last executing test programs: 4m3.394605338s ago: executing program 0 (id=1939): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006311210000000000851000f901000000850000000800000095000000000000009500000e00000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r6}, 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0xfe, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x8002, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x8, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x2, 0x8000000000000000, 0x80}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000140000000010800024000000017140000001100c39f8e"], 0xd8}}, 0x4000040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14142d50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84006ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4m2.49800748s ago: executing program 0 (id=1949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffa, 0x4) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1000001, 0x40000331}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 4m2.453407564s ago: executing program 0 (id=1950): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket(0x1e, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x23) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002480)=@newtfilter={0x3784, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x10, 0xb}, {0x0, 0xffe0}, {0x6, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3750, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x3724, 0x2, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x1, 0xf, 0x9}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x745}, @TCA_IFE_DMAC={0xa}]}, {0x2d, 0x6, "f853b4f6d4a2357afe8971e1c2d6f814537c8b2ab09941b27df0a69ff0c146716458c9220fb8fb7042"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x12c, 0x11, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10}]}, {0xed, 0x6, "c3b1dd1989eb31fb6599d1d7188fd0e015230311053a337573a738eed1032ce49cd305af14639e56c68f111e3ff38e3bd3aada5656b35a833ffe109595a768e4eaab89a1120b9e0e8ad178d696dfc6947ccd0e3a7582eb558ad0bee81a38b80ae93b7df8f88a92de98b4e990a2b6f8dc1440f1d9c920a8a0c925f5079887c09dd54f0c5dfca8fa23d778865a28e3254cac3a20cd45e4a141e14e2ee116c95c613cb1968886bf8d9ce74e11a5423d4b630cc6ba384e9cdee0c9b87699c5f8fda8e688a25edd25cf6a5fd641f374c02a47a2b1c824a21803f8fa0b506690b31d873e835351b0edf7e2b0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x25c, 0x10, 0x0, 0x0, {{0x7}, {0x13c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xb7}, @TCA_IPT_TARG={0x126, 0x6, {0x1, 'nat\x00', 0x66, 0x6, "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"}}, @TCA_IPT_HOOK={0x8}]}, {0xfa, 0x6, "747581c0d8b4c9134e8968f2d782c25fbc734e5d1257f139d67d4763caa91e136d1dc732ee8648ac0b72320462e969b6d2cb589eab4aef0d3612821094e7bdc8389db307f740c888367cb7cb9cc005b99828afd4ed901d73d518f0cc18ae7f0f2800bfb44d0cf07cece5f4ad5a4c409c8d80059ca35be04e297c7aeb0fb90f949126d7123803cbe38ef57360547a54914e2cad259e0981f0a307979168673a900b57ab6f5ee89996be81f0ebeb22d8c8cdb58f4ed7b73f6eb5c41a0e235b997d5917eb10c7829b6eeca8abeb1c406cb5f3f294e5d4001570510aed26e842a0069d8cba03d19f5dab3b8343da42ce7d1714d1bb0ce6bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_mirred={0x198, 0xe, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0x6, 0x1, 0x200}, 0x5, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x20000000, 0x1b9, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1a, 0x800, 0x0, 0x82}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x4, 0x6, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0xfffffffa, 0x0, 0x101, 0x7}, 0x4, r9}}]}, {0xc9, 0x6, "4cf7d301be206693b4e7a3170a7c34326d9aed1fa49b21812671c5fb23e63b0fa4b5b3eee5f3e096731e722cf51328c67da33a973a4c9c8af639cc53ea58ad2efa0b4959458caba214a3abd1e00d52fec867d9e86ba4edc54990a4250817911680467864cacc2599e63d7700dcb85fa51232a0b9961dd24f9a44ac4b1f87a51d3c94d00fa6db2f9bfd6853b6c586498de93a6ff3f1572e9e5e8310f184a34b5048532b83430f02ed33f3f6130dd9b4f6b4f758c57f00ebeb471d8507208f521c07ed1a1ec5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x160, 0x7, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="8dd8e988d508"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xd, 0x10000000, 0xd886, 0x9}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0xd3, 0x6, "ebbd83335e6977db18ce110927aa8e9aadc5ae09963dcb21cf3a4d9cedbb494e2a289f584901b4fd511cab05e83c5d0eeb481f96399c1a4b88a18134c5602f704042386df407273b37341bfaad88bbfea6eb5baa021f99d724db1ad46814e62560f700f80ba757c4067c221b0be0efdcfcf131868770330a7d43617dae67a88edce4f9ce9210598a57d0e3d07094c77cb2693e8b772c138f4afde8d833f583a7d6f94f6a11429394e7b523ea212d0a1ee237b23e802bd4a26d99807fbc0ae2a8816cc51e5fe893ab3fae33e36f55fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x2d8c, 0x18, 0x0, 0x0, {{0xa}, {0x2d0c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x0, 0x0, 0x7, 0x9, 0x8}, 0x0, 0x0, [{0x9, 0x2, 0x8, 0x17, 0x8867, 0x5}, {0x1, 0xdd, 0x800, 0x3ff, 0xcc72, 0x9}, {0x1ff, 0x8, 0x7fff, 0x9, 0x16, 0x9}, {0x2d555602, 0x8, 0x7, 0x0, 0x4, 0x97}]}, [{0x1, 0x1, 0x40, 0x0, 0x9, 0x1}, {0x4, 0x2, 0xffff, 0x200, 0x67a, 0x7f}, {0x4, 0x1ff, 0xa563a54, 0x1ead, 0x3, 0x1d6}, {0x3, 0x2, 0x8, 0x8, 0x5, 0xd}, {0x5b8, 0x60, 0x2, 0x100, 0x0, 0x3}, {0x4, 0x1, 0x2, 0x10001, 0x7, 0x1}, {0x5, 0x7, 0x8, 0xfbe, 0x6, 0x9}, {0x0, 0x2, 0x8, 0x8, 0x3}, {0xb, 0x1ff, 0x3, 0xe5d5, 0x6, 0x7}, {0x0, 0x8, 0x7, 0x7, 0x1, 0x2}, {0x8, 0x1ff, 0x9b61, 0x1724, 0xff, 0x200}, {0x4, 0x0, 0xea8, 0xfff, 0x2, 0xa0}, {0x4, 0x4, 0x8, 0x2, 0xfffffffc, 0xfffffff2}, {0x2, 0x746b891e, 0x83, 0x10, 0xa2d5, 0xe6a}, {0x2080, 0x1, 0x1, 0x4, 0x5, 0x400}, {0xff, 0x4, 0x400, 0x80000000, 0x7fff, 0x2}, {0x0, 0x7, 0x9, 0x9, 0x4, 0x8}, {0x3, 0x2, 0x229, 0xe0, 0x7, 0x5}, {0x3, 0x800, 0x3, 0x8000, 0x7fffffff, 0x4}, {0x1, 0x6, 0x11, 0xc, 0xf3c, 0x7a4}, {0xc00000, 0x802, 0x0, 0x9, 0x100, 0x8000}, {0xfffffffc, 0x3, 0x6, 0x6, 0x6a39, 0x6}, {0x5, 0x9, 0x6, 0x3, 0x16, 0x10001}, {0x34, 0xffff, 0x0, 0x4, 0xa5, 0x8}, {0x2ab9, 0xffff, 0x4b95, 0x5, 0x8001, 0x2}, {0x7fff, 0x3ff, 0x9, 0x3, 0x101, 0x2}, {0x2, 0x3a3, 0x3, 0x9, 0x2, 0x6}, {0x4, 0x8, 0xffffffff, 0x6, 0x1000, 0x1}, {0x5, 0x1, 0xabf9, 0x6, 0x1, 0x2}, {0x8, 0x1, 0x3, 0x9, 0x4, 0x3}, {0x9, 0x0, 0x120, 0x0, 0x6, 0x1}, {0x5, 0x7, 0xfffffffe, 0xce1c, 0x8, 0x101}, {0x7ff, 0x6, 0x4, 0xcf8, 0x4, 0x9}, {0x8509, 0x4, 0x200000, 0x1000, 0xfc8, 0x9}, {0x0, 0x0, 0xfffffbff, 0x9, 0x5, 0x3}, {0x4, 0x4, 0x80000001, 0x2, 0x9, 0x8}, {0x6, 0x3, 0x3e4d, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x1, 0x6, 0xb4a3, 0x3}, {0x0, 0x5, 0x5, 0x10, 0xffff}, {0x0, 0x8, 0x8, 0x5, 0xb, 0x1}, {0x80, 0x1, 0x3ff, 0xff36, 0xee, 0x40}, {0x9, 0x0, 0x9, 0x9, 0x6, 0x3}, {0xf42, 0xfffffff9, 0x2, 0x6, 0x1000, 0x3}, {0xffff, 0x3, 0x1, 0x2, 0xfffffffc}, {0xa2e9, 0x40, 0x3, 0xffffffff, 0x6, 0x8}, {0x7, 0x7, 0x4, 0xffff, 0xffff, 0x80}, {0x2, 0x9, 0x6, 0x4, 0x200, 0xd}, {0xfffffffa, 0x5, 0x1, 0x9, 0x8, 0x1}, {0x7, 0x2, 0xf1c8, 0x6, 0x2, 0x1}, {0x10001, 0x0, 0x7, 0x4, 0xa1c4, 0x5}, {0x4, 0x7, 0x49, 0x9, 0x4, 0x1ff}, {0xdbf, 0x5, 0x5, 0x6, 0x21, 0xd7}, {0x401, 0x9, 0xfffffff9, 0x3, 0x7fff, 0x10001}, {0x40, 0x9a2b, 0x4, 0x83e, 0xffff63d5}, {0x8, 0x5, 0x101, 0x61, 0x3, 0x3}, {0x3, 0x80000000, 0x8, 0x3, 0xa, 0xfffff04f}, {0xb71, 0xf, 0x2, 0x7, 0x200, 0x3}, {0x80, 0x8, 0x8, 0x47, 0x0, 0xffff}, {0x5, 0x8, 0xe, 0x6, 0x7, 0x101}, {0x7, 0x3, 0x6, 0x82, 0x90, 0xf}, {0xa, 0x10001, 0x7, 0x878a, 0x1, 0x8}, {0x1, 0xa, 0x400, 0x40, 0x80, 0x8}, {0x10000, 0x7, 0x80000000, 0x0, 0x800, 0xfffffffb}, {0x4, 0x8, 0x2, 0xff, 0xfffffff8, 0x2}, {0x9, 0x4, 0x7f, 0x4, 0x7, 0x7}, {0x9, 0x0, 0x4, 0x3, 0x3, 0x5}, {0xfffffffc, 0x9, 0x1a, 0x7, 0x2, 0x200}, {0x7, 0x6, 0x7, 0xe7f, 0x8000, 0x2}, {0x7fffffff, 0x1000, 0x80000001, 0x5, 0x7, 0x8ab}, {0xfff, 0xf5, 0x400, 0x5, 0x8, 0xae000000}, {0x3, 0x200, 0xb11, 0x3ff, 0x8, 0x7}, {0xff, 0x4, 0x8, 0x9, 0x3, 0x9}, {0x2, 0x1, 0x10000, 0x7, 0xe, 0x4}, {0xe, 0x9, 0x0, 0xfffffffb, 0x1c, 0x400}, {0x1, 0x80, 0xfffffff9, 0x2, 0xd386, 0x1}, {0x8881, 0x2, 0x7, 0x7, 0x4, 0x4}, {0x7c, 0x9, 0xfffffffd, 0xffff669d, 0x0, 0x401}, {0xbced, 0x6, 0xb12, 0x7, 0x7, 0x3}, {0xffffffff, 0x2, 0x4, 0x2b20, 0x0, 0x7ff}, {0x7ff, 0x10001, 0x4, 0xb4d, 0xffffffc0}, {0x4, 0x1, 0xffff27d6, 0x6, 0x10001, 0x3ff}, {0x4, 0x6, 0x3df, 0x5, 0x72, 0xbe}, {0x5, 0x1a1b, 0x7cd8, 0x2, 0x1, 0xffffd14c}, {0x55, 0x2, 0x80000000, 0x0, 0x40, 0x9}, {0x7, 0x9, 0x7fff, 0x1, 0x7}, {0x8a, 0x5, 0x6, 0x3, 0x0, 0x6}, {0xd7f, 0x8, 0x6c0a, 0x4, 0x61, 0x4}, {0x401, 0x5, 0x5, 0x6, 0x3, 0x2}, {0xfffffffe, 0x6, 0x8, 0x3ff, 0xde, 0x56b}, {0xffff, 0x2, 0x7e88, 0x6, 0x4, 0xffffffff}, {0x36c2, 0x0, 0x6, 0x2, 0xffff755b, 0xfff}, {0x95d, 0x8, 0x0, 0x549, 0x4, 0x7}, {0x40, 0x9, 0x10000, 0x0, 0x6, 0x4}, {0x8, 0xe3, 0x5c, 0x667, 0xdc2e, 0x1}, {0x3, 0x101, 0x1f6, 0x5, 0xd, 0x6}, {0x401, 0x8, 0x40, 0x3, 0x0, 0x6}, {0x5, 0x9, 0xa, 0x3, 0x3, 0x81}, {0x11b, 0x80000000, 0x3f, 0xb6a2, 0x1, 0xf8a9}, {0x5, 0x8, 0x80000000, 0x80000000, 0x80, 0x8}, {0xfcc, 0x9, 0x230, 0x80, 0x6, 0x2}, {0x4, 0x9f9e, 0x7f, 0x76b, 0x6, 0xcc2b}, {0x2, 0x7, 0x4, 0x8, 0x5, 0xd}, {0x80000000, 0x0, 0x5, 0x6, 0xffffffff, 0xa}, {0x9, 0x0, 0x6db, 0x1, 0x7, 0xa}, {0x4, 0xb5, 0x6, 0x7fff, 0x1000000}, {0x0, 0x6, 0xfffff800, 0x8, 0x4, 0x2}, {0x1, 0x9, 0x8, 0x9, 0x4, 0x3}, {0xcff, 0x8, 0x1e29, 0x9, 0x8, 0x7}, {0x3, 0x0, 0x5, 0x6, 0x10, 0x1}, {0x0, 0x9, 0xffff, 0x1, 0x5}, {0x9, 0x7, 0x5, 0xc, 0x3ff}, {0x6, 0xfff, 0x1, 0x10001, 0x3, 0x401}, {0x13c1, 0x3, 0x30c4187b, 0x0, 0x0, 0x5}, {0x1ac2, 0x7, 0x3, 0xe, 0x490bf6bc, 0x101}, {0x999, 0x436c, 0x3, 0x7fff, 0x800, 0x400}, {0x7f, 0xffffffff, 0x7fffffff, 0x3296, 0x8dde, 0x8}, {0x6, 0x40, 0x7, 0x9, 0xc8}, {0x7f, 0xc1, 0x5, 0x3ff, 0x80000000, 0x8001}, {0x4, 0x0, 0x8, 0x3, 0x3, 0x5}, {0xfffffff9, 0x5, 0x10, 0x24, 0x0, 0x56}, {0x9, 0x5, 0x9, 0x0, 0x80000001, 0x9}, {0xbd6, 0x2e8, 0xfffff330, 0x1000, 0x1ca, 0x9}, {0xd8413500, 0x81, 0x2, 0x8, 0xfffffc00, 0x80}, {0xc7, 0x4, 0x1, 0x0, 0xffff, 0x6}, {0x4df, 0x5, 0x0, 0x91, 0xffff, 0x7ff}, {0x67, 0x3, 0x4, 0xff, 0x5, 0x2}, {0x58, 0x10, 0x2, 0x7, 0x80000000, 0x1}, {0x3, 0x4, 0xc, 0x6, 0xe, 0x10}], [{0x2, 0x1}, {}, {0x89d29db65eaca957}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0xa}, {0x4}, {0x5}, {}, {}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0xa502a08a196a72e0}, {0x1, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x2}, {0x4}, {0x3}, {0xaa6f986ee669572b}, {0x4, 0x1}, {0x6}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4fef096dddc56992}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x5dd0779856421be2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1, 0xa978d57758398990}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0xff630aba75254230}, {0x5, 0x1}, {0x1, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x9, 0x8, 0x5, 0x1, 0x1}, 0x7, 0x6, [{0xff, 0x8d2, 0x7, 0x1, 0x0, 0x4}, {0x0, 0x24167e57, 0x89, 0xc5, 0x7, 0x3}, {0x0, 0x0, 0x80, 0xfffffffb, 0x1, 0xd8b5}, {0x7f, 0x6, 0x3, 0x0, 0x80000001, 0x248c}]}, [{0x9, 0x9, 0x90, 0x1000, 0x8001, 0x40}, {0xfffffffd, 0x8, 0x9, 0x4, 0x2, 0xffff8001}, {0x9, 0x4, 0x9, 0x6, 0x1000, 0x24}, {0x2, 0x8, 0x3, 0x100, 0x1, 0x8}, {0x1, 0x9, 0x8, 0x81, 0xffffffff, 0x6}, {0x2, 0x40, 0x37, 0x6, 0x1, 0x4}, {0x1, 0xff, 0x8, 0x2, 0x3, 0xffff}, {0x8, 0xffffffff, 0x72, 0x400, 0x2, 0x7}, {0x4, 0xa5d0, 0xff, 0xfd2, 0x88, 0xe85}, {0x1e4, 0x3, 0x3, 0x2, 0x10, 0x1}, {0x10, 0x8, 0x7ff, 0x8001, 0x2, 0x9}, {0xfffffff9, 0x713e, 0x3841, 0x973, 0x9, 0x8}, {0x5, 0x6, 0x9, 0x100, 0x9, 0x9}, {0x80, 0x5, 0x8, 0xa, 0x9, 0x8}, {0x7fffffff, 0x5f, 0xd, 0x0, 0x5, 0xb}, {0x400, 0xb, 0x9, 0x10001, 0x5, 0xe}, {0x41, 0x400, 0x10, 0x2, 0x6, 0xfff}, {0xfffffc01, 0x198a6fa0, 0x6, 0xfffff21b, 0x200, 0x8}, {0x4, 0x40, 0x6, 0x663, 0x80000000, 0x2f6}, {0xf, 0x3, 0xa23, 0x8, 0x1, 0x8}, {0x8, 0x9, 0xff, 0x6, 0x410, 0x918d}, {0x3, 0x7, 0x0, 0x9, 0x5, 0x8}, {0x9, 0x4, 0x9, 0xf3, 0xfffffff8, 0x6}, {0x7fff, 0x8, 0x80000001, 0x0, 0x8, 0x40000000}, {0x3, 0x1, 0x8, 0x8836, 0x79e7, 0x8e2b}, {0x8, 0x7fff, 0xa, 0x484f4edc, 0x5, 0x6}, {0xf, 0x9, 0x29f, 0x1, 0x5}, {0x8, 0x2, 0x0, 0x2, 0x2, 0x5}, {0x6, 0x3ff, 0x1, 0xfffffffb, 0x9, 0x8da}, {0x8, 0xf, 0x6346c549, 0x64, 0x5, 0x7fff}, {0x1, 0x4, 0xffffff00, 0x9, 0x8, 0x9}, {0x5aa, 0x8, 0x0, 0x9, 0x8, 0x6}, {0xffffffff, 0x1c, 0x3, 0x500000, 0xd91, 0xc}, {0x7, 0x2, 0x1, 0x1, 0x1000, 0x48}, {0x2, 0x0, 0x4, 0xf, 0xff, 0x272991ce}, {0x80000000, 0x3, 0x1, 0x6, 0x0, 0x285c}, {0x4, 0x7, 0xb9a, 0x10001, 0x6}, {0x6d1, 0x9, 0x3, 0xca2, 0x1, 0x2}, {0x2d, 0x4, 0xb93, 0x4, 0xd932, 0x4}, {0xeab, 0x1000, 0x8, 0x1000, 0xfffffeff, 0x41}, {0xfff, 0x400, 0x82e1, 0xfffffffe, 0x80000, 0x27fd8b97}, {0xfffffdf4, 0xffff8000, 0x8, 0x2, 0x9, 0x4}, {0x9, 0x1, 0xf, 0x1, 0x4, 0xfa}, {0x400, 0xf, 0x401, 0x7fff, 0x2, 0x8e}, {0x2, 0x7, 0x6, 0x5, 0x89f0, 0xc}, {0x1, 0x7, 0xa, 0x7, 0x4, 0x4}, {0x80000000, 0xc, 0x0, 0x4, 0x40, 0x4}, {0x3, 0x1, 0x4, 0xfffffffb, 0x3ff, 0x2}, {0x6, 0x9, 0xffffffff, 0xf, 0x84, 0x6}, {0xffffffff, 0x8, 0xffffff80, 0x4, 0x5, 0x6}, {0x2, 0x9, 0x7, 0x0, 0x7}, {0x2, 0x9, 0xcea, 0xffffffc0, 0x3, 0x8}, {0x1, 0x400, 0xffffffff, 0x0, 0x2, 0x517c}, {0x6, 0xb3b9, 0x9, 0x3, 0x4, 0xb}, {0xfff, 0x1, 0x4, 0x68, 0x401, 0xfffffffe}, {0x1, 0x5, 0x4, 0xa, 0x6}, {0x19024ba3, 0x3, 0xffff, 0xb65, 0x1, 0x9}, {0x354, 0x4, 0x9, 0x101, 0x7ff, 0x4}, {0x8, 0x3, 0x80, 0x7, 0x80000000, 0x2}, {0x800, 0x2a7, 0xffff, 0x0, 0x100, 0x5}, {0x4, 0x8001, 0x1ff, 0x3fe00000, 0xfffffff7, 0x9}, {0x2, 0x6, 0x1, 0x9, 0x2, 0x40}, {0x5, 0x0, 0xd, 0x3, 0x8000, 0x2ee2}, {0x0, 0xff, 0x3, 0xaf8, 0x84d, 0x8}, {0x9, 0x81, 0x81, 0xa, 0xa, 0x4000000}, {0x2, 0x0, 0x7fffffff, 0x9, 0x40, 0x15}, {0xfc35, 0x1, 0x7, 0x2, 0x5, 0x401}, {0x2, 0x3, 0xe39, 0x4413, 0xe, 0x2}, {0x7ff, 0x1ff, 0x2, 0xffffffff, 0xfffffffb, 0x100}, {0x8, 0x9, 0x5a094bf4, 0x4, 0x7ff, 0xffffffff}, {0x100, 0xffffffff, 0x42, 0x4, 0x9, 0x1}, {0x8, 0x8bf4, 0x9, 0x4, 0x3, 0x7527}, {0x8, 0xb, 0xfaa, 0x10001, 0x3, 0xb}, {0xf003, 0x8000000, 0x7, 0x0, 0x6, 0x9}, {0x4, 0x6, 0x6, 0x0, 0xfffffff7, 0x6}, {0xf, 0x9, 0x8, 0xe469, 0x5e8, 0x1}, {0x9, 0xfffffffa, 0x4, 0x7, 0x5, 0x7}, {0x9, 0x2, 0xfffffffb, 0x1e, 0x5c, 0x3}, {0x6, 0x7fff, 0x4, 0x1, 0x8, 0x1}, {0x6aab4293, 0x9, 0x0, 0xf56, 0x10}, {0x5, 0x1000, 0x1, 0x3, 0xb63, 0xe}, {0xff, 0x9, 0x4, 0x8, 0xa637, 0x9}, {0x1, 0x7, 0x0, 0x1, 0x0, 0x7}, {0xff, 0x8, 0x9, 0x10001, 0x4, 0x800}, {0x5, 0x1000, 0x6e4, 0x5, 0x400, 0x1}, {0xe, 0x8, 0x35d, 0x7, 0x9, 0x8001}, {0x2, 0x3ff, 0xfffffbff, 0x8, 0xb, 0x6}, {0x2, 0x3, 0x92, 0x8d0, 0xfff, 0x2}, {0x6, 0x9, 0x5, 0xe, 0x10001, 0x1}, {0x6c2, 0x7, 0x7fffffff, 0xf, 0x4, 0x5}, {0xd, 0x1, 0x5323, 0xffff, 0xd2b, 0x8}, {0x7, 0xc, 0x2, 0xffffffff, 0x2092, 0x10001}, {0x2, 0x1000, 0x20000000, 0xffff0001, 0x0, 0x2}, {0x6, 0x3, 0x9, 0x5, 0x80000001, 0xffffa3d6}, {0x10001, 0xc00, 0x40, 0x1ff, 0x5, 0x10000}, {0x401, 0x5, 0x9, 0x7, 0x100, 0x6}, {0xfffffffc, 0x3, 0x6, 0xff, 0x9dc, 0x7}, {0x8, 0xf24, 0x1, 0x0, 0x9, 0xfff}, {0x8, 0x6, 0x1, 0x3, 0x86, 0x9}, {0x7f, 0xfd, 0x9, 0x8, 0x4, 0x4c6b3fa}, {0x79f2, 0x7, 0x7, 0x0, 0x3, 0x28f2}, {0x0, 0xf819, 0x3ff, 0xcd, 0x0, 0x1}, {0x6, 0x0, 0x10001, 0x5, 0x0, 0x4}, {0x0, 0xab5, 0x2, 0x6, 0x7, 0x80}, {0xa3, 0x4, 0x1, 0x3, 0x9, 0x1}, {0x6, 0x6, 0x5, 0x8001, 0x7, 0x9}, {0x9, 0x8, 0x9, 0x8, 0x5, 0x7}, {0x9, 0x9, 0x7, 0xd, 0x9, 0xb6}, {0xe8dd, 0x80000000, 0x0, 0x9, 0x4, 0x7}, {0x0, 0x6629, 0xcfa, 0x10, 0x0, 0xce}, {0x4902, 0x67, 0x3a7, 0x8, 0x800, 0xfffffff9}, {0x4, 0xffff417d, 0x4, 0x4, 0x7, 0x6}, {0x4ad, 0x9, 0x8, 0x5, 0x10001, 0x6}, {0x6, 0x2, 0x4, 0xfffffff9, 0xfffffff7, 0x2}, {0x1, 0x80, 0x40, 0x2, 0x8, 0x77e}, {0x60, 0xffffffff, 0x81, 0x1, 0x3, 0x7ae0f162}, {0xfffff8a5, 0x5, 0x7ff, 0x0, 0x66, 0x2}, {0x200000, 0x7ff, 0xffff, 0x4, 0x1, 0xc55}, {0xbc, 0x8001, 0x7, 0x1, 0x4, 0x81}, {0x0, 0x9, 0x0, 0x7, 0x800}, {0xe24, 0x6, 0x3, 0x583, 0xb236, 0x95b9}, {0x8ea, 0x1, 0x3, 0x72c253a5, 0x7, 0xc99}, {0x1, 0x2, 0x8, 0x70, 0x1c, 0x200}, {0x7ff, 0x1ff, 0x27c, 0x8, 0x3ff, 0xf4}, {0x6, 0x7ff, 0x3, 0x2, 0x8, 0x1000}, {0x7, 0xffffff7f, 0x1, 0xffff, 0x4, 0x1}, {0xf3, 0xfffffffe, 0x8, 0x7fffffff, 0x3, 0x2}, {0x7, 0xfc1b, 0xa5, 0x10, 0x2, 0xe4}], [{}, {0x0, 0x1}, {0x5}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0xb2212e2b92e2639}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7e4df98e603319c5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x621c188c13a287}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1612d5dc499ef4b5}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xe, 0x4, 0x7, 0x0, 0xa3b5}, 0x7, 0x3, [{0x2, 0x1622, 0x0, 0x8001, 0x1000, 0x4}, {0x1, 0x7ff, 0xf, 0x6, 0x6, 0x8}, {0x6, 0x1, 0x1, 0x2, 0x6, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x5, 0x9}, {0x1, 0xd37b, 0xa1ae, 0x7, 0x3, 0x40}]}, [{0xff, 0xfffff801, 0xfffffffa, 0x0, 0x1, 0x5}, {0x4, 0x5f, 0xfffffffe, 0x2, 0x2, 0xe8c}, {0x8000, 0x76, 0xd, 0x8000, 0x6, 0xb}, {0x3, 0xf, 0xad15, 0x2, 0x9, 0x1}, {0x5, 0x3, 0x10, 0x3, 0x1, 0x460b}, {0x5, 0x3, 0x2, 0x1, 0x7, 0xfffffff9}, {0x7, 0x2, 0x6, 0x81, 0x6a9f, 0x3}, {0x8000, 0x6, 0x5, 0x7, 0x4, 0x3}, {0x9, 0xb, 0x10, 0xfffffff8, 0xfff, 0x7f}, {0xe7, 0x6, 0x5, 0xfffffffd, 0x3, 0x6}, {0xff, 0x4, 0x1f, 0x1, 0x3}, {0xe, 0x4, 0x5, 0x4, 0x7fff, 0x3}, {0x88, 0x1, 0x6, 0x7ff, 0x0, 0x10000}, {0xf2, 0x8d3, 0x4, 0x6, 0x7, 0x5}, {0x3, 0x8, 0x10001, 0x252b, 0x3, 0x8}, {0x4, 0x400, 0x3fffc000, 0x3, 0x1, 0x3}, {0xe6a2, 0x9, 0xfff, 0xfff, 0x80000001, 0x400}, {0x9, 0x3, 0x2, 0xaf, 0x101, 0x7}, {0x7fffffff, 0xfffffc01, 0x0, 0x1945, 0x87fc, 0x6}, {0x1, 0x536, 0x3, 0x4, 0x7f, 0x2}, {0x6, 0x8, 0x6, 0x8, 0x9, 0xffffff19}, {0x0, 0x9, 0x8, 0xa, 0x8001, 0x7}, {0x0, 0x3, 0x4, 0x991, 0xffff98c2, 0xd}, {0x0, 0xc962, 0x100, 0x60000, 0x9a, 0xfffffff8}, {0x7fffffff, 0x6, 0x3, 0xae, 0x3ff, 0x3}, {0xf, 0x6, 0x6, 0xff, 0x101, 0x8}, {0x2, 0x9ed8, 0x7, 0x3, 0x7}, {0x55, 0x6, 0x9, 0xe6dd, 0x8, 0x1}, {0xffffffff, 0x0, 0xfffff001, 0x10, 0x5, 0xfffffffb}, {0x21, 0x101, 0xa3, 0xfffffffb, 0x7, 0x9}, {0x9, 0x1, 0x0, 0x1, 0x61, 0x7f}, {0x8, 0xffff, 0xe8a7, 0x2, 0x5, 0x4}, {0x528, 0x60, 0x0, 0x3ff, 0x7, 0x3}, {0x9, 0x9, 0xbe, 0xe37a, 0x40, 0x3}, {0x36, 0x8, 0x8, 0xa, 0x7af8, 0x9}, {0x4, 0x5, 0x6da5, 0x7, 0x1ff, 0x4}, {0x4, 0x5, 0x2c, 0xd6b, 0xb9}, {0x8a, 