929] 9pnet_fd: Insufficient options for proto=fd
[  469.094111][ T2929] FAULT_INJECTION: forcing a failure.
[  469.094111][ T2929] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  469.107424][ T2929] CPU: 0 UID: 0 PID: 2929 Comm: syz.3.8695 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  469.107486][ T2929] Tainted: [W]=WARN
[  469.107493][ T2929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  469.107503][ T2929] Call Trace:
[  469.107509][ T2929]  <TASK>
[  469.107515][ T2929]  __dump_stack+0x1d/0x30
[  469.107539][ T2929]  dump_stack_lvl+0xe8/0x140
[  469.107561][ T2929]  dump_stack+0x15/0x1b
[  469.107643][ T2929]  should_fail_ex+0x265/0x280
[  469.107680][ T2929]  should_fail_alloc_page+0xf2/0x100
[  469.107767][ T2929]  __alloc_frozen_pages_noprof+0xff/0x360
[  469.107831][ T2929]  alloc_pages_mpol+0xb3/0x260
[  469.107857][ T2929]  alloc_pages_noprof+0x90/0x130
[  469.107881][ T2929]  kimage_alloc_control_pages+0x2ec/0x7d0
[  469.107959][ T2929]  do_kexec_load+0x2c0/0x500
[  469.107983][ T2929]  __se_sys_kexec_load+0x134/0x160
[  469.108010][ T2929]  __x64_sys_kexec_load+0x55/0x70
[  469.108034][ T2929]  x64_sys_call+0x289c/0x3000
[  469.108112][ T2929]  do_syscall_64+0xd2/0x200
[  469.108198][ T2929]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  469.108356][ T2929]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  469.108389][ T2929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.108411][ T2929] RIP: 0033:0x7f85da11f749
[  469.108427][ T2929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.108448][ T2929] RSP: 002b:00007f85d8b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  469.108469][ T2929] RAX: ffffffffffffffda RBX: 00007f85da375fa0 RCX: 00007f85da11f749
[  469.108487][ T2929] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000
[  469.108499][ T2929] RBP: 00007f85d8b87090 R08: 0000000000000000 R09: 0000000000000000
[  469.108510][ T2929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.108594][ T2929] R13: 00007f85da376038 R14: 00007f85da375fa0 R15: 00007fff21e5fed8
[  469.108615][ T2929]  </TASK>
[  469.108623][ T2929] kexec: Could not allocate control_code_buffer
[  469.208338][ T3400] tipc: Node number set to 4291320694
[  469.383572][ T2938] pimreg: entered allmulticast mode
[  469.390793][ T2938] pimreg: left allmulticast mode
[  469.600668][ T2974] FAULT_INJECTION: forcing a failure.
[  469.600668][ T2974] name failslab, interval 1, probability 0, space 0, times 0
[  469.613320][ T2974] CPU: 1 UID: 0 PID: 2974 Comm: syz.7.8708 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  469.613382][ T2974] Tainted: [W]=WARN
[  469.613390][ T2974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  469.613403][ T2974] Call Trace:
[  469.613410][ T2974]  <TASK>
[  469.613418][ T2974]  __dump_stack+0x1d/0x30
[  469.613443][ T2974]  dump_stack_lvl+0xe8/0x140
[  469.613462][ T2974]  dump_stack+0x15/0x1b
[  469.613478][ T2974]  should_fail_ex+0x265/0x280
[  469.613617][ T2974]  should_failslab+0x8c/0xb0
[  469.613645][ T2974]  kmem_cache_alloc_noprof+0x50/0x480
[  469.613682][ T2974]  ? __send_signal_locked+0x154/0x760
[  469.613715][ T2974]  __send_signal_locked+0x154/0x760
[  469.613762][ T2974]  send_signal_locked+0x34e/0x3c0
[  469.613790][ T2974]  do_send_sig_info+0x9f/0xf0
[  469.613900][ T2974]  kill_pid_info_type+0x81/0xd0
[  469.613932][ T2974]  __se_sys_rt_sigqueueinfo+0x11f/0x3b0
[  469.613964][ T2974]  ? __fget_files+0x184/0x1c0
[  469.614064][ T2974]  __x64_sys_rt_sigqueueinfo+0x43/0x50
[  469.614093][ T2974]  x64_sys_call+0x9f8/0x3000
[  469.614119][ T2974]  do_syscall_64+0xd2/0x200
[  469.614142][ T2974]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  469.614180][ T2974]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  469.614211][ T2974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.614230][ T2974] RIP: 0033:0x7fa46ab9f749
[  469.614244][ T2974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.614342][ T2974] RSP: 002b:00007fa4695ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081
[  469.614363][ T2974] RAX: ffffffffffffffda RBX: 00007fa46adf5fa0 RCX: 00007fa46ab9f749
[  469.614377][ T2974] RDX: 0000200000000d40 RSI: 0000000000000031 RDI: 000000000000024a
[  469.614427][ T2974] RBP: 00007fa4695ff090 R08: 0000000000000000 R09: 0000000000000000
[  469.614482][ T2974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.614496][ T2974] R13: 00007fa46adf6038 R14: 00007fa46adf5fa0 R15: 00007ffc45992828
[  469.614515][ T2974]  </TASK>
[  469.819393][ T2999] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.8708' sets config #1
[  470.241588][ T3033] program syz.7.8717 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  470.243679][ T3032] serio: Serial port ptm0
[  471.109974][ T3052] FAULT_INJECTION: forcing a failure.