0xe93, 0xbbc7, 0x4, 0x26d4, 0x5b}, {0xf711, 0x1, 0x98, 0x81, 0x0, 0x607be725}, {0x8, 0x4, 0x5, 0x5, 0xdf3}, {0x4, 0x9, 0x9, 0x10, 0x2bce, 0x9}, {0x900000, 0x8, 0x2, 0xd3, 0x3, 0x8}, {0x5c8, 0x3, 0xb, 0x8, 0x1d, 0x6200}, {0x0, 0x8, 0xc, 0x6, 0xfffffffe, 0x9}, {0x757, 0x2, 0x6, 0xfffffffe, 0x9, 0x46}, {0x400, 0x3, 0xfc, 0x202e, 0xcca, 0xb6e0}, {0x290, 0x10001, 0x4, 0x8, 0x81, 0x5}, {0x80, 0x3, 0x2, 0x800, 0x9012}, {0x1, 0x8, 0x1, 0x8, 0x8603, 0x6}, {0xffff4b65, 0x3, 0xfffffffa, 0xe, 0x7, 0x7}, {0x5, 0xf2, 0x0, 0x9, 0x5, 0x80000001}, {0x80000, 0xfff, 0x3, 0x10000, 0x0, 0x9}, {0x9, 0x6, 0x1e, 0xd34, 0x0, 0x4}, {0x3, 0x5, 0x5, 0x7, 0x8, 0x8}, {0x3, 0x8, 0x4, 0x5, 0x3, 0xc265}, {0x5, 0x3d, 0x5, 0x5, 0x8, 0xfffffff7}, {0x40, 0xffff, 0x3, 0x80000, 0x0, 0x3}, {0x7fffffff, 0x0, 0x5, 0x9d8, 0x8, 0x7}, {0x3, 0xd04f, 0x80000001, 0x2, 0x67f, 0x351c}, {0xe, 0x5, 0x200, 0x7, 0x5, 0x81}, {0x10000, 0x9, 0x8, 0x80000000, 0xffff120d, 0x10001}, {0x3, 0x3, 0x140000, 0x9, 0x80000001, 0x8}, {0x4344, 0x40, 0xffff, 0x1000, 0x1c0, 0x7}, {0x80000000, 0x9, 0x4, 0x8001, 0x7, 0x8}, {0x3, 0xa, 0xb1, 0xfff, 0x5, 0xae}, {0x3a8, 0x9f, 0x59d437e4, 0x6, 0x0, 0xd58}, {0x7, 0x2e, 0xe, 0x3, 0x1, 0x5}, {0x907, 0x7, 0x95, 0xe36, 0x7, 0x1000}, {0x80, 0x81, 0x2, 0x8, 0x1, 0x10}, {0xe8, 0x10, 0xa4, 0x8, 0x0, 0x1}, {0xc9, 0x8000, 0x1, 0x6, 0x2, 0x7}, {0x3, 0x7fffffff, 0x316, 0x3, 0x6, 0x6}, {0x6, 0x7b, 0x1, 0x2, 0x4, 0x4}, {0x6, 0x2, 0x8, 0x0, 0x4f19, 0x3ff}, {0x7f, 0x1, 0xfffffff5, 0x7, 0x126a0fb3, 0xe}, {0x3, 0x3, 0x1, 0x1768, 0x3, 0xdeb7}, {0x80000001, 0x2, 0x9, 0x5, 0x0, 0xa}, {0xb2bb, 0x4, 0x9, 0x1, 0x6, 0x2}, {0x1ff, 0x7, 0xb4, 0x6, 0x5, 0x7}, {0x7, 0x2, 0x1ff, 0x8, 0x1, 0x4}, {0x101, 0x6, 0x8, 0x2, 0xf145, 0x9}, {0x9, 0x6, 0x2, 0xff, 0xfffffffd, 0x6}, {0x81, 0x401, 0x10000, 0x0, 0x0, 0x2f9}, {0xfffffffc, 0x2, 0x0, 0x2, 0xd02, 0x3}, {0xe9, 0xe1e, 0x7, 0xfffffffa, 0x100, 0x3}, {0x7ff, 0x1, 0x80000000, 0x5, 0x1, 0x10001}, {0x7, 0x8001, 0x6, 0x100, 0x8}, {0x1, 0xe40, 0x4, 0xfffffffa, 0x1, 0x400}, {0xb, 0xf3, 0x5, 0x4, 0x3ff, 0x9}, {0xfe4, 0x750, 0x8, 0x0, 0xfffffffe, 0x80000001}, {0x6, 0x94000000, 0x9, 0x8, 0x6}, {0xd, 0x0, 0x20, 0x0, 0x6, 0x4}, {0x0, 0x1, 0x0, 0x3, 0x9, 0x4}, {0x4, 0x6d79, 0x6, 0x9, 0x8001, 0xc}, {0x9, 0x5, 0x7, 0x0, 0x1, 0xffff}, {0x6, 0x2, 0xffffffff, 0x6, 0x400, 0x8}, {0x2, 0x80000000, 0x80, 0x6, 0x9, 0x7}, {0x36, 0xbca, 0x2, 0x6, 0x2, 0x7}, {0x1b7, 0x5, 0x92fd, 0x68c, 0x3, 0x101}, {0x4, 0x0, 0x8000, 0x6, 0x6, 0x67c}, {0x5, 0x401, 0x800, 0xff, 0x3, 0x80000000}, {0xc, 0x9, 0x1000, 0xfcb, 0x3, 0x8000}, {0x8000, 0x6, 0xfff, 0xc2, 0x1, 0x1}, {0x2, 0x3, 0x8, 0x2, 0x9, 0x3df}, {0x0, 0x218, 0x889, 0x80000000, 0x3, 0xf}, {0x6, 0x7, 0x1ff, 0x3, 0x3, 0x1}, {0x7, 0xfffffffb, 0x80000000, 0x61f170b9, 0x80, 0x100}, {0xf, 0x2, 0x9, 0x9, 0xfffffffe, 0x6}, {0x9, 0x2, 0x3, 0x4, 0x5, 0x3}, {0xbb69a603, 0x80000001, 0x8, 0x3, 0x9, 0x7}, {0x9, 0x94, 0x9, 0x1, 0x8, 0x2}, {0x6, 0x5, 0x6a3, 0x4, 0x2, 0x1}, {0x7fff, 0x3, 0x7, 0x3, 0x5, 0xa2}, {0x6, 0x2, 0x7, 0x9, 0x9}, {0x52d7, 0x8, 0x9, 0x8, 0x1, 0x7fff}, {0x33adfef7, 0x8, 0x80000000, 0x3, 0x9}, {0x2, 0x10000, 0xfffffff8, 0x7, 0x1, 0xfffffff9}, {0xc77, 0x9, 0xa911, 0x83, 0x1fe0000, 0x9}, {0x0, 0x5, 0x2b7, 0x3, 0x1, 0xffffffff}, {0x7, 0x5, 0x0, 0x6, 0x8, 0xfffff398}, {0x2, 0x200, 0x3, 0x5, 0x7f, 0x6}, {0x1, 0x3ff, 0x8001, 0x8, 0x4, 0x625d3f5b}, {0xcc2, 0x2, 0x6, 0x3, 0x8001, 0xdf2d}, {0x100, 0x72, 0x5, 0x2, 0x3, 0x100}, {0x1c00, 0x2, 0x2, 0x80000001, 0xa, 0x7}, {0x4, 0x2, 0x8000, 0x1, 0x7, 0x80000000}, {0x4f78, 0x1, 0xfff, 0x6, 0x200, 0x9}, {0x800, 0x0, 0x7, 0xfffffff7, 0xa23, 0x80}], [{0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {}, {0x4}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x8dfa310cbd2e253c}, {0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x6fe0d78409687523}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x170, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x58, 0x6, "8707e16701083a6df1e85b5f808a73a009ea96c48ad73bca5e60d8791adf116139b921e5290499a8b2ed42c01934271dde8a2e9de6e34eae545bd8eab08eb9ca8eb9d43661fdd5048ba3585cfba79d26af06d751"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xf73451c4bee0cdfe, 0x3}}}}, @m_nat={0xc4, 0x13, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x10001, 0xffffffffffffffff, 0x2, 0xffffff01}, @private=0xa010100, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x10, 0x0, 0x2, 0x7}, @empty, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xbb, 0xffff5140, 0x2, 0x9d, 0x6}, @local, @rand_addr=0x64010102, 0xff}}]}, {0x21, 0x6, "50c9bb01d2ccd8f6998c3876e4767a158a299af50701064288d139c97d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0xa8, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3e8c, 0x10001, 0x6, 0xc2, 0xd}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x4, 0x101, 0x4}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x5, 0x9}, 0x2, r9}}]}, {0x19, 0x6, "4a15fbbebb841323807e2089d9e10a992085c1a625"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xf4, 0x1a, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xfbff, 0xd, 0x7, 0xff}, {0xfc, 0x9, 0x9, 0xfff}, {0x2, 0x3, 0x32, 0x6}]}]}, {0x89, 0x6, "f17c0c96f8cff53d1234d941709782f72368420b6cc3d23e78aaafdfb2a05b083c5551fd6894486dafcff9ee3204152d2cc116da30b65561a315f552f93a48b1a24fe9e74cc70a1f09e8c7b11adee1298982e6884cb77e8c01ca031e704b877bcba55b83197fc31f8dcfaf4e2e5901d8359ff6bc9f86465104fd92d895cb611797b648958a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x3784}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x84, 0x9, 0x0, 0x1, @local, @private2, 0x7800, 0x700, 0xfffffff7, 0x18000}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r0, @ANYBLOB="0080c48dc9c7b39b9b001500709ec95c93c6c400cde8", @ANYRES32=r3, @ANYBLOB="0800030000000000140002007767320000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400018008000100", @ANYRES32=r10, @ANYBLOB="080003000000000030000180140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300000000004400018014000200766574683100000000000000000000000800030002000000140002007767310000000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="0800030002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m2.37848698s ago: executing program 0 (id=1951): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x1, 0xb3, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x23, 0x18, 0x66, 0xfffc, 0x8, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x3, 0xb8}]}}}}}) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x800}, 0x18) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000002c0)={0x1, 0x2}, 0x8) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r6 = openat(r0, &(0x7f0000000400)='./bus\x00', 0x18000, 0x32) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x80000001, 0x51, 0x7, 0x8040, r4, 0x4, '\x00', r5, r6, 0x3, 0x4, 0x2, 0x7, @value=r7}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") (async) mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x1, 0xb3, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x23, 0x18, 0x66, 0xfffc, 0x8, 0x5e55b37311de6d89, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x3, 0xb8}]}}}}}) (async) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x800}, 0x18) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000002c0)={0x1, 0x2}, 0x8) (async) sendto$inet6(r1, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) openat(r0, &(0x7f0000000400)='./bus\x00', 0x18000, 0x32) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x80000001, 0x51, 0x7, 0x8040, r4, 0x4, '\x00', r5, r6, 0x3, 0x4, 0x2, 0x7, @value=r7}, 0x50) (async) 4m2.226715113s ago: executing program 0 (id=1952): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)) 4m2.064123546s ago: executing program 0 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x300, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 4m2.047320767s ago: executing program 32 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x300, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 3m19.081974281s ago: executing program 1 (id=2659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) 3m18.888521297s ago: executing program 1 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a00002c0012800e00010069703667726574617000f5ff1700028014000600fc0000000000000000000000000000010a000100aaaaaaaaaabb0000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3m18.774506106s ago: executing program 1 (id=2665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 3m18.766048477s ago: executing program 1 (id=2666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8c4, 0x47, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400"], 0x7c}}, 0x10) 3m18.720788061s ago: executing program 1 (id=2667): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="041400005a210000d9c2156b5b8350a1c8a2789c7ad784eebb71825d131d20562cf4252e0e471dbfb3a198f7118ef7936d192a00870f174b052325b315"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3m18.570407043s ago: executing program 1 (id=2673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000540)='v', 0x1}], 0x1}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x42, 0xf9, 0x49, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08d7b288409c792b7e95ee71002a0084210000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004100}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 3m18.570138813s ago: executing program 33 (id=2673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000540)='v', 0x1}], 0x1}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x42, 0xf9, 0x49, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08d7b288409c792b7e95ee71002a0084210000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004100}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 3.024130224s ago: executing program 3 (id=5615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000a00)=""/67, 0x43, 0x0, 0x7fff, 0x9, 0xc87, 0x7}}, 0x120) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, {0xa, 0x4e20, 0x6, @local, 0x40}}}, 0x48) sendmsg$tipc(r5, 0x0, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d648cd000407fffffe2b58e3ffe8303916b76fd7c54292e0704c67e3f6f675195a7d28f4246ce33def31cca62249d1b720ab700aee0c83c1a5fdd87c182ec7a7311bf2f19ae44ba7bb7fbd23bc54345ab6a449b81dd63e9fbda12e31077ef55ba2ec05b85a26c82721949ca98833a08c9fd116f3d4d936657c95c3e3b7d7fdd154183eb6fd9287fd810e60874da4203c3e8499b234b1"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b200000000008510000002000000850000008d00fc9eeabebf00525a00009500a50508000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.170624313s ago: executing program 3 (id=5627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000540)='v', 0x1}], 0x1}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x42, 0xf9, 0x49, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08d7b288409c792b7e95ee71002a0084210000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004100}, 0x1) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000002010400000000000000000a00fffc04000180040003803c0002800c00028005000100880000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aad268e4a88c338ea41c284b"], 0x58}}, 0x0) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 1.424484214s ago: executing program 4 (id=5635): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000001) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r3, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0xfffffffc, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 1.235491949s ago: executing program 3 (id=5638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000a00)=""/67, 0x43, 0x0, 0x7fff, 0x9, 0xc87, 0x7}}, 0x120) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, {0xa, 0x4e20, 0x6, @local, 0x40}}}, 0x48) sendmsg$tipc(r5, 0x0, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d648cd000407fffffe2b58e3ffe8303916b76fd7c54292e0704c67e3f6f675195a7d28f4246ce33def31cca62249d1b720ab700aee0c83c1a5fdd87c182ec7a7311bf2f19ae44ba7bb7fbd23bc54345ab6a449b81dd63e9fbda12e31077ef55ba2ec05b85a26c82721949ca98833a08c9fd116f3d4d936657c95c3e3b7d7fdd154183eb6fd9287fd810e60874da4203c3e8499b234b1"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b200000000008510000002000000850000008d00fc9eeabebf00525a00009500a50508000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.188802303s ago: executing program 2 (id=5640): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRES16=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) 1.188067413s ago: executing program 4 (id=5641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, 0x0, 0x0) 1.122420258s ago: executing program 4 (id=5643): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) 1.121694378s ago: executing program 6 (id=5644): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001c0001000000", @ANYRES32=r4, @ANYBLOB="8000c6000a000200aa"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7}, 0x18) r6 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x30000084) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="00032dbd7000fcdbdf250b0000000a0009003c351d3b17bc000005002f0000000000080039000000000008002b00070000000500300001000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) statx(r6, 0x0, 0x2000, 0x400, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x2) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket(0x2b, 0x6, 0xfffffff2) 1.074182722s ago: executing program 4 (id=5645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x585b8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586e, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0x4, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000d1f000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a000100050000000000007208", 0x31}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100025fd7000fddbdf250f00000005002f00010000cb77d14c000000000008003400070080ff1ea7b92541b9a54e0c7834546ab479583f7ea88c2bec040017bee921754534c416ccb70089b054ce3a580fff7f00009b15b490ec01f6a10bf643a35785bdfcbac32fbce105d2b746443d0f87ab7821f6ae24174f0ab6921bd43760cc9fae87916facc18db1bfc61cf9341832"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0xc0d0) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) 1.042625745s ago: executing program 2 (id=5646): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) 1.010817538s ago: executing program 2 (id=5647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 954.468032ms ago: executing program 2 (id=5648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000540)='v', 0x1}], 0x1}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x42, 0xf9, 0x49, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08d7b288409c792b7e95ee71002a0084210000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004100}, 0x1) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000002010400000000000000000a00fffc04000180040003803c0002800c00028005000100880000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aad268e4a88c338ea41c284b"], 0x58}}, 0x0) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 795.616605ms ago: executing program 6 (id=5649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001a7600"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x437, 0x1, 0x25dfdbb8, {0x0, 0x0, 0x0, r5, 0x6cc89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @dev={0xac, 0x14, 0x14, 0x30}}}}], 0x20}}], 0x1, 0x4040880) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000140)={{0xffffffffffff8000, 0x14bc5f87}, {0xfffffffffffffffd, 0xcaa}, 0x1ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b00)='vnet_rx_one\x00', r3, 0x0, 0x4000000000000004}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r9, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r10, 0x1) flock(r10, 0x2) 621.189409ms ago: executing program 6 (id=5650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 605.388831ms ago: executing program 6 (id=5651): connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000001) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r3, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0xfffffffc, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 448.612053ms ago: executing program 6 (id=5652): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000001) r2 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r3, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0xfffffffc, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 446.431154ms ago: executing program 5 (id=5653): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) 375.178289ms ago: executing program 5 (id=5654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, 0x0, 0x0) 370.02399ms ago: executing program 3 (id=5655): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) 315.405564ms ago: executing program 5 (id=5656): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79ac, 0x8, 0x8000, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 314.625184ms ago: executing program 5 (id=5657): r0 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="0ff1037d7b89b3aaca7c7ccf6642927c8c5107b5530c4706667431c1af7d2cbe0b016b381f293f82dde328e20bc2e2c580e92e721cc28dc785a84e0148572f1a4776d8a582923d44371310538528e04728caa855f4227e9080b2aadb9b1a269ee4f325dac85a8d59fcfb9c5c6b8a2d50ab4219becccbaa73abf3aba9efc5162962d6627ac3347f3b87cba2def281129b", 0xffffff6d, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r0, 0xf8, 0x61}, &(0x7f00000002c0)={'enc=', 'raw', ' hash=', {'streebog512-generic\x00'}}, &(0x7f0000000340)="d196f75a986756112b3c046b399bce706b5e5c18cb8ce026ee394e5b6210d7da1be8db3234b60c85a0bd2e50306d64720a59a675afd283bb164c4d9abfd21559468dd60e3e857dbc4147ef1d49bc46664a6f1e005203df2a8ea25c3a62a0a5e2d4acd243b00907cf6b49d03b6e764fd25a60c4ec673576fb0560d600ab75d7e77b19576aad07090ea3da20ebe45b568afe93ba65e3742d4bda078e8ca8452d6d439d39bb6f1c79e9d37d78b706610aefa1fe1506e528df1ec7bed095017d25e914622ca80fd4d85c360f9e75c3c19cc4b201da0583339ba0100d4881233b83e5db9d43fb8de926934b372e0a3987ef0398b997a2bc75008d", &(0x7f0000000440)="07467b91e8648e1102dccd57c21c2a44d73764e71ac36cbf4dce46cc03d54a59356a715be7b442275023c162153720db6fe1bce0c7a3981483c8c557715dc9dfda660b126799fc496c19908dfed219e83fffbbebd1f4b40496bed5bd2be6cf4261") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x7d61}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c084}, 