[  471.109974][ T3052] name failslab, interval 1, probability 0, space 0, times 0
[  471.122629][ T3052] CPU: 1 UID: 0 PID: 3052 Comm: syz.5.8725 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  471.122662][ T3052] Tainted: [W]=WARN
[  471.122750][ T3052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  471.122763][ T3052] Call Trace:
[  471.122769][ T3052]  <TASK>
[  471.122777][ T3052]  __dump_stack+0x1d/0x30
[  471.122801][ T3052]  dump_stack_lvl+0xe8/0x140
[  471.122823][ T3052]  dump_stack+0x15/0x1b
[  471.122841][ T3052]  should_fail_ex+0x265/0x280
[  471.122921][ T3052]  should_failslab+0x8c/0xb0
[  471.122946][ T3052]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  471.123052][ T3052]  ? __alloc_skb+0x101/0x320
[  471.123095][ T3052]  __alloc_skb+0x101/0x320
[  471.123125][ T3052]  netlink_alloc_large_skb+0xbf/0xf0
[  471.123194][ T3052]  netlink_sendmsg+0x3cf/0x6b0
[  471.123272][ T3052]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.123299][ T3052]  __sock_sendmsg+0x145/0x180
[  471.123323][ T3052]  ____sys_sendmsg+0x31e/0x4e0
[  471.123347][ T3052]  ___sys_sendmsg+0x17b/0x1d0
[  471.123448][ T3052]  __x64_sys_sendmsg+0xd4/0x160
[  471.123475][ T3052]  x64_sys_call+0x191e/0x3000
[  471.123498][ T3052]  do_syscall_64+0xd2/0x200
[  471.123551][ T3052]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  471.123580][ T3052]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  471.123692][ T3052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.123714][ T3052] RIP: 0033:0x7f25b47df749
[  471.123729][ T3052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.123747][ T3052] RSP: 002b:00007f25b323f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.123767][ T3052] RAX: ffffffffffffffda RBX: 00007f25b4a35fa0 RCX: 00007f25b47df749
[  471.123780][ T3052] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  471.123821][ T3052] RBP: 00007f25b323f090 R08: 0000000000000000 R09: 0000000000000000
[  471.123835][ T3052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.123847][ T3052] R13: 00007f25b4a36038 R14: 00007f25b4a35fa0 R15: 00007ffcfa750388
[  471.123867][ T3052]  </TASK>
[  472.377854][   T29] kauditd_printk_skb: 651 callbacks suppressed
[  472.377868][   T29] audit: type=1400 audit(1764188488.900:45079): avc:  denied  { ioctl } for  pid=3139 comm="syz.5.8739" path="socket:[107624]" dev="sockfs" ino=107624 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  472.422583][ T3142] audit: audit_backlog=65 > audit_backlog_limit=64
[  472.424518][ T3146] audit: audit_backlog=65 > audit_backlog_limit=64
[  472.429163][ T3142] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64
[  472.435615][ T3146] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64
[  472.443347][ T3142] audit: backlog limit exceeded
[  472.453046][ T3141] audit: audit_backlog=65 > audit_backlog_limit=64
[  472.455970][ T3146] audit: backlog limit exceeded
[  472.462437][ T3141] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64
[  472.462472][ T3141] audit: backlog limit exceeded
[  472.473240][ T3141] ip6tnl0: entered promiscuous mode
[  472.485221][ T3141] ip6tnl0: entered allmulticast mode
[  472.535703][ T3153] __nla_validate_parse: 7 callbacks suppressed
[  472.535717][ T3153] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8743'.
[  472.566674][ T3153] team1: entered promiscuous mode
[  472.571774][ T3153] team1: entered allmulticast mode
[  472.578322][ T3153] 8021q: adding VLAN 0 to HW filter on device team1
[  472.635723][ T3153] binfmt_misc: register: failed to install interpreter file ./file2
[  472.648013][ T3196] macvtap0: refused to change device tx_queue_len
[  472.773960][ T3226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8752'.
[  472.809041][ T3226] pim6reg: entered allmulticast mode
[  472.813714][ T3231] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  472.822069][ T3231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.834368][ T3231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.871573][ T3226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8752'.
[  472.915409][ T3233] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  472.923803][ T3233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.932508][ T3233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.131611][ T3287] macvtap0: refused to change device tx_queue_len
[  473.152487][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8763'.
[  473.193828][ T3294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8765'.
[  473.202816][ T3294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8765'.
[  473.211909][ T3294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8765'.
[  473.226453][ T3294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8765'.
[  473.235420][ T3294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8765'.
[  473.244554][ T3294] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8765'.
[  473.492154][ T3329] macvtap0: refused to change device tx_queue_len
[  474.065428][ T3389] 9pnet_fd: Insufficient options for proto=fd
[  474.723926][ T3475] serio: Serial port ptm0
[  474.919115][ T3500] vxcan1: tx address claim with dlc 0
[  475.534032][ T3400] IPVS: starting estimator thread 0...
[  475.542273][ T3530] ucma_write: process 662 (syz.7.8832) changed security contexts after opening file descriptor, this is not allowed.
[  475.620940][ T3532] IPVS: using max 5088 ests per chain, 254400 per kthread
[  475.705599][ T3548] pim6reg: entered allmulticast mode
[  475.813205][ T3566] 9pnet_fd: Insufficient options for proto=fd
[  476.010846][ T3600] FAULT_INJECTION: forcing a failure.
[  476.010846][ T3600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  476.024009][ T3600] CPU: 0 UID: 0 PID: 3600 Comm: syz.3.8856 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  476.024040][ T3600] Tainted: [W]=WARN
[  476.024047][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  476.024059][ T3600] Call Trace:
[  476.024066][ T3600]  <TASK>
[  476.024073][ T3600]  __dump_stack+0x1d/0x30
[  476.024295][ T3600]  dump_stack_lvl+0xe8/0x140
[  476.024317][ T3600]  dump_stack+0x15/0x1b
[  476.024379][ T3600]  should_fail_ex+0x265/0x280
[  476.024471][ T3600]  should_fail+0xb/0x20
[  476.024489][ T3600]  should_fail_usercopy+0x1a/0x20
[  476.024513][ T3600]  _copy_from_user+0x1c/0xb0
[  476.024541][ T3600]  ___sys_sendmsg+0xc1/0x1d0
[  476.024576][ T3600]  __x64_sys_sendmsg+0xd4/0x160
[  476.024641][ T3600]  x64_sys_call+0x191e/0x3000
[  476.024664][ T3600]  do_syscall_64+0xd2/0x200
[  476.024687][ T3600]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  476.024716][ T3600]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  476.024754][ T3600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.024825][ T3600] RIP: 0033:0x7f85da11f749
[  476.024840][ T3600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.024860][ T3600] RSP: 002b:00007f85d8b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.024878][ T3600] RAX: ffffffffffffffda RBX: 00007f85da375fa0 RCX: 00007f85da11f749
[  476.024891][ T3600] RDX: 0000000000048000 RSI: 00002000000003c0 RDI: 0000000000000003
[  476.024937][ T3600] RBP: 00007f85d8b87090 R08: 0000000000000000 R09: 0000000000000000
[  476.024948][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.024962][ T3600] R13: 00007f85da376038 R14: 00007f85da375fa0 R15: 00007fff21e5fed8
[  476.024983][ T3600]  </TASK>
[  476.250282][ T3611] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  476.258131][ T3611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.267016][ T3611] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.270036][ T3619] pim6reg: entered allmulticast mode
[  476.495636][ T3655] pim6reg: entered allmulticast mode
[  476.835730][ T3696] block device autoloading is deprecated and will be removed.
[  476.890828][ T3704] ip6gre1: entered promiscuous mode
[  477.563729][ T3747] IPv6: NLM_F_CREATE should be specified when creating new route
[  477.872123][ T3771] __nla_validate_parse: 24 callbacks suppressed
[  477.872140][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8898'.
[  478.000098][   T29] kauditd_printk_skb: 1171 callbacks suppressed
[  478.000113][   T29] audit: type=1326 audit(1764188494.523:46251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.029931][   T29] audit: type=1326 audit(1764188494.523:46252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.053470][   T29] audit: type=1326 audit(1764188494.533:46253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.053674][ T3800] FAULT_INJECTION: forcing a failure.
[  478.053674][ T3800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.076937][   T29] audit: type=1326 audit(1764188494.533:46254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.089920][ T3800] CPU: 0 UID: 0 PID: 3800 Comm: syz.7.8900 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  478.090024][ T3800] Tainted: [W]=WARN
[  478.090031][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  478.090043][ T3800] Call Trace:
[  478.090051][ T3800]  <TASK>
[  478.090124][ T3800]  __dump_stack+0x1d/0x30
[  478.090147][ T3800]  dump_stack_lvl+0xe8/0x140
[  478.090168][ T3800]  dump_stack+0x15/0x1b
[  478.090265][ T3800]  should_fail_ex+0x265/0x280
[  478.090300][ T3800]  should_fail+0xb/0x20
[  478.090329][ T3800]  should_fail_usercopy+0x1a/0x20
[  478.090351][ T3800]  strncpy_from_user+0x25/0x230
[  478.090436][ T3800]  ? kmem_cache_alloc_noprof+0x242/0x480
[  478.090465][ T3800]  ? getname_flags+0x80/0x3b0
[  478.090496][ T3800]  getname_flags+0xae/0x3b0
[  478.090581][ T3800]  __x64_sys_mknod+0x40/0x60
[  478.090610][ T3800]  x64_sys_call+0x2d56/0x3000
[  478.090633][ T3800]  do_syscall_64+0xd2/0x200
[  478.090729][ T3800]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  478.090758][ T3800]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  478.090793][ T3800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.090815][ T3800] RIP: 0033:0x7fa46ab9f749
[  478.090831][ T3800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.090899][ T3800] RSP: 002b:00007fa4695ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  478.090918][ T3800] RAX: ffffffffffffffda RBX: 00007fa46adf5fa0 RCX: 00007fa46ab9f749
[  478.090932][ T3800] RDX: 000000000000070e RSI: 100000000000600d RDI: 0000000000000000
[  478.090945][ T3800] RBP: 00007fa4695ff090 R08: 0000000000000000 R09: 0000000000000000
[  478.090958][ T3800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.090971][ T3800] R13: 00007fa46adf6038 R14: 00007fa46adf5fa0 R15: 00007ffc45992828
[  478.090991][ T3800]  </TASK>
[  478.297843][   T29] audit: type=1326 audit(1764188494.533:46255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.321366][   T29] audit: type=1326 audit(1764188494.563:46256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.344941][   T29] audit: type=1326 audit(1764188494.563:46257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.368478][   T29] audit: type=1326 audit(1764188494.563:46258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.392004][   T29] audit: type=1400 audit(1764188494.563:46259): avc:  denied  { write } for  pid=3799 comm="syz.7.8900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  478.411413][   T29] audit: type=1326 audit(1764188494.643:46260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3786 comm="syz.2.8899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  478.553367][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8904'.
[  478.570785][ T3818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8904'.
[  478.612906][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8906'.
[  478.621923][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8906'.
[  478.674162][ T3835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  478.681388][ T3835] IPv6: NLM_F_CREATE should be set when creating new route
[  478.868173][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8917'.
[  478.905547][ T3856] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8917'.
[  478.987507][ T3868] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  478.995203][ T3868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.005205][ T3877] FAULT_INJECTION: forcing a failure.
[  479.005205][ T3877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.010140][ T3868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.018374][ T3877] CPU: 0 UID: 0 PID: 3877 Comm: syz.5.8926 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  479.018408][ T3877] Tainted: [W]=WARN
[  479.018415][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  479.018428][ T3877] Call Trace:
[  479.018435][ T3877]  <TASK>
[  479.018442][ T3877]  __dump_stack+0x1d/0x30
[  479.018493][ T3877]  dump_stack_lvl+0xe8/0x140
[  479.018521][ T3877]  dump_stack+0x15/0x1b
[  479.018539][ T3877]  should_fail_ex+0x265/0x280
[  479.018646][ T3877]  should_fail+0xb/0x20
[  479.018664][ T3877]  should_fail_usercopy+0x1a/0x20
[  479.018686][ T3877]  strncpy_from_user+0x25/0x230
[  479.018713][ T3877]  ? __kmalloc_cache_noprof+0x249/0x4a0
[  479.018802][ T3877]  __se_sys_memfd_create+0x1ff/0x590
[  479.018829][ T3877]  __x64_sys_memfd_create+0x31/0x40
[  479.018854][ T3877]  x64_sys_call+0x2ac2/0x3000
[  479.018877][ T3877]  do_syscall_64+0xd2/0x200
[  479.018957][ T3877]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  479.019036][ T3877]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  479.019118][ T3877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.019141][ T3877] RIP: 0033:0x7f25b47df749
[  479.019156][ T3877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.019179][ T3877] RSP: 002b:00007f25b323ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  479.019242][ T3877] RAX: ffffffffffffffda RBX: 0000000000000a02 RCX: 00007f25b47df749
[  479.019254][ T3877] RDX: 00007f25b323eef0 RSI: 0000000000000000 RDI: 00007f25b4864960
[  479.019267][ T3877] RBP: 0000200000003640 R08: 00007f25b323ebb7 R09: 00007f25b323ee40
[  479.019280][ T3877] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000002380
[  479.019294][ T3877] R13: 00007f25b323eef0 R14: 00007f25b323eeb0 R15: 0000200000000000
[  479.019314][ T3877]  </TASK>
[  479.224289][ T3878] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8925'.