0x40004) 285.030976ms ago: executing program 5 (id=5658): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, &(0x7f00000003c0)='./file0\x00') 272.810158ms ago: executing program 3 (id=5659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001c0001000000", @ANYRES32=r4, @ANYBLOB="8000c6000a000200aa"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7}, 0x18) r6 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x30000084) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="00032dbd7000fcdbdf250b0000000a0009003c351d3b17bc000005002f0000000000080039000000000008002b00070000000500300001000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) statx(r6, 0x0, 0x2000, 0x400, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x2) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket(0x2b, 0x6, 0xfffffff2) 226.895712ms ago: executing program 5 (id=5660): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400008000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001400048005e13f000200000005002200010000000800020002"], 0x38}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02098df4da434f650c000cddb504dfd0f73788b91b3fae78b391ca8243c163e308000000ef1f72bf4ed535749e760cdc84b7e69d840b3544a0ee3535ceedfb5db6c0aff2ffa67caa13cbc1c706d779961b65caf77b6177e3c460fcd678dc1501982d64a2c83b6ea464535effa256fafed118c191176916fc8e4cf6e200057f4a9021421ee09028e74cf440e5667a683c3397fa54e8be5daa98a5a27fe9526955363c6f282a7ae53190e63cb65dceb773f102f46d5465b4b6b7ccd7d9bd2072c9bf5704eabd1b7c68d6baf0df91000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) open(0x0, 0x0, 0x61) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd69000e0000180601fe880000000000000000000000000101ff0200000000000000000000000000014e244e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='a\a\x00\x00\x00\x00\x00\x00p\x00\x00\x00'], 0x0) 226.460081ms ago: executing program 4 (id=5661): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x1278, &(0x7f0000002880)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000001cc0), 0x80000) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='ata_bmdma_status\x00', r0, 0x0, 0x400000000000000}, 0x11) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(r1, 0x406, r1) readv(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x402, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 83.987523ms ago: executing program 2 (id=5662): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)=""/140, 0xfb, 0x8c, 0x0, 0x2, 0x10000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_trace', 0x10d00, 0x109) sendfile(r2, r2, 0x0, 0xb) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000380)={'\x00', 0x5, 0x5, 0xfffffffe, 0x4, 0x6, r3}) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000090474fb3ee73294f00"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="d940a17c9c165f47391a7abf3527ea3ff992ae05d738d35257f5154c4e87f18dcd3bd7c461def938eff605474bbf67fa109cce2d9d8af3ec3a8941acb54d11e34009b685effcc485ec21feb13678c8566e703e1f1302d4ebfad6899b7d6c2bb6b264b01b0e0031bbdf22341cbfa5edfe88c75d46a28aece54a2d8409a2d39e2e0aa940e4c5d979e91542a4cb4243a1876ef37f19d11eaf755b647a77a7d02d062d39c2e79c2125ddc42dcfdef46327d5272981ef665aca01d3cee76a9ba68e8f3f4226f3c95f3da21248161b12dade8bb8c9d115f6eb6335a5c2c34fa50c1b67406e5dc408ed60be020e30171b", @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x18) sendmsg$802154_dgram(r6, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c0001040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r8 = dup(r4) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$UHID_DESTROY(r2, &(0x7f00000004c0), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000280), 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESHEX=r8]) r10 = syz_open_dev$vcsn(&(0x7f0000000640), 0xd2b0, 0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN(r10, 0x4040942c, &(0x7f0000000680)={0x0, 0x10000, [0x62, 0xfffffffffffffffb, 0x7, 0x6, 0xfffffffffffffffd, 0x9]}) 72.701944ms ago: executing program 6 (id=5672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000540)='v', 0x1}], 0x1}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x42, 0xf9, 0x49, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08d7b288409c792b7e95ee71002a0084210000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004100}, 0x1) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000002010400000000000000000a00fffc04000180040003803c0002800c00028005000100880000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aad268e4a88c338ea41c284b"], 0x58}}, 0x0) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 27.561707ms ago: executing program 2 (id=5663): open(0x0, 0x145842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) io_uring_enter(r5, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 8.519619ms ago: executing program 3 (id=5664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb", 0x4}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000540)='v', 0x1}], 0x1}, 0x20000010) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=@newtfilter={0x30, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08d7b288409c792b7e95ee71002a0084210000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={0x50, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004100}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 0s ago: executing program 4 (id=5665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000a00)=""/67, 0x43, 0x0, 0x7fff, 0x9, 0xc87, 0x7}}, 0x120) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, {0xa, 0x4e20, 0x6, @local, 0x40}}}, 0x48) sendmsg$tipc(r5, 0x0, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d648cd000407fffffe2b58e3ffe8303916b76fd7c54292e0704c67e3f6f675195a7d28f4246ce33def31cca62249d1b720ab700aee0c83c1a5fdd87c182ec7a7311bf2f19ae44ba7bb7fbd23bc54345ab6a449b81dd63e9fbda12e31077ef55ba2ec05b85a26c82721949ca98833a08c9fd116f3d4d936657c95c3e3b7d7fdd154183eb6fd9287fd810e60874da4203c3e8499b234b1"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1a, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b200000000008510000002000000850000008d00fc9eeabebf00525a00009500a50508000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): { unmount } for pid=11308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 321.571733][T15856] 9pnet_fd: Insufficient options for proto=fd [ 321.590238][ T29] audit: type=1400 audit(1754636382.186:33042): avc: denied { recv } for pid=3290 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.37 dest=40306 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 321.622088][ T29] audit: type=1400 audit(1754636382.186:33043): avc: denied { prog_load } for pid=15850 comm="syz.2.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 321.640707][T15853] syz_tun: left allmulticast mode [ 321.641454][ T29] audit: type=1400 audit(1754636382.186:33044): avc: denied { bpf } for pid=15850 comm="syz.2.4552" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.646368][T15853] syz_tun: left promiscuous mode [ 321.667077][ T29] audit: type=1400 audit(1754636382.186:33045): avc: denied { perfmon } for pid=15850 comm="syz.2.4552" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.672158][T15853] bridge0: port 1(syz_tun) entered disabled state [ 321.693215][ T29] audit: type=1400 audit(1754636382.186:33046): avc: denied { prog_run } for pid=15850 comm="syz.2.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 321.710458][T15859] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4555'. [ 321.718782][ T29] audit: type=1400 audit(1754636382.216:33047): avc: denied { unlink } for pid=12107 comm="syz-executor" name="file0" dev="tmpfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 321.751000][ T29] audit: type=1400 audit(1754636382.295:33048): avc: denied { create } for pid=15857 comm="syz.3.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.887111][ T9450] hid_parser_main: 124 callbacks suppressed [ 321.887132][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.900639][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.908063][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.915485][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.922977][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.930495][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.937890][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.945371][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.952810][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.960468][ T9450] hid-generic 0000:7FFF:0009.004B: unknown main item tag 0x0 [ 321.972151][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 321.984537][ T9450] hid-generic 0000:7FFF:0009.004B: hidraw0: HID vc.87 Device [syz0] on syz1 [ 322.073304][T15880] siw: device registration error -23 [ 322.101026][T15882] 9pnet_fd: Insufficient options for proto=fd [ 322.129188][T15884] siw: device registration error -23 [ 322.807348][T15872] 9pnet_fd: p9_fd_create_tcp (15872): problem connecting socket to 127.0.0.1 [ 322.889940][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4573'. [ 322.934522][T15910] 9pnet_fd: Insufficient options for proto=fd [ 323.028303][T15916] 9pnet: Could not find request transport: t [ 323.598321][T15922] netlink: 'syz.4.4582': attribute type 1 has an invalid length. [ 323.606332][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4582'. [ 323.684372][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4581'. [ 323.783974][T15944] 9pnet_virtio: no channels available for device 127.0.0.1 [ 323.815286][T15945] 9pnet_fd: Insufficient options for proto=fd [ 323.835761][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4591'. [ 324.137533][T15970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4600'. [ 324.725410][T15980] 9pnet: Could not find request transport: t [ 324.810343][T15986] 9pnet_fd: Insufficient options for proto=fd [ 325.409457][T16014] 9pnet: Could not find request transport: t [ 325.488352][T16019] 9pnet_fd: Insufficient options for proto=fd [ 325.658643][T16027] __nla_validate_parse: 3 callbacks suppressed [ 325.658659][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4621'. [ 325.713782][T16033] 9pnet: Could not find request transport: t [ 325.737289][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 325.737306][ T29] audit: type=1326 audit(1754636386.314:33284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.779073][T16038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4626'. [ 325.783196][ T29] audit: type=1326 audit(1754636386.314:33285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.811930][ T29] audit: type=1326 audit(1754636386.314:33286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.835584][ T29] audit: type=1326 audit(1754636386.314:33287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.859369][ T29] audit: type=1326 audit(1754636386.314:33288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.883043][ T29] audit: type=1326 audit(1754636386.314:33289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.906648][ T29] audit: type=1326 audit(1754636386.314:33290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.930328][ T29] audit: type=1326 audit(1754636386.314:33291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.954081][ T29] audit: type=1326 audit(1754636386.314:33292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 325.977870][ T29] audit: type=1326 audit(1754636386.354:33293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16035 comm="syz.2.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 326.460570][T16063] 9pnet: Could not find request transport: t [ 326.669551][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4639'. [ 327.279701][T16092] netlink: 'syz.3.4645': attribute type 1 has an invalid length. [ 327.440843][T16096] 9pnet: Could not find request transport: t [ 327.882628][T16108] bridge0: port 1(syz_tun) entered blocking state [ 327.889601][T16108] bridge0: port 1(syz_tun) entered disabled state [ 327.896390][T16108] syz_tun: entered allmulticast mode [ 327.902383][T16108] syz_tun: entered promiscuous mode [ 327.908191][T16108] bridge0: port 1(syz_tun) entered blocking state [ 327.914663][T16108] bridge0: port 1(syz_tun) entered forwarding state [ 327.932249][T16108] syz_tun: left allmulticast mode [ 327.937398][T16108] syz_tun: left promiscuous mode [ 327.942539][T16108] bridge0: port 1(syz_tun) entered disabled state [ 328.108515][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4654'. [ 328.518567][T16124] netlink: 'syz.2.4657': attribute type 1 has an invalid length. [ 328.584955][T16126] 9pnet: Could not find request transport: tc [ 328.708350][T16135] 9pnet_virtio: no channels available for device 127.0.0.1 [ 328.730353][T16132] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.768318][T16132] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.820274][T16132] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.878432][T16132] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.942457][ T8257] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.958450][ T8257] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.969858][ T8257] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.012115][ T8257] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.083888][T16155] netlink: 'syz.4.4668': attribute type 1 has an invalid length. [ 329.132176][T16159] netlink: 'syz.6.4670': attribute type 1 has an invalid length. [ 329.223134][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4671'. [ 329.798349][T16171] siw: device registration error -23 [ 330.098377][T16181] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.151636][T16181] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.214513][T16181] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.283090][T16191] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4680'. [ 330.297610][T16181] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.301431][T16191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4680'. [ 330.375463][ T8254] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.388584][ T8254] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.402256][ T8250] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.412631][T16194] 9pnet: Could not find request transport: tc [ 330.417267][ T8250] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.449713][T16198] netlink: 'syz.6.4682': attribute type 1 has an invalid length. [ 330.457692][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4682'. [ 331.040556][T16189] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 331.058900][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4688'. [ 331.274768][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 331.274785][ T29] audit: type=1326 audit(1754636391.842:33803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.304725][ T29] audit: type=1326 audit(1754636391.842:33804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.328486][ T29] audit: type=1326 audit(1754636391.842:33805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.352132][ T29] audit: type=1326 audit(1754636391.842:33806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.375845][ T29] audit: type=1326 audit(1754636391.842:33807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.399868][ T29] audit: type=1326 audit(1754636391.922:33808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.423508][ T29] audit: type=1326 audit(1754636391.932:33809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.447185][ T29] audit: type=1326 audit(1754636391.932:33810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.470907][ T29] audit: type=1326 audit(1754636391.932:33811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 331.494522][ T29] audit: type=1326 audit(1754636391.932:33812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.3.4690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 332.182285][T16233] netlink: 'syz.3.4694': attribute type 1 has an invalid length. [ 332.690241][T16238] bridge0: port 1(syz_tun) entered blocking state [ 332.696834][T16238] bridge0: port 1(syz_tun) entered disabled state [ 332.712810][T16238] syz_tun: entered allmulticast mode [ 332.725207][T16238] syz_tun: entered promiscuous mode [ 332.737138][T16238] bridge0: port 1(syz_tun) entered blocking state [ 332.743639][T16238] bridge0: port 1(syz_tun) entered forwarding state [ 332.799598][T16241] wÞ¡ÿ (16241) used greatest stack depth: 9472 bytes left [ 332.956693][ T9] hid_parser_main: 57 callbacks suppressed [ 332.956728][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 332.970100][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 332.971928][T16262] netlink: 'syz.5.4705': attribute type 1 has an invalid length. [ 332.977743][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 332.993020][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 333.000453][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 333.008075][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 333.015600][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 333.023194][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 333.030805][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 333.038338][ T9] hid-generic 0000:7FFF:0009.004C: unknown main item tag 0x0 [ 333.047010][ T9] hid-generic 0000:7FFF:0009.004C: hidraw0: HID vc.87 Device [syz0] on syz1 [ 333.173897][T16268] netlink: 'syz.6.4707': attribute type 1 has an invalid length. [ 333.202103][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4709'. [ 333.289384][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4710'. [ 333.488321][T16284] wÞ¡ÿ (16284) used greatest stack depth: 9208 bytes left [ 334.114676][T16304] 9pnet_fd: Insufficient options for proto=fd [ 334.293244][T16308] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.327418][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4723'. [ 334.360131][T16308] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.373272][T16316] netlink: 'syz.3.4724': attribute type 1 has an invalid length. [ 334.381105][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4724'. [ 334.448750][T16308] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.464774][T16321] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.481509][ T9439] hid-generic 0000:7FFF:0009.004D: hidraw0: HID vc.87 Device [syz0] on syz1 [ 334.498391][T16308] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.528939][T16321] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.574978][ T8257] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.586252][ T8257] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.597920][ T8254] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.608386][T16321] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.622415][ T8257] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.638998][T16321] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.734044][ T8257] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.765518][ T8250] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.795782][ T8250] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.805110][T16339] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4731'. [ 334.816985][ T8250] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.831574][T16342] netlink: 'syz.2.4733': attribute type 1 has an invalid length. [ 334.859866][T16344] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4734'. [ 334.904461][T16349] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.919662][T16349] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.927056][T16349] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 334.939114][T16349] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 334.969935][T16351] macvlan2: entered promiscuous mode [ 334.975281][T16351] macvlan2: entered allmulticast mode [ 334.981839][T16351] bond10: entered promiscuous mode [ 334.987387][T16351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.995309][T16351] bond10: left promiscuous mode [ 335.155507][T16359] 9pnet_fd: Insufficient options for proto=fd [ 335.206510][T16361] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.251219][T16361] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.311928][T16361] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.339425][T16368] netlink: 'syz.3.4742': attribute type 1 has an invalid length. [ 335.347270][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4742'. [ 335.369329][T16361] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.515667][T16374] netlink: 'syz.5.4744': attribute type 1 has an invalid length. [ 335.551803][T16335] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 335.591924][T16378] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4746'. [ 335.604108][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4746'. [ 335.616334][ T9438] hid-generic 0000:7FFF:0009.004E: hidraw0: HID vc.87 Device [syz0] on syz1 [ 335.641427][T16387] 9pnet_fd: Insufficient options for proto=fd [ 335.665386][ T9439] hid-generic 0000:7FFF:0009.004F: hidraw0: HID vc.87 Device [syz0] on syz1 [ 335.834073][T16396] netlink: 'syz.5.4753': attribute type 1 has an invalid length. [ 336.171413][T16403] netlink: 'syz.2.4756': attribute type 1 has an invalid length. [ 336.256491][T16406] __nla_validate_parse: 1 callbacks suppressed [ 336.256515][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 336.452478][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 336.452492][ T29] audit: type=1326 audit(1754636397.014:34168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.483635][ T29] audit: type=1326 audit(1754636397.014:34169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.507335][ T29] audit: type=1326 audit(1754636397.014:34170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.531228][ T29] audit: type=1326 audit(1754636397.014:34171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.555067][ T29] audit: type=1326 audit(1754636397.014:34172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.578901][ T29] audit: type=1326 audit(1754636397.014:34173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.602578][ T29] audit: type=1326 audit(1754636397.014:34174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.626342][ T29] audit: type=1326 audit(1754636397.024:34175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.649955][ T29] audit: type=1326 audit(1754636397.024:34176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.673680][ T29] audit: type=1326 audit(1754636397.024:34177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 336.725696][T16420] netlink: 'syz.3.4764': attribute type 1 has an invalid length. [ 336.733572][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4764'. [ 336.764827][T16422] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.831223][T16422] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.882013][T16422] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.931857][T16422] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.966810][ T36] hid-generic 0000:7FFF:0009.0050: hidraw0: HID vc.87 Device [syz0] on syz1 [ 337.076894][ T9439] hid-generic 0000:7FFF:0009.0051: hidraw0: HID vc.87 Device [syz0] on syz1 [ 337.845493][ T1038] hid-generic 0000:7FFF:0009.0052: hidraw0: HID vc.87 Device [syz0] on syz1 [ 338.131131][ T8251] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.143373][ T8251] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.155324][ T8247] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.166511][ T8251] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.380875][ T8247] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.408754][ T8247] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.417268][ T8247] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.426944][ T8247] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.461421][ T36] hid_parser_main: 459 callbacks suppressed [ 338.461443][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.474949][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.482474][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.489895][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.497363][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.504834][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.512353][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.519836][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.527383][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.534911][ T36] hid-generic 0000:7FFF:0009.0053: unknown main item tag 0x0 [ 338.543565][ T36] hid-generic 0000:7FFF:0009.0053: hidraw0: HID vc.87 Device [syz0] on syz1 [ 338.709474][T16475] 9pnet_fd: Insufficient options for proto=fd [ 338.809307][T16482] bridge_slave_0: left allmulticast mode [ 338.815213][T16482] bridge_slave_0: left promiscuous mode [ 338.821027][T16482] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.832689][T16482] bridge_slave_1: left allmulticast mode [ 338.838386][T16482] bridge_slave_1: left promiscuous mode [ 338.844155][T16482] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.861109][T16482] bond0: (slave bond_slave_0): Releasing backup interface [ 338.870358][T16482] bond_slave_0: left promiscuous mode [ 338.883149][T16482] bond0: (slave bond_slave_1): Releasing backup interface [ 338.891787][T16482] bond_slave_1: left promiscuous mode [ 338.901310][T16482] team0: Port device team_slave_0 removed [ 339.026954][T16482] team0: Port device team_slave_1 removed [ 339.036229][T16482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.043711][T16482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.054817][T16482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.062478][T16482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.141585][T16482] bond1: (slave gretap1): Releasing active interface [ 339.365272][ T3934] hid-generic 0000:7FFF:0009.0054: hidraw0: HID vc.87 Device [syz0] on syz1 [ 339.378720][T16499] 8021q: adding VLAN 0 to HW filter on device bond13 [ 339.389607][T16494] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.405599][T16499] 8021q: adding VLAN 0 to HW filter on device bond13 [ 339.414351][T16499] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 339.427233][T16499] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 339.428250][T16510] netlink: 'syz.3.4797': attribute type 1 has an invalid length. [ 339.442476][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4797'. [ 339.460174][T16512] macvlan3: entered promiscuous mode [ 339.465762][T16512] macvlan3: entered allmulticast mode [ 339.471924][T16512] bond13: entered promiscuous mode [ 339.477689][T16512] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 339.485778][T16512] bond13: left promiscuous mode [ 339.497346][T16494] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.566924][T16494] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.666196][T16494] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.767560][ T8250] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.780017][ T8254] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.792771][ T8254] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.807559][ T8254] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.821306][T16525] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4802'. [ 339.881162][ T9439] hid-generic 0000:7FFF:0009.0055: hidraw0: HID vc.87 Device [syz0] on syz1 [ 340.204711][T16540] netlink: 'syz.6.4808': attribute type 1 has an invalid length. [ 340.212517][T16540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4808'. [ 340.414230][T16545] lo speed is unknown, defaulting to 1000 [ 340.794959][T16524] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 341.189288][T16561] lo speed is unknown, defaulting to 1000 [ 341.320484][T16560] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.507800][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 341.507818][ T29] audit: type=1400 audit(1754636402.048:34428): avc: denied { name_bind } for pid=16555 comm="syz.4.4813" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 341.536524][ T29] audit: type=1400 audit(1754636402.048:34429): avc: denied { node_bind } for pid=16555 comm="syz.4.4813" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 341.568338][T16560] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.603544][ T29] audit: type=1400 audit(1754636402.148:34430): avc: denied { mount } for pid=16574 comm=77DEA105FF07 name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 341.625774][ T29] audit: type=1400 audit(1754636402.148:34431): avc: denied { mac_admin } for pid=16574 comm=77DEA105FF07 capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 341.647099][ T29] audit: type=1400 audit(1754636402.148:34432): avc: denied { relabelto } for pid=16574 comm=77DEA105FF07 name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 341.674341][ T29] audit: type=1400 audit(1754636402.148:34433): avc: denied { associate } for pid=16574 comm=77DEA105FF07 name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 341.702197][ T29] audit: type=1326 audit(1754636402.158:34434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 341.725787][ T29] audit: type=1326 audit(1754636402.158:34435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 341.749522][ T29] audit: type=1326 audit(1754636402.158:34436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 341.773246][ T29] audit: type=1326 audit(1754636402.158:34437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 341.821149][ T36] hid-generic 0000:7FFF:0009.0056: hidraw0: HID vc.87 Device [syz0] on syz1 [ 341.832445][T16560] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.878303][T16579] bridge0: port 1(syz_tun) entered blocking state [ 341.884886][T16579] bridge0: port 1(syz_tun) entered disabled state [ 341.892411][T16579] syz_tun: entered allmulticast mode [ 341.898445][T16579] syz_tun: entered promiscuous mode [ 341.904068][T16579] bridge0: port 1(syz_tun) entered blocking state [ 341.910592][T16579] bridge0: port 1(syz_tun) entered forwarding state [ 341.919783][T16560] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.942485][T16579] syz_tun: left allmulticast mode [ 341.947625][T16579] syz_tun: left promiscuous mode [ 341.952851][T16579] bridge0: port 1(syz_tun) entered disabled state [ 341.959506][ T36] hid-generic 0000:7FFF:0009.0057: hidraw0: HID vc.87 Device [syz0] on syz1 [ 342.052396][T16592] 9pnet_fd: Insufficient options for proto=fd [ 342.699202][T16609] lo speed is unknown, defaulting to 1000 [ 343.041322][T16616] netlink: 'syz.3.4832': attribute type 1 has an invalid length. [ 343.114567][T16616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.188915][T16620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.197600][T16620] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 343.212810][T16620] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 343.335873][T16621] syz_tun: left allmulticast mode [ 343.341108][T16621] syz_tun: left promiscuous mode [ 343.346736][T16621] bridge0: port 1(syz_tun) entered disabled state [ 343.392223][T16616] macvlan2: entered promiscuous mode [ 343.397636][T16616] macvlan2: entered allmulticast mode [ 343.423317][T16616] bond4: entered promiscuous mode [ 343.425850][T16629] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4835'. [ 343.438623][T16629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4835'. [ 343.454902][T16616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 343.464119][T16616] bond4: left promiscuous mode [ 343.491049][ T8247] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.511389][ T8247] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.554315][ T8247] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.648085][ T8247] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.051214][ T36] hid_parser_main: 325 callbacks suppressed [ 344.051236][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.064743][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.072306][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.079853][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.087293][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.094859][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.102333][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.109784][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.117235][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.124633][ T36] hid-generic 0000:7FFF:0009.0058: unknown main item tag 0x0 [ 344.133469][ T36] hid-generic 0000:7FFF:0009.0058: hidraw0: HID vc.87 Device [syz0] on syz1 [ 344.171035][T16628] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 344.775111][T16661] lo speed is unknown, defaulting to 1000 [ 346.185864][T16662] netlink: 'syz.2.4845': attribute type 1 has an invalid length. [ 346.193778][T16662] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4845'. [ 346.214724][T16670] netlink: 'syz.5.4847': attribute type 1 has an invalid length. [ 346.249234][T16670] 8021q: adding VLAN 0 to HW filter on device bond14 [ 346.298126][T16670] 8021q: adding VLAN 0 to HW filter on device bond14 [ 346.333990][T16670] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 346.346245][T16670] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 346.405571][T16681] macvlan3: entered promiscuous mode [ 346.411067][T16681] macvlan3: entered allmulticast mode [ 346.419100][T16681] bond14: entered promiscuous mode [ 346.430380][T16681] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 346.452231][T16681] bond14: left promiscuous mode [ 346.477579][T16690] 9pnet_fd: Insufficient options for proto=fd [ 346.658815][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 346.658830][ T29] audit: type=1326 audit(1754636407.194:34526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.688823][ T29] audit: type=1326 audit(1754636407.194:34527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.712586][ T29] audit: type=1326 audit(1754636407.194:34528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.736271][ T29] audit: type=1326 audit(1754636407.194:34529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.759944][ T29] audit: type=1326 audit(1754636407.194:34530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.783651][ T29] audit: type=1326 audit(1754636407.194:34531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.807464][ T29] audit: type=1326 audit(1754636407.194:34532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.831611][ T29] audit: type=1326 audit(1754636407.194:34533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.855346][ T29] audit: type=1326 audit(1754636407.194:34534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 346.879040][ T29] audit: type=1326 audit(1754636407.194:34535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16698 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 347.185561][T16705] lo speed is unknown, defaulting to 1000 [ 347.846818][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4866'. [ 347.907641][T16717] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.972509][T16717] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.027225][T16717] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.086799][T16717] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.173648][ T8250] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.201407][ T8250] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.222981][ T8250] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.231397][ T8250] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.886464][T16757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4879'. [ 348.963565][T16759] netlink: 'syz.4.4880': attribute type 1 has an invalid length. [ 349.039711][T16767] netlink: 