[  479.273172][ T3888] netlink: 4 bytes leftover after parsing attributes in process `+}t��5�n����'.
[  479.311465][ T3895] FAULT_INJECTION: forcing a failure.
[  479.311465][ T3895] name failslab, interval 1, probability 0, space 0, times 0
[  479.324147][ T3895] CPU: 0 UID: 0 PID: 3895 Comm: syz.5.8931 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  479.324177][ T3895] Tainted: [W]=WARN
[  479.324183][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  479.324236][ T3895] Call Trace:
[  479.324242][ T3895]  <TASK>
[  479.324248][ T3895]  __dump_stack+0x1d/0x30
[  479.324318][ T3895]  dump_stack_lvl+0xe8/0x140
[  479.324339][ T3895]  dump_stack+0x15/0x1b
[  479.324358][ T3895]  should_fail_ex+0x265/0x280
[  479.324390][ T3895]  should_failslab+0x8c/0xb0
[  479.324457][ T3895]  kmem_cache_alloc_noprof+0x50/0x480
[  479.324484][ T3895]  ? flock_lock_inode+0x135/0xf60
[  479.324515][ T3895]  flock_lock_inode+0x135/0xf60
[  479.324556][ T3895]  ? file_has_perm+0x35c/0x3a0
[  479.324586][ T3895]  locks_lock_inode_wait+0x6f/0x2a0
[  479.324612][ T3895]  ? selinux_file_lock+0x38/0x50
[  479.324677][ T3895]  __se_sys_flock+0x2f1/0x3b0
[  479.324751][ T3895]  __x64_sys_flock+0x31/0x40
[  479.324774][ T3895]  x64_sys_call+0x1e5a/0x3000
[  479.324824][ T3895]  do_syscall_64+0xd2/0x200
[  479.324848][ T3895]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  479.324895][ T3895]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  479.324925][ T3895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.324971][ T3895] RIP: 0033:0x7f25b47df749
[  479.324986][ T3895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.325050][ T3895] RSP: 002b:00007f25b323f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049
[  479.325070][ T3895] RAX: ffffffffffffffda RBX: 00007f25b4a35fa0 RCX: 00007f25b47df749
[  479.325085][ T3895] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005
[  479.325098][ T3895] RBP: 00007f25b323f090 R08: 0000000000000000 R09: 0000000000000000
[  479.325111][ T3895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.325124][ T3895] R13: 00007f25b4a36038 R14: 00007f25b4a35fa0 R15: 00007ffcfa750388
[  479.325148][ T3895]  </TASK>
[  479.565907][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8933'.
[  479.578452][ T3901] pim6reg: entered allmulticast mode
[  479.767385][ T3912] macvtap0: refused to change device tx_queue_len
[  480.391029][ T3944] netlink: 'syz.7.8939': attribute type 4 has an invalid length.
[  480.411326][ T3944] netlink: 'syz.7.8939': attribute type 4 has an invalid length.
[  480.440659][ T3960] netlink: 'syz.2.8942': attribute type 10 has an invalid length.
[  480.449695][ T3960] batman_adv: batadv0: Adding interface: veth1_vlan
[  480.456291][ T3960] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  480.492998][ T3960] batman_adv: batadv0: Interface activated: veth1_vlan
[  480.692893][ T3986] FAULT_INJECTION: forcing a failure.
[  480.692893][ T3986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.706010][ T3986] CPU: 0 UID: 0 PID: 3986 Comm: syz.2.8947 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  480.706060][ T3986] Tainted: [W]=WARN
[  480.706067][ T3986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  480.706078][ T3986] Call Trace:
[  480.706085][ T3986]  <TASK>
[  480.706094][ T3986]  __dump_stack+0x1d/0x30
[  480.706188][ T3986]  dump_stack_lvl+0xe8/0x140
[  480.706211][ T3986]  dump_stack+0x15/0x1b
[  480.706232][ T3986]  should_fail_ex+0x265/0x280
[  480.706345][ T3986]  should_fail+0xb/0x20
[  480.706364][ T3986]  should_fail_usercopy+0x1a/0x20
[  480.706386][ T3986]  _copy_from_user+0x1c/0xb0
[  480.706479][ T3986]  ___sys_sendmsg+0xc1/0x1d0
[  480.706516][ T3986]  __x64_sys_sendmsg+0xd4/0x160
[  480.706539][ T3986]  x64_sys_call+0x191e/0x3000
[  480.706560][ T3986]  do_syscall_64+0xd2/0x200
[  480.706593][ T3986]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  480.706681][ T3986]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  480.706713][ T3986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.706769][ T3986] RIP: 0033:0x7fd200d3f749
[  480.706786][ T3986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.706832][ T3986] RSP: 002b:00007fd1ff79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  480.706853][ T3986] RAX: ffffffffffffffda RBX: 00007fd200f95fa0 RCX: 00007fd200d3f749
[  480.706865][ T3986] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009
[  480.706877][ T3986] RBP: 00007fd1ff79f090 R08: 0000000000000000 R09: 0000000000000000
[  480.706890][ T3986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.706918][ T3986] R13: 00007fd200f96038 R14: 00007fd200f95fa0 R15: 00007ffe7dd832f8
[  480.706936][ T3986]  </TASK>
[  481.310101][ T4027] netlink: zone id is out of range
[  481.315224][ T4027] netlink: zone id is out of range
[  481.320885][ T4027] netlink: zone id is out of range
[  481.325986][ T4027] netlink: zone id is out of range
[  481.331229][ T4027] netlink: zone id is out of range
[  481.336323][ T4027] netlink: zone id is out of range
[  481.341475][ T4027] netlink: zone id is out of range
[  481.346693][ T4027] netlink: zone id is out of range
[  481.351972][ T4027] netlink: del zone limit has 8 unknown bytes
[  481.469902][ T4053] FAULT_INJECTION: forcing a failure.
[  481.469902][ T4053] name failslab, interval 1, probability 0, space 0, times 0
[  481.482751][ T4053] CPU: 0 UID: 0 PID: 4053 Comm: syz.2.8973 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  481.482788][ T4053] Tainted: [W]=WARN
[  481.482793][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  481.482813][ T4053] Call Trace:
[  481.482820][ T4053]  <TASK>
[  481.482828][ T4053]  __dump_stack+0x1d/0x30
[  481.482854][ T4053]  dump_stack_lvl+0xe8/0x140
[  481.482944][ T4053]  dump_stack+0x15/0x1b
[  481.483029][ T4053]  should_fail_ex+0x265/0x280
[  481.483058][ T4053]  ? audit_log_d_path+0x8d/0x150
[  481.483077][ T4053]  should_failslab+0x8c/0xb0
[  481.483135][ T4053]  __kmalloc_cache_noprof+0x4c/0x4a0
[  481.483163][ T4053]  audit_log_d_path+0x8d/0x150
[  481.483262][ T4053]  audit_log_d_path_exe+0x42/0x70
[  481.483281][ T4053]  audit_log_task+0x1e9/0x250
[  481.483309][ T4053]  ? kstrtouint+0x76/0xc0
[  481.483335][ T4053]  audit_seccomp+0x61/0x100
[  481.483481][ T4053]  ? __seccomp_filter+0x82d/0x1250
[  481.483504][ T4053]  __seccomp_filter+0x83e/0x1250
[  481.483579][ T4053]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  481.483605][ T4053]  ? vfs_write+0x7e8/0x960
[  481.483654][ T4053]  __secure_computing+0x82/0x150
[  481.483677][ T4053]  syscall_trace_enter+0xcf/0x1e0
[  481.483701][ T4053]  do_syscall_64+0xac/0x200
[  481.483719][ T4053]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  481.483749][ T4053]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  481.483845][ T4053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.483863][ T4053] RIP: 0033:0x7fd200d3f749
[  481.483876][ T4053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.483910][ T4053] RSP: 002b:00007fd1ff79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  481.483928][ T4053] RAX: ffffffffffffffda RBX: 00007fd200f95fa0 RCX: 00007fd200d3f749
[  481.483939][ T4053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  481.483950][ T4053] RBP: 00007fd1ff79f090 R08: 0000000000000000 R09: 0000000000000000
[  481.483960][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.483971][ T4053] R13: 00007fd200f96038 R14: 00007fd200f95fa0 R15: 00007ffe7dd832f8
[  481.483987][ T4053]  </TASK>
[  481.528438][ T4046] netlink: 'syz.0.8971': attribute type 4 has an invalid length.
[  481.573198][ T4060] serio: Serial port ptm0
[  481.609045][ T4046] .`: renamed from bond0 (while UP)
[  481.722306][ T4063] netlink: 'syz.3.8970': attribute type 4 has an invalid length.
[  481.754579][ T4054] netlink: 'syz.3.8970': attribute type 4 has an invalid length.
[  482.629238][ T4131] netlink: 'syz.3.8996': attribute type 7 has an invalid length.
[  482.725077][ T4141] serio: Serial port ptm0
[  483.010987][   T29] kauditd_printk_skb: 2226 callbacks suppressed
[  483.011002][   T29] audit: type=1326 audit(1764188499.545:48487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.043084][ T4159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.043567][   T29] audit: type=1326 audit(1764188499.545:48488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.052073][ T4159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.074918][   T29] audit: type=1326 audit(1764188499.545:48489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.103390][ T4159] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  483.106031][   T29] audit: type=1326 audit(1764188499.545:48490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.129858][ T4184] __nla_validate_parse: 21 callbacks suppressed
[  483.129932][ T4184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9017'.
[  483.139783][   T29] audit: type=1326 audit(1764188499.545:48491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.178373][   T29] audit: type=1326 audit(1764188499.545:48492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.186252][ T4184] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9017'.
[  483.201893][   T29] audit: type=1326 audit(1764188499.545:48493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.201923][   T29] audit: type=1326 audit(1764188499.545:48494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.257750][   T29] audit: type=1326 audit(1764188499.545:48495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.281081][   T29] audit: type=1326 audit(1764188499.545:48496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4171 comm="syz.5.9014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25b47df749 code=0x7ffc0000
[  483.341927][ T4193] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  483.670037][ T4219] : renamed from veth0_to_bond (while UP)
[  484.294350][ T4256] FAULT_INJECTION: forcing a failure.