'syz.4.4884': attribute type 1 has an invalid length. [ 349.055393][T16767] 8021q: adding VLAN 0 to HW filter on device bond11 [ 349.078725][T16767] 8021q: adding VLAN 0 to HW filter on device bond11 [ 349.086344][T16767] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 349.098694][T16767] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 349.127461][T16769] macvlan2: entered promiscuous mode [ 349.132849][T16769] macvlan2: entered allmulticast mode [ 349.150737][T16769] bond11: entered promiscuous mode [ 349.169030][T16769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 349.192257][T16769] bond11: left promiscuous mode [ 349.520751][T16783] netlink: 'syz.4.4890': attribute type 1 has an invalid length. [ 349.528622][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4890'. [ 349.629157][T16789] syz_tun: left allmulticast mode [ 349.634272][T16789] syz_tun: left promiscuous mode [ 349.639485][T16789] bridge0: port 1(syz_tun) entered disabled state [ 349.729473][T16795] 9pnet_fd: Insufficient options for proto=fd [ 349.975872][T16807] 9pnet_fd: Insufficient options for proto=fd [ 350.562885][T16825] 9pnet_fd: Insufficient options for proto=fd [ 351.531249][T16854] 9pnet_fd: Insufficient options for proto=fd [ 351.631608][T16861] 9pnet_fd: Insufficient options for proto=fd [ 351.810894][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4922'. [ 352.309915][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 352.309934][ T29] audit: type=1400 audit(1754636412.851:34823): avc: denied { allowed } for pid=16876 comm="syz.3.4927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 352.335961][ T29] audit: type=1400 audit(1754636412.851:34824): avc: denied { create } for pid=16876 comm="syz.3.4927" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.357738][ T29] audit: type=1400 audit(1754636412.851:34825): avc: denied { map } for pid=16876 comm="syz.3.4927" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.382303][ T29] audit: type=1400 audit(1754636412.851:34826): avc: denied { read write } for pid=16876 comm="syz.3.4927" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 352.572469][ T29] audit: type=1400 audit(1754636413.101:34827): avc: denied { write } for pid=16885 comm="syz.6.4930" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 352.595570][ T29] audit: type=1400 audit(1754636413.101:34828): avc: denied { firmware_load } for pid=16885 comm="syz.6.4930" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 352.665437][ T29] audit: type=1400 audit(1754636413.191:34829): avc: denied { read write } for pid=16892 comm="syz.5.4933" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 352.689959][ T29] audit: type=1400 audit(1754636413.191:34830): avc: denied { open } for pid=16892 comm="syz.5.4933" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 352.715280][ T29] audit: type=1400 audit(1754636413.201:34831): avc: denied { create } for pid=16885 comm="syz.6.4930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.734943][ T29] audit: type=1400 audit(1754636413.201:34832): avc: denied { setopt } for pid=16885 comm="syz.6.4930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.758098][T16893] bridge0: port 1(syz_tun) entered blocking state [ 352.764646][T16893] bridge0: port 1(syz_tun) entered disabled state [ 352.772924][T16893] syz_tun: entered allmulticast mode [ 352.778738][T16893] syz_tun: entered promiscuous mode [ 352.784584][T16893] bridge0: port 1(syz_tun) entered blocking state [ 352.784793][T16893] bridge0: port 1(syz_tun) entered forwarding state [ 352.799113][T16893] syz_tun: left allmulticast mode [ 352.799131][T16893] syz_tun: left promiscuous mode [ 352.799330][T16893] bridge0: port 1(syz_tun) entered disabled state [ 353.356357][T16921] netlink: 'syz.5.4939': attribute type 1 has an invalid length. [ 353.364191][T16921] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4939'. [ 353.700101][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'. [ 353.738751][T16932] netlink: 'syz.4.4946': attribute type 1 has an invalid length. [ 353.746603][T16932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4946'. [ 354.031408][T16949] bridge0: port 1(syz_tun) entered blocking state [ 354.037998][T16949] bridge0: port 1(syz_tun) entered disabled state [ 354.099029][T16949] syz_tun: entered allmulticast mode [ 354.113346][T16949] syz_tun: entered promiscuous mode [ 354.127406][T16949] bridge0: port 1(syz_tun) entered blocking state [ 354.133967][T16949] bridge0: port 1(syz_tun) entered forwarding state [ 354.156845][T16951] syz_tun: left allmulticast mode [ 354.161950][T16951] syz_tun: left promiscuous mode [ 354.167193][T16951] bridge0: port 1(syz_tun) entered disabled state [ 354.436735][T16959] bridge0: port 1(syz_tun) entered blocking state [ 354.443284][T16959] bridge0: port 1(syz_tun) entered disabled state [ 354.452935][T16959] syz_tun: entered allmulticast mode [ 354.463659][T16959] syz_tun: entered promiscuous mode [ 354.493313][T16959] bridge0: port 1(syz_tun) entered blocking state [ 354.499812][T16959] bridge0: port 1(syz_tun) entered forwarding state [ 354.529573][T16962] syz_tun: left allmulticast mode [ 354.534862][T16962] syz_tun: left promiscuous mode [ 354.539977][T16962] bridge0: port 1(syz_tun) entered disabled state [ 354.640402][ T3934] hid_parser_main: 57 callbacks suppressed [ 354.640419][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.653894][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.661324][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.668854][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.676296][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.683742][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.691156][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.698696][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.706252][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.713698][ T3934] hid-generic 0000:7FFF:0009.0059: unknown main item tag 0x0 [ 354.727327][ T3934] hid-generic 0000:7FFF:0009.0059: hidraw0: HID vc.87 Device [syz0] on syz1 [ 354.865344][T16972] netlink: 'syz.2.4961': attribute type 4 has an invalid length. [ 354.882206][T16972] netlink: 'syz.2.4961': attribute type 4 has an invalid length. [ 354.987440][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4962'. [ 355.085546][ T3382] hid-generic 0000:7FFF:0009.005A: hidraw0: HID vc.87 Device [syz0] on syz1 [ 355.198571][T16991] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.247236][T16991] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.307570][T16991] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.365968][T16991] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.442517][ T8248] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.460878][ T8248] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.488505][ T8248] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.504768][ T8248] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.586813][T16999] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.627398][T16999] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.676735][T16999] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.707026][T16999] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.833470][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4972'. [ 355.849983][T17010] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4973'. [ 355.867620][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4973'. [ 355.935347][ T9] hid-generic 0000:7FFF:0009.005B: hidraw0: HID vc.87 Device [syz0] on syz1 [ 355.984628][T17021] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4978'. [ 355.994235][T17021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4978'. [ 356.024177][ T9438] hid-generic 0000:7FFF:0009.005C: hidraw0: HID vc.87 Device [syz0] on syz1 [ 356.611235][T17008] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 356.619413][T17008] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 356.831654][T17037] bridge0: port 1(syz_tun) entered blocking state [ 356.838279][T17037] bridge0: port 1(syz_tun) entered disabled state [ 356.845213][T17037] syz_tun: entered allmulticast mode [ 356.851205][T17037] syz_tun: entered promiscuous mode [ 356.868220][T17037] bridge0: port 1(syz_tun) entered blocking state [ 356.874730][T17037] bridge0: port 1(syz_tun) entered forwarding state [ 356.889368][T17037] syz_tun: left allmulticast mode [ 356.894548][T17037] syz_tun: left promiscuous mode [ 356.899635][T17037] bridge0: port 1(syz_tun) entered disabled state [ 356.943464][ T9439] hid-generic 0000:7FFF:0009.005D: hidraw0: HID vc.87 Device [syz0] on syz1 [ 357.095492][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4991'. [ 357.347150][T17066] bridge0: port 1(syz_tun) entered blocking state [ 357.353984][T17066] bridge0: port 1(syz_tun) entered disabled state [ 357.362316][T17066] syz_tun: entered allmulticast mode [ 357.368591][T17066] syz_tun: entered promiscuous mode [ 357.375720][T17066] bridge0: port 1(syz_tun) entered blocking state [ 357.382328][T17066] bridge0: port 1(syz_tun) entered forwarding state [ 357.397859][T17066] syz_tun: left allmulticast mode [ 357.402937][T17066] syz_tun: left promiscuous mode [ 357.408327][T17066] bridge0: port 1(syz_tun) entered disabled state [ 357.697934][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 357.697949][ T29] audit: type=1326 audit(1754636418.239:35060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.777351][ T29] audit: type=1326 audit(1754636418.239:35061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.801075][ T29] audit: type=1326 audit(1754636418.239:35062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.825024][ T29] audit: type=1326 audit(1754636418.239:35063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.848635][ T29] audit: type=1326 audit(1754636418.239:35064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.872375][ T29] audit: type=1326 audit(1754636418.279:35065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.896162][ T29] audit: type=1326 audit(1754636418.279:35066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.919866][ T29] audit: type=1326 audit(1754636418.279:35067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.943667][ T29] audit: type=1326 audit(1754636418.279:35068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 357.967559][ T29] audit: type=1326 audit(1754636418.279:35069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17072 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cbeeb69 code=0x7ffc0000 [ 358.073610][T17084] bridge0: port 1(syz_tun) entered blocking state [ 358.080296][T17084] bridge0: port 1(syz_tun) entered disabled state [ 358.088289][T17084] syz_tun: entered allmulticast mode [ 358.094573][T17084] syz_tun: entered promiscuous mode [ 358.100916][T17084] bridge0: port 1(syz_tun) entered blocking state [ 358.107486][T17084] bridge0: port 1(syz_tun) entered forwarding state [ 358.123689][T17084] syz_tun: left allmulticast mode [ 358.128975][T17084] syz_tun: left promiscuous mode [ 358.134208][T17084] bridge0: port 1(syz_tun) entered disabled state [ 358.303854][T17095] syz_tun: entered allmulticast mode [ 358.322923][T17094] syz_tun: left allmulticast mode [ 358.552916][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5008'. [ 359.180593][ T8247] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.201309][ T8247] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.219054][ T8247] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.230065][ T8247] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.786498][T17138] siw: device registration error -23 [ 359.796408][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5022'. [ 359.876592][T17147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5028'. [ 360.010418][T17157] __nla_validate_parse: 2 callbacks suppressed [ 360.010436][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5030'. [ 360.142647][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5032'. [ 360.263313][T17167] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5034'. [ 360.755076][T17152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 360.772783][T17152] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 360.807805][T17187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5041'. [ 360.971693][ T9439] hid_parser_main: 325 callbacks suppressed [ 360.971708][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 360.985182][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 360.992655][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.000072][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.007487][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.014873][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.022341][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.029885][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.037316][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.044896][ T9439] hid-generic 0000:7FFF:0009.005E: unknown main item tag 0x0 [ 361.056119][ T9439] hid-generic 0000:7FFF:0009.005E: hidraw0: HID vc.87 Device [syz0] on syz1 [ 361.121484][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5046'. [ 361.708773][T17214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5051'. [ 361.743647][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5049'. [ 361.973884][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 362.712800][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 362.712817][ T29] audit: type=1400 audit(1754636423.258:35305): avc: denied { map_create } for pid=17239 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.738586][ T29] audit: type=1400 audit(1754636423.258:35306): avc: denied { prog_run } for pid=17239 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.757803][ T29] audit: type=1400 audit(1754636423.258:35307): avc: denied { map_read map_write } for pid=17239 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.834394][T17243] netlink: 'syz.3.5062': attribute type 1 has an invalid length. [ 362.842211][T17243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5062'. [ 362.888326][ T29] audit: type=1400 audit(1754636423.428:35308): avc: denied { create } for pid=17244 comm="syz.3.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.927169][ T29] audit: type=1400 audit(1754636423.478:35309): avc: denied { execmem } for pid=17244 comm="syz.3.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 362.969702][ T29] audit: type=1400 audit(1754636423.508:35310): avc: denied { create } for pid=17246 comm="syz.4.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.990627][ T29] audit: type=1400 audit(1754636423.518:35311): avc: denied { write } for pid=17246 comm="syz.4.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 363.086844][ T29] audit: type=1400 audit(1754636423.618:35312): avc: denied { create } for pid=17249 comm="syz.4.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.106606][ T29] audit: type=1400 audit(1754636423.618:35313): avc: denied { write } for pid=17249 comm="syz.4.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.126228][ T29] audit: type=1400 audit(1754636423.618:35314): avc: denied { connect } for pid=17249 comm="syz.4.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.152298][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5065'. [ 364.196736][T17292] lo speed is unknown, defaulting to 1000 [ 364.225769][ T8254] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.270217][ T8254] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.341845][T17292] chnl_net:caif_netlink_parms(): no params data found [ 364.372087][ T8254] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.441034][T17292] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.448312][T17292] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.457398][T17292] bridge_slave_0: entered allmulticast mode [ 364.464025][T17292] bridge_slave_0: entered promiscuous mode [ 364.471841][ T8254] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.486222][T17292] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.493330][T17292] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.500795][T17292] bridge_slave_1: entered allmulticast mode [ 364.507885][T17292] bridge_slave_1: entered promiscuous mode [ 364.537041][T17292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.550159][T17292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.679797][ T8254] bond0 (unregistering): Released all slaves [ 364.689016][ T8254] bond1 (unregistering): Released all slaves [ 364.699633][ T8254] bond2 (unregistering): Released all slaves [ 364.709205][ T8254] bond3 (unregistering): Released all slaves [ 364.718956][ T8254] bond4 (unregistering): Released all slaves [ 364.729717][ T8254] bond5 (unregistering): Released all slaves [ 364.739650][ T8254] bond6 (unregistering): Released all slaves [ 364.748974][ T8254] bond7 (unregistering): Released all slaves [ 364.761632][ T8254] bond8 (unregistering): Released all slaves [ 364.770988][ T8254] bond9 (unregistering): Released all slaves [ 364.804401][ T8254] bond10 (unregistering): Released all slaves [ 364.820368][ T8254] bond11 (unregistering): Released all slaves [ 364.838787][ T8254] bond12 (unregistering): Released all slaves [ 364.857917][ T8254] bond13 (unregistering): Released all slaves [ 364.876902][ T8254] bond14 (unregistering): Released all slaves [ 364.887434][T17292] team0: Port device team_slave_0 added [ 364.897876][T17317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17317 comm=syz.2.5084 [ 364.900203][T17292] team0: Port device team_slave_1 added [ 364.975223][T17292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.982259][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.008260][T17292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.038683][T17292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.045693][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.071719][T17292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.091596][ T8254] hsr_slave_0: left promiscuous mode [ 365.101544][ T8254] hsr_slave_1: left promiscuous mode [ 365.111335][ T8254] veth1_macvtap: left promiscuous mode [ 365.116964][ T8254] veth0_macvtap: left promiscuous mode [ 365.129089][ T8254] veth1_vlan: left promiscuous mode [ 365.136528][ T8254] veth0_vlan: left promiscuous mode [ 365.269005][T17337] __nla_validate_parse: 1 callbacks suppressed [ 365.269027][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5087'. [ 365.305997][ T3382] lo speed is unknown, defaulting to 1000 [ 365.311898][ T3382] infiniband syz0: ib_query_port failed (-19) [ 365.358006][T17292] hsr_slave_0: entered promiscuous mode [ 365.373501][T17292] hsr_slave_1: entered promiscuous mode [ 365.382629][T17292] debugfs: 'hsr0' already exists in 'hsr' [ 365.388471][T17292] Cannot create hsr debugfs directory [ 365.680781][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5095'. [ 365.753213][T17292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.763550][T17292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.772508][T17292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.782824][T17292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.822136][T17292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.835552][T17292] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.845932][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.853055][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.865370][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.872504][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.886025][ T3382] hid-generic 0000:7FFF:0009.005F: hidraw0: HID vc.87 Device [syz0] on syz1 [ 365.904914][T17292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.915431][T17292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.971607][T17292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.002090][T17379] hub 6-0:1.0: USB hub found [ 366.007006][T17379] hub 6-0:1.0: 8 ports detected [ 366.108328][T17292] veth0_vlan: entered promiscuous mode [ 366.118158][T17292] veth1_vlan: entered promiscuous mode [ 366.135818][T17292] veth0_macvtap: entered promiscuous mode [ 366.145674][T17292] veth1_macvtap: entered promiscuous mode [ 366.159672][T17292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.171255][T17292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.184808][ T8253] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.196676][ T8253] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.205626][ T8253] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.216522][ T8253] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.266378][T17394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5079'. [ 366.294850][T17396] netlink: 'syz.5.5101': attribute type 1 has an invalid length. [ 366.302799][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5101'. [ 366.345970][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5102'. [ 366.363201][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5103'. [ 366.735240][T17416] FAULT_INJECTION: forcing a failure. [ 366.735240][T17416] name failslab, interval 1, probability 0, space 0, times 0 [ 366.748027][T17416] CPU: 0 UID: 0 PID: 17416 Comm: syz.4.5110 Tainted: G W 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) [ 366.748115][T17416] Tainted: [W]=WARN [ 366.748124][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.748142][T17416] Call Trace: [ 366.748151][T17416] [ 366.748160][T17416] __dump_stack+0x1d/0x30 [ 366.748185][T17416] dump_stack_lvl+0xe8/0x140 [ 366.748210][T17416] dump_stack+0x15/0x1b [ 366.748273][T17416] should_fail_ex+0x265/0x280 [ 366.748304][T17416] should_failslab+0x8c/0xb0 [ 366.748366][T17416] kmem_cache_alloc_node_noprof+0x57/0x320 [ 366.748447][T17416] ? __alloc_skb+0x101/0x320 [ 366.748473][T17416] __alloc_skb+0x101/0x320 [ 366.748496][T17416] ? audit_log_start+0x365/0x6c0 [ 366.748600][T17416] audit_log_start+0x380/0x6c0 [ 366.748632][T17416] audit_seccomp+0x48/0x100 [ 366.748656][T17416] ? __seccomp_filter+0x68c/0x10d0 [ 366.748676][T17416] __seccomp_filter+0x69d/0x10d0 [ 366.748731][T17416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 366.748824][T17416] ? vfs_write+0x75e/0x8e0 [ 366.748927][T17416] ? __rcu_read_unlock+0x4f/0x70 [ 366.748974][T17416] ? __fget_files+0x184/0x1c0 [ 366.748998][T17416] __secure_computing+0x82/0x150 [ 366.749059][T17416] syscall_trace_enter+0xcf/0x1e0 [ 366.749080][T17416] do_syscall_64+0xac/0x200 [ 366.749101][T17416] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 366.749121][T17416] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 366.749164][T17416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.749183][T17416] RIP: 0033:0x7f69e2d1eb69 [ 366.749272][T17416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.749296][T17416] RSP: 002b:00007f69e1387038 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 366.749338][T17416] RAX: ffffffffffffffda RBX: 00007f69e2f45fa0 RCX: 00007f69e2d1eb69 [ 366.749349][T17416] RDX: 0000200000000140 RSI: 000000000000000e RDI: 0000000000000000 [ 366.749360][T17416] RBP: 00007f69e1387090 R08: 0000000000000000 R09: 0000000000000000 [ 366.749370][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.749381][T17416] R13: 0000000000000000 R14: 00007f69e2f45fa0 R15: 00007ffcf98bed58 [ 366.749398][T17416] [ 367.021844][T17422] netlink: 'syz.6.5113': attribute type 1 has an invalid length. [ 367.029817][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5113'. [ 367.045773][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5114'. [ 367.059748][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5115'. [ 367.159533][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5118'. [ 367.412006][T17450] macvlan1: entered promiscuous mode [ 367.427267][T17450] ipvlan0: entered promiscuous mode [ 367.437229][T17450] ipvlan0: left promiscuous mode [ 367.445703][T17450] macvlan1: left promiscuous mode [ 367.453507][T17453] netlink: 'syz.5.5127': attribute type 1 has an invalid length. [ 368.051339][T17479] netlink: 'syz.4.5138': attribute type 3 has an invalid length. [ 368.086263][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 368.086315][ T29] audit: type=1400 audit(1754636428.627:35473): avc: denied { write } for pid=17477 comm="syz.4.5138" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 368.127818][ T29] audit: type=1400 audit(1754636428.667:35474): avc: denied { ioctl } for pid=17477 comm="syz.4.5138" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 368.222501][T17482] netlink: 'syz.6.5139': attribute type 1 has an invalid length. [ 368.289414][ T29] audit: type=1400 audit(1754636428.837:35475): avc: denied { name_bind } for pid=17483 comm="syz.4.5140" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 368.379920][ T29] audit: type=1326 audit(1754636428.927:35476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 368.403587][ T29] audit: type=1326 audit(1754636428.927:35477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 368.431170][ T29] audit: type=1326 audit(1754636428.927:35478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 368.454931][ T29] audit: type=1326 audit(1754636428.927:35479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 368.478706][ T29] audit: type=1326 audit(1754636428.927:35480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 368.508745][ T29] audit: type=1326 audit(1754636428.977:35481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 368.532437][ T29] audit: type=1326 audit(1754636428.997:35482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.4.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 369.176422][T17516] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.218728][T17516] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.298495][T17516] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.359645][T17516] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.426965][ T8254] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.447840][ T8254] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.467407][ T8254] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.475628][ T8254] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.782543][T17542] 9pnet_fd: Insufficient options for proto=fd [ 370.029495][T17555] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.099763][T17555] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.160257][T17555] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.241470][T17555] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.326880][ T8247] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.351836][ T8247] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.366731][ T8247] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.376143][ T8247] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.480372][T17576] 9pnet_fd: Insufficient options for proto=fd [ 370.602139][T17581] __nla_validate_parse: 13 callbacks suppressed [ 370.602208][T17581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5178'. [ 371.230348][T17604] 9pnet_fd: Insufficient options for proto=fd [ 371.284503][T17610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5190'. [ 371.374514][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5191'. [ 371.619545][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5193'. [ 372.157215][T17636] 9pnet_fd: Insufficient options for proto=fd [ 372.199351][T17645] netlink: 'syz.6.5202': attribute type 1 has an invalid length. [ 372.207168][T17645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5202'. [ 372.285228][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5206'. [ 372.438832][T17661] macvlan1: entered promiscuous mode [ 372.445346][T17661] ipvlan0: entered promiscuous mode [ 372.451818][T17661] ipvlan0: left promiscuous mode [ 372.457300][T17661] macvlan1: left promiscuous mode [ 372.561382][T17666] 9pnet_fd: Insufficient options for proto=fd [ 372.605890][T17670] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5213'. [ 372.641349][T17674] netlink: 'syz.6.5215': attribute type 1 has an invalid length. [ 372.649373][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5215'. [ 372.816533][T17684] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5217'. [ 372.832675][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5217'. [ 373.062820][T17693] 9pnet_fd: Insufficient options for proto=fd [ 373.113868][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 373.113886][ T29] audit: type=1400 audit(1754636433.656:35782): avc: denied { create } for pid=17696 comm="syz.4.5224" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.143636][ T29] audit: type=1400 audit(1754636433.656:35783): avc: denied { map } for pid=17696 comm="syz.4.5224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.168218][ T29] audit: type=1400 audit(1754636433.656:35784): avc: denied { read write } for pid=17696 comm="syz.4.5224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=78909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.281741][ T29] audit: type=1400 audit(1754636433.826:35785): avc: denied { create } for pid=17700 comm="syz.3.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.303835][ T29] audit: type=1400 audit(1754636433.846:35786): avc: denied { connect } for pid=17700 comm="syz.3.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.325520][ T29] audit: type=1400 audit(1754636433.866:35787): avc: denied { bind } for pid=17700 comm="syz.3.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.346972][ T29] audit: type=1400 audit(1754636433.896:35788): avc: denied { read } for pid=17700 comm="syz.3.5226" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 373.370103][ T29] audit: type=1400 audit(1754636433.896:35789): avc: denied { open } for pid=17700 comm="syz.3.5226" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 373.370791][T17701] FAULT_INJECTION: forcing a failure. [ 373.370791][T17701] name failslab, interval 1, probability 0, space 0, times 0 [ 373.393521][ T29] audit: type=1400 audit(1754636433.896:35790): avc: denied { ioctl } for pid=17700 comm="syz.3.5226" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 373.431275][T17701] CPU: 0 UID: 0 PID: 17701 Comm: syz.3.5226 Tainted: G W 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) [ 373.431319][T17701] Tainted: [W]=WARN [ 373.431328][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.431417][T17701] Call Trace: [ 373.431426][T17701] [ 373.431435][T17701] __dump_stack+0x1d/0x30 [ 373.431463][T17701] dump_stack_lvl+0xe8/0x140 [ 373.431487][T17701] dump_stack+0x15/0x1b [ 373.431506][T17701] should_fail_ex+0x265/0x280 [ 373.431595][T17701] should_failslab+0x8c/0xb0 [ 373.431624][T17701] kmem_cache_alloc_node_noprof+0x57/0x320 [ 373.431677][T17701] ? __alloc_skb+0x101/0x320 [ 373.431713][T17701] __alloc_skb+0x101/0x320 [ 373.431750][T17701] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 373.431854][T17701] ? __cond_resched+0x4e/0x90 [ 373.431882][T17701] rtmsg_ifinfo+0x6d/0x110 [ 373.431991][T17701] __dev_notify_flags+0x76/0x1a0 [ 373.432018][T17701] netif_change_flags+0xac/0xd0 [ 373.432043][T17701] do_setlink+0x9d2/0x2810 [ 373.432071][T17701] ? selinux_capable+0x31/0x40 [ 373.432108][T17701] ? security_capable+0x83/0x90 [ 373.432217][T17701] ? ns_capable+0x7d/0xb0 [ 373.432235][T17701] ? netlink_ns_capable+0x86/0xa0 [ 373.432261][T17701] rtnl_newlink+0xd8b/0x12d0 [ 373.432285][T17701] ? __rcu_read_unlock+0x34/0x70 [ 373.432362][T17701] ? bpf_trace_run3+0x12c/0x1d0 [ 373.432383][T17701] ? __kfree_skb+0x109/0x150 [ 373.432409][T17701] ? __rcu_read_unlock+0x4f/0x70 [ 373.432428][T17701] ? __kfree_skb+0x109/0x150 [ 373.432525][T17701] ? __rcu_read_unlock+0x4f/0x70 [ 373.432566][T17701] ? avc_has_perm_noaudit+0x1b1/0x200 [ 373.432588][T17701] ? cred_has_capability+0x210/0x280 [ 373.432622][T17701] ? selinux_capable+0x31/0x40 [ 373.432648][T17701] ? security_capable+0x83/0x90 [ 373.432666][T17701] ? ns_capable+0x7d/0xb0 [ 373.432683][T17701] ? __pfx_rtnl_newlink+0x10/0x10 [ 373.432703][T17701] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 373.432761][T17701] netlink_rcv_skb+0x123/0x220 [ 373.432793][T17701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.432832][T17701] rtnetlink_rcv+0x1c/0x30 [ 373.432859][T17701] netlink_unicast+0x5bd/0x690 [ 373.433002][T17701] netlink_sendmsg+0x58b/0x6b0 [ 373.433034][T17701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.433140][T17701] __sock_sendmsg+0x142/0x180 [ 373.433172][T17701] ____sys_sendmsg+0x31e/0x4e0 [ 373.433205][T17701] ___sys_sendmsg+0x17b/0x1d0 [ 373.433323][T17701] __x64_sys_sendmsg+0xd4/0x160 [ 373.433358][T17701] x64_sys_call+0x191e/0x2ff0 [ 373.433377][T17701] do_syscall_64+0xd2/0x200 [ 373.433423][T17701] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 373.433444][T17701] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 373.433469][T17701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.433489][T17701] RIP: 0033:0x7f786cbeeb69 [ 373.433503][T17701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.433518][T17701] RSP: 002b:00007f786b257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.433535][T17701] RAX: ffffffffffffffda RBX: 00007f786ce15fa0 RCX: 00007f786cbeeb69 [ 373.433566][T17701] RDX: 0000000000040014 RSI: 0000200000000140 RDI: 0000000000000003 [ 373.433577][T17701] RBP: 00007f786b257090 R08: 0000000000000000 R09: 0000000000000000 [ 373.433587][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.433598][T17701] R13: 0000000000000000 R14: 00007f786ce15fa0 R15: 00007ffc2d68e6d8 [ 373.433615][T17701] [ 373.832698][T17704] netlink: 'syz.5.5227': attribute type 1 has an invalid length. [ 373.842448][T17678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 373.851074][T17678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 373.934756][ T29] audit: type=1400 audit(1754636434.476:35791): avc: denied { read } for pid=17711 comm="syz.5.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 374.125337][T17723] 9pnet_fd: Insufficient options for proto=fd [ 374.480529][T17701] gretap1: left promiscuous mode [ 374.494131][ T8247] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.534263][ T8247] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.557974][ T8247] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.580428][ T8247] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.607552][T17744] netlink: 'syz.4.5239': attribute type 1 has an invalid length. [ 375.095750][T17762] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.103190][T17762] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.204892][T17762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.219107][T17762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.487845][T17774] 9pnet_fd: Insufficient options for proto=fd [ 375.499353][T17749] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 375.520144][T17749] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 375.598694][ T8254] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.636670][ T8254] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.662069][ T8254] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.668064][T17784] netlink: 'syz.6.5253': attribute type 1 has an invalid length. [ 375.678041][ T8254] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.678843][T17784] __nla_validate_parse: 10 callbacks suppressed [ 375.678864][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5253'. [ 375.722002][T17787] ip6gre1: entered allmulticast mode [ 375.811487][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5258'. [ 375.936786][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5260'. [ 376.620842][T17815] 9pnet_fd: Insufficient options for proto=fd [ 376.727572][T17825] netlink: 'syz.6.5268': attribute type 1 has an invalid length. [ 376.735451][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5268'. [ 377.163057][T17841] 9pnet_fd: Insufficient options for proto=fd [ 377.288802][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5276'. [ 377.632406][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5280'. [ 377.643940][T17854] vlan2: entered promiscuous mode [ 377.649139][T17854] bond0: entered promiscuous mode [ 377.654197][T17854] bond_slave_0: entered promiscuous mode [ 377.660010][T17854] bond_slave_1: entered promiscuous mode [ 377.685868][T17860] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5280'. [ 377.694878][T17860] 0·: renamed from hsr0 [ 377.701794][T17860] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.712094][T17860] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.722387][T17860] 0·: entered allmulticast mode [ 377.727265][T17860] hsr_slave_0: entered allmulticast mode [ 377.732958][T17860] hsr_slave_1: entered allmulticast mode [ 377.759017][T17860] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 378.094507][T17873] 9pnet_fd: Insufficient options for proto=fd [ 378.124965][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 378.124982][ T29] audit: type=1400 audit(1754636438.665:35963): avc: denied { create } for pid=17876 comm="syz.2.