[  484.294350][ T4256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  484.307541][ T4256] CPU: 1 UID: 0 PID: 4256 Comm: syz.5.9032 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  484.307602][ T4256] Tainted: [W]=WARN
[  484.307609][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  484.307621][ T4256] Call Trace:
[  484.307628][ T4256]  <TASK>
[  484.307703][ T4256]  __dump_stack+0x1d/0x30
[  484.307728][ T4256]  dump_stack_lvl+0xe8/0x140
[  484.307774][ T4256]  dump_stack+0x15/0x1b
[  484.307790][ T4256]  should_fail_ex+0x265/0x280
[  484.307869][ T4256]  should_fail+0xb/0x20
[  484.307884][ T4256]  should_fail_usercopy+0x1a/0x20
[  484.307903][ T4256]  strncpy_from_user+0x25/0x230
[  484.307976][ T4256]  ? kmem_cache_alloc_noprof+0x242/0x480
[  484.308003][ T4256]  ? getname_flags+0x80/0x3b0
[  484.308030][ T4256]  getname_flags+0xae/0x3b0
[  484.308127][ T4256]  getname_uflags+0x21/0x30
[  484.308156][ T4256]  io_linkat_prep+0x105/0x1b0
[  484.308189][ T4256]  io_submit_sqes+0x5ef/0x1060
[  484.308270][ T4256]  __se_sys_io_uring_enter+0x1c1/0x1b70
[  484.308321][ T4256]  ? trie_lookup_elem+0x3c8/0x430
[  484.308398][ T4256]  ? plist_check_list+0x1e4/0x210
[  484.308424][ T4256]  ? perf_cgroup_switch+0x10c/0x480
[  484.308460][ T4256]  ? __rcu_read_unlock+0x4f/0x70
[  484.308525][ T4256]  ? bpf_trace_run2+0x124/0x1c0
[  484.308550][ T4256]  ? _raw_spin_unlock+0x26/0x50
[  484.308583][ T4256]  ? __bpf_trace_sys_enter+0x10/0x30
[  484.308731][ T4256]  __x64_sys_io_uring_enter+0x78/0x90
[  484.308763][ T4256]  x64_sys_call+0x2df0/0x3000
[  484.308860][ T4256]  do_syscall_64+0xd2/0x200
[  484.308881][ T4256]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  484.308911][ T4256]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  484.308964][ T4256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.309010][ T4256] RIP: 0033:0x7f25b47df749
[  484.309027][ T4256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.309045][ T4256] RSP: 002b:00007f25b323f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  484.309065][ T4256] RAX: ffffffffffffffda RBX: 00007f25b4a35fa0 RCX: 00007f25b47df749
[  484.309080][ T4256] RDX: 0000000000000217 RSI: 0000000000005fdd RDI: 0000000000000003
[  484.309156][ T4256] RBP: 00007f25b323f090 R08: 0000000000000000 R09: 0000000000000000
[  484.309170][ T4256] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000001
[  484.309185][ T4256] R13: 00007f25b4a36038 R14: 00007f25b4a35fa0 R15: 00007ffcfa750388
[  484.309203][ T4256]  </TASK>
[  484.639602][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9035'.
[  484.664179][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9035'.
[  484.700782][ T4268] serio: Serial port ptm0
[  484.732049][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.739731][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.748323][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.755798][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.928602][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9051'.
[  484.937604][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9051'.
[  484.947038][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9051'.
[  484.956057][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9051'.
[  484.960287][ T4314] FAULT_INJECTION: forcing a failure.
[  484.960287][ T4314] name failslab, interval 1, probability 0, space 0, times 0
[  484.977733][ T4314] CPU: 0 UID: 0 PID: 4314 Comm: syz.7.9053 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  484.977793][ T4314] Tainted: [W]=WARN
[  484.977800][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  484.977812][ T4314] Call Trace:
[  484.977817][ T4314]  <TASK>
[  484.977823][ T4314]  __dump_stack+0x1d/0x30
[  484.977847][ T4314]  dump_stack_lvl+0xe8/0x140
[  484.977870][ T4314]  dump_stack+0x15/0x1b
[  484.977947][ T4314]  should_fail_ex+0x265/0x280
[  484.977978][ T4314]  should_failslab+0x8c/0xb0
[  484.978008][ T4314]  kmem_cache_alloc_noprof+0x50/0x480
[  484.978111][ T4314]  ? getname_flags+0x80/0x3b0
[  484.978229][ T4314]  getname_flags+0x80/0x3b0
[  484.978254][ T4314]  __x64_sys_mkdir+0x33/0x50
[  484.978279][ T4314]  x64_sys_call+0x2db9/0x3000
[  484.978299][ T4314]  do_syscall_64+0xd2/0x200
[  484.978340][ T4314]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  484.978450][ T4314]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  484.978481][ T4314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.978505][ T4314] RIP: 0033:0x7fa46ab9f749
[  484.978521][ T4314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  484.978539][ T4314] RSP: 002b:00007fa4695ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  484.978590][ T4314] RAX: ffffffffffffffda RBX: 00007fa46adf5fa0 RCX: 00007fa46ab9f749
[  484.978737][ T4314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  484.978819][ T4314] RBP: 00007fa4695ff090 R08: 0000000000000000 R09: 0000000000000000
[  484.978833][ T4314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.978847][ T4314] R13: 00007fa46adf6038 R14: 00007fa46adf5fa0 R15: 00007ffc45992828
[  484.978866][ T4314]  </TASK>
[  485.450051][ T4343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  485.457292][ T4343] IPv6: NLM_F_CREATE should be set when creating new route
[  485.562776][ T4351] IPv6: addrconf: prefix option has invalid lifetime
[  485.647857][ T4359] FAULT_INJECTION: forcing a failure.