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 378.150919][ T29] audit: type=1400 audit(1754636438.665:35964): avc: denied { bind } for pid=17876 comm="syz.2.5288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 378.179878][T17878] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5288'. [ 378.189394][T17878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5288'. [ 378.454304][ T29] audit: type=1400 audit(1754636438.995:35965): avc: denied { create } for pid=17887 comm="syz.3.5293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.506410][ T29] audit: type=1326 audit(1754636439.045:35966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 378.557773][ T29] audit: type=1326 audit(1754636439.075:35967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 378.582200][ T29] audit: type=1326 audit(1754636439.075:35968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 378.605851][ T29] audit: type=1326 audit(1754636439.075:35969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 378.629588][ T29] audit: type=1326 audit(1754636439.075:35970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 378.653357][ T29] audit: type=1326 audit(1754636439.075:35971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 378.677007][ T29] audit: type=1326 audit(1754636439.075:35972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.4.5294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69e2d1eb69 code=0x7ffc0000 [ 378.783554][T17900] 9pnet_fd: Insufficient options for proto=fd [ 378.957917][T17877] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 378.971488][T17877] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 379.016994][T17907] macvlan1: entered promiscuous mode [ 379.025985][T17907] ipvlan0: entered promiscuous mode [ 379.032182][T17907] ipvlan0: left promiscuous mode [ 379.038305][T17912] netlink: 'syz.6.5303': attribute type 1 has an invalid length. [ 379.046154][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5303'. [ 379.047825][T17907] macvlan1: left promiscuous mode [ 379.147418][ T9450] hid_parser_main: 124 callbacks suppressed [ 379.147512][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.161370][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.168915][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.176343][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.183773][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.191322][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.198792][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.206186][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.213614][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.221072][ T9450] hid-generic 0000:7FFF:0009.0060: unknown main item tag 0x0 [ 379.234360][ T9450] hid-generic 0000:7FFF:0009.0060: hidraw0: HID vc.87 Device [syz0] on syz1 [ 379.374814][T17929] 9pnet_fd: Insufficient options for proto=fd [ 380.326826][T17962] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.392951][T17962] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.435197][T17940] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 380.447111][T17962] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.458418][T17940] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 380.522472][T17962] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.578190][ T8254] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.591048][ T8250] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.602460][ T8250] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.614396][ T8250] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.649682][T17975] netlink: 'syz.2.5326': attribute type 1 has an invalid length. [ 380.835338][T17990] __nla_validate_parse: 4 callbacks suppressed [ 380.835352][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5332'. [ 380.899026][T17992] 9pnet_fd: Insufficient options for proto=fd [ 381.008407][T18001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5337'. [ 381.039194][T18003] macvlan1: entered promiscuous mode [ 381.045394][T18003] ipvlan0: entered promiscuous mode [ 381.051391][T18003] ipvlan0: left promiscuous mode [ 381.056464][T18003] macvlan1: left promiscuous mode [ 381.116415][T18005] netlink: 'syz.2.5339': attribute type 1 has an invalid length. [ 381.124305][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5339'. [ 381.157264][T18009] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5341'. [ 381.169108][T18009] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5341'. [ 381.206398][T18015] netem: change failed [ 381.257744][T18017] 9pnet_fd: Insufficient options for proto=fd [ 381.491907][T18029] macvlan1: entered promiscuous mode [ 381.500793][T18029] ipvlan0: entered promiscuous mode [ 381.506827][T18029] ipvlan0: left promiscuous mode [ 381.512907][T18029] macvlan1: left promiscuous mode [ 381.662338][T18042] 9pnet_fd: Insufficient options for proto=fd [ 381.944178][ T1038] hid-generic 0000:7FFF:0009.0061: hidraw0: HID vc.87 Device [syz0] on syz1 [ 382.120518][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'. [ 382.493424][T18075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5369'. [ 382.745713][T18085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5373'. [ 382.851470][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5376'. [ 382.862420][T18098] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5378'. [ 382.976607][ T9440] hid-generic 0000:7FFF:0009.0062: hidraw0: HID vc.87 Device [syz0] on syz1 [ 383.135366][T18117] tipc: Started in network mode [ 383.140357][T18117] tipc: Node identity 92f0099f4d75, cluster identity 4711 [ 383.147555][T18117] tipc: Enabled bearer , priority 0 [ 383.154674][T18117] syzkaller0: entered promiscuous mode [ 383.160270][T18117] syzkaller0: entered allmulticast mode [ 383.170361][T18117] FAULT_INJECTION: forcing a failure. [ 383.170361][T18117] name failslab, interval 1, probability 0, space 0, times 0 [ 383.183109][T18117] CPU: 1 UID: 0 PID: 18117 Comm: syz.6.5387 Tainted: G W 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) [ 383.183183][T18117] Tainted: [W]=WARN [ 383.183189][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.183201][T18117] Call Trace: [ 383.183208][T18117] [ 383.183215][T18117] __dump_stack+0x1d/0x30 [ 383.183251][T18117] dump_stack_lvl+0xe8/0x140 [ 383.183268][T18117] dump_stack+0x15/0x1b [ 383.183282][T18117] should_fail_ex+0x265/0x280 [ 383.183372][T18117] should_failslab+0x8c/0xb0 [ 383.183451][T18117] kmem_cache_alloc_node_noprof+0x57/0x320 [ 383.183478][T18117] ? __alloc_skb+0x101/0x320 [ 383.183527][T18117] __alloc_skb+0x101/0x320 [ 383.183555][T18117] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 383.183668][T18117] ? __rcu_read_unlock+0x4f/0x70 [ 383.183689][T18117] ? __pfx_rtnetlink_event+0x10/0x10 [ 383.183710][T18117] rtnetlink_event+0x18c/0x200 [ 383.183731][T18117] raw_notifier_call_chain+0x6f/0x1b0 [ 383.183749][T18117] ? call_netdevice_notifiers_info+0x9c/0x100 [ 383.183791][T18117] call_netdevice_notifiers_info+0xae/0x100 [ 383.183815][T18117] netif_set_mtu_ext+0x356/0x470 [ 383.183843][T18117] netif_set_mtu+0x4a/0xf0 [ 383.183872][T18117] dev_set_mtu+0xc1/0x170 [ 383.183976][T18117] dev_ifsioc+0x474/0xaa0 [ 383.183993][T18117] ? __rcu_read_unlock+0x4f/0x70 [ 383.184013][T18117] dev_ioctl+0x70a/0x960 [ 383.184030][T18117] sock_do_ioctl+0x197/0x220 [ 383.184110][T18117] sock_ioctl+0x41b/0x610 [ 383.184138][T18117] ? __pfx_sock_ioctl+0x10/0x10 [ 383.184165][T18117] __se_sys_ioctl+0xcb/0x140 [ 383.184265][T18117] __x64_sys_ioctl+0x43/0x50 [ 383.184295][T18117] x64_sys_call+0x1816/0x2ff0 [ 383.184315][T18117] do_syscall_64+0xd2/0x200 [ 383.184379][T18117] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.184410][T18117] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 383.184429][T18117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.184449][T18117] RIP: 0033:0x7fcf71f4eb69 [ 383.184472][T18117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.184488][T18117] RSP: 002b:00007fcf705b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.184506][T18117] RAX: ffffffffffffffda RBX: 00007fcf72175fa0 RCX: 00007fcf71f4eb69 [ 383.184517][T18117] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 383.184528][T18117] RBP: 00007fcf705b7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.184538][T18117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.184619][T18117] R13: 0000000000000000 R14: 00007fcf72175fa0 R15: 00007ffc12735cc8 [ 383.184636][T18117] [ 383.185993][T18117] tipc: Resetting bearer [ 383.454711][T18116] tipc: Resetting bearer [ 383.464671][T18116] tipc: Disabling bearer [ 383.482409][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 383.482427][ T29] audit: type=1400 audit(1754636444.025:36497): avc: denied { prog_load } for pid=18118 comm="syz.4.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 383.510673][ T29] audit: type=1400 audit(1754636444.025:36498): avc: denied { bpf } for pid=18118 comm="syz.4.5388" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 383.531513][ T29] audit: type=1400 audit(1754636444.025:36499): avc: denied { perfmon } for pid=18118 comm="syz.4.5388" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 383.552634][ T29] audit: type=1400 audit(1754636444.025:36500): avc: denied { prog_run } for pid=18118 comm="syz.4.5388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 383.571808][ T29] audit: type=1400 audit(1754636444.055:36501): avc: denied { lock } for pid=18105 comm="syz.3.5383" path="socket:[79946]" dev="sockfs" ino=79946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 383.596937][ T29] audit: type=1400 audit(1754636444.135:36502): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.37 dest=40306 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 383.632058][ T29] audit: type=1400 audit(1754636444.175:36503): avc: denied { mounton } for pid=18118 comm="syz.4.5388" path="/512/file0" dev="tmpfs" ino=2740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 383.656132][ T29] audit: type=1400 audit(1754636444.175:36504): avc: denied { map_create } for pid=18120 comm="syz.6.5389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 383.675636][ T29] audit: type=1400 audit(1754636444.175:36505): avc: denied { map_read map_write } for pid=18120 comm="syz.6.5389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 383.711158][ T29] audit: type=1400 audit(1754636444.255:36506): avc: denied { open } for pid=18122 comm="syz.5.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 383.855873][T18140] FAULT_INJECTION: forcing a failure. [ 383.855873][T18140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 383.869251][T18140] CPU: 0 UID: 0 PID: 18140 Comm: syz.2.5399 Tainted: G W 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) [ 383.869291][T18140] Tainted: [W]=WARN [ 383.869300][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.869317][T18140] Call Trace: [ 383.869326][T18140] [ 383.869336][T18140] __dump_stack+0x1d/0x30 [ 383.869363][T18140] dump_stack_lvl+0xe8/0x140 [ 383.869464][T18140] dump_stack+0x15/0x1b [ 383.869486][T18140] should_fail_ex+0x265/0x280 [ 383.869528][T18140] should_fail_alloc_page+0xf2/0x100 [ 383.869602][T18140] __alloc_frozen_pages_noprof+0xff/0x360 [ 383.869651][T18140] alloc_pages_mpol+0xb3/0x250 [ 383.869690][T18140] alloc_migration_target_by_mpol+0x11b/0x280 [ 383.869716][T18140] migrate_pages_batch+0x300/0x1a30 [ 383.869760][T18140] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 383.869794][T18140] ? __walk_page_range+0x324/0x340 [ 383.869830][T18140] ? mas_ascend+0x1e9/0x560 [ 383.869935][T18140] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 383.869992][T18140] migrate_pages+0xf5f/0x1770 [ 383.870023][T18140] ? mas_next_slot+0xa9/0x6f0 [ 383.870066][T18140] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 383.870149][T18140] __se_sys_mbind+0x975/0xac0 [ 383.870238][T18140] __x64_sys_mbind+0x78/0x90 [ 383.870301][T18140] x64_sys_call+0x2932/0x2ff0 [ 383.870329][T18140] do_syscall_64+0xd2/0x200 [ 383.870358][T18140] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.870500][T18140] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 383.870527][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.870555][T18140] RIP: 0033:0x7f100087eb69 [ 383.870573][T18140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.870591][T18140] RSP: 002b:00007f0ffeee7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 383.870609][T18140] RAX: ffffffffffffffda RBX: 00007f1000aa5fa0 RCX: 00007f100087eb69 [ 383.870646][T18140] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 383.870661][T18140] RBP: 00007f0ffeee7090 R08: 0000000000000000 R09: 0000000000000002 [ 383.870672][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.870686][T18140] R13: 0000000000000000 R14: 00007f1000aa5fa0 R15: 00007ffea515a5e8 [ 383.870710][T18140] [ 384.774619][T18161] bond5: entered promiscuous mode [ 384.779996][T18161] bond5: entered allmulticast mode [ 384.785785][T18161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.802995][T18161] bond5 (unregistering): Released all slaves [ 384.833928][T17766] hid_parser_main: 191 callbacks suppressed [ 384.833944][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.847331][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.854818][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.862329][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.869924][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.877394][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.884819][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.892316][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.899754][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.907140][T17766] hid-generic 0000:7FFF:0009.0063: unknown main item tag 0x0 [ 384.917194][T17766] hid-generic 0000:7FFF:0009.0063: hidraw0: HID vc.87 Device [syz0] on syz1 [ 384.953090][T18172] 9pnet_fd: Insufficient options for proto=fd [ 385.693993][T18199] 9pnet_fd: Insufficient options for proto=fd [ 385.893316][T18209] bridge0: port 1(syz_tun) entered blocking state [ 385.899915][T18209] bridge0: port 1(syz_tun) entered disabled state [ 385.910873][T18209] syz_tun: entered allmulticast mode [ 385.917154][T18209] syz_tun: entered promiscuous mode [ 385.923242][T18209] bridge0: port 1(syz_tun) entered blocking state [ 385.929799][T18209] bridge0: port 1(syz_tun) entered forwarding state [ 385.946048][T18209] syz_tun: left allmulticast mode [ 385.951248][T18209] syz_tun: left promiscuous mode [ 385.956393][T18209] bridge0: port 1(syz_tun) entered disabled state [ 386.054345][T18220] __nla_validate_parse: 8 callbacks suppressed [ 386.054364][T18220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5430'. [ 386.070445][T18220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5430'. [ 386.106406][ T3514] hid-generic 0000:7FFF:0009.0064: hidraw0: HID vc.87 Device [syz0] on syz1 [ 386.120232][T18224] 9pnet_fd: Insufficient options for proto=fd [ 386.207090][T18238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5439'. [ 386.240422][T18241] bridge0: port 1(syz_tun) entered blocking state [ 386.247023][T18241] bridge0: port 1(syz_tun) entered disabled state [ 386.254199][T18241] syz_tun: entered allmulticast mode [ 386.260472][T18241] syz_tun: entered promiscuous mode [ 386.266480][T18241] bridge0: port 1(syz_tun) entered blocking state [ 386.273042][T18241] bridge0: port 1(syz_tun) entered forwarding state [ 386.286950][T18241] syz_tun: left allmulticast mode [ 386.292253][T18241] syz_tun: left promiscuous mode [ 386.297433][T18241] bridge0: port 1(syz_tun) entered disabled state [ 386.396785][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5441'. [ 386.794447][T18259] 9pnet_fd: Insufficient options for proto=fd [ 386.856508][T18265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5450'. [ 386.991873][T18271] bridge0: port 3(syz_tun) entered blocking state [ 386.998476][T18271] bridge0: port 3(syz_tun) entered disabled state [ 387.010873][T18271] syz_tun: entered allmulticast mode [ 387.017300][T18271] syz_tun: entered promiscuous mode [ 387.025193][T18271] syz_tun: left allmulticast mode [ 387.030354][T18271] syz_tun: left promiscuous mode [ 387.035505][T18271] bridge0: port 3(syz_tun) entered disabled state [ 387.056263][T18271] bridge_slave_0: left allmulticast mode [ 387.062094][T18271] bridge_slave_0: left promiscuous mode [ 387.068064][T18271] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.079221][T18271] bridge_slave_1: left allmulticast mode [ 387.084956][T18271] bridge_slave_1: left promiscuous mode [ 387.090798][T18271] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.099432][T18271] bond0: (slave bond_slave_0): Releasing backup interface [ 387.107162][T18271] bond_slave_0: left promiscuous mode [ 387.113732][T18271] bond0: (slave bond_slave_1): Releasing backup interface [ 387.122050][T18271] bond_slave_1: left promiscuous mode [ 387.130693][T18271] team0: Port device team_slave_0 removed [ 387.137671][T18271] team0: Port device team_slave_1 removed [ 387.143940][T18271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.152812][T18271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.164829][T18276] macvlan1: entered promiscuous mode [ 387.179185][T18276] ipvlan0: entered promiscuous mode [ 387.190058][T18276] ipvlan0: left promiscuous mode [ 387.195404][T18276] macvlan1: left promiscuous mode [ 387.282731][T18285] 9pnet_fd: Insufficient options for proto=fd [ 387.317397][T18290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5461'. [ 388.092279][T18313] macvlan1: entered promiscuous mode [ 388.098212][T18313] ipvlan0: entered promiscuous mode [ 388.104453][T18313] ipvlan0: left promiscuous mode [ 388.109675][T18313] macvlan1: left promiscuous mode [ 388.194989][T17766] hid-generic 0000:7FFF:0009.0065: hidraw0: HID vc.87 Device [syz0] on syz1 [ 388.259509][T18319] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5474'. [ 388.327364][T18333] bridge0: port 1(syz_tun) entered blocking state [ 388.333920][T18333] bridge0: port 1(syz_tun) entered disabled state [ 388.343424][T18333] syz_tun: entered allmulticast mode [ 388.350343][T18333] syz_tun: entered promiscuous mode [ 388.359897][T18333] syz_tun: left allmulticast mode [ 388.364989][T18333] syz_tun: left promiscuous mode [ 388.370287][T18333] bridge0: port 1(syz_tun) entered disabled state [ 388.488592][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 388.488664][ T29] audit: type=1326 audit(1754636449.035:36939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.2.5484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 388.524230][ T29] audit: type=1326 audit(1754636449.035:36940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.2.5484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 388.548146][ T29] audit: type=1326 audit(1754636449.035:36941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.2.5484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 388.572016][ T29] audit: type=1326 audit(1754636449.065:36942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.2.5484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 388.595656][ T29] audit: type=1326 audit(1754636449.065:36943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.2.5484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 388.619341][ T29] audit: type=1326 audit(1754636449.065:36944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.2.5484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 388.642951][ T29] audit: type=1326 audit(1754636449.065:36945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.2.5484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 388.728613][ T29] audit: type=1400 audit(1754636449.165:36946): avc: denied { allowed } for pid=18345 comm="syz.3.5486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 388.748245][ T29] audit: type=1400 audit(1754636449.165:36947): avc: denied { create } for pid=18345 comm="syz.3.5486" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.769873][ T29] audit: type=1400 audit(1754636449.165:36948): avc: denied { map } for pid=18345 comm="syz.3.5486" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=80487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.836578][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5488'. [ 388.943256][T18364] macvlan1: entered promiscuous mode [ 388.951893][T18364] ipvlan0: entered promiscuous mode [ 388.958000][T18364] ipvlan0: left promiscuous mode [ 388.964013][T18364] macvlan1: left promiscuous mode [ 389.131572][T18370] bridge0: port 1(syz_tun) entered blocking state [ 389.138092][T18370] bridge0: port 1(syz_tun) entered disabled state [ 389.146094][T18370] syz_tun: entered allmulticast mode [ 389.152734][T18370] syz_tun: entered promiscuous mode [ 389.158367][T18370] bridge0: port 1(syz_tun) entered blocking state [ 389.164863][T18370] bridge0: port 1(syz_tun) entered forwarding state [ 389.179588][T18370] syz_tun: left allmulticast mode [ 389.184757][T18370] syz_tun: left promiscuous mode [ 389.190055][T18370] bridge0: port 1(syz_tun) entered disabled state [ 389.303443][T18374] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5497'. [ 389.343415][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5499'. [ 389.435777][T17766] hid-generic 0000:7FFF:0009.0066: hidraw0: HID vc.87 Device [syz0] on syz1 [ 389.478262][T18394] macvlan1: entered promiscuous mode [ 389.486151][T18394] ipvlan0: entered promiscuous mode [ 389.492615][T18394] ipvlan0: left promiscuous mode [ 389.498156][T18394] macvlan1: left promiscuous mode [ 389.905979][T18404] bridge0: port 1(syz_tun) entered blocking state [ 389.912513][T18404] bridge0: port 1(syz_tun) entered disabled state [ 389.919157][T18404] syz_tun: entered allmulticast mode [ 389.924972][T18404] syz_tun: entered promiscuous mode [ 389.931746][T18404] syz_tun: left allmulticast mode [ 389.936812][T18404] syz_tun: left promiscuous mode [ 389.941882][T18404] bridge0: port 1(syz_tun) entered disabled state [ 390.705199][T17766] hid_parser_main: 258 callbacks suppressed [ 390.705220][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.718734][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.726214][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.733667][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.741117][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.748638][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.756051][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.763517][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.771093][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.778536][T17766] hid-generic 0000:7FFF:0009.0067: unknown main item tag 0x0 [ 390.787223][T17766] hid-generic 0000:7FFF:0009.0067: hidraw0: HID vc.87 Device [syz0] on syz1 [ 391.116614][T18451] macvlan1: entered promiscuous mode [ 391.122646][T18451] ipvlan0: entered promiscuous mode [ 391.128606][T18451] ipvlan0: left promiscuous mode [ 391.133768][T18451] macvlan1: left promiscuous mode [ 391.247610][T18457] __nla_validate_parse: 2 callbacks suppressed [ 391.247655][T18457] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5532'. [ 391.263072][T18457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5532'. [ 391.370934][T18462] bridge0: port 1(syz_tun) entered blocking state [ 391.377562][T18462] bridge0: port 1(syz_tun) entered disabled state [ 391.384242][T18462] syz_tun: entered allmulticast mode [ 391.390177][T18462] syz_tun: entered promiscuous mode [ 391.396670][T18462] syz_tun: left allmulticast mode [ 391.401767][T18462] syz_tun: left promiscuous mode [ 391.406830][T18462] bridge0: port 1(syz_tun) entered disabled state [ 391.612624][T18476] netlink: 'syz.5.5539': attribute type 3 has an invalid length. [ 391.778909][T18486] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5543'. [ 391.928802][T18486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5543'. [ 391.951117][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5546'. [ 392.719348][T18523] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5558'. [ 392.729259][T18523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5558'. [ 392.850357][T18535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5563'. [ 393.200218][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5569'. [ 393.542932][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5570'. [ 393.732247][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 393.732265][ T29] audit: type=1326 audit(1754636454.275:37229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.762349][ T29] audit: type=1326 audit(1754636454.275:37230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.785958][ T29] audit: type=1326 audit(1754636454.275:37231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.811927][ T29] audit: type=1326 audit(1754636454.275:37232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.835652][ T29] audit: type=1326 audit(1754636454.275:37233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.859532][ T29] audit: type=1326 audit(1754636454.275:37234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.883198][ T29] audit: type=1326 audit(1754636454.275:37235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.906812][ T29] audit: type=1326 audit(1754636454.275:37236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.930353][ T29] audit: type=1326 audit(1754636454.275:37237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 393.953998][ T29] audit: type=1326 audit(1754636454.275:37238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.2.5571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f100087eb69 code=0x7ffc0000 [ 396.094853][ T9450] hid_parser_main: 57 callbacks suppressed [ 396.094869][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.108276][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.115857][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.123397][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.130899][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.138334][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.145801][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.153278][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.160726][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.168235][ T9450] hid-generic 0000:7FFF:0009.0068: unknown main item tag 0x0 [ 396.177729][ T9450] hid-generic 0000:7FFF:0009.0068: hidraw0: HID vc.87 Device [syz0] on syz1 [ 396.453163][T18627] __nla_validate_parse: 5 callbacks suppressed [ 396.453251][T18627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5596'. [ 396.564887][T18629] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5597'. [ 396.574018][T18629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5597'. [ 396.597842][T18631] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5598'. [ 396.623568][T18633] netlink: 'syz.2.5599': attribute type 1 has an invalid length. [ 396.637006][T18633] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.650000][T18633] macvlan2: entered promiscuous mode [ 396.655341][T18633] macvlan2: entered allmulticast mode [ 396.661994][T18633] bond11: entered promiscuous mode [ 396.667419][T18633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.676020][T18633] bond11: left promiscuous mode [ 396.905803][T18646] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5604'. [ 397.068520][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5607'. [ 397.702646][ T9450] hid-generic 0000:7FFF:0009.0069: hidraw0: HID vc.87 Device [syz0] on syz1 [ 397.845794][T18678] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 397.858719][T18678] 8021q: adding VLAN 0 to HW filter on device bond12 [ 397.871245][T18678] macvlan2: entered promiscuous mode [ 397.876563][T18678] macvlan2: entered allmulticast mode [ 397.883173][T18678] bond12: entered promiscuous mode [ 397.888518][T18678] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 397.904098][T18678] bond12: left promiscuous mode [ 397.933461][T18683] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5618'. [ 397.942733][T18683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5618'. [ 397.985030][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5620'. [ 398.281557][T18698] bridge0: port 1(syz_tun) entered blocking state [ 398.288123][T18698] bridge0: port 1(syz_tun) entered disabled state [ 398.389004][T18698] syz_tun: entered allmulticast mode [ 398.399156][T18698] syz_tun: entered promiscuous mode [ 398.404815][T18698] bridge0: port 1(syz_tun) entered blocking state [ 398.411284][T18698] bridge0: port 1(syz_tun) entered forwarding state [ 398.425133][T18699] syz_tun: left allmulticast mode [ 398.430459][T18699] syz_tun: left promiscuous mode [ 398.435633][T18699] bridge0: port 1(syz_tun) entered disabled state [ 398.630053][T18709] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.668276][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5627'. [ 398.710661][T18709] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.771714][T18709] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.781814][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 398.781835][ T29] audit: type=1326 audit(1754636459.314:37520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.811678][ T29] audit: type=1326 audit(1754636459.314:37521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.835365][ T29] audit: type=1326 audit(1754636459.314:37522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.859017][ T29] audit: type=1326 audit(1754636459.314:37523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.882816][ T29] audit: type=1326 audit(1754636459.314:37524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.906483][ T29] audit: type=1326 audit(1754636459.314:37525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.930197][ T29] audit: type=1326 audit(1754636459.314:37526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.936034][T18720] netlink: 'syz.4.5631': attribute type 1 has an invalid length. [ 398.953994][ T29] audit: type=1326 audit(1754636459.314:37527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 398.985398][ T29] audit: type=1326 audit(1754636459.314:37528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 399.009338][ T29] audit: type=1326 audit(1754636459.314:37529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz.6.5630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcf71f4eb69 code=0x7ffc0000 [ 399.039184][T18720] 8021q: adding VLAN 0 to HW filter on device bond13 [ 399.056743][T18720] macvlan2: entered promiscuous mode [ 399.062123][T18720] macvlan2: entered allmulticast mode [ 399.068946][T18720] bond13: entered promiscuous mode [ 399.074340][T18720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.083646][T18720] bond13: left promiscuous mode [ 399.101553][T18709] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.217470][ T8250] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.229615][ T8247] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.241687][ T8247] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.254761][ T8247] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.501874][ T3514] hid-generic 0000:7FFF:0009.006A: hidraw0: HID vc.87 Device [syz0] on syz1 [ 399.645993][T18753] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.690667][T18753] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.750952][T18753] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.810694][T18753] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.868031][ T8247] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.880224][ T8251] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.892708][ T8251] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.904560][ T8251] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.285993][T18777] bridge0: port 1(syz_tun) entered blocking state [ 400.292544][T18777] bridge0: port 1(syz_tun) entered disabled state [ 400.299561][T18777] syz_tun: entered allmulticast mode [ 400.305646][T18777] syz_tun: entered promiscuous mode [ 400.312224][T18777] syz_tun: left allmulticast mode [ 400.317265][T18777] syz_tun: left promiscuous mode [ 400.322449][T18777] bridge0: port 1(syz_tun) entered disabled state [ 400.569925][T18796] vlan2: entered promiscuous mode [ 400.575026][T18796] bond0: entered promiscuous mode [ 400.618741][T18799] 0·: renamed from hsr0 (while UP) [ 400.634247][T18799] 0·: entered allmulticast mode [ 400.639232][T18799] hsr_slave_0: entered allmulticast mode [ 400.645075][T18799] hsr_slave_1: entered allmulticast mode [ 400.651830][T18799] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 400.671584][T18801] 9pnet_fd: Insufficient options for proto=fd [ 400.742855][ T3514] hid-generic 0000:7FFF:0009.006B: hidraw0: HID vc.87 Device [syz0] on syz1 [ 401.238855][T18805] ================================================================== [ 401.247083][T18805] BUG: KCSAN: data-race in touch_atime / touch_atime [ 401.253809][T18805] [ 401.256146][T18805] write to 0xffff8881047066b8 of 4 bytes by task 18811 on cpu 1: [ 401.263878][T18805] touch_atime+0x1e8/0x340 [ 401.268329][T18805] shmem_file_read_iter+0x477/0x540 [ 401.273548][T18805] copy_splice_read+0x3c4/0x5f0 [ 401.278422][T18805] splice_direct_to_actor+0x290/0x680 [ 401.283812][T18805] do_splice_direct+0xda/0x150 [ 401.288596][T18805] do_sendfile+0x380/0x650 [ 401.293039][T18805] __x64_sys_sendfile64+0x105/0x150 [ 401.298277][T18805] x64_sys_call+0x2bb0/0x2ff0 [ 401.302965][T18805] do_syscall_64+0xd2/0x200 [ 401.307485][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.313401][T18805] [ 401.315737][T18805] read to 0xffff8881047066b8 of 4 bytes by task 18805 on cpu 0: [ 401.323406][T18805] touch_atime+0x194/0x340 [ 401.327854][T18805] shmem_file_read_iter+0x477/0x540 [ 401.333069][T18805] copy_splice_read+0x3c4/0x5f0 [ 401.337952][T18805] splice_direct_to_actor+0x290/0x680 [ 401.343366][T18805] do_splice_direct+0xda/0x150 [ 401.348146][T18805] do_sendfile+0x380/0x650 [ 401.352678][T18805] __x64_sys_sendfile64+0x105/0x150 [ 401.357912][T18805] x64_sys_call+0x2bb0/0x2ff0 [ 401.362613][T18805] do_syscall_64+0xd2/0x200 [ 401.367224][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.373131][T18805] [ 401.375460][T18805] value changed: 0x2e301260 -> 0x2ec8a819 [ 401.381180][T18805] [ 401.383591][T18805] Reported by Kernel Concurrency Sanitizer on: [ 401.389840][T18805] CPU: 0 UID: 0 PID: 18805 Comm: syz.2.5663 Tainted: G W 6.16.0-syzkaller-10910-g0905809b38bd #0 PREEMPT(voluntary) [ 401.403574][T18805] Tainted: [W]=WARN [ 401.407377][T18805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.417444][T18805] ==================================================================