[  485.647857][ T4359] name failslab, interval 1, probability 0, space 0, times 0
[  485.660579][ T4359] CPU: 0 UID: 0 PID: 4359 Comm: syz.7.9060 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  485.660613][ T4359] Tainted: [W]=WARN
[  485.660642][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  485.660653][ T4359] Call Trace:
[  485.660662][ T4359]  <TASK>
[  485.660668][ T4359]  __dump_stack+0x1d/0x30
[  485.660688][ T4359]  dump_stack_lvl+0xe8/0x140
[  485.660789][ T4359]  dump_stack+0x15/0x1b
[  485.660804][ T4359]  should_fail_ex+0x265/0x280
[  485.660888][ T4359]  should_failslab+0x8c/0xb0
[  485.660917][ T4359]  kmem_cache_alloc_noprof+0x50/0x480
[  485.661002][ T4359]  ? audit_log_start+0x342/0x720
[  485.661095][ T4359]  ? rep_movs_alternative+0x4a/0x90
[  485.661122][ T4359]  audit_log_start+0x342/0x720
[  485.661200][ T4359]  audit_seccomp+0x48/0x100
[  485.661232][ T4359]  ? __seccomp_filter+0x82d/0x1250
[  485.661257][ T4359]  __seccomp_filter+0x83e/0x1250
[  485.661334][ T4359]  ? memdup_user+0x7d/0xd0
[  485.661359][ T4359]  ? memdup_user+0x7d/0xd0
[  485.661451][ T4359]  ? __traceiter_kfree+0x2e/0x50
[  485.661474][ T4359]  __secure_computing+0x82/0x150
[  485.661497][ T4359]  syscall_trace_enter+0xcf/0x1e0
[  485.661609][ T4359]  do_syscall_64+0xac/0x200
[  485.661628][ T4359]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  485.661651][ T4359]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  485.661732][ T4359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.661756][ T4359] RIP: 0033:0x7fa46ab9e15c
[  485.661771][ T4359] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  485.661865][ T4359] RSP: 002b:00007fa4695ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  485.661887][ T4359] RAX: ffffffffffffffda RBX: 00007fa46adf5fa0 RCX: 00007fa46ab9e15c
[  485.661899][ T4359] RDX: 000000000000000f RSI: 00007fa4695ff0a0 RDI: 0000000000000006
[  485.661912][ T4359] RBP: 00007fa4695ff090 R08: 0000000000000000 R09: 0000000000000000
[  485.661926][ T4359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  485.661939][ T4359] R13: 00007fa46adf6038 R14: 00007fa46adf5fa0 R15: 00007ffc45992828
[  485.661957][ T4359]  </TASK>
[  485.930978][ T4363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9061'.
[  485.980847][ T4375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9066'.
[  486.055065][   T36] hid_parser_main: 8 callbacks suppressed
[  486.055087][   T36] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  486.068348][   T36] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  486.075804][   T36] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  486.083172][   T36] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  486.090676][   T36] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  486.098091][   T36] hid-generic 0003:0004:0000.0004: item fetching failed at offset 8/18
[  486.107914][   T36] hid-generic 0003:0004:0000.0004: probe with driver hid-generic failed with error -22
[  486.170445][ T4392] ip6tnl0: left promiscuous mode
[  486.175536][ T4392] ip6tnl0: left allmulticast mode
[  486.188420][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.195629][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.243854][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.255288][ T4392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.300872][ T6996] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  486.321316][ T6996] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  486.347284][ T4401] FAULT_INJECTION: forcing a failure.
[  486.347284][ T4401] name failslab, interval 1, probability 0, space 0, times 0
[  486.349912][ T6996] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  486.359991][ T4401] CPU: 0 UID: 0 PID: 4401 Comm: syz.0.9070 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  486.360069][ T4401] Tainted: [W]=WARN
[  486.360075][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  486.360086][ T4401] Call Trace:
[  486.360092][ T4401]  <TASK>
[  486.360172][ T4401]  __dump_stack+0x1d/0x30
[  486.360197][ T4401]  dump_stack_lvl+0xe8/0x140
[  486.360275][ T4401]  dump_stack+0x15/0x1b
[  486.360294][ T4401]  should_fail_ex+0x265/0x280
[  486.360381][ T4401]  should_failslab+0x8c/0xb0
[  486.360410][ T4401]  kmem_cache_alloc_noprof+0x50/0x480
[  486.360438][ T4401]  ? alloc_empty_file+0x76/0x200
[  486.360493][ T4401]  alloc_empty_file+0x76/0x200
[  486.360543][ T4401]  path_openat+0x68/0x2170
[  486.360613][ T4401]  ? _parse_integer_limit+0x170/0x190
[  486.360649][ T4401]  ? kstrtoull+0x111/0x140
[  486.360710][ T4401]  ? kstrtouint+0x76/0xc0
[  486.360742][ T4401]  do_filp_open+0x109/0x230
[  486.360772][ T4401]  do_sys_openat2+0xa6/0x110
[  486.360794][ T4401]  __x64_sys_openat+0xf2/0x120
[  486.360935][ T4401]  x64_sys_call+0x2eab/0x3000
[  486.360957][ T4401]  do_syscall_64+0xd2/0x200
[  486.360978][ T4401]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  486.361007][ T4401]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  486.361064][ T4401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.361087][ T4401] RIP: 0033:0x7feedf29f749
[  486.361108][ T4401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.361127][ T4401] RSP: 002b:00007feeddcbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  486.361146][ T4401] RAX: ffffffffffffffda RBX: 00007feedf4f6180 RCX: 00007feedf29f749
[  486.361159][ T4401] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  486.361172][ T4401] RBP: 00007feeddcbd090 R08: 0000000000000000 R09: 0000000000000000
[  486.361185][ T4401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.361198][ T4401] R13: 00007feedf4f6218 R14: 00007feedf4f6180 R15: 00007ffcb0c34c48
[  486.361218][ T4401]  </TASK>
[  486.587917][ T6996] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.364379][ T4545] netlink: 'syz.5.9102': attribute type 4 has an invalid length.
[  487.396527][ T4545] .`: renamed from bond0 (while UP)
[  487.552000][ T4578] smc: net device ip_vti0 applied user defined pnetid SYZ0
[  487.563300][ T4566] 9pnet_fd: Insufficient options for proto=fd
[  487.590190][ T4599] xt_hashlimit: size too large, truncated to 1048576
[  487.610718][ T4603] IPv6: NLM_F_CREATE should be specified when creating new route
[  487.759674][ T4622] FAULT_INJECTION: forcing a failure.
[  487.759674][ T4622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  487.772850][ T4622] CPU: 1 UID: 0 PID: 4622 Comm: syz.7.9115 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  487.772920][ T4622] Tainted: [W]=WARN
[  487.772927][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  487.772937][ T4622] Call Trace:
[  487.772943][ T4622]  <TASK>
[  487.772950][ T4622]  __dump_stack+0x1d/0x30
[  487.772974][ T4622]  dump_stack_lvl+0xe8/0x140
[  487.773041][ T4622]  dump_stack+0x15/0x1b
[  487.773058][ T4622]  should_fail_ex+0x265/0x280
[  487.773093][ T4622]  should_fail+0xb/0x20
[  487.773176][ T4622]  should_fail_usercopy+0x1a/0x20
[  487.773200][ T4622]  fpu__restore_sig+0x12d/0xaa0
[  487.773255][ T4622]  ? should_fail_ex+0xdb/0x280
[  487.773333][ T4622]  __ia32_sys_rt_sigreturn+0x29f/0x350
[  487.773353][ T4622]  x64_sys_call+0x2d4b/0x3000
[  487.773425][ T4622]  do_syscall_64+0xd2/0x200
[  487.773438][ T4622]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  487.773488][ T4622]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  487.773507][ T4622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.773519][ T4622] RIP: 0033:0x7fa46ab9f747
[  487.773552][ T4622] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  487.773624][ T4622] RSP: 002b:00007fa4695ff038 EFLAGS: 00000246
[  487.773635][ T4622] RAX: 0000000000000116 RBX: 00007fa46adf5fa0 RCX: 00007fa46ab9f749
[  487.773648][ T4622] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005
[  487.773661][ T4622] RBP: 00007fa4695ff090 R08: 0000000000000000 R09: 0000000000000000
[  487.773674][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  487.773684][ T4622] R13: 00007fa46adf6038 R14: 00007fa46adf5fa0 R15: 00007ffc45992828
[  487.773696][ T4622]  </TASK>
[  488.044825][   T29] kauditd_printk_skb: 324 callbacks suppressed
[  488.044854][   T29] audit: type=1400 audit(1764188504.538:48819): avc:  denied  { create } for  pid=4628 comm="syz.7.9119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  488.070766][   T29] audit: type=1400 audit(1764188504.538:48820): avc:  denied  { write } for  pid=4628 comm="syz.7.9119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  488.190203][   T29] audit: type=1400 audit(1764188504.678:48821): avc:  denied  { ioctl } for  pid=4628 comm="syz.7.9119" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  488.238294][ T4639] netlink: 'syz.3.9122': attribute type 4 has an invalid length.
[  488.246117][ T4639] __nla_validate_parse: 11 callbacks suppressed
[  488.246131][ T4639] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9122'.
[  488.265009][   T29] audit: type=1326 audit(1764188504.788:48822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.2.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  488.288570][   T29] audit: type=1326 audit(1764188504.788:48823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.2.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  488.312092][   T29] audit: type=1326 audit(1764188504.788:48824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.2.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  488.335695][   T29] audit: type=1326 audit(1764188504.788:48825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.2.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  488.351844][ T4639] .`: renamed from bond0
[  488.359220][   T29] audit: type=1326 audit(1764188504.788:48826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.2.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  488.387021][   T29] audit: type=1326 audit(1764188504.788:48827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.2.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  488.410742][   T29] audit: type=1326 audit(1764188504.788:48828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4640 comm="syz.2.9123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd200d3f749 code=0x7ffc0000
[  489.456587][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9149'.
[  489.465652][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9149'.
[  489.905908][ T4778] serio: Serial port ptm1
[  490.195897][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9163'.
[  490.212172][ T4789] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9163'.
[  490.868277][ T4844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9182'.
[  491.011552][ T4867] ==================================================================
[  491.019651][ T4867] BUG: KCSAN: data-race in __dentry_kill / fast_dput
[  491.026344][ T4867] 
[  491.028655][ T4867] write to 0xffff888119e7fa90 of 8 bytes by task 4870 on cpu 1:
[  491.036268][ T4867]  __dentry_kill+0x142/0x4b0
[  491.040859][ T4867]  dput+0x5e/0xd0
[  491.044495][ T4867]  step_into+0x58c/0x7f0
[  491.048732][ T4867]  path_openat+0x13e8/0x2170
[  491.053321][ T4867]  do_filp_open+0x109/0x230
[  491.057822][ T4867]  io_openat2+0x272/0x390
[  491.062151][ T4867]  io_openat+0x1b/0x30
[  491.066214][ T4867]  __io_issue_sqe+0xfe/0x2e0
[  491.070797][ T4867]  io_issue_sqe+0x56/0xa80
[  491.075213][ T4867]  io_wq_submit_work+0x3f7/0x5f0
[  491.080150][ T4867]  io_worker_handle_work+0x44e/0x9b0
[  491.085439][ T4867]  io_wq_worker+0x22e/0x860
[  491.089938][ T4867]  ret_from_fork+0x122/0x1b0
[  491.094515][ T4867]  ret_from_fork_asm+0x1a/0x30
[  491.099267][ T4867] 
[  491.101571][ T4867] read to 0xffff888119e7fa90 of 8 bytes by task 4867 on cpu 0:
[  491.109094][ T4867]  fast_dput+0x5f/0x2c0
[  491.113237][ T4867]  dput+0x24/0xd0
[  491.116860][ T4867]  step_into+0x58c/0x7f0
[  491.121090][ T4867]  path_openat+0x13e8/0x2170
[  491.125659][ T4867]  do_filp_open+0x109/0x230
[  491.130142][ T4867]  io_openat2+0x272/0x390
[  491.134454][ T4867]  io_openat+0x1b/0x30
[  491.138505][ T4867]  __io_issue_sqe+0xfe/0x2e0
[  491.143083][ T4867]  io_issue_sqe+0x56/0xa80
[  491.147491][ T4867]  io_wq_submit_work+0x3f7/0x5f0
[  491.152414][ T4867]  io_worker_handle_work+0x44e/0x9b0
[  491.157688][ T4867]  io_wq_worker+0x22e/0x860
[  491.162176][ T4867]  ret_from_fork+0x122/0x1b0
[  491.166749][ T4867]  ret_from_fork_asm+0x1a/0x30
[  491.171496][ T4867] 
[  491.173798][ T4867] value changed: 0xffff888237a0e7d0 -> 0x0000000000000000
[  491.180886][ T4867] 
[  491.183192][ T4867] Reported by Kernel Concurrency Sanitizer on:
[  491.189326][ T4867] CPU: 0 UID: 0 PID: 4867 Comm: iou-wrk-4865 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  491.200764][ T4867] Tainted: [W]=WARN
[  491.204541][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  491.214577][ T4867] ==================================================================
[  491.333086][ T4865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